Google Android vulnerabilities

CVE-2023-32880 [MEDIUM] CWE-125 CVE-2023-32880: In battery, there is a possible information disclosure due to a missing bounds check. This could lea In battery, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08308076.

CVE-2023-32879 [MEDIUM] CWE-787 CVE-2023-32879: In battery, there is a possible out of bounds write due to a missing bounds check. This could lead t In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08308064.

CVE-2023-32884 [MEDIUM] CWE-119 CVE-2023-32884: In netdagent, there is a possible information disclosure due to an incorrect bounds check. This coul In netdagent, there is a possible information disclosure due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07944011; Issue ID: ALPS07944011.

CVE-2023-32878 [MEDIUM] CWE-125 CVE-2023-32878: In battery, there is a possible information disclosure due to a missing bounds check. This could lea In battery, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08307992.

CVE-2023-32883 [MEDIUM] CWE-787 CVE-2023-32883: In Engineer Mode, there is a possible out of bounds write due to a missing bounds check. This could In Engineer Mode, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08282249; Issue ID: ALPS08282249.

CVE-2023-32882 [MEDIUM] CWE-787 CVE-2023-32882: In battery, there is a possible memory corruption due to a missing bounds check. This could lead to In battery, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08308616.

CVE-2023-32881 [MEDIUM] CWE-190 CVE-2023-32881: In battery, there is a possible information disclosure due to an integer overflow. This could lead t In battery, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08308080.

CVE-2023-32877 [MEDIUM] CWE-787 CVE-2023-32877: In battery, there is a possible out of bounds write due to a missing bounds check. This could lead t In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08308070.

CVE-2023-32876 [MEDIUM] CWE-125 CVE-2023-32876: In keyInstall, there is a possible information disclosure due to a missing bounds check. This could In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308612; Issue ID: ALPS08308612.

CVE-2023-32891 [MEDIUM] CWE-787 CVE-2023-32891: In bluetooth service, there is a possible out of bounds write due to improper input validation. This In bluetooth service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07933038; Issue ID: MSV-559.

CVE-2023-32885 [MEDIUM] CWE-119 CVE-2023-32885: In display drm, there is a possible memory corruption due to a missing bounds check. This could lead In display drm, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07780685; Issue ID: ALPS07780685.

CVE-2023-21651 [CRITICAL] CVE-2023-21651: Closed-source component Android Security Bulletin 2024-01-01 CVE: CVE-2023-21651 Severity: CRITICAL Component: Closed-source component References: A-268059825 *

CVE-2023-33025 [CRITICAL] CVE-2023-33025: Closed-source component Android Security Bulletin 2024-01-01 CVE: CVE-2023-33025 Severity: CRITICAL Component: Closed-source component References: A-290061199 *

CVE-2023-33036 [HIGH] CVE-2023-33036: Closed-source component Android Security Bulletin 2024-01-01 CVE: CVE-2023-33036 Severity: CRITICAL Component: Closed-source component References: A-290061245 *

CVE-2023-28565 [HIGH] CVE-2023-28565: Closed-source component Android Security Bulletin 2024-01-01 CVE: CVE-2023-28565 Severity: HIGH Component: Closed-source component References: A-280341573 *

CVE-2023-43514 [HIGH] CVE-2023-43514: Kernel Android Security Bulletin 2024-01-01 CVE: CVE-2023-43514 Severity: HIGH Component: Kernel References: A-303101664 QC-CR#3613254

CVE-2023-5427 [HIGH] CVE-2023-5427: Mali Android Security Bulletin 2024-01-01 CVE: CVE-2023-5427 Severity: HIGH Component: Mali References: A-308188337 *

CVE-2023-33043 [HIGH] CVE-2023-33043: Closed-source component Android Security Bulletin 2024-01-01 CVE: CVE-2023-33043 Severity: HIGH Component: Closed-source component References: A-295039021 *

CVE-2023-43511 [HIGH] CVE-2023-43511: Closed-source component Android Security Bulletin 2024-01-01 CVE: CVE-2023-43511 Severity: HIGH Component: Closed-source component References: A-303101323 *

CVE-2023-33110 [HIGH] CVE-2023-33110: Audio Android Security Bulletin 2024-01-01 CVE: CVE-2023-33110 Severity: HIGH Component: Audio References: A-303101147 QC-CR#3459076 [2]