Google Android vulnerabilities

CVE-2024-29787 [HIGH] CWE-416 CVE-2024-29787: In lwis_process_transactions_in_queue of lwis_transaction.c, there is a possible use after free due In lwis_process_transactions_in_queue of lwis_transaction.c, there is a possible use after free due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-3781 [HIGH] CWE-667 CVE-2023-3781: there is a possible use-after-free write due to improper locking. This could lead to local escalatio there is a possible use-after-free write due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2020-0176 [HIGH] CWE-20 CVE-2020-0176: In avdt_msg_prs_rej of avdt_msg.cc, there is a possible out-of-bounds read due to improper input val In avdt_msg_prs_rej of avdt_msg.cc, there is a possible out-of-bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-79702484

CVE-2023-21179 [HIGH] CVE-2023-21179: In parseSecurityParamsFromXml of XmlUtil.java, there is a possible bypass of user specified wifi enc In parseSecurityParamsFromXml of XmlUtil.java, there is a possible bypass of user specified wifi encryption protocol due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-272755865

CVE-2024-43765 [HIGH] CWE-276 CVE-2024-43765: In multiple locations, there is a possible way to obtain access to a folder due to a tapjacking/over In multiple locations, there is a possible way to obtain access to a folder due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.

CVE-2024-47016 [HIGH] CWE-276 CVE-2024-47016: there is a possible privilege escalation due to an insecure default value. This could lead to local there is a possible privilege escalation due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-49735 [HIGH] CWE-276 CVE-2024-49735: In multiple locations, there is a possible failure to persist permissions settings due to resource e In multiple locations, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-20939 [HIGH] CWE-667 CVE-2023-20939: In multiple functions of looper_backed_event_loop.cpp, there is a possible way to corrupt memory due In multiple functions of looper_backed_event_loop.cpp, there is a possible way to corrupt memory due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-243362981

CVE-2023-21399 [HIGH] CWE-327 CVE-2023-21399: there is a possible way to bypass cryptographic assurances due to a logic error in the code. This co there is a possible way to bypass cryptographic assurances due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2016-2416 [CRITICAL] CWE-264 CVE-2016-2416: libs/gui/BufferQueueConsumer.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1 libs/gui/BufferQueueConsumer.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not check for the android.permission.DUMP permission, which allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via a dump request, as demonstra

CVE-2019-9432 [HIGH] CWE-20 CVE-2019-9432: In Bluetooth, there is a possible out of bounds read due to improper input validation. This could le In Bluetooth, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure in the Bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80546108

CVE-2022-32589 [HIGH] CWE-404 CVE-2022-32589: In Wi-Fi driver, there is a possible way to disconnect Wi-Fi due to an improper resource release. Th In Wi-Fi driver, there is a possible way to disconnect Wi-Fi due to an improper resource release. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07030600; Issue ID: ALPS07030600.

CVE-2021-1002 [HIGH] CWE-125 CVE-2021-1002: In WT_Interpolate of eas_wtengine.c, there is a possible out of bounds read due to a missing bounds In WT_Interpolate of eas_wtengine.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-194533433

CVE-2021-0555 [HIGH] CWE-476 CVE-2021-0555: In RenderStruct of protostream_objectsource.cc, there is a possible crash due to a missing null chec In RenderStruct of protostream_objectsource.cc, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-179161711

CVE-2020-0460 [HIGH] CWE-287 CVE-2020-0460: In createNameCredentialDialog of CertInstaller.java, there exists the possibility of improperly inst In createNameCredentialDialog of CertInstaller.java, there exists the possibility of improperly installed certificates due to a logic error. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-163413737

CVE-2021-39762 [HIGH] CWE-190 CVE-2021-39762: In tremolo, there is a possible out of bounds read due to an integer overflow. This could lead to re In tremolo, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-210625816

CVE-2016-8411 [CRITICAL] CWE-119 CVE-2016-8411: Buffer overflow vulnerability while processing QMI QOS TLVs. Product: Android. Versions: versions th Buffer overflow vulnerability while processing QMI QOS TLVs. Product: Android. Versions: versions that have qmi_qos_srvc.c. Android ID: 31805216. References: QC CR#912775.

CVE-2022-20308 [HIGH] CVE-2022-20308: In hostapd, there is a possible insecure configuration due to an insecure default value. This could In hostapd, there is a possible insecure configuration due to an insecure default value. This could lead to remote denial of service of the wifi hotspot with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-197874458

CVE-2019-20567 [CRITICAL] CWE-787 CVE-2019-20567: An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. A up_parm heap overflow leads to code execution in the bootloader. The Samsung ID is SVE-2019-14993 (September 2019).

CVE-2020-27055 [HIGH] CWE-311 CVE-2020-27055: In isSubmittable and showWarningMessagesIfAppropriate of WifiConfigController.java and WifiConfigCon In isSubmittable and showWarningMessagesIfAppropriate of WifiConfigController.java and WifiConfigController2.java, there is a possible insecure WiFi configuration due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: An