Google Android vulnerabilities

CVE-2022-20043 [HIGH] CWE-862 CVE-2022-20043: In Bluetooth, there is a possible escalation of privilege due to a missing permission check. This co In Bluetooth, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06148177; Issue ID: ALPS06148177.

CVE-2022-20041 [HIGH] CWE-862 CVE-2022-20041: In Bluetooth, there is a possible escalation of privilege due to a missing permission check. This co In Bluetooth, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06108596; Issue ID: ALPS06108596.

CVE-2021-39709 [HIGH] CVE-2021-39709: In sendSipAccountsRemovedNotification of SipAccountRegistry.java, there is a possible permission byp In sendSipAccountsRemovedNotification of SipAccountRegistry.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-208817618

CVE-2021-39619 [HIGH] CVE-2021-39619: In updatePackageMappingsData of UsageStatsService.java, there is a possible way to bypass security a In updatePackageMappingsData of UsageStatsService.java, there is a possible way to bypass security and privacy settings of app usage due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12Androi

CVE-2021-0984 [HIGH] CWE-404 CVE-2021-0984: In onNullBinding of ManagedServices.java, there is a possible permission bypass due to an incorrectl In onNullBinding of ManagedServices.java, there is a possible permission bypass due to an incorrectly unbound service. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-192475653

CVE-2021-39693 [HIGH] CWE-119 CVE-2021-39693: In onUidStateChanged of AppOpsService.java, there is a possible way to access location without a vis In onUidStateChanged of AppOpsService.java, there is a possible way to access location without a visible indicator due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-208662370

CVE-2021-0927 [HIGH] CWE-281 CVE-2021-0927: In requestChannelBrowsable of TvInputManagerService.java, there is a possible permission bypass due In requestChannelBrowsable of TvInputManagerService.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-8.1 Android-9A

CVE-2021-0398 [HIGH] CVE-2021-0398: In bindServiceLocked of ActiveServices.java, there is a possible foreground service launch due to a In bindServiceLocked of ActiveServices.java, there is a possible foreground service launch due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-173516292

CVE-2022-20475 [HIGH] CWE-276 CVE-2022-20475: In test of ResetTargetTaskHelper.java, there is a possible hijacking of any app which sets allowTask In test of ResetTargetTaskHelper.java, there is a possible hijacking of any app which sets allowTaskReparenting="true" due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L And

CVE-2022-42777 [HIGH] CWE-862 CVE-2022-42777: In power management service, there is a missing permission check. This could lead to set up power ma In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.

CVE-2022-42778 [HIGH] CWE-862 CVE-2022-42778: In windows manager service, there is a missing permission check. This could lead to set up windows m In windows manager service, there is a missing permission check. This could lead to set up windows manager service with no additional execution privileges needed.

CVE-2022-39093 [HIGH] CWE-862 CVE-2022-39093: In power management service, there is a missing permission check. This could lead to set up power ma In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.

CVE-2022-42776 [HIGH] CWE-862 CVE-2022-42776: In UscAIEngine service, there is a missing permission check. This could lead to set up UscAIEngine s In UscAIEngine service, there is a missing permission check. This could lead to set up UscAIEngine service with no additional execution privileges needed.

CVE-2022-20548 [HIGH] CWE-787 CVE-2022-20548: In setParameter of EqualizerEffect.cpp, there is a possible out of bounds write due to improper inpu In setParameter of EqualizerEffect.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-240919398

CVE-2021-39738 [HIGH] CWE-862 CVE-2021-39738: In CarSetings, there is a possible to pair BT device bypassing user's consent due to a missing permi In CarSetings, there is a possible to pair BT device bypassing user's consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-216190509

CVE-2021-39697 [HIGH] CWE-862 CVE-2021-39697: In checkFileUriDestination of DownloadProvider.java, there is a possible way to bypass external stor In checkFileUriDestination of DownloadProvider.java, there is a possible way to bypass external storage private directories protection due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12

CVE-2021-39694 [HIGH] CWE-276 CVE-2021-39694: In parse of RoleParser.java, there is a possible way for default apps to get permissions explicitly In parse of RoleParser.java, there is a possible way for default apps to get permissions explicitly denied by the user due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-202312327

CVE-2021-0341 [HIGH] CWE-295 CVE-2021-0341: In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for th In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Andro

CVE-2023-21109 [HIGH] CWE-326 CVE-2023-21109: In multiple places of AccessibilityService, there is a possible way to hide the app from the user du In multiple places of AccessibilityService, there is a possible way to hide the app from the user due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Androi

CVE-2021-0385 [HIGH] CWE-862 CVE-2021-0385: In createConnectToAvailableNetworkNotification of ConnectToNetworkNotificationBuilder.java, there is In createConnectToAvailableNetworkNotification of ConnectToNetworkNotificationBuilder.java, there is a possible connection to untrusted WiFi networks due to notification interaction above the lockscreen. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Produc