Google Android vulnerabilities

CVE-2024-20060 [MEDIUM] CWE-1332 CVE-2024-20060: In da, there is a possible escalation of privilege due to an incorrect status check. This could lead In da, there is a possible escalation of privilege due to an incorrect status check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541749; Issue ID: ALPS08541754.

CVE-2024-20059 [MEDIUM] CWE-1332 CVE-2024-20059: In da, there is a possible escalation of privilege due to an incorrect status check. This could lead In da, there is a possible escalation of privilege due to an incorrect status check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541749; Issue ID: ALPS08541749.

CVE-2024-21477 [HIGH] CVE-2024-21477: Closed-source component Android Security Bulletin 2024-05-01 CVE: CVE-2024-21477 Severity: HIGH Component: Closed-source component References: A-323918871 *

CVE-2024-1395 [MEDIUM] CVE-2024-1395: Mali Android Security Bulletin 2024-05-01 CVE: CVE-2024-1395 Severity: HIGH Component: Mali References: A-329506991 *

CVE-2023-43529 [HIGH] CVE-2023-43529: Closed-source component Android Security Bulletin 2024-05-01 CVE: CVE-2023-43529 Severity: HIGH Component: Closed-source component References: A-309460466 *

CVE-2023-43530 [MEDIUM] CVE-2023-43530: Closed-source component Android Security Bulletin 2024-05-01 CVE: CVE-2023-43530 Severity: HIGH Component: Closed-source component References: A-309461471 *

CVE-2023-43531 [HIGH] CVE-2023-43531: Closed-source component Android Security Bulletin 2024-05-01 CVE: CVE-2023-43531 Severity: HIGH Component: Closed-source component References: A-309461198 *

CVE-2024-21471 [HIGH] CVE-2024-21471: Display Android Security Bulletin 2024-05-01 CVE: CVE-2024-21471 Severity: HIGH Component: Display References: A-318393843 QC-CR#3621168

CVE-2024-23354 [HIGH] CVE-2024-23354: Display Android Security Bulletin 2024-05-01 CVE: CVE-2024-23354 Severity: HIGH Component: Display References: A-323919320 QC-CR#3636888 [2]

CVE-2024-21480 [HIGH] CVE-2024-21480: Closed-source component Android Security Bulletin 2024-05-01 CVE: CVE-2024-21480 Severity: HIGH Component: Closed-source component References: A-323918475 *

CVE-2024-1067 [HIGH] CVE-2024-1067: Mali Android Security Bulletin 2024-05-01 CVE: CVE-2024-1067 Severity: HIGH Component: Mali References: A-329506905 *

CVE-2023-33119 [HIGH] CVE-2023-33119: Closed-source component Android Security Bulletin 2024-05-01 CVE: CVE-2023-33119 Severity: HIGH Component: Closed-source component References: A-309461253 *

CVE-2023-6363 [MEDIUM] CVE-2023-6363: Mali Android Security Bulletin 2024-05-01 CVE: CVE-2023-6363 Severity: HIGH Component: Mali References: A-303632069 *

CVE-2024-21475 [HIGH] CVE-2024-21475: Video Android Security Bulletin 2024-05-01 CVE: CVE-2024-21475 Severity: HIGH Component: Video References: A-323919078 QC-CR#3530093

CVE-2023-4622 [HIGH] CVE-2023-4622: Unix Android Security Bulletin 2024-05-01 CVE: CVE-2023-4622 Severity: HIGH Type: EoP Component: Unix References: A-299123598Upstream kernel [2] [3] [4]

CVE-2024-23351 [HIGH] CVE-2024-23351: Display Android Security Bulletin 2024-05-01 CVE: CVE-2024-23351 Severity: HIGH Component: Display References: A-323918714 QC-CR#3650447 [2]

CVE-2023-52351 [HIGH] CWE-787 CVE-2023-52351: In ril service, there is a possible out of bounds write due to a missing bounds check. This could le In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

CVE-2023-52341 [HIGH] CWE-200 CVE-2023-52341: In Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible missi In Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed

CVE-2023-52342 [HIGH] CWE-248 CVE-2023-52342: In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This c In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote information disclosure no additional execution privileges needed

CVE-2023-52346 [MEDIUM] CWE-120 CVE-2023-52346: In modem driver, there is a possible system crash due to improper input validation. This could lead In modem driver, there is a possible system crash due to improper input validation. This could lead to local information disclosure with System execution privileges needed