Browse CVEs

HIGH 7.8 CVE-2023-21030 In Confirmation of keystore_cli_v2.cpp, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privil… Android Patch available Fix from $1,9502023-03-24 HIGH 7.8 CVE-2023-21034 In multiple functions of SensorService.cpp, there is a possible access of accurate sensor data due to a permissions bypass. This could lead to local … Android Patch available Fix from $1,9502023-03-24 HIGH 7.8 CVE-2023-21035 In multiple functions of BackupHelper.java, there is a possible way for an app to get permissions previously granted to another app with the same pac… Android Patch available Fix from $1,9502023-03-24 HIGH 7.8 CVE-2023-21040 In buildCommand of bluetooth_ccc.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of… Android Mitigation only Fix from $1,9502023-03-24 HIGH 7.8 CVE-2023-21041 In append_to_params of param_util.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of… Android Mitigation only Fix from $1,9502023-03-24 HIGH 7.5 CVE-2023-21027 In multiple functions of PasspointXmlUtils.java, there is a possible authentication misconfiguration due to a logic error in the code. This could lea… Android Mitigation only Fix from $1,9502023-03-24 HIGH 7.5 CVE-2023-21028 In parse_printerAttributes of ipphelper.c, there is a possible out of bounds read due to a string without a null-terminator. This could lead to remot… Android Patch available Fix from $1,9502023-03-24 MEDIUM 6.7 CVE-2023-21018 In UnwindingWorker of unwinding.cc, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege… Android Patch available Fix from $1,6002023-03-24 MEDIUM 6.7 CVE-2023-21020 In registerSignalHandlers of main.c, there is a possible local arbitrary code execution due to a use after free. This could lead to local escalation … Android Patch available Fix from $1,6002023-03-24 MEDIUM 6.7 CVE-2023-21038 In cs40l2x_cp_trigger_queue_show of cs40l2x.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation o… Android Mitigation only Fix from $1,6002023-03-24 MEDIUM 5.5 CVE-2023-21016 In AccountTypePreference of AccountTypePreference.java, there is a possible way to mislead the user about accounts installed on the device due to imp… Android Patch available Fix from $1,6002023-03-24 MEDIUM 5.5 CVE-2023-21019 In ih264e_init_proc_ctxt of ih264e_process.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local informat… Android Patch available Fix from $1,6002023-03-24 MEDIUM 5.5 CVE-2023-21026 In updateInputChannel of WindowManagerService.java, there is a possible way to set a touchable region beyond its own SurfaceControl due to a logic er… Android Patch available Fix from $1,6002023-03-24 MEDIUM 5.5 CVE-2023-21029 In register of UidObserverController.java, there is a missing permission check. This could lead to local information disclosure of app usage with Use… Android Patch available Fix from $1,6002023-03-24 MEDIUM 5.5 CVE-2023-21033 In addNetwork of WifiManager.java, there is a possible way to trigger a persistent DoS due to resource exhaustion. This could lead to local denial of… Android Patch available Fix from $1,6002023-03-24 MEDIUM 5.5 CVE-2023-21036 In BitmapExport.java, there is a possible failure to truncate images due to a logic error in the code.Product: AndroidVersions: Android kernelAndroid… Android No fix yet Fix from $1,6002023-03-24 HIGH 7.8 CVE-2023-20993 In multiple functions of SnoozeHelper.java, there is a possible failure to persist settings due to an uncaught exception. This could lead to local es… Android Mitigation only Fix from $1,9502023-03-24 HIGH 7.8 CVE-2023-20995 In captureImage of CustomizedSensor.cpp, there is a possible way to bypass the fingerprint unlock due to a logic error in the code. This could lead t… Android Mitigation only Fix from $1,9502023-03-24 HIGH 7.8 CVE-2023-21000 In MediaCodec.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional ex… Android Patch available Fix from $1,9502023-03-24 HIGH 7.8 CVE-2023-21001 In onContextItemSelected of NetworkProviderSettings.java, there is a possible way for users to change the Wi-Fi settings of other users due to a miss… Android Patch available Fix from $1,9502023-03-24 HIGH 7.8 CVE-2023-21002 In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This c… Android Mitigation only Fix from $1,9502023-03-24 HIGH 7.8 CVE-2023-21003 In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This c… Android Patch available Fix from $1,9502023-03-24 HIGH 7.8 CVE-2023-21004 In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This c… Android Mitigation only Fix from $1,9502023-03-24 HIGH 7.8 CVE-2023-21005 In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This c… Android Patch available Fix from $1,9502023-03-24 MEDIUM 6.7 CVE-2023-20994 In _ufdt_output_property_to_fdt of ufdt_convert.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local… Android Patch available Fix from $1,6002023-03-24 MEDIUM 5.5 CVE-2023-20996 In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial … Android Patch available Fix from $1,6002023-03-24 MEDIUM 5.5 CVE-2023-20997 In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial … Android Patch available Fix from $1,6002023-03-24 MEDIUM 5.5 CVE-2023-20998 In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial … Android Patch available Fix from $1,6002023-03-24 MEDIUM 5.5 CVE-2023-20999 In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial … Android Patch available Fix from $1,6002023-03-24 HIGH 7.8 CVE-2023-20975 In getAvailabilityStatus of EnableContentCapturePreferenceController.java, there is a possible way to bypass DISALLOW_CONTENT_CAPTURE due to a permis… Android Mitigation only Fix from $1,9502023-03-24