Browse CVEs

HIGH 7.8 CVE-2023-21191 In fixNotification of NotificationManagerService.java, there is a possible bypass of notification hide preference due to a logic error in the code. T… Android Mitigation only Fix from $1,9502023-06-28 HIGH 7.8 CVE-2023-21192 In setInputMethodWithSubtypeIdLocked of InputMethodManagerService.java, there is a possible way to setup input methods that are not enabled due to im… Android Mitigation only Fix from $1,9502023-06-28 HIGH 7.5 CVE-2023-21186 In LogResponse of Dns.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no … Android Mitigation only Fix from $1,9502023-06-28 HIGH 7.5 CVE-2023-21193 In VideoFrame of VideoFrame.h, there is a possible abort due to an integer overflow. This could lead to remote information disclosure with no additio… Android Mitigation only Fix from $1,9502023-06-28 HIGH 7.5 CVE-2023-21197 In btm_acl_process_sca_cmpl_pkt of btm_acl.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote inf… Android Mitigation only Fix from $1,9502023-06-28 HIGH 7.5 CVE-2023-21201 In on_create_record_event of btif_sdp_server.cc, there is a possible out of bounds read due to a missing null check. This could lead to remote denial… Android No fix yet Fix from $1,9502023-06-28 HIGH 7.3 CVE-2023-21189 In startLockTaskMode of LockTaskController.java, there is a possible bypass of lock task mode due to a logic error in the code. This could lead to lo… Android Mitigation only Fix from $1,9502023-06-28 MEDIUM 6.7 CVE-2023-21203 In startWpsPbcInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local escalation… Android Mitigation only Fix from $1,6002023-06-28 MEDIUM 6.7 CVE-2023-21207 In initiateTdlsSetupInternal of sta_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalat… Android Mitigation only Fix from $1,6002023-06-28 MEDIUM 6.7 CVE-2023-21209 In multiple functions of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local escalation of … Android Mitigation only Fix from $1,6002023-06-28 MEDIUM 5.5 CVE-2023-21198 In remove_sdp_record of btif_sdp_server.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatio… Android Mitigation only Fix from $1,6002023-06-28 MEDIUM 5.5 CVE-2023-21200 In on_remove_iso_data_path of btm_iso_impl.h, there is a possible out of bounds read due to improper input validation. This could lead to local infor… Android Mitigation only Fix from $1,6002023-06-28 MEDIUM 5.5 CVE-2023-21205 In startWpsPinDisplayInternal of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local inform… Android Mitigation only Fix from $1,6002023-06-28 MEDIUM 5.0 CVE-2023-21190 In btm_acl_encrypt_change of btm_acl.cc, there is a possible way for a remote device to turn off encryption without resulting in a terminated connect… Android Mitigation only Fix from $1,6002023-06-28 HIGH 7.8 CVE-2023-21172 In multiple functions of WifiCallingSettings.java, there is a possible way to change calling preferences for the admin user due to a permissions bypa… Android Mitigation only Fix from $1,9502023-06-28 HIGH 7.8 CVE-2023-21174 In isPageSearchEnabled of BillingCycleSettings.java, there is a possible way for the guest user to change data limits due to a permissions bypass. Th… Android Mitigation only Fix from $1,9502023-06-28 HIGH 7.8 CVE-2023-21175 In onCreate of DataUsageSummary.java, there is a possible method for a guest user to enable or disable mobile data due to a permissions bypass. This … Android Mitigation only Fix from $1,9502023-06-28 HIGH 7.8 CVE-2023-21179 In parseSecurityParamsFromXml of XmlUtil.java, there is a possible bypass of user specified wifi encryption protocol due to improperly used crypto. T… Android Mitigation only Fix from $1,9502023-06-28 HIGH 7.8 CVE-2023-21183 In ForegroundUtils of ForegroundUtils.java, there is a possible way to read NFC tag data while the app is still in the background due to a logic erro… Android Mitigation only Fix from $1,9502023-06-28 HIGH 7.8 CVE-2023-21184 In getCurrentPrivilegedPackagesForAllUsers of CarrierPrivilegesTracker.java, there is a possible permission bypass due to a logic error in the code. … Android Mitigation only Fix from $1,9502023-06-28 HIGH 7.8 CVE-2023-21185 In multiple functions of WifiNetworkFactory.java, there is a missing permission check. This could lead to local escalation of privilege from the gues… Android Mitigation only Fix from $1,9502023-06-28 HIGH 7.5 CVE-2023-21180 In xmlParseTryOrFinish of parser.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information discl… Android Mitigation only Fix from $1,9502023-06-28 MEDIUM 6.7 CVE-2023-21161 In Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with… Android Mitigation only Fix from $1,6002023-06-28 MEDIUM 6.7 CVE-2023-21171 In verifyInputEvent of InputDispatcher.cpp, there is a possible way to conduct click fraud due to side channel information disclosure. This could lea… Android Mitigation only Fix from $1,6002023-06-28 MEDIUM 5.5 CVE-2023-21160 In BuildSetTcsFci of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local informat… Android Mitigation only Fix from $1,6002023-06-28 MEDIUM 5.5 CVE-2023-21167 In setProfileName of DevicePolicyManagerService.java, there is a possible way to crash the SystemUI menu due to a missing bounds check. This could le… Android Mitigation only Fix from $1,6002023-06-28 MEDIUM 5.5 CVE-2023-21168 In convertCbYCrY of ColorConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information di… Android Mitigation only Fix from $1,6002023-06-28 MEDIUM 5.5 CVE-2023-21173 In multiple methods of DataUsageList.java, there is a possible way to learn about admin user's network activities due to a missing permission check. … Android Mitigation only Fix from $1,6002023-06-28 MEDIUM 5.5 CVE-2023-21177 In requestAppKeyboardShortcuts of WindowManagerService.java, there is a possible way to infer the app a user is interacting with due to a missing per… Android Mitigation only Fix from $1,6002023-06-28 CRITICAL 9.8 CVE-2023-21066 In cd_CodeMsg of cd_codec.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no … Android Mitigation only Fix from $2,3002023-06-28