Browse CVEs

MEDIUM 6.7 CVE-2023-20621 In tinysys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execu… Android No fix yet Fix from $1,6002023-03-07 MEDIUM 6.7 CVE-2023-20624 In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execut… Android Mitigation only Fix from $1,6002023-03-07 MEDIUM 6.7 CVE-2023-20626 In msdc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execu… Android Mitigation only Fix from $1,6002023-03-07 MEDIUM 6.7 CVE-2023-20627 In pqframework, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System e… Android Mitigation only Fix from $1,6002023-03-07 MEDIUM 6.7 CVE-2023-20628 In thermal, there is a possible memory corruption due to an uncaught exception. This could lead to local escalation of privilege with System executio… Android Mitigation only Fix from $1,6002023-03-07 MEDIUM 6.7 CVE-2023-20630 In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002023-03-07 MEDIUM 6.7 CVE-2023-20632 In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002023-03-07 MEDIUM 6.7 CVE-2023-20633 In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002023-03-07 MEDIUM 6.7 CVE-2023-20634 In widevine, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System e… Android Mitigation only Fix from $1,6002023-03-07 MEDIUM 6.4 CVE-2023-20623 In ion, there is a possible escalation of privilege due to improper locking. This could lead to local escalation of privilege with no additional exec… Android Mitigation only Fix from $1,6002023-03-07 MEDIUM 6.4 CVE-2023-20625 In adsp, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution privileges n… Android Mitigation only Fix from $1,6002023-03-07 HIGH 7.3 CVE-2023-0460 The YouTube Embedded 1.2 SDK binds to a service within the YouTube Main App. After binding, a remote context is created with the flags Context.CONTEX… Youtube Android Player Api after 1.2.2 Fix from $1,9502023-03-01 CRITICAL 9.8 CVE-2023-20946 In onStart of BluetoothSwitchPreferenceController.java, there is a possible permission bypass due to a confused deputy. This could lead to remote esc… Android Patch available Fix from $2,3002023-02-28 HIGH 7.8 CVE-2023-20945 In phNciNfc_MfCreateXchgDataHdr of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead t… Android Patch available Fix from $1,9502023-02-28 HIGH 7.5 CVE-2023-20948 In dropFramesUntilIframe of AAVCAssembler.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote inform… Android Patch available Fix from $1,9502023-02-28 HIGH 7.8 CVE-2023-20933 In several functions of MediaCodec.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of pri… Android Patch available Fix from $1,9502023-02-28 HIGH 7.8 CVE-2023-20934 In resolveAttributionSource of ServiceUtilities.cpp, there is a possible way to disable the microphone privacy indicator due to a permissions bypass.… Android Patch available Fix from $1,9502023-02-28 HIGH 7.8 CVE-2023-20937 In several functions of the Android Linux kernel, there is a possible way to corrupt memory due to a use after free. This could lead to local escalat… Android Patch available Fix from $1,9502023-02-28 HIGH 7.8 CVE-2023-20938 In binder_transaction_buffer_release of binder.c, there is a possible use after free due to improper input validation. This could lead to local escal… Android Patch available Fix from $1,9502023-02-28 HIGH 7.8 CVE-2023-20939 In multiple functions of looper_backed_event_loop.cpp, there is a possible way to corrupt memory due to improper locking. This could lead to local es… Android Patch available Fix from $1,9502023-02-28 HIGH 7.8 CVE-2023-20940 In the Android operating system, there is a possible way to replace a boot partition due to improperly used crypto. This could lead to local escalati… Android Patch available Fix from $1,9502023-02-28 HIGH 7.8 CVE-2023-20943 In clearApplicationUserData of ActivityManagerService.java, there is a possible way to remove system files due to a path traversal error. This could … Android Patch available Fix from $1,9502023-02-28 HIGH 7.8 CVE-2023-20944 In run of ChooseTypeAndAccountActivity.java, there is a possible escalation of privilege due to unsafe deserialization. This could lead to local esca… Android Patch available Fix from $1,9502023-02-28 MEDIUM 6.7 CVE-2022-20551 In createTrack of AudioFlinger.cpp, there is a possible way to record audio without a privacy indicator due to a logic error in the code. This could … Android Mitigation only Fix from $1,6002023-02-28 MEDIUM 5.5 CVE-2022-20455 In addAutomaticZenRule of ZenModeHelper.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local d… Android Mitigation only Fix from $1,6002023-02-28 MEDIUM 5.5 CVE-2022-20481 In multiple files, there is a possible way to preserve WiFi settings due to residual data after a reset. This could lead to local information disclos… Android Mitigation only Fix from $1,6002023-02-28 HIGH 8.8 CVE-2023-0927 Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allowed a remote attacker who had compromised the renderer pro… Chrome 110.0.5481.177+ Fix from $1,9502023-02-22 HIGH 8.8 CVE-2023-0928 Use after free in SwiftShader in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted… Chrome 110.0.5481.177+ Fix from $1,9502023-02-22 HIGH 8.8 CVE-2023-0929 Use after free in Vulkan in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… Chrome 110.0.5481.177+ Fix from $1,9502023-02-22 HIGH 8.8 CVE-2023-0930 Heap buffer overflow in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted… Chrome 110.0.5481.177+ Fix from $1,9502023-02-22