Browse CVEs

HIGH 7.8 CVE-2023-40079 In injectSendIntentSender of ShortcutService.java, there is a possible background activity launch due to a permissions bypass. This could lead to loc… Android Patch available Fix from $1,9502023-12-04 HIGH 7.8 CVE-2023-40080 In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalatio… Android Patch available Fix from $1,9502023-12-04 MEDIUM 5.5 CVE-2023-35668 In visitUris of Notification.java, there is a possible way to display images from another user due to a confused deputy. This could lead to local inf… Android Mitigation only Fix from $1,6002023-12-04 MEDIUM 5.5 CVE-2023-40073 In visitUris of Notification.java, there is a possible cross-user media read due to Confused Deputy. This could lead to local information disclosure … Android Patch available Fix from $1,6002023-12-04 MEDIUM 5.5 CVE-2023-40074 In saveToXml of PersistableBundle.java, invalid data could lead to local persistent denial of service with no additional execution privileges needed.… Android Patch available Fix from $1,6002023-12-04 MEDIUM 5.5 CVE-2023-40075 In forceReplaceShortcutInner of ShortcutPackage.java, there is a possible way to register unlimited packages due to a missing bounds check. This coul… Android Patch available Fix from $1,6002023-12-04 MEDIUM 5.5 CVE-2023-40076 In createPendingIntent of CredentialManagerUi.java, there is a possible way to access credentials from other users due to a permissions bypass. This … Android Patch available Fix from $1,6002023-12-04 MEDIUM 5.5 CVE-2023-40081 In loadMediaDataInBgForResumption of MediaDataManager.kt, there is a possible way to view another user's images due to a confused deputy. This could… Android Mitigation only Fix from $1,6002023-12-04 CRITICAL 9.8 CVE-2023-21162 In RGXUnbackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of pr… Android Mitigation only Fix from $2,3002023-12-04 CRITICAL 9.8 CVE-2023-21163 In PMR_ReadBytes of pmr.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in … Android Mitigation only Fix from $2,3002023-12-04 CRITICAL 9.8 CVE-2023-21164 In DevmemIntMapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation o… Android Mitigation only Fix from $2,3002023-12-04 CRITICAL 9.8 CVE-2023-21166 In RGXBackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of priv… Android Mitigation only Fix from $2,3002023-12-04 CRITICAL 9.8 CVE-2023-21215 In DevmemIntAcquireRemoteCtx of devicemem_server.c, there is a possible arbitrary code execution due to a race condition. This could lead to local es… Android Mitigation only Fix from $2,3002023-12-04 CRITICAL 9.8 CVE-2023-21216 In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible arbitrary code execution due to a use after free. This could lead to local e… Android Mitigation only Fix from $2,3002023-12-04 CRITICAL 9.8 CVE-2023-21217 In PMRWritePMPageList of TBD, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege wi… Android No fix yet Fix from $2,3002023-12-04 CRITICAL 9.8 CVE-2023-21218 In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to loc… Android Mitigation only Fix from $2,3002023-12-04 CRITICAL 9.8 CVE-2023-21228 In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to loc… Android Mitigation only Fix from $2,3002023-12-04 CRITICAL 9.8 CVE-2023-21263 In OSMMapPMRGeneric of pmr_os.c, there is a possible out of bounds write due to an uncaught exception. This could lead to local escalation of privile… Android Mitigation only Fix from $2,3002023-12-04 CRITICAL 9.8 CVE-2023-21401 In DevmemIntChangeSparse of devicemem_server.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalati… Android Mitigation only Fix from $2,3002023-12-04 HIGH 7.5 CVE-2023-21227 In HTBLogKM of htbserver.c, there is a possible information disclosure due to log information disclosure. This could lead to local information disclo… Android Mitigation only Fix from $1,9502023-12-04 MEDIUM 5.5 CVE-2023-6460 A potential logging of the firestore key via logging within nodejs-firestore exists - Developers who were logging objects through this._settings woul… Cloud Firestore 6.1.0+ Fix from $1,6002023-12-04 MEDIUM 6.7 CVE-2023-32854 In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002023-12-04 MEDIUM 6.7 CVE-2023-32859 In meta, there is a possible classic buffer overflow due to a missing bounds check. This could lead to local escalation of privilege with System exec… Android Mitigation only Fix from $1,6002023-12-04 MEDIUM 6.7 CVE-2023-32860 In display, there is a possible classic buffer overflow due to a missing bounds check. This could lead to local escalation of privilege with System e… Android Mitigation only Fix from $1,6002023-12-04 MEDIUM 6.7 CVE-2023-32861 In display, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System exe… Android Mitigation only Fix from $1,6002023-12-04 MEDIUM 6.7 CVE-2023-32862 In display, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System exe… Android Mitigation only Fix from $1,6002023-12-04 MEDIUM 6.7 CVE-2023-32863 In display drm, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System ex… Android Mitigation only Fix from $1,6002023-12-04 MEDIUM 6.7 CVE-2023-32864 In display drm, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with Syste… Android Mitigation only Fix from $1,6002023-12-04 MEDIUM 6.7 CVE-2023-32865 In display drm, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with Syste… Android Mitigation only Fix from $1,6002023-12-04 MEDIUM 6.7 CVE-2023-32866 In mmp, there is a possible memory corruption due to an incorrect bounds check. This could lead to local escalation of privilege with System executio… Android Mitigation only Fix from $1,6002023-12-04