Google Android vulnerabilities

CVE-2021-39797 [HIGH] CWE-269 CVE-2021-39797: In several functions of of LauncherApps.java, there is a possible escalation of privilege due to a l In several functions of of LauncherApps.java, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-209607104

CVE-2022-20395 [HIGH] CWE-22 CVE-2022-20395: In checkAccess of MediaProvider.java, there is a possible file deletion due to a path traversal erro In checkAccess of MediaProvider.java, there is a possible file deletion due to a path traversal error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-221855295

CVE-2022-20053 [HIGH] CWE-862 CVE-2022-20053: In ims service, there is a possible escalation of privilege due to a missing permission check. This In ims service, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219097; Issue ID: ALPS06219097.

CVE-2021-1003 [HIGH] CWE-610 CVE-2021-1003: In adjustStreamVolume of AudioService.java, there is a possible way for unprivileged app to change a In adjustStreamVolume of AudioService.java, there is a possible way for unprivileged app to change audio stream volume due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-189857506

CVE-2021-0981 [HIGH] CVE-2021-0981: In enqueueNotificationInternal of NotificationManagerService.java, there is a possible way to run a In enqueueNotificationInternal of NotificationManagerService.java, there is a possible way to run a foreground service without showing a notification due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-1

CVE-2021-0646 [HIGH] CWE-787 CVE-2021-0646: In sqlite3_str_vappendf of sqlite3.c, there is a possible out of bounds write due to improper input In sqlite3_str_vappendf of sqlite3.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege if the user can also inject a printf into a privileged process's SQL with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Andr

CVE-2022-20547 [HIGH] CWE-862 CVE-2022-20547: In multiple functions of AdapterService.java, there is a possible way to manipulate Bluetooth state In multiple functions of AdapterService.java, there is a possible way to manipulate Bluetooth state due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-240301753

CVE-2021-0487 [HIGH] CWE-1021 CVE-2021-0487: In onCreate of CalendarDebugActivity.java, there is a possible way to export calendar data to the sd In onCreate of CalendarDebugActivity.java, there is a possible way to export calendar data to the sdcard without user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174046

CVE-2021-0439 [HIGH] CWE-787 CVE-2021-0439: In setPowerModeWithHandle of com_android_server_power_PowerManagerService.cpp, there is a possible o In setPowerModeWithHandle of com_android_server_power_PowerManagerService.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174243830

CVE-2022-20031 [HIGH] CWE-416 CVE-2022-20031: In fb driver, there is a possible memory corruption due to a use after free. This could lead to loca In fb driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05850708; Issue ID: ALPS05850708.

CVE-2021-0926 [HIGH] CWE-862 CVE-2021-0926: In onCreate of NfcImportVCardActivity.java, there is a possible way to add a contact without user's In onCreate of NfcImportVCardActivity.java, there is a possible way to add a contact without user's consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9

CVE-2024-31315 [HIGH] CWE-266 CVE-2024-31315: In multiple functions of ManagedServices.java, there is a possible way to hide an app with notificat In multiple functions of ManagedServices.java, there is a possible way to hide an app with notification access in the Device & app notifications settings due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

CVE-2022-20348 [HIGH] CWE-862 CVE-2022-20348: In updateState of LocationServicesWifiScanningPreferenceController.java, there is a possible admin r In updateState of LocationServicesWifiScanningPreferenceController.java, there is a possible admin restriction bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android

CVE-2021-1028 [HIGH] CWE-416 CVE-2021-1028: In setClientStateLocked of SurfaceFlinger.cpp, there is a possible out of bounds write due to a use In setClientStateLocked of SurfaceFlinger.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-193034683

CVE-2021-1029 [HIGH] CWE-416 CVE-2021-1029: In setClientStateLocked of SurfaceFlinger.cpp, there is a possible out of bounds write due to a use In setClientStateLocked of SurfaceFlinger.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-193034677

CVE-2021-0550 [HIGH] CWE-610 CVE-2021-0550: In onLoadFailed of AnnotateActivity.java, there is a possible way to gain WRITE_EXTERNAL_STORAGE per In onLoadFailed of AnnotateActivity.java, there is a possible way to gain WRITE_EXTERNAL_STORAGE permissions without user consent due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-1796

CVE-2022-20147 [HIGH] CWE-787 CVE-2022-20147: In nfa_dm_check_set_config of nfa_dm_main.cc, there is a possible out of bounds write due to a missi In nfa_dm_check_set_config of nfa_dm_main.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-2212161

CVE-2021-0694 [HIGH] CWE-863 CVE-2021-0694: In setServiceForegroundInnerLocked of ActiveServices.java, there is a possible way for a background In setServiceForegroundInnerLocked of ActiveServices.java, there is a possible way for a background application to regain foreground permissions due to insufficient background restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersi

CVE-2022-20012 [HIGH] CWE-190 CVE-2022-20012: In mdp driver, there is a possible memory corruption due to an integer overflow. This could lead to In mdp driver, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05836478; Issue ID: ALPS05836478.

CVE-2022-32601 [HIGH] CWE-502 CVE-2022-32601: In telephony, there is a possible permission bypass due to a parcel format mismatch. This could lead In telephony, there is a possible permission bypass due to a parcel format mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07319132; Issue ID: ALPS07319132.