Google Android vulnerabilities

CVE-2022-20147 [HIGH] CWE-787 CVE-2022-20147: In nfa_dm_check_set_config of nfa_dm_main.cc, there is a possible out of bounds write due to a missi In nfa_dm_check_set_config of nfa_dm_main.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-2212161

CVE-2021-1028 [HIGH] CWE-416 CVE-2021-1028: In setClientStateLocked of SurfaceFlinger.cpp, there is a possible out of bounds write due to a use In setClientStateLocked of SurfaceFlinger.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-193034683

CVE-2021-1029 [HIGH] CWE-416 CVE-2021-1029: In setClientStateLocked of SurfaceFlinger.cpp, there is a possible out of bounds write due to a use In setClientStateLocked of SurfaceFlinger.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-193034677

CVE-2024-43087 [HIGH] CWE-862 CVE-2024-43087: In getInstalledAccessibilityPreferences of AccessibilitySettings.java, there is a possible way to hi In getInstalledAccessibilityPreferences of AccessibilitySettings.java, there is a possible way to hide an enabled accessibility service in the accessibility service settings due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

CVE-2022-20348 [HIGH] CWE-862 CVE-2022-20348: In updateState of LocationServicesWifiScanningPreferenceController.java, there is a possible admin r In updateState of LocationServicesWifiScanningPreferenceController.java, there is a possible admin restriction bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android

CVE-2022-20197 [HIGH] CVE-2022-20197: In recycle of Parcel.java, there is a possible way to start foreground activity from background due In recycle of Parcel.java, there is a possible way to start foreground activity from background due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-208279300

CVE-2022-20207 [HIGH] CVE-2022-20207: In static definitions of GattServiceConfig.java, there is a possible permission bypass due to an ins In static definitions of GattServiceConfig.java, there is a possible permission bypass due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-185513714

CVE-2022-20192 [HIGH] CVE-2022-20192: In grantEmbeddedWindowFocus of WindowManagerService.java, there is a possible way to change an input In grantEmbeddedWindowFocus of WindowManagerService.java, there is a possible way to change an input channel for embedded hierarchy due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-2159

CVE-2022-20194 [HIGH] CVE-2022-20194: In onCreate of ChooseLockGeneric.java, there is a possible permission bypass. This could lead to loc In onCreate of ChooseLockGeneric.java, there is a possible permission bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-222684510

CVE-2022-20012 [HIGH] CWE-190 CVE-2022-20012: In mdp driver, there is a possible memory corruption due to an integer overflow. This could lead to In mdp driver, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05836478; Issue ID: ALPS05836478.

CVE-2021-25511 [HIGH] CWE-20 CVE-2021-25511: An improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows attack An improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows attackers to write arbitrary files via a path traversal vulnerability.

CVE-2024-0024 [HIGH] CWE-269 CVE-2024-0024: In multiple methods of UserManagerService.java, there is a possible failure to persist or enforce us In multiple methods of UserManagerService.java, there is a possible failure to persist or enforce user restrictions due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

CVE-2022-48383 [HIGH] CWE-862 CVE-2022-48383: .In srtd service, there is a possible missing permission check. This could lead to local escalation .In srtd service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

CVE-2022-20024 [HIGH] CWE-862 CVE-2022-20024: In system service, there is a possible permission bypass due to a missing permission check. This cou In system service, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219064; Issue ID: ALPS06219064.

CVE-2022-20356 [HIGH] CWE-20 CVE-2022-20356: In shouldAllowFgsWhileInUsePermissionLocked of ActiveServices.java, there is a possible way to start In shouldAllowFgsWhileInUsePermissionLocked of ActiveServices.java, there is a possible way to start foreground service from background due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 An

CVE-2021-39752 [HIGH] CVE-2021-39752: In Bubbles, there is a possible way to interfere with Bubbles due to a permissions bypass. This coul In Bubbles, there is a possible way to interfere with Bubbles due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-202756848

CVE-2021-0923 [HIGH] CWE-862 CVE-2021-0923: In createOrUpdate of Permission.java, there is a possible way to gain internal permissions due to a In createOrUpdate of Permission.java, there is a possible way to gain internal permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-195338390

CVE-2023-21002 [HIGH] CWE-862 CVE-2023-21002: In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-261193935

CVE-2022-32601 [HIGH] CWE-502 CVE-2022-32601: In telephony, there is a possible permission bypass due to a parcel format mismatch. This could lead In telephony, there is a possible permission bypass due to a parcel format mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07319132; Issue ID: ALPS07319132.

CVE-2021-0694 [HIGH] CWE-863 CVE-2021-0694: In setServiceForegroundInnerLocked of ActiveServices.java, there is a possible way for a background In setServiceForegroundInnerLocked of ActiveServices.java, there is a possible way for a background application to regain foreground permissions due to insufficient background restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersi