Google Android vulnerabilities

CVE-2023-20955 [HIGH] CWE-862 CVE-2023-20955: In onPrepareOptionsMenu of AppInfoDashboardFragment.java, there is a possible way to bypass admin re In onPrepareOptionsMenu of AppInfoDashboardFragment.java, there is a possible way to bypass admin restrictions and uninstall applications for all users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersi

CVE-2023-21286 [HIGH] CVE-2023-21286: In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a mis In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-20944 [HIGH] CWE-502 CVE-2023-20944: In run of ChooseTypeAndAccountActivity.java, there is a possible escalation of privilege due to unsa In run of ChooseTypeAndAccountActivity.java, there is a possible escalation of privilege due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android

CVE-2023-20943 [HIGH] CWE-22 CVE-2023-20943: In clearApplicationUserData of ActivityManagerService.java, there is a possible way to remove system In clearApplicationUserData of ActivityManagerService.java, there is a possible way to remove system files due to a path traversal error. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-1

CVE-2023-21255 [HIGH] CWE-416 CVE-2023-21255: In multiple functions of binder.c, there is a possible memory corruption due to a use after free. Th In multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-21272 [HIGH] CWE-20 CVE-2023-21272: In readFrom of Uri.java, there is a possible bad URI permission grant due to improper input validati In readFrom of Uri.java, there is a possible bad URI permission grant due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-21086 [HIGH] CVE-2023-21086: In isToggleable of SecureNfcEnabler.java and SecureNfcPreferenceController.java, there is a possible In isToggleable of SecureNfcEnabler.java and SecureNfcPreferenceController.java, there is a possible way to enable NFC from a secondary account due to a permissions bypass. This could lead to local escalation of privilege from the Guest account with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVers

CVE-2023-20945 [HIGH] CWE-787 CVE-2023-20945: In phNciNfc_MfCreateXchgDataHdr of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write In phNciNfc_MfCreateXchgDataHdr of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-246932269

CVE-2022-26469 [HIGH] CWE-470 CVE-2022-26469: In MtkEmail, there is a possible escalation of privilege due to fragment injection. This could lead In MtkEmail, there is a possible escalation of privilege due to fragment injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07216598; Issue ID: ALPS07216598.

CVE-2021-0630 [HIGH] CWE-190 CVE-2021-0630: In wifi driver, there is a possible system crash due to a missing bounds check. This could lead to r In wifi driver, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05551397; Issue ID: ALPS05551397.

CVE-2023-20933 [HIGH] CWE-416 CVE-2023-20933: In several functions of MediaCodec.cpp, there is a possible way to corrupt memory due to a use after In several functions of MediaCodec.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-245860

CVE-2021-25407 [HIGH] CWE-787 CVE-2021-25407: A possible out of bounds write vulnerability in NPU driver prior to SMR JUN-2021 Release 1 allows ar A possible out of bounds write vulnerability in NPU driver prior to SMR JUN-2021 Release 1 allows arbitrary memory write.

CVE-2020-0438 [HIGH] CWE-824 CVE-2020-0438: In the AIBinder_Class constructor of ibinder.cpp, there is a possible arbitrary code execution due t In the AIBinder_Class constructor of ibinder.cpp, there is a possible arbitrary code execution due to uninitialized data. This could lead to local escalation of privilege if a process were using libbinder_ndk in a vulnerable way with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Andr

CVE-2022-20503 [HIGH] CWE-862 CVE-2022-20503: In onCreate of WifiDppConfiguratorActivity.java, there is a possible way for a guest user to add a W In onCreate of WifiDppConfiguratorActivity.java, there is a possible way for a guest user to add a WiFi configuration due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-22477

CVE-2023-35687 [HIGH] CWE-416 CVE-2023-35687: In MtpPropertyValue of MtpProperty.h, there is a possible memory corruption due to a use after free. In MtpPropertyValue of MtpProperty.h, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2019-2123 [HIGH] CWE-787 CVE-2019-2123: In execTransact of Binder.java in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9, there is a possible local e In execTransact of Binder.java in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9, there is a possible local execution of arbitrary code in a privileged process due to a memory overwrite. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-40103 [HIGH] CWE-415 CVE-2023-40103: In multiple locations, there is a possible way to corrupt memory due to a double free. This could le In multiple locations, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-21094 [HIGH] CWE-862 CVE-2023-21094: In sanitize of LayerState.cpp, there is a possible way to take over the screen display and swap the In sanitize of LayerState.cpp, there is a possible way to take over the screen display and swap the display content due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12

CVE-2019-2194 [HIGH] CWE-704 CVE-2019-2194: In SurfaceFlinger::createLayer of SurfaceFlinger.cpp, there is a possible arbitrary code execution d In SurfaceFlinger::createLayer of SurfaceFlinger.cpp, there is a possible arbitrary code execution due to improper casting. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9Android ID: A-137284057

CVE-2022-20416 [HIGH] CWE-787 CVE-2022-20416: In audioTransportsToHal of HidlUtils.cpp, there is a possible out of bounds write due to an incorrec In audioTransportsToHal of HidlUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-237717857