Google Android vulnerabilities

CVE-2023-33915 [HIGH] CWE-862 CVE-2023-33915: In LTE protocol stack, there is a possible missing permission check. This could lead to remote infor In LTE protocol stack, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed

CVE-2023-48404 [HIGH] CWE-125 CVE-2023-48404: In ProtocolMiscCarrierConfigSimInfoIndAdapter of protocolmiscadapter.cpp, there is a possible out of In ProtocolMiscCarrierConfigSimInfoIndAdapter of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-48410 [HIGH] CWE-125 CVE-2023-48410: In cd_ParseMsg of cd_codec.c, there is a possible out of bounds read due to a missing bounds check. In cd_ParseMsg of cd_codec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-34727 [HIGH] CWE-120 CVE-2024-34727: In sdpu_compare_uuid_with_attr of sdp_utils.cc, there is a possible out of bounds read due to a heap In sdpu_compare_uuid_with_attr of sdp_utils.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-32894 [HIGH] CWE-125 CVE-2024-32894: In bc_get_converted_received_bearer of bc_utilities.c, there is a possible out of bounds read due to In bc_get_converted_received_bearer of bc_utilities.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-27206 [HIGH] CWE-125 CVE-2024-27206: there is a possible out of bounds read due to a missing bounds check. This could lead to remote info there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-52341 [HIGH] CWE-200 CVE-2023-52341: In Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible missi In Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed

CVE-2024-22011 [HIGH] CWE-125 CVE-2024-22011: In ss_ProcessRejectComponent of ss_MmConManagement.c, there is a possible out of bounds read due to In ss_ProcessRejectComponent of ss_MmConManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-22423 [HIGH] CWE-125 CVE-2025-22423: In ParseTag of dng_ifd.cpp, there is a possible way to crash the image renderer due to a missing bou In ParseTag of dng_ifd.cpp, there is a possible way to crash the image renderer due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-0109 [HIGH] CWE-754 CVE-2026-0109: In dhd_tcpdata_info_get of dhd_ip.c, there is a possible Denial of Service due to a precondition che In dhd_tcpdata_info_get of dhd_ip.c, there is a possible Denial of Service due to a precondition check failure. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-20138 [HIGH] CWE-125 CVE-2024-20138: In wlan driver, there is a possible out of bound read due to improper input validation. This could l In wlan driver, there is a possible out of bound read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998291; Issue ID: MSV-1604.

CVE-2024-49734 [HIGH] CWE-200 CVE-2024-49734: In multiple functions of ConnectivityService.java, there is a possible way for a Wi-Fi AP to determi In multiple functions of ConnectivityService.java, there is a possible way for a Wi-Fi AP to determine what site a device has connected to through a VPN due to side channel information disclosure. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2018-9484 [HIGH] CWE-125 CVE-2018-9484: In l2cu_send_peer_config_rej of l2c_utils.cc, there is a possible out of bounds read due to a missin In l2cu_send_peer_config_rej of l2c_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2018-9419 [HIGH] CWE-125 CVE-2018-9419: In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bou In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-36894 [HIGH] CWE-476 CVE-2025-36894: In TBD of TBD, there is a possible DoS due to a missing null check. This could lead to remote denial In TBD of TBD, there is a possible DoS due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-20007 [HIGH] CWE-362 CVE-2024-20007: In mp3 decoder, there is a possible out of bounds write due to a race condition. This could lead to In mp3 decoder, there is a possible out of bounds write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441369; Issue ID: ALPS08441369.

CVE-2025-69279 [HIGH] CWE-20 CVE-2025-69279: In nr modem, there is a possible system crash due to improper input validation. This could lead to r In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed.

CVE-2025-69278 [HIGH] CWE-20 CVE-2025-69278: In nr modem, there is a possible system crash due to improper input validation. This could lead to r In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed.

CVE-2026-58865 [HIGH] CWE-119 CVE-2026-58865: In multiple functions of PduParser.java, there is a possible persistent denial of service due to a m In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-47021 [HIGH] CWE-125 CVE-2024-47021: In sms_ExtractCbLanguage of sms_CellBroadcast.c, there is a possible out of bounds read due to a mis In sms_ExtractCbLanguage of sms_CellBroadcast.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.