Google Android vulnerabilities

CVE-2024-20084 [MEDIUM] CWE-125 CVE-2024-20084: In power, there is a possible out of bounds read due to a missing bounds check. This could lead to l In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08944210; Issue ID: MSV-1561.

CVE-2023-21182 [MEDIUM] CWE-125 CVE-2023-21182: In Exynos_parsing_user_data_registered_itu_t_t35 of VendorVideoAPI.cpp, there is a possible out of b In Exynos_parsing_user_data_registered_itu_t_t35 of VendorVideoAPI.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-252764175

CVE-2023-21188 [MEDIUM] CWE-125 CVE-2023-21188: In btm_ble_update_inq_result of btm_ble_gap.cc, there is a possible out of bounds read due to a heap In btm_ble_update_inq_result of btm_ble_gap.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-264624283

CVE-2023-21181 [MEDIUM] CWE-125 CVE-2023-21181: In btm_ble_update_inq_result of btm_ble_gap.cc, there is a possible out of bounds read due to a heap In btm_ble_update_inq_result of btm_ble_gap.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-264880969

CVE-2023-21213 [MEDIUM] CWE-125 CVE-2023-21213: In initiateTdlsTeardownInternal of sta_iface.cpp, there is a possible out of bounds read due to a mi In initiateTdlsTeardownInternal of sta_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the wifi server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262235951

CVE-2023-21204 [MEDIUM] CWE-125 CVE-2023-21204: In multiple files, there is a possible out of bounds read due to a missing bounds check. This could In multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the wifi server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262246231

CVE-2022-26459 [MEDIUM] CWE-190 CVE-2022-26459: In vow, there is a possible out of bounds read due to an integer overflow. This could lead to local In vow, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032634; Issue ID: ALPS07032634.

CVE-2023-20982 [MEDIUM] CWE-125 CVE-2023-20982: In btm_read_tx_power_complete of btm_acl.cc, there is a possible out of bounds read due to a missing In btm_read_tx_power_complete of btm_acl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-260568083

CVE-2023-21032 [MEDIUM] CWE-125 CVE-2023-21032: In _ufdt_output_node_to_fdt of ufdt_convert.c, there is a possible out of bounds read due to a heap In _ufdt_output_node_to_fdt of ufdt_convert.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-248085351

CVE-2023-32810 [MEDIUM] CWE-125 CVE-2023-32810: In bluetooth driver, there is a possible out of bounds read due to improper input validation. This c In bluetooth driver, there is a possible out of bounds read due to improper input validation. This could lead to local information leak with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07867212; Issue ID: ALPS07867212.

CVE-2023-21194 [MEDIUM] CWE-125 CVE-2023-21194: In gatt_dbg_op_name of gatt_utils.cc, there is a possible out of bounds read due to a missing bounds In gatt_dbg_op_name of gatt_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-260079141

CVE-2023-21196 [MEDIUM] CWE-125 CVE-2023-21196: In btm_ble_batchscan_filter_track_adv_vse_cback of btm_ble_batchscan.cc, there is a possible out of In btm_ble_batchscan_filter_track_adv_vse_cback of btm_ble_batchscan.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:

CVE-2023-21208 [MEDIUM] CWE-125 CVE-2023-21208: In setCountryCodeInternal of sta_iface.cpp, there is a possible out of bounds read due to improper i In setCountryCodeInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262245254

CVE-2023-21210 [MEDIUM] CWE-125 CVE-2023-21210: In initiateHs20IconQueryInternal of sta_iface.cpp, there is a possible out of bounds read due to imp In initiateHs20IconQueryInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262236331

CVE-2023-20660 [MEDIUM] CWE-190 CVE-2023-20660: In wlan, there is a possible out of bounds read due to an integer overflow. This could lead to local In wlan, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588383; Issue ID: ALPS07588383.

CVE-2023-32807 [MEDIUM] CWE-125 CVE-2023-32807: In wlan service, there is a possible out of bounds read due to improper input validation. This could In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588360; Issue ID: ALPS07588360.

CVE-2023-32814 [MEDIUM] CWE-125 CVE-2023-32814: In gnss service, there is a possible out of bounds read due to improper input validation. This could In gnss service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08031947; Issue ID: ALPS08031947.

CVE-2023-32815 [MEDIUM] CWE-125 CVE-2023-32815: In gnss service, there is a possible out of bounds read due to improper input validation. This could In gnss service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08037801; Issue ID: ALPS08037801.

CVE-2023-32816 [MEDIUM] CWE-125 CVE-2023-32816: In gnss service, there is a possible out of bounds read due to improper input validation. This could In gnss service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08044040; Issue ID: ALPS08044032.

CVE-2023-32817 [MEDIUM] CWE-125 CVE-2023-32817: In gnss service, there is a possible out of bounds read due to improper input validation. This could In gnss service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08044040; Issue ID: ALPS08044035.