Browse CVEs

HIGH 7.5 CVE-2023-21353 In NFA, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional exe… Android Mitigation only Fix from $1,9502023-10-30 MEDIUM 6.7 CVE-2023-21360 In Bluetooth, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System … Android Mitigation only Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21350 In Media Projection, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information dis… Android Mitigation only Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21352 In NFA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional exec… Android Mitigation only Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21354 In Package Manager Service, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informat… Android Mitigation only Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21362 In Usage, there is a possible permanent DoS due to resource exhaustion. This could lead to local denial of service with no additional execution privi… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21364 In ContactsProvider, there is a possible crash loop due to resource exhaustion. This could lead to local persistent denial of service in the Phone ap… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21365 In Contacts, there is a possible crash loop due to resource exhaustion. This could lead to local denial of service in the Phone app with User executi… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21366 In Scudo, there is a possible way for an attacker to predict heap allocation patterns due to insecure implementation/design. This could lead to local… Android 14.0+ Fix from $1,6002023-10-30 HIGH 7.8 CVE-2023-21342 In RemoteSpeechRecognitionService of RemoteSpeechRecognitionService.java, there is a possible way to launch an activity from the background due to a … Android Mitigation only Fix from $1,9502023-10-30 HIGH 7.8 CVE-2023-21343 In ActivityStarter, there is a possible background activity launch due to an unsafe PendingIntent. This could lead to local escalation of privilege w… Android 14.0+ Fix from $1,9502023-10-30 MEDIUM 5.5 CVE-2023-21344 In Job Scheduler, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclo… Android 14.0+ Fix from $1,6002023-10-30 HIGH 7.8 CVE-2023-21328 In Package Installer, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check.… Android 14.0+ Fix from $1,9502023-10-30 HIGH 7.8 CVE-2023-21337 In InputMethod, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosu… Android 14.0+ Fix from $1,9502023-10-30 HIGH 7.8 CVE-2023-21341 In Permission Manager, there is a possible way to bypass required permissions due to a missing permission check. This could lead to local escalation … Android 14.0+ Fix from $1,9502023-10-30 HIGH 7.5 CVE-2023-21339 In Minikin, there is a possible way to trigger ANR by showing a malicious message due to resource exhaustion. This could lead to remote denial of ser… Android 14.0+ Fix from $1,9502023-10-30 MEDIUM 5.5 CVE-2023-21325 In Settings, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure.… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21326 In Package Manager Service, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informat… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21327 In Permission Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information d… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21329 In Activity Manager, there is a possible way to determine whether an app is installed due to a missing permission check. This could lead to local inf… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21330 In Overlay Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disc… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21331 In InputMethod, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosu… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21332 In Text Services, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclo… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21333 In Text Services, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclo… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21334 In App Ops Service, there is a possible disclosure of information about installed packages due to a logic error in the code. This could lead to local… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21335 In Settings, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure.… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21336 In Input Method, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclos… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21338 In Input Method, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclos… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21340 In Telecomm, there is a possible way to get the call state due to a missing permission check. This could lead to local information disclosure with no… Android 14.0+ Fix from $1,6002023-10-30 HIGH 7.8 CVE-2023-21313 In Core, there is a possible way to forward calls without user knowledge due to a missing permission check. This could lead to local escalation of pr… Android 14.0+ Fix from $1,9502023-10-30