Google Android vulnerabilities

CVE-2022-42778 [HIGH] CWE-862 CVE-2022-42778: In windows manager service, there is a missing permission check. This could lead to set up windows m In windows manager service, there is a missing permission check. This could lead to set up windows manager service with no additional execution privileges needed.

CVE-2023-21175 [HIGH] CWE-276 CVE-2023-21175: In onCreate of DataUsageSummary.java, there is a possible method for a guest user to enable or disab In onCreate of DataUsageSummary.java, there is a possible method for a guest user to enable or disable mobile data due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262243574

CVE-2023-52351 [HIGH] CWE-787 CVE-2023-52351: In ril service, there is a possible out of bounds write due to a missing bounds check. This could le In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

CVE-2023-20957 [HIGH] CWE-266 CVE-2023-20957: In onAttach of SettingsPreferenceFragment.java, there is a possible bypass of Factory Reset Protecti In onAttach of SettingsPreferenceFragment.java, there is a possible bypass of Factory Reset Protections due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12LAndroid ID: A-25842

CVE-2023-20959 [HIGH] CWE-862 CVE-2023-20959: In AddSupervisedUserActivity, guest users are not prevented from starting the activity due to missin In AddSupervisedUserActivity, guest users are not prevented from starting the activity due to missing permissions checks. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-249057848

CVE-2022-20246 [HIGH] CWE-276 CVE-2022-20246: In WindowManager, there is a possible bypass of the restrictions for starting activities from the ba In WindowManager, there is a possible bypass of the restrictions for starting activities from the background due to an incorrect UID/permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-2304931

CVE-2025-20645 [HIGH] CWE-787 CVE-2025-20645: In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lea In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09475476; Issue ID: MSV-2599.

CVE-2023-21001 [HIGH] CWE-862 CVE-2023-21001: In onContextItemSelected of NetworkProviderSettings.java, there is a possible way for users to chang In onContextItemSelected of NetworkProviderSettings.java, there is a possible way for users to change the Wi-Fi settings of other users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13A

CVE-2023-30928 [HIGH] CWE-862 CVE-2023-30928: In telephony service, there is a possible missing permission check. This could lead to local escalat In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

CVE-2023-30929 [HIGH] CWE-862 CVE-2023-30929: In telephony service, there is a possible missing permission check. This could lead to local escalat In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

CVE-2023-30864 [HIGH] CWE-862 CVE-2023-30864: In Connectivity Service, there is a possible missing permission check. This could lead to local esca In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

CVE-2023-30863 [HIGH] CWE-862 CVE-2023-30863: In Connectivity Service, there is a possible missing permission check. This could lead to local esca In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

CVE-2023-20927 [HIGH] CWE-284 CVE-2023-20927: In permissions of AndroidManifest.xml, there is a possible way to grant signature permissions due to In permissions of AndroidManifest.xml, there is a possible way to grant signature permissions due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-244216503

CVE-2022-48390 [HIGH] CWE-862 CVE-2022-48390: In telephony service, there is a possible missing permission check. This could lead to local escalat In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

CVE-2022-48392 [HIGH] CWE-862 CVE-2022-48392: In dialer service, there is a possible missing permission check. This could lead to local escalation In dialer service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

CVE-2023-20950 [HIGH] CWE-863 CVE-2023-20950: In AlarmManagerActivity of AlarmManagerActivity.java, there is a possible way to bypass background a In AlarmManagerActivity of AlarmManagerActivity.java, there is a possible way to bypass background activity launch restrictions via a pendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L

CVE-2023-21138 [HIGH] CWE-20 CVE-2023-21138: In onNullBinding of CallRedirectionProcessor.java, there is a possible long lived connection due to In onNullBinding of CallRedirectionProcessor.java, there is a possible long lived connection due to improper input validation. This could lead to local escalation of privilege and background activity launches with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L

CVE-2023-21121 [HIGH] CWE-20 CVE-2023-21121: In onResume of AppManagementFragment.java, there is a possible way to prevent users from forgetting In onResume of AppManagementFragment.java, there is a possible way to prevent users from forgetting a previously connected VPN due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12An

CVE-2024-40655 [HIGH] CWE-276 CVE-2024-40655: In bindAndGetCallIdentification of CallScreeningServiceHelper.java, there is a possible way to maint In bindAndGetCallIdentification of CallScreeningServiceHelper.java, there is a possible way to maintain a while-in-use permission in the background due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

CVE-2024-40652 [HIGH] CWE-862 CVE-2024-40652: In onCreate of SettingsHomepageActivity.java, there is a possible way to access the Settings app whi In onCreate of SettingsHomepageActivity.java, there is a possible way to access the Settings app while the device is provisioning due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.