Browse CVEs

HIGH 7.8 CVE-2024-34726 In PVRSRV_MMap of pvr_bridge_k.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation … Android Mitigation only Fix from $1,9502024-07-09 HIGH 7.0 CVE-2024-34724 In _UnrefAndMaybeDestroy of pmr.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of privi… Android Mitigation only Fix from $1,9502024-07-09 HIGH 7.0 CVE-2024-34725 In DevmemIntUnexportCtx of devicemem_server.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalat… Android Mitigation only Fix from $1,9502024-07-09 MEDIUM 5.5 CVE-2024-34721 In ensureFileColumns of MediaProvider.java, there is a possible disclosure of files owned by another user due to improper input validation. This coul… Android Patch available Fix from $1,6002024-07-09 HIGH 7.8 CVE-2024-31315 In multiple functions of ManagedServices.java, there is a possible way to hide an app with notification access in the Device & app notifications sett… Android Patch available Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-31316 In onResult of AccountManagerService.java, there is a possible way to perform an arbitrary background activity launch due to parcel mismatch. This co… Android Patch available Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-31317 In multiple functions of ZygoteProcess.java, there is a possible way to achieve code execution as any app via WRITE_SECURE_SETTINGS due to unsafe des… Android Patch available Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-31318 In CompanionDeviceManagerService.java, there is a possible way to pair a companion device without user acceptance due to a missing permission check. … Android Patch available Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-31319 In updateNotificationChannelFromPrivilegedListener of NotificationManagerService.java, there is a possible cross-user data leak due to a confused dep… Android Patch available Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-31320 In setSkipPrompt of AssociationRequest.java , there is a possible way to establish a companion device association without any confirmation due to CDM… Android Patch available Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-31322 In updateServicesLocked of AccessibilityManagerService.java, there is a possible way for an app to be hidden from the Setting while retaining Accessi… Android Patch available Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-31323 In onCreate of multiple files, there is a possible way to trick the user into granting health permissions due to tapjacking. This could lead to local… Android Patch available Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-31325 In multiple locations, there is a possible way to reveal images across users data due to a logic error in the code. This could lead to local escalati… Android Patch available Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-31326 In multiple locations, there is a possible way in which policy migration code will never be executed due to a logic error in the code. This could lea… Android Patch available Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-31332 In multiple locations, there is a possible way to bypass a restriction on adding new Wi-Fi connections due to a missing permission check. This could … Android Patch available Fix from $1,9502024-07-09 HIGH 7.3 CVE-2024-31324 In hide of WindowState.java, there is a possible way to bypass tapjacking/overlay protection by launching the activity in portrait mode first and the… Android Patch available Fix from $1,9502024-07-09 HIGH 7.3 CVE-2024-31331 In setMimeGroup of PackageManagerService.java, there is a possible way to hide the service from Settings due to a logic error in the code. This could… Android Patch available Fix from $1,9502024-07-09 HIGH 7.0 CVE-2024-31327 In multiple functions of MessageQueueBase.h, there is a possible out of bounds write due to a race condition. This could lead to local escalation of … Android Patch available Fix from $1,9502024-07-09 MEDIUM 5.5 CVE-2024-31314 In multiple functions of ShortcutService.java, there is a possible persistent DOS due to resource exhaustion. This could lead to local denial of serv… Android Patch available Fix from $1,6002024-07-09 HIGH 7.8 CVE-2024-23697 In RGXCreateHWRTData_aux of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of p… Android Mitigation only Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-23698 In RGXFWChangeOSidPriority of rgxfwutils.c, there is a possible arbitrary code execution due to a missing bounds check. This could lead to local esca… Android Mitigation only Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-23711 In DevmemXIntUnreserveRange of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to … Android Mitigation only Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-31310 In newServiceInfoLocked of AutofillManagerServiceImpl.java, there is a possible way to hide an enabled Autofill service app in the Autofill service s… Android Patch available Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-31311 In increment_annotation_count of stats_event.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escal… Android Patch available Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-31313 In availableToWriteBytes of MessageQueueBase.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local es… Android Patch available Fix from $1,9502024-07-09 MEDIUM 5.5 CVE-2024-31312 In multiple locations, there is a possible information leak due to a missing permission check. This could lead to local information disclosure exposi… Android Patch available Fix from $1,6002024-07-09 HIGH 7.8 CVE-2024-23695 In CacheOpPMRExec of cache_km.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege… Android Mitigation only Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-23696 In RGXCreateZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of pri… Android Mitigation only Fix from $1,9502024-07-09 HIGH 7.8 CVE-2023-21113 In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no addit… Android Patch available Fix from $1,9502024-07-09 HIGH 7.8 CVE-2023-21114 In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no addit… Android Patch available Fix from $1,9502024-07-09