Browse CVEs

HIGH 7.8 CVE-2023-21324 In Package Installer, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information di… Android 14.0+ Fix from $1,9502023-10-30 MEDIUM 6.7 CVE-2023-21310 In Bluetooth, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System exe… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 6.5 CVE-2023-21315 In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote (proximal/adjacent) information disclos… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21301 In ActivityManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informati… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21302 In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disc… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21303 In Content, here is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. T… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21304 In Content Service, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disc… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21305 In Content, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. … Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21306 In ContentService, there is a possible way to read installed sync content providers due to side channel information disclosure. This could lead to lo… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21308 In Composer, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additiona… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21309 In libcore, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional … Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21311 In Settings, there is a possible way to control private DNS settings from a secondary user due to a permissions bypass. This could lead to local info… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21312 In IntentResolver, there is a possible cross-user media read due to a confused deputy. This could lead to local information disclosure with no additi… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21316 In Content, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. … Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21317 In ContentService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information discl… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21318 In Content, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. … Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21319 In UsageStatsService, there is a possible way to read installed 3rd party apps due to side channel information disclosure. This could lead to local i… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21320 In Device Policy, there is a possible way to verify if a particular admin app is registered on the device due to side channel information disclosure.… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21321 In Package Manager, there is a possible cross-user settings disclosure due to a missing permission check. This could lead to local information disclo… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21323 In Activity Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information dis… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.0 CVE-2023-21307 In Bluetooth, there is a possible way for a paired Bluetooth device to access a long term identifier for an Android device due to a permissions bypas… Android 14.0+ Fix from $1,6002023-10-30 HIGH 7.8 CVE-2021-39810 In verifyDefaults of CardEmulationManager.java, there is a possible way to set a third party app as the default contactless payment app without user … Android Mitigation only Fix from $1,9502023-10-30 HIGH 7.8 CVE-2023-21298 In Slice, there is a possible disclosure of installed applications due to side channel information disclosure. This could lead to local escalation of… Android 14.0+ Fix from $1,9502023-10-30 MEDIUM 5.5 CVE-2022-20264 In Usage Stats Service, there is a possible way to determine whether an app is installed, without query permissions due to side channel information d… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21293 In PackageManagerNative, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21294 In Slice, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure wit… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21295 In SliceManagerService, there is a possible way to check if a content provider is installed due to a missing null check. This could lead to local inf… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21296 In Permission, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosur… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21299 In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disc… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-21300 In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information discl… Android 14.0+ Fix from $1,6002023-10-30