Google Android vulnerabilities

CVE-2024-25990 [MEDIUM] CWE-269 CVE-2024-25990: In pktproc_perftest_gen_rx_packet_sktbuf_mode of link_rx_pktproc.c, there is a possible out of bound In pktproc_perftest_gen_rx_packet_sktbuf_mode of link_rx_pktproc.c, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-27223 [MEDIUM] CWE-125 CVE-2024-27223: In EUTRAN_LCS_DecodeFacilityInformationElement of LPP_LcsManagement.c, there is a possible out of bo In EUTRAN_LCS_DecodeFacilityInformationElement of LPP_LcsManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure after authenticating the cell connection with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-25989 [MEDIUM] CWE-125 CVE-2024-25989: In gpu_slc_liveness_update of pixel_gpu_slc.c, there is a possible out of bounds read due to a missi In gpu_slc_liveness_update of pixel_gpu_slc.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-27237 [MEDIUM] CWE-131 CVE-2024-27237: In wipe_ns_memory of nsmemwipe.c, there is a possible incorrect size calculation due to a logic erro In wipe_ns_memory of nsmemwipe.c, there is a possible incorrect size calculation due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-27218 [MEDIUM] CWE-125 CVE-2024-27218: In update_freq_data of , there is a possible out of bounds read due to a missing bounds check. This In update_freq_data of , there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-0052 [LOW] CWE-862 CVE-2024-0052: In multiple functions of healthconnect, there is a possible leakage of exercise route data due to a In multiple functions of healthconnect, there is a possible leakage of exercise route data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-25991 [LOW] CWE-125 CVE-2024-25991: In acpm_tmu_ipc_handler of tmu_plugin.c, there is a possible out of bounds read due to a missing bou In acpm_tmu_ipc_handler of tmu_plugin.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-0053 [LOW] CWE-497 CVE-2024-0053: In getCustomPrinterIcon of PrintManagerService.java, there is a possible way to view other user's im In getCustomPrinterIcon of PrintManagerService.java, there is a possible way to view other user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-20029 [HIGH] CWE-787 CVE-2024-20029: In wlan firmware, there is a possible out of bounds write due to improper input validation. This cou In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08477406; Issue ID: MSV-1010.

CVE-2024-20027 [HIGH] CWE-787 CVE-2024-20027: In da, there is a possible out of bounds write due to improper input validation. This could lead to In da, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541632; Issue ID: ALPS08541633.

CVE-2024-20005 [HIGH] CWE-276 CVE-2024-20005: In da, there is a possible permission bypass due to a missing permission check. This could lead to l In da, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08355599; Issue ID: ALPS08355599.

CVE-2024-20034 [HIGH] CWE-20 CVE-2024-20034: In battery, there is a possible escalation of privilege due to a missing bounds check. This could le In battery, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08488849; Issue ID: ALPS08488849.

CVE-2024-20023 [MEDIUM] CWE-787 CVE-2024-20023: In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to loc In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541638; Issue ID: ALPS08541638.

CVE-2024-20030 [MEDIUM] CVE-2024-20030: In da, there is a possible information disclosure due to improper input validation. This could lead In da, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541632; Issue ID: ALPS08541741.

CVE-2024-20033 [MEDIUM] CWE-787 CVE-2024-20033: In nvram, there is a possible information disclosure due to a missing bounds check. This could lead In nvram, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08499945; Issue ID: ALPS08499945.

CVE-2024-20025 [MEDIUM] CWE-190 CVE-2024-20025: In da, there is a possible out of bounds write due to an integer overflow. This could lead to local In da, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541686; Issue ID: ALPS08541686.

CVE-2024-20031 [MEDIUM] CWE-787 CVE-2024-20031: In da, there is a possible out of bounds write due to lack of valudation. This could lead to local e In da, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541632; Issue ID: ALPS08541742.

CVE-2024-20022 [MEDIUM] CWE-125 CVE-2024-20022: In lk, there is a possible escalation of privilege due to a missing bounds check. This could lead to In lk, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08528255; Issue ID: ALPS08528255.

CVE-2024-20026 [MEDIUM] CVE-2024-20026: In da, there is a possible information disclosure due to improper input validation. This could lead In da, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541632; Issue ID: ALPS08541632.

CVE-2024-20028 [MEDIUM] CWE-787 CVE-2024-20028: In da, there is a possible out of bounds write due to lack of valudation. This could lead to local e In da, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541632; Issue ID: ALPS08541687.