Browse CVEs

MEDIUM 6.7 CVE-2024-20106 In m4u, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002024-11-04 MEDIUM 6.7 CVE-2024-20108 In atci, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System executio… Android Mitigation only Fix from $1,6002024-11-04 MEDIUM 6.7 CVE-2024-20109 In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002024-11-04 MEDIUM 6.7 CVE-2024-20110 In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002024-11-04 MEDIUM 6.7 CVE-2024-20111 In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002024-11-04 MEDIUM 6.7 CVE-2024-20113 In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002024-11-04 MEDIUM 6.7 CVE-2024-20114 In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002024-11-04 MEDIUM 6.7 CVE-2024-20115 In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002024-11-04 HIGH 8.8 CVE-2024-10487 Out of bounds write in Dawn in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to perform out of bounds memory access via a crafted HT… Chrome 130.0.6723.92+ Fix from $1,9502024-10-29 HIGH 8.8 CVE-2024-10488 Use after free in WebRTC in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 130.0.6723.92+ Fix from $1,9502024-10-29 HIGH 8.1 CVE-2024-47023 there is a possible man-in-the-middle attack due to a logic error in the code. This could lead to remote escalation of privilege with no additional e… Android No fix yet Fix from $1,9502024-10-25 HIGH 7.8 CVE-2024-47024 In vring_size of external/headers/include/virtio/virtio_ring.h, there is a possible out of bounds write due to an integer overflow. This could lead t… Android Mitigation only Fix from $1,9502024-10-25 HIGH 7.8 CVE-2024-47027 In sm_mem_compat_get_vmm_obj of lib/sm/shared_mem.c, there is a possible arbitrary physical memory access due to improper input validation. This coul… Android Mitigation only Fix from $1,9502024-10-25 HIGH 7.8 CVE-2024-47033 In lwis_allocator_free of lwis_allocator.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of pri… Android Mitigation only Fix from $1,9502024-10-25 HIGH 7.8 CVE-2024-47035 In vring_init of external/headers/include/virtio/virtio_ring.h, there is a possible out of bounds write due to a logic error in the code. This could … Android Mitigation only Fix from $1,9502024-10-25 HIGH 7.8 CVE-2024-47041 In valid_address of syscall.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privil… Android Mitigation only Fix from $1,9502024-10-25 HIGH 7.4 CVE-2024-47031 Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-329163861. Android Mitigation only Fix from $1,9502024-10-25 MEDIUM 5.5 CVE-2024-47025 In ppmp_protect_buf of drm_fw.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information di… Android Mitigation only Fix from $1,6002024-10-25 MEDIUM 5.5 CVE-2024-47026 In gsc_gsa_rescue of gsc_gsa.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclos… Android Mitigation only Fix from $1,6002024-10-25 MEDIUM 5.5 CVE-2024-47029 In TrustySharedMemoryManager::GetSharedMemory of ondevice/trusty/trusty_shared_memory_manager.cc, there is a possible out of bounds read due to an in… Android Mitigation only Fix from $1,6002024-10-25 MEDIUM 5.5 CVE-2024-47034 there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution pr… Android Mitigation only Fix from $1,6002024-10-25 MEDIUM 5.1 CVE-2024-47030 Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-315191818. Android Mitigation only Fix from $1,6002024-10-25 HIGH 8.8 CVE-2024-47014 Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-330537292. Android Mitigation only Fix from $1,9502024-10-25 HIGH 7.8 CVE-2024-47012 In mm_GetMobileIdIndexForNsUpdate of mm_GmmPduCodec.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to l… Android Mitigation only Fix from $1,9502024-10-25 HIGH 7.8 CVE-2024-47013 In pmucal_rae_handle_seq_int of flexpmu_cal_rae.c, there is a possible arbitrary write due to uninitialized data. This could lead to local escalation… Android Mitigation only Fix from $1,9502024-10-25 HIGH 7.8 CVE-2024-47016 there is a possible privilege escalation due to an insecure default value. This could lead to local escalation of privilege with no additional execut… Android No fix yet Fix from $1,9502024-10-25 HIGH 7.8 CVE-2024-47017 In ufshc_scsi_cmd of ufs.c, there is a possible stack variable use after free due to a use after free. This could lead to local escalation of privile… Android Mitigation only Fix from $1,9502024-10-25 HIGH 7.5 CVE-2024-44100 Android before 2024-10-05 on Google Pixel devices allows information disclosure in the modem component, A-299774545. Android 2024-10-05+ Fix from $1,9502024-10-25 HIGH 7.5 CVE-2024-44101 there is a possible Null Pointer Dereference (modem crash) due to improper input validation. This could lead to remote denial of service with no addi… Android Mitigation only Fix from $1,9502024-10-25 HIGH 7.5 CVE-2024-47020 Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ABL component, A-331966488. Android 2024-10-05+ Fix from $1,9502024-10-25