Google Android vulnerabilities

CVE-2024-49724 [HIGH] CWE-276 CVE-2024-49724: In multiple functions of AccountManagerService.java, there is a possible way to bypass permissions a In multiple functions of AccountManagerService.java, there is a possible way to bypass permissions and launch protected activities due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

CVE-2024-49732 [HIGH] CWE-276 CVE-2024-49732: In multiple functions of CompanionDeviceManagerService.java, there is a possible way to grant permis In multiple functions of CompanionDeviceManagerService.java, there is a possible way to grant permissions without user consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-43771 [HIGH] CWE-94 CVE-2024-43771: In gatts_process_read_req of gatt_sr.cc, there is a possible out of bounds write due to a missing bo In gatts_process_read_req of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-49745 [HIGH] CWE-787 CVE-2024-49745: In growData of Parcel.cpp, there is a possible out of bounds write due to an incorrect bounds check. In growData of Parcel.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-49744 [HIGH] CWE-276 CVE-2024-49744: In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to bypass In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to bypass parcel mismatch mitigation due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

CVE-2024-49742 [HIGH] CWE-269 CVE-2024-49742: In onCreate of NotificationAccessConfirmationActivity.java , there is a possible way to hide an app In onCreate of NotificationAccessConfirmationActivity.java , there is a possible way to hide an app with notification access in Settings due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

CVE-2024-49734 [HIGH] CWE-200 CVE-2024-49734: In multiple functions of ConnectivityService.java, there is a possible way for a Wi-Fi AP to determi In multiple functions of ConnectivityService.java, there is a possible way for a Wi-Fi AP to determine what site a device has connected to through a VPN due to side channel information disclosure. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-43096 [HIGH] CWE-787 CVE-2024-43096: In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a missing boun In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-43095 [HIGH] CWE-203 CVE-2024-43095: In multiple locations, there is a possible way to obtain any system permission due to a logic error In multiple locations, there is a possible way to obtain any system permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

CVE-2024-49735 [HIGH] CWE-276 CVE-2024-49735: In multiple locations, there is a possible failure to persist permissions settings due to resource e In multiple locations, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-40108 [MEDIUM] CWE-200 CVE-2023-40108: In multiple locations, there is a possible way to access media content belonging to another user due In multiple locations, there is a possible way to access media content belonging to another user due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-49733 [MEDIUM] CWE-200 CVE-2024-49733: In reload of ServiceListing.java , there is a possible way to allow a malicious app to hide an NLS f In reload of ServiceListing.java , there is a possible way to allow a malicious app to hide an NLS from Settings due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-43763 [MEDIUM] CWE-400 CVE-2024-43763: In build_read_multi_rsp of gatt_sr.cc, there is a possible denial of service due to a logic error in In build_read_multi_rsp of gatt_sr.cc, there is a possible denial of service due to a logic error in the code. This could lead to remote (proximal/adjacent) denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-49736 [MEDIUM] CWE-783 CVE-2024-49736: In onClick of MainClear.java, there is a possible way to trigger factory reset without explicit user In onClick of MainClear.java, there is a possible way to trigger factory reset without explicit user consent due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2018-9461 [HIGH] CWE-362 CVE-2018-9461: In onAttachFragment of ShareIntentActivity.java, there is a possible way for an app to read files in In onAttachFragment of ShareIntentActivity.java, there is a possible way for an app to read files in the messages app due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2018-9464 [HIGH] CWE-125 CVE-2018-9464: In multiple locations, there is a possible way to read protected files due to a missing permission c In multiple locations, there is a possible way to read protected files due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2018-9387 [HIGH] CWE-120 CVE-2018-9387: In multiple functions of mnh-sm.c, there is a possible way to trigger a heap overflow due to an inte In multiple functions of mnh-sm.c, there is a possible way to trigger a heap overflow due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2018-9401 [HIGH] CWE-276 CVE-2018-9401: In many locations, there is a possible way to access kernel memory in user space due to an incorrect In many locations, there is a possible way to access kernel memory in user space due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2018-9389 [HIGH] CWE-787 CVE-2018-9389: In ip6_append_data of ip6_output.c, there is a possible way to achieve code execution due to a heap In ip6_append_data of ip6_output.c, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2018-9406 [MEDIUM] CWE-862 CVE-2018-9406: In NlpService, there is a possible way to obtain location information due to a missing permission ch In NlpService, there is a possible way to obtain location information due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.