Product:

Android

(Google)
Repositories https://github.com/torvalds/linux
#Vulnerabilities 6923
Date Id Summary Products Score Patch Annotated
2023-07-12 CVE-2023-33879 In music service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. Android 3.3
2023-07-12 CVE-2023-33880 In music service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. Android 3.3
2023-07-13 CVE-2021-0948 The PVRSRVBridgeGetMultiCoreInfo ioctl in the PowerVR kernel driver can return uninitialized kernel memory to user space. The contents of this memory could contain sensitive information. Android 5.5
2023-07-13 CVE-2023-21262 In startInput of AudioPolicyInterfaceImpl.cpp, there is a possible way of erroneously displaying the microphone privacy indicator due to a race condition. This could lead to false user expectations. User interaction is needed for exploitation. Android 3.1
2023-07-13 CVE-2023-21257 In updateSettingsInternalLI of InstallPackageHelper.java, there is a possible way to sideload an app in the work profile due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Android 7.8
2023-07-13 CVE-2023-21399 there is a possible way to bypass cryptographic assurances due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Android 7.8
2023-07-13 CVE-2023-35693 In incfs_kill_sb of fs/incfs/vfs.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Android 6.7
2023-07-13 CVE-2023-35691 there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed. User interaction is not needed for exploitation. Android 7.2
2023-07-13 CVE-2023-35694 In DMPixelLogger_ProcessDmCommand of DMPixelLogger.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Android 7.5
2023-07-13 CVE-2023-21260 In notification access permission dialog box, malicious application can embedded a very long service label that overflow the original user prompt and possibly contains mis-leading information to be appeared as a system message for user confirmation. Android 5.5