Google Android vulnerabilities

CVE-2018-9361 [HIGH] CWE-125 CVE-2018-9361: In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.

CVE-2018-9436 [HIGH] CWE-125 CVE-2018-9436: In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds che In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0

CVE-2018-9358 [HIGH] CWE-125 CVE-2018-9358: In gatts_process_attribute_req of gatt_sc.cc, there is a possible read of uninitialized data due to In gatts_process_attribute_req of gatt_sc.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-

CVE-2018-9448 [HIGH] CWE-125 CVE-2018-9448: In avct_bcb_msg_ind of avct_bcb_act.cc, there is a possible out of bounds read due to a missing boun In avct_bcb_msg_ind of avct_bcb_act.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android ID: A-79944113.

CVE-2015-3834 [CRITICAL] CWE-189 CVE-2015-3834: Multiple integer overflows in the BnHDCP::onTransact function in media/libmedia/IHDCP.cpp in libstag Multiple integer overflows in the BnHDCP::onTransact function in media/libmedia/IHDCP.cpp in libstagefright in Android before 5.1.1 LMY48I allow attackers to execute arbitrary code via a crafted application that uses HDCP encryption, leading to a heap-based buffer overflow, aka internal bug 20222489.

CVE-2017-13259 [HIGH] CWE-125 CVE-2017-13259: In functionality implemented in sdp_discovery.cc, there are possible out of bounds reads due to miss In functionality implemented in sdp_discovery.cc, there are possible out of bounds reads due to missing bounds checks. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID:

CVE-2020-0391 [HIGH] CVE-2020-0391: In applyPolicy of PackageManagerService.java, there is possible arbitrary command execution as Syste In applyPolicy of PackageManagerService.java, there is possible arbitrary command execution as System due to an unenforced protected-broadcast. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-158

CVE-2014-1939 [HIGH] CWE-94 CVE-2014-1939: java/android/webkit/BrowserFrame.java in Android before 4.4 uses the addJavascriptInterface API in c java/android/webkit/BrowserFrame.java in Android before 4.4 uses the addJavascriptInterface API in conjunction with creating an object of the SearchBoxImpl class, which allows attackers to execute arbitrary Java code by leveraging access to the searchBoxJavaBridge_ interface at certain Android API levels.

CVE-2021-0596 [HIGH] CWE-125 CVE-2021-0596: In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID:

CVE-2024-23708 [HIGH] CWE-451 CVE-2024-23708: In multiple functions of NotificationManagerService.java, there is a possible way to not show a toas In multiple functions of NotificationManagerService.java, there is a possible way to not show a toast message when a clipboard message has been accessed. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-45779 [HIGH] CVE-2023-45779: In the APEX module framework of AOSP, there is a possible malicious update to platform components du In the APEX module framework of AOSP, there is a possible malicious update to platform components due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. More details on this can be found in the referenced links.

CVE-2022-20474 [HIGH] CWE-276 CVE-2022-20474: In readLazyValue of Parcel.java, there is a possible loading of arbitrary code into the System Setti In readLazyValue of Parcel.java, there is a possible loading of arbitrary code into the System Settings app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L And

CVE-2023-21275 [HIGH] CVE-2023-21275: In decideCancelProvisioningDialog of AdminIntegratedFlowPrepareActivity.java, there is a possible wa In decideCancelProvisioningDialog of AdminIntegratedFlowPrepareActivity.java, there is a possible way to bypass factory reset protections due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2022-20142 [HIGH] CVE-2022-20142: In createFromParcel of GeofenceHardwareRequestParcelable.java, there is a possible arbitrary code ex In createFromParcel of GeofenceHardwareRequestParcelable.java, there is a possible arbitrary code execution due to parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-

CVE-2022-20054 [HIGH] CWE-862 CVE-2022-20054: In ims service, there is a possible AT command injection due to a missing permission check. This cou In ims service, there is a possible AT command injection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219083; Issue ID: ALPS06219083.

CVE-2024-43762 [HIGH] CVE-2024-43762: In multiple locations, there is a possible way to avoid unbinding of a service from the system due t In multiple locations, there is a possible way to avoid unbinding of a service from the system due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2022-20507 [HIGH] CWE-20 CVE-2022-20507: In onMulticastListUpdateNotificationReceived of UwbEventManager.java, there is a possible arbitrary In onMulticastListUpdateNotificationReceived of UwbEventManager.java, there is a possible arbitrary code execution due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-246649179

CVE-2022-20540 [HIGH] CWE-416 CVE-2022-20540: In SurfaceFlinger::doDump of SurfaceFlinger.cpp, there is possible arbitrary code execution due to a In SurfaceFlinger::doDump of SurfaceFlinger.cpp, there is possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-237291506

CVE-2024-47040 [HIGH] CWE-416 CVE-2024-47040: There is a possible UAF due to a logic error in the code. This could lead to local escalation of pri There is a possible UAF due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2022-20524 [HIGH] CWE-416 CVE-2022-20524: In compose of Vibrator.cpp, there is a possible arbitrary code execution due to a use after free. Th In compose of Vibrator.cpp, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-228523213