Google Android vulnerabilities

CVE-2023-20698 [MEDIUM] CWE-125 CVE-2023-20698: In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07589144; Issue ID: ALPS07589144.

CVE-2023-20697 [MEDIUM] CWE-125 CVE-2023-20697: In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07589148; Issue ID: ALPS07589148.

CVE-2023-32876 [MEDIUM] CWE-125 CVE-2023-32876: In keyInstall, there is a possible information disclosure due to a missing bounds check. This could In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308612; Issue ID: ALPS08308612.

CVE-2024-20033 [MEDIUM] CWE-787 CVE-2024-20033: In nvram, there is a possible information disclosure due to a missing bounds check. This could lead In nvram, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08499945; Issue ID: ALPS08499945.

CVE-2023-32880 [MEDIUM] CWE-125 CVE-2023-32880: In battery, there is a possible information disclosure due to a missing bounds check. This could lea In battery, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08308076.

CVE-2023-32881 [MEDIUM] CWE-190 CVE-2023-32881: In battery, there is a possible information disclosure due to an integer overflow. This could lead t In battery, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08308080.

CVE-2023-20810 [MEDIUM] CVE-2023-20810: In IOMMU, there is a possible information disclosure due to improper input validation. This could le In IOMMU, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03692061; Issue ID: DTV03692061.

CVE-2023-20782 [MEDIUM] CVE-2023-20782: In keyinstall, there is a possible information disclosure due to a missing bounds check. This could In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07550104; Issue ID: ALPS07550103.

CVE-2023-32819 [MEDIUM] CVE-2023-32819: In display, there is a possible information disclosure due to a missing bounds check. This could lea In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07993705; Issue ID: ALPS08014138.

CVE-2023-20836 [MEDIUM] CWE-125 CVE-2023-20836: In camsys, there is a possible out of bounds read due to a missing bounds check. This could lead to In camsys, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07505629; Issue ID: ALPS07505629.

CVE-2023-20789 [MEDIUM] CVE-2023-20789: In jpeg, there is a possible information disclosure due to a missing bounds check. This could lead t In jpeg, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07693193; Issue ID: ALPS07693193.

CVE-2023-20833 [MEDIUM] CWE-862 CVE-2023-20833: In keyinstall, there is a possible information disclosure due to a missing bounds check. This could In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017756; Issue ID: ALPS08017764.

CVE-2024-20091 [MEDIUM] CWE-125 CVE-2024-20091: In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to lo In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID: MSV-1701.

CVE-2022-48461 [MEDIUM] CWE-787 CVE-2022-48461: In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

CVE-2024-20116 [MEDIUM] CWE-125 CVE-2024-20116: In cmdq, there is a possible out of bounds read due to a missing bounds check. This could lead to lo In cmdq, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09057438; Issue ID: MSV-1696.

CVE-2023-48359 [MEDIUM] CWE-787 CVE-2023-48359: In autotest driver, there is a possible out of bounds write due to improper input validation. This c In autotest driver, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with System execution privileges needed

CVE-2023-40652 [MEDIUM] CWE-787 CVE-2023-40652: In jpg driver, there is a possible out of bounds write due to improper input validation. This could In jpg driver, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with System execution privileges needed

CVE-2024-20117 [MEDIUM] CWE-125 CVE-2024-20117: In vdec, there is a possible out of bounds read due to improper structure design. This could lead to In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09008925; Issue ID: MSV-1681.

CVE-2024-20122 [MEDIUM] CWE-125 CVE-2024-20122: In vdec, there is a possible out of bounds read due to improper structure design. This could lead to In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09008925; Issue ID: MSV-1572.

CVE-2024-20124 [MEDIUM] CWE-125 CVE-2024-20124: In vdec, there is a possible out of bounds read due to improper structure design. This could lead to In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09008925; Issue ID: MSV-1568.