Google Android vulnerabilities

CVE-2022-27836 [HIGH] CWE-284 CVE-2022-27836: Improper access control and path traversal vulnerability in Storage Manager and Storage Manager Serv Improper access control and path traversal vulnerability in Storage Manager and Storage Manager Service prior to SMR Apr-2022 Release 1 allow local attackers to access arbitrary system files without a proper permission. The patch adds proper validation logic to prevent arbitrary files access.

CVE-2022-20512 [HIGH] CWE-20 CVE-2022-20512: In navigateUpTo of Task.java, there is a possible way to launch an intent handler with a mismatched In navigateUpTo of Task.java, there is a possible way to launch an intent handler with a mismatched intent due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-238602879

CVE-2022-20462 [HIGH] CWE-787 CVE-2022-20462: In phNxpNciHal_write_unlocked of phNxpNciHal.cc, there is a possible out of bounds write due to a mi In phNxpNciHal_write_unlocked of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android

CVE-2022-26092 [HIGH] CWE-122 CVE-2022-26092: Improper boundary check in Quram Agif library prior to SMR Apr-2022 Release 1 allows arbitrary code Improper boundary check in Quram Agif library prior to SMR Apr-2022 Release 1 allows arbitrary code execution.

CVE-2024-0014 [HIGH] CWE-693 CVE-2024-0014: In startInstall of UpdateFetcher.java, there is a possible way to trigger a malicious config update In startInstall of UpdateFetcher.java, there is a possible way to trigger a malicious config update due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2021-0631 [HIGH] CWE-125 CVE-2021-0631: In wifi driver, there is a possible system crash due to a missing bounds check. This could lead to r In wifi driver, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05551435; Issue ID: ALPS05551435.

CVE-2022-20550 [HIGH] CWE-610 CVE-2022-20550: In Multiple Locations, there is a possibility to launch arbitrary protected activities due to a conf In Multiple Locations, there is a possibility to launch arbitrary protected activities due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-242845514

CVE-2024-0048 [HIGH] CWE-230 CVE-2024-0048: In Session of AccountManagerService.java, there is a possible method to retain foreground service pr In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of null responses. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-40095 [HIGH] CVE-2023-40095: In createDontSendToRestrictedAppsBundle of PendingIntentUtils.java, there is a possible background a In createDontSendToRestrictedAppsBundle of PendingIntentUtils.java, there is a possible background activity launch due to a missing check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-20916 [HIGH] CWE-862 CVE-2023-20916: In getMainActivityLaunchIntent of LauncherAppsService.java, there is a possible way to bypass the re In getMainActivityLaunchIntent of LauncherAppsService.java, there is a possible way to bypass the restrictions on starting activities from the background due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVer

CVE-2023-32837 [HIGH] CWE-787 CVE-2023-32837: In video, there is a possible out of bounds write due to a missing bounds check. This could lead to In video, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08235273; Issue ID: ALPS08250357.

CVE-2023-21351 [HIGH] CVE-2023-21351: In multiple locations, there is a possible background activity launch due to a logic error in the co In multiple locations, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-20912 [HIGH] CWE-862 CVE-2023-20912: In onActivityResult of AvatarPickerActivity.java, there is a possible way to access images belonging In onActivityResult of AvatarPickerActivity.java, there is a possible way to access images belonging to other users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-2463019

CVE-2021-0427 [HIGH] CWE-787 CVE-2021-0427: In parseExclusiveStateAnnotation of LogEvent.cpp, there is a possible out of bounds write due to a h In parseExclusiveStateAnnotation of LogEvent.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174488848

CVE-2023-21398 [HIGH] CVE-2023-21398: In sdksandbox, there is a possible strandhogg style overlay attack due to a logic error in the code. In sdksandbox, there is a possible strandhogg style overlay attack due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2021-0426 [HIGH] CWE-787 CVE-2021-0426: In parsePrimaryFieldFirstUidAnnotation of LogEvent.cpp, there is a possible out of bounds write due In parsePrimaryFieldFirstUidAnnotation of LogEvent.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174485572

CVE-2022-24931 [HIGH] CWE-269 CVE-2022-24931: Improper access control vulnerability in dynamic receiver in ApkInstaller prior to SMR MAR-2022 Rele Improper access control vulnerability in dynamic receiver in ApkInstaller prior to SMR MAR-2022 Release allows unauthorized attackers to execute arbitrary activity without a proper permission

CVE-2023-21266 [HIGH] CVE-2023-21266: In multiple functions of ActivityManagerService.java, there is a possible way to escape Google Play In multiple functions of ActivityManagerService.java, there is a possible way to escape Google Play protection due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2022-20508 [HIGH] CWE-862 CVE-2022-20508: In onAttach of ConfigureWifiSettings.java, there is a possible way for a guest user to change WiFi s In onAttach of ConfigureWifiSettings.java, there is a possible way for a guest user to change WiFi settings due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-218679614

CVE-2024-0035 [HIGH] CWE-476 CVE-2024-0035: In onNullBinding of TileLifecycleManager.java, there is a possible way to launch an activity from th In onNullBinding of TileLifecycleManager.java, there is a possible way to launch an activity from the background due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.