Browse CVEs

MEDIUM 6.7 CVE-2023-21244 In visitUris of Notification.java, there is a possible bypass of user profile boundaries due to a missing permission check. This could lead to local … Android Patch available Fix from $1,6002023-10-06 MEDIUM 5.5 CVE-2023-21252 In validatePassword of WifiConfigurationUtil.java, there is a possible way to get the device into a boot loop due to improper input validation. This … Android Patch available Fix from $1,6002023-10-06 MEDIUM 5.5 CVE-2023-21253 In multiple locations, there is a possible way to crash multiple system services due to resource exhaustion. This could lead to local denial of servi… Android Patch available Fix from $1,6002023-10-06 MEDIUM 5.5 CVE-2023-21291 In visitUris of Notification.java, there is a possible way to reveal image contents from another user due to a missing permission check. This could l… Android Patch available Fix from $1,6002023-10-06 HIGH 8.8 CVE-2023-5346 Type confusion in V8 in Google Chrome prior to 117.0.5938.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… Chrome 117.0.5938.149+ Fix from $1,9502023-10-05 MEDIUM 6.7 CVE-2023-32824 In rpmb , there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges … Android Mitigation only Fix from $1,6002023-10-02 MEDIUM 6.7 CVE-2023-32826 In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege wit… Android Mitigation only Fix from $1,6002023-10-02 MEDIUM 6.7 CVE-2023-32827 In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege wit… Android Mitigation only Fix from $1,6002023-10-02 MEDIUM 6.7 CVE-2023-32830 In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System executi… Android Mitigation only Fix from $1,6002023-10-02 MEDIUM 6.7 CVE-2023-32821 In video, there is a possible out of bounds write due to a permissions bypass. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002023-10-02 MEDIUM 6.7 CVE-2023-32822 In ftm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002023-10-02 MEDIUM 6.7 CVE-2023-32823 In rpmb , there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002023-10-02 HIGH 8.8 CVE-2023-5186 Use after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker who convinced a user to engage in specific UI interact… Chrome 117.0.5938.132+ Fix from $1,9502023-09-28 HIGH 8.8 CVE-2023-5187 Use after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who convinced a user to install a malicious extension to po… Chrome 117.0.5938.132+ Fix from $1,9502023-09-28 MEDIUM 5.5 CVE-2023-44127 he vulnerability is that the Call management ("com.android.server.telecom") app patched by LG launches implicit intents that disclose sensitive data … Android after 13.0 Fix from $1,6002023-09-27 MEDIUM 5.5 CVE-2023-44126 The vulnerability is that the Call management ("com.android.server.telecom") app patched by LG sends a lot of LG-owned implicit broadcasts that discl… Android after 13.0 Fix from $1,6002023-09-27 HIGH 7.8 CVE-2023-44122 The vulnerability is to theft of arbitrary files with system privilege in the LockScreenSettings ("com.lge.lockscreensettings") app in the "com/lge/l… Android Mitigation only Fix from $1,9502023-09-27 HIGH 7.8 CVE-2023-44123 The vulnerability is the use of implicit PendingIntents with the PendingIntent.FLAG_MUTABLE set that leads to theft and/or (over-)write of arbitrary … Android Mitigation only Fix from $1,9502023-09-27 HIGH 7.8 CVE-2023-44125 The vulnerability is the use of implicit PendingIntents without the PendingIntent.FLAG_IMMUTABLE set that leads to theft and/or (over-)write of arbit… Android Mitigation only Fix from $1,9502023-09-27 MEDIUM 6.3 CVE-2023-44121 The vulnerability is an intent redirection in LG ThinQ Service ("com.lge.lms2") in the "com/lge/lms/things/ui/notification/NotificationManager.java" … Android after 13.0 Fix from $1,6002023-09-27 HIGH 8.8 CVE-2023-4863 KEVEPSS 100% Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memo… Chrome 1.0.62681.0 / 1.6.00.26463+ Fix from $1,9502023-09-12 CRITICAL 9.8 CVE-2023-35681 In eatt_l2cap_reconfig_completed of eatt_impl.h, there is a possible out of bounds write due to an integer overflow. This could lead to remote code e… Android Mitigation only Fix from $2,3002023-09-11 HIGH 8.8 CVE-2023-35673 In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote (proximal/adjace… Android Mitigation only Fix from $1,9502023-09-11 HIGH 8.8 CVE-2023-35684 In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to an integer overflow. This could lead to paired device escalation of … Android Patch available Fix from $1,9502023-09-11 HIGH 7.8 CVE-2023-35670 In computeValuesFromData of FileUtils.java, there is a possible way to insert files to other apps' external private directories due to a path travers… Android Patch available Fix from $1,9502023-09-11 HIGH 7.8 CVE-2023-35674 KEV In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local e… Android Patch available Fix from $1,9502023-09-11 HIGH 7.8 CVE-2023-35676 In createQuickShareAction of SaveImageInBackgroundTask.java, there is a possible way to trigger a background activity launch due to an unsafe Pending… Android Mitigation only Fix from $1,9502023-09-11 HIGH 7.8 CVE-2023-35682 In hasPermissionForActivity of PackageManagerHelper.java, there is a possible way to start arbitrary components due to a confused deputy. This could … Android Mitigation only Fix from $1,9502023-09-11 HIGH 7.8 CVE-2023-35687 In MtpPropertyValue of MtpProperty.h, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege… Android Patch available Fix from $1,9502023-09-11 MEDIUM 5.5 CVE-2023-35671 In onHostEmulationData of HostEmulationManager.java, there is a possible way for a general purpose NFC reader to read the full card number and expiry… Android Patch available Fix from $1,6002023-09-11