Browse CVEs

MEDIUM 6.7 CVE-2023-21069 In wl_update_hidden_ap_ie of wl_cfgscan.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation… Android Mitigation only Fix from $1,6002023-03-24 MEDIUM 6.7 CVE-2023-21070 In add_roam_cache_list of wl_roam.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr… Android Mitigation only Fix from $1,6002023-03-24 MEDIUM 6.4 CVE-2023-21055 In dit_hal_ioctl of dit.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System e… Android Mitigation only Fix from $1,6002023-03-24 HIGH 7.8 CVE-2023-21015 In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This c… Android Mitigation only Fix from $1,9502023-03-24 HIGH 7.8 CVE-2023-21040 In buildCommand of bluetooth_ccc.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of… Android Mitigation only Fix from $1,9502023-03-24 HIGH 7.8 CVE-2023-21041 In append_to_params of param_util.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of… Android Mitigation only Fix from $1,9502023-03-24 HIGH 7.5 CVE-2023-21027 In multiple functions of PasspointXmlUtils.java, there is a possible authentication misconfiguration due to a logic error in the code. This could lea… Android Mitigation only Fix from $1,9502023-03-24 MEDIUM 6.7 CVE-2023-21038 In cs40l2x_cp_trigger_queue_show of cs40l2x.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation o… Android Mitigation only Fix from $1,6002023-03-24 MEDIUM 5.5 CVE-2023-21036 In BitmapExport.java, there is a possible failure to truncate images due to a logic error in the code.Product: AndroidVersions: Android kernelAndroid… Android No fix yet Fix from $1,6002023-03-24 HIGH 7.8 CVE-2023-20993 In multiple functions of SnoozeHelper.java, there is a possible failure to persist settings due to an uncaught exception. This could lead to local es… Android Mitigation only Fix from $1,9502023-03-24 HIGH 7.8 CVE-2023-20995 In captureImage of CustomizedSensor.cpp, there is a possible way to bypass the fingerprint unlock due to a logic error in the code. This could lead t… Android Mitigation only Fix from $1,9502023-03-24 HIGH 7.8 CVE-2023-21002 In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This c… Android Mitigation only Fix from $1,9502023-03-24 HIGH 7.8 CVE-2023-21004 In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This c… Android Mitigation only Fix from $1,9502023-03-24 HIGH 7.8 CVE-2023-20975 In getAvailabilityStatus of EnableContentCapturePreferenceController.java, there is a possible way to bypass DISALLOW_CONTENT_CAPTURE due to a permis… Android Mitigation only Fix from $1,9502023-03-24 HIGH 7.8 CVE-2023-20985 In BTA_GATTS_HandleValueIndication of bta_gatts_api.cc, there is a possible out of bounds write due to improper input validation. This could lead to … Android Mitigation only Fix from $1,9502023-03-24 HIGH 7.3 CVE-2023-20976 In getConfirmationMessage of DefaultAutofillPicker.java, there is a possible way to mislead the user to select default autofill application due to im… Android Mitigation only Fix from $1,9502023-03-24 MEDIUM 5.5 CVE-2023-20972 In btm_vendor_specific_evt of btm_devctl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local informati… Android Mitigation only Fix from $1,6002023-03-24 MEDIUM 5.5 CVE-2023-20973 In btm_create_conn_cancel_complete of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local info… Android Mitigation only Fix from $1,6002023-03-24 MEDIUM 5.5 CVE-2023-20974 In btm_ble_add_resolving_list_entry_complete of btm_ble_privacy.cc, there is a possible out of bounds read due to a missing bounds check. This could … Android Mitigation only Fix from $1,6002023-03-24 MEDIUM 5.5 CVE-2023-20979 In GetNextSourceDataPacket of bta_av_co.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatio… Android Mitigation only Fix from $1,6002023-03-24 MEDIUM 5.5 CVE-2023-20980 In btu_ble_ll_conn_param_upd_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local infor… Android Mitigation only Fix from $1,6002023-03-24 HIGH 7.8 CVE-2023-20964 In multiple functions of MediaSessionRecord.java, there is a possible Intent rebroadcast due to a confused deputy. This could lead to local denial of… Android Mitigation only Fix from $1,9502023-03-24 HIGH 7.8 CVE-2023-20966 In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with… Android Mitigation only Fix from $1,9502023-03-24 HIGH 7.8 CVE-2023-20971 In removePermission of PermissionManagerServiceImpl.java, there is a possible way to obtain dangerous permissions without user consent due to a logic… Android Mitigation only Fix from $1,9502023-03-24 HIGH 8.8 CVE-2023-20960 In launchDeepLinkIntentToRight of SettingsHomepageActivity.java, there is a possible way to launch arbitrary activities due to improper input validat… Android Mitigation only Fix from $1,9502023-03-24 HIGH 7.8 CVE-2023-20906 In onPackageAddedInternal of PermissionManagerService.java, there is a possible way to silently grant a permission after a Target SDK update due to a… Android Mitigation only Fix from $1,9502023-03-24 HIGH 7.8 CVE-2023-20959 In AddSupervisedUserActivity, guest users are not prevented from starting the activity due to missing permissions checks. This could lead to local es… Android Mitigation only Fix from $1,9502023-03-24 MEDIUM 5.5 CVE-2022-42528 In ffa_mrd_prot of shared_mem.c, there is a possible ID due to a logic error in the code. This could lead to local information disclosure with no add… Android Mitigation only Fix from $1,6002023-03-24 MEDIUM 5.5 CVE-2023-20910 In add of WifiNetworkSuggestionsManager.java, there is a possible way to trigger permanent DoS due to resource exhaustion. This could lead to local d… Android Mitigation only Fix from $1,6002023-03-24 MEDIUM 5.5 CVE-2023-20962 In getSliceEndItem of MediaVolumePreferenceController.java, there is a possible way to start foreground activity from the background due to an unsafe… Android Mitigation only Fix from $1,6002023-03-24