Google Android vulnerabilities

CVE-2021-0380 [HIGH] CWE-862 CVE-2021-0380: In onReceive of DcTracker.java, there is a possible way to trigger a provisioning URL and modify oth In onReceive of DcTracker.java, there is a possible way to trigger a provisioning URL and modify other telephony settings due to a missing permission check. This could lead to local escalation of privilege during the onboarding flow with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:

CVE-2021-39703 [HIGH] CWE-610 CVE-2021-39703: In updateState of UsbDeviceManager.java, there is a possible unauthorized access of files due to a c In updateState of UsbDeviceManager.java, there is a possible unauthorized access of files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-207057578

CVE-2021-0649 [HIGH] CWE-863 CVE-2021-0649: In stopVpnProfile of Vpn.java, there is a possible VPN profile reset due to a permissions bypass. Th In stopVpnProfile of Vpn.java, there is a possible VPN profile reset due to a permissions bypass. This could lead to local escalation of privilege CONTROL_ALWAYS_ON_VPN with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-191382886

CVE-2021-0429 [HIGH] CWE-416 CVE-2021-0429: In pollOnce of ALooper.cpp, there is possible memory corruption due to a use after free. This could In pollOnce of ALooper.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-175074139

CVE-2021-0388 [HIGH] CWE-862 CVE-2021-0388: In onReceive of ImsPhoneCallTracker.java, there is a possible misattribution of data usage due to an In onReceive of ImsPhoneCallTracker.java, there is a possible misattribution of data usage due to an incorrect broadcast handler. This could lead to local escalation of privilege resulting in attributing video call data to the wrong app, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersi

CVE-2023-20917 [HIGH] CVE-2023-20917: In onTargetSelected of ResolverActivity.java, there is a possible way to share a wrong file due to a In onTargetSelected of ResolverActivity.java, there is a possible way to share a wrong file due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-242605

CVE-2021-39630 [HIGH] CWE-863 CVE-2021-39630: In executeRequest of OverlayManagerService.java, there is a possible way to control fabricated overl In executeRequest of OverlayManagerService.java, there is a possible way to control fabricated overlays from adb shell due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-202768292

CVE-2021-0932 [HIGH] CVE-2021-0932: In showNotification of NavigationModeController.java, there is a possible confused deputy due to an In showNotification of NavigationModeController.java, there is a possible confused deputy due to an unsafe PendingIntent. This could lead to local escalation of privilege that allows actions performed as the System UI with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-173025705

CVE-2022-20203 [HIGH] CWE-787 CVE-2022-20203: In multiple locations of the nanopb library, there is a possible way to corrupt memory when decoding In multiple locations of the nanopb library, there is a possible way to corrupt memory when decoding untrusted protobuf files. This could lead to local escalation of privilege,with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2021-39622 [HIGH] CWE-862 CVE-2021-39622: In GBoard, there is a possible way to bypass Factory Reset Protection due to a missing permission ch In GBoard, there is a possible way to bypass Factory Reset Protection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-192663648

CVE-2021-0799 [HIGH] CVE-2021-0799: In ActivityThread.java, there is a possible way to collide the content provider's authorities. This In ActivityThread.java, there is a possible way to collide the content provider's authorities. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-197647956

CVE-2022-20048 [HIGH] CWE-787 CVE-2022-20048: In video decoder, there is a possible out of bounds write due to a missing bounds check. This could In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05917502; Issue ID: ALPS05917502.

CVE-2022-20047 [HIGH] CWE-787 CVE-2022-20047: In video decoder, there is a possible out of bounds write due to a missing bounds check. This could In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05917489; Issue ID: ALPS05917489.

CVE-2024-43080 [HIGH] CWE-502 CVE-2024-43080: In onReceive of AppRestrictionsFragment.java, there is a possible escalation of privilege due to uns In onReceive of AppRestrictionsFragment.java, there is a possible escalation of privilege due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

CVE-2023-21337 [HIGH] CWE-203 CVE-2023-21337: In InputMethod, there is a possible way to determine whether an app is installed, without query perm In InputMethod, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2022-20441 [HIGH] CWE-276 CVE-2022-20441: In navigateUpTo of Task.java, there is a possible way to launch an unexported intent handler due to In navigateUpTo of Task.java, there is a possible way to launch an unexported intent handler due to a logic error in the code. This could lead to local escalation of privilege if the targeted app has an intent trampoline, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10

CVE-2022-20114 [HIGH] CWE-269 CVE-2022-20114: In placeCall of TelecomManager.java, there is a possible way for an application to keep itself runni In placeCall of TelecomManager.java, there is a possible way for an application to keep itself running with foreground service importance due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Andr

CVE-2021-39799 [HIGH] CWE-863 CVE-2021-39799: In AttributionSource of AttributionSource.java, there is a possible permission bypass due to imprope In AttributionSource of AttributionSource.java, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-200288596

CVE-2021-39632 [HIGH] CWE-787 CVE-2021-39632: In inotify_cb of events.cpp, there is a possible out of bounds write due to an incorrect bounds chec In inotify_cb of events.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-202159709

CVE-2023-20964 [HIGH] CWE-610 CVE-2023-20964: In multiple functions of MediaSessionRecord.java, there is a possible Intent rebroadcast due to a co In multiple functions of MediaSessionRecord.java, there is a possible Intent rebroadcast due to a confused deputy. This could lead to local denial of service or escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A