Google Android vulnerabilities

CVE-2020-0082 [HIGH] CWE-502 CVE-2020-0082: In ExternalVibration of ExternalVibration.java, there is a possible activation of an arbitrary inten In ExternalVibration of ExternalVibration.java, there is a possible activation of an arbitrary intent due to unsafe deserialization. This could lead to local escalation of privilege to system_server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140417434

CVE-2020-0039 [HIGH] CWE-125 CVE-2020-0039: In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missi In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143155861

CVE-2020-0038 [HIGH] CWE-125 CVE-2020-0038: In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missi In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143109193

CVE-2021-0334 [HIGH] CWE-732 CVE-2021-0334: In onTargetSelected of ResolverActivity.java, there is a possible settings bypass allowing an app to In onTargetSelected of ResolverActivity.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-1

CVE-2019-2051 [HIGH] CWE-20 CVE-2019-2051: In heap of spaces.h, there is a possible out of bounds read due to improper input validation. This c In heap of spaces.h, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure when processing a proxy auto config file with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-

CVE-2021-0705 [HIGH] CVE-2021-0705: In sanitizeSbn of NotificationManagerService.java, there is a possible way to keep service running i In sanitizeSbn of NotificationManagerService.java, there is a possible way to keep service running in foreground and keep granted permissions due to Bypass of Background Service Restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:

CVE-2021-0329 [HIGH] CWE-787 CVE-2021-0329: In several native functions called by AdvertiseManager.java, there is a possible out of bounds write In several native functions called by AdvertiseManager.java, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the Bluetooth server with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Andro

CVE-2021-0330 [HIGH] CWE-416 CVE-2021-0330: In add_user_ce and remove_user_ce of storaged.cpp, there is a possible use-after-free due to imprope In add_user_ce and remove_user_ce of storaged.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in storaged with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-170732441

CVE-2019-2208 [HIGH] CWE-125 CVE-2019-2208: In PromiseBuiltinsAssembler::NewPromiseCapability of builtins-promise.cc, there is a possible out of In PromiseBuiltinsAssembler::NewPromiseCapability of builtins-promise.cc, there is a possible out of bounds read in v8 JIT code due to a bug in code generation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.1, Android-

CVE-2021-0519 [HIGH] CWE-787 CVE-2021-0519: In BITSTREAM_FLUSH of ih264e_bitstream.h, there is a possible out of bounds write due to a heap buff In BITSTREAM_FLUSH of ih264e_bitstream.h, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-176533109

CVE-2021-0925 [HIGH] CWE-125 CVE-2021-0925: In rw_t4t_sm_detect_ndef of rw_t4t.cc, there is a possible out of bounds read due to an incorrect bo In rw_t4t_sm_detect_ndef of rw_t4t.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure due to a limited change in behavior based on the out of bounds data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Andr

CVE-2020-27024 [HIGH] CWE-125 CVE-2020-27024: In smp_br_state_machine_event of smp_br_main.cc, there is a possible out of bounds read due to a mis In smp_br_state_machine_event of smp_br_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure triggered by a malformed Bluetooth packet, with no additional execution privileges needed. User interaction is not needed for exploitation. Bounds Sanitizer mitigates this in the defaul

CVE-2023-40115 [HIGH] CWE-416 CVE-2023-40115: In readLogs of StatsService.cpp, there is a possible memory corruption due to a use after free. This In readLogs of StatsService.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2022-42544 [HIGH] CWE-74 CVE-2022-42544: In getView of AddAppNetworksFragment.java, there is a possible way to mislead the user about network In getView of AddAppNetworksFragment.java, there is a possible way to mislead the user about network add requests due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-224545390

CVE-2022-20138 [HIGH] CWE-862 CVE-2022-20138: In ACTION_MANAGED_PROFILE_PROVISIONED of DevicePolicyManagerService.java, there is a possible way fo In ACTION_MANAGED_PROFILE_PROVISIONED of DevicePolicyManagerService.java, there is a possible way for unprivileged app to send MANAGED_PROFILE_PROVISIONED intent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: An

CVE-2023-21281 [HIGH] CVE-2023-21281: In multiple functions of KeyguardViewMediator.java, there is a possible failure to lock after screen In multiple functions of KeyguardViewMediator.java, there is a possible failure to lock after screen timeout due to a logic error in the code. This could lead to local escalation of privilege across users with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-40084 [HIGH] CWE-416 CVE-2023-40084: In run of MDnsSdListener.cpp, there is a possible memory corruption due to a use after free. This co In run of MDnsSdListener.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2022-20360 [HIGH] CWE-862 CVE-2022-20360: In setChecked of SecureNfcPreferenceController.java, there is a missing permission check. This could In setChecked of SecureNfcPreferenceController.java, there is a missing permission check. This could lead to local escalation of privilege from the guest user with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-228314987

CVE-2022-20520 [HIGH] CWE-1021 CVE-2022-20520: In onCreate of various files, there is a possible tapjacking/overlay attack. This could lead to loca In onCreate of various files, there is a possible tapjacking/overlay attack. This could lead to local escalation of privilege or denial of server with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-227203202

CVE-2023-40096 [HIGH] CVE-2023-40096: In OpRecordAudioMonitor::onFirstRef of AudioRecordClient.cpp, there is a possible way to record audi In OpRecordAudioMonitor::onFirstRef of AudioRecordClient.cpp, there is a possible way to record audio from the background due to a missing flag. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.