Google Android vulnerabilities

CVE-2018-21056 [MEDIUM] CWE-200 CVE-2018-21056: An issue was discovered on Samsung mobile devices with O(8.x) software. The Smartwatch displays Secu An issue was discovered on Samsung mobile devices with O(8.x) software. The Smartwatch displays Secure Folder Notification content. The Samsung ID is SVE-2018-12458 (September 2018).

CVE-2016-11048 [MEDIUM] CWE-20 CVE-2016-11048: An issue was discovered on Samsung mobile devices with L(5.0/5.1) (Spreadtrum or Marvell chipsets) s An issue was discovered on Samsung mobile devices with L(5.0/5.1) (Spreadtrum or Marvell chipsets) software. There is a Factory Reset Protection (FRP) bypass. The Samsung ID is SVE-2016-5421 (March 2016).

CVE-2019-20557 [MEDIUM] CVE-2019-20557: An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. Attacker An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. Attackers can bypass Factory Reset Protection (FRP) via a SIM card by blocking the PUK code. The Samsung ID is SVE-2019-15262 (October 2019).

CVE-2021-0350 [MEDIUM] CWE-20 CVE-2021-0350: In ged, there is a possible system crash due to an improper input validation. This could lead to loc In ged, there is a possible system crash due to an improper input validation. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11; Patch ID: ALPS05342338.

CVE-2020-0476 [MEDIUM] CWE-532 CVE-2020-0476: In onNotificationRemoved of Assistant.java, there is a possible leak of sensitive information to log In onNotificationRemoved of Assistant.java, there is a possible leak of sensitive information to logs. This could lead to local information disclosure with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-162014574

CVE-2021-0352 [MEDIUM] CWE-843 CVE-2021-0352: In RT regmap driver, there is a possible memory corruption due to type confusion. This could lead to In RT regmap driver, there is a possible memory corruption due to type confusion. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05453809.

CVE-2020-0272 [MEDIUM] CWE-908 CVE-2020-0272: In libhwbinder, there is a possible information disclosure due to uninitialized data. This could lea In libhwbinder, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-130166487

CVE-2022-48382 [MEDIUM] CWE-787 CVE-2022-48382: In log service, there is a possible out of bounds write due to a missing bounds check. This could le In log service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

CVE-2021-0549 [MEDIUM] CWE-532 CVE-2021-0549: In sspRequestCallback of BondStateMachine.java, there is a possible leak of Bluetooth MAC addresses In sspRequestCallback of BondStateMachine.java, there is a possible leak of Bluetooth MAC addresses due to log information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-183961896

CVE-2022-20107 [MEDIUM] CWE-190 CVE-2022-20107: In subtitle service, there is a possible application crash due to an integer overflow. This could le In subtitle service, there is a possible application crash due to an integer overflow. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03330673; Issue ID: DTV03330673.

CVE-2022-39089 [MEDIUM] CWE-125 CVE-2022-39089: In mlog service, there is a possible out of bounds read due to a missing bounds check. This could le In mlog service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

CVE-2023-33903 [MEDIUM] CVE-2023-33903: In FM service, there is a possible missing params check. This could lead to local denial of service In FM service, there is a possible missing params check. This could lead to local denial of service with System execution privileges needed.

CVE-2023-33904 [MEDIUM] CWE-125 CVE-2023-33904: In hci_server, there is a possible out of bounds read due to a missing bounds check. This could lea In hci_server, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

CVE-2021-0958 [MEDIUM] CVE-2021-0958: In update of km_compat.cpp, there is a possible loss of potentially sensitive data due to a logic er In update of km_compat.cpp, there is a possible loss of potentially sensitive data due to a logic error in the code. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-200041882

CVE-2021-1008 [MEDIUM] CVE-2021-1008: In addSubInfo of SubscriptionController.java, there is a possible way to force the user to make a fa In addSubInfo of SubscriptionController.java, there is a possible way to force the user to make a factory reset due to a logic error in the code. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-197327688

CVE-2021-25491 [MEDIUM] CWE-476 CVE-2021-25491: A vulnerability in mfc driver prior to SMR Oct-2021 Release 1 allows memory corruption via NULL-poin A vulnerability in mfc driver prior to SMR Oct-2021 Release 1 allows memory corruption via NULL-pointer dereference.

CVE-2023-42731 [MEDIUM] CWE-125 CVE-2023-42731: In Gnss service, there is a possible out of bounds read due to a missing bounds check. This could le In Gnss service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

CVE-2022-47486 [MEDIUM] CWE-787 CVE-2022-47486: In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This c In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

CVE-2022-47470 [MEDIUM] CWE-787 CVE-2022-47470: In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This c In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could local denial of service with System execution privileges needed.

CVE-2022-47469 [MEDIUM] CWE-787 CVE-2022-47469: In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This c In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could local denial of service with System execution privileges needed.