Product:

Android

(Google)
Repositories https://github.com/torvalds/linux
#Vulnerabilities 6927
Date Id Summary Products Score Patch Annotated
2023-08-14 CVE-2023-21269 In startActivityInner of ActivityStarter.java, there is a possible way to launch an activity into PiP mode from the background due to BAL bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Android 7.8
2023-08-14 CVE-2023-21272 In readFrom of Uri.java, there is a possible bad URI permission grant due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Android 7.8
2023-12-08 CVE-2023-48398 In ProtocolNetAcBarringInfo::ProtocolNetAcBarringInfo() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation. Android 7.5
2023-09-04 CVE-2023-20832 In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08013530. Android, Yocto, Openwrt, Rdk\-B 6.7
2023-09-04 CVE-2023-38464 In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges Android 7.8
2023-09-04 CVE-2023-38460 In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges Android 7.8
2023-09-04 CVE-2023-32811 In connectivity system driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07929848; Issue ID: ALPS07929848. Android, Yocto, Iot_yocto 6.7
2023-09-04 CVE-2023-20849 In imgsys_cmdq, there is a possible use after free due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07340433; Issue ID: ALPS07340350. Android, Linux_kernel, Yocto, Iot_yocto 6.5
2023-09-04 CVE-2023-20850 In imgsys_cmdq, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07340433; Issue ID: ALPS07340381. Android, Linux_kernel, Yocto, Iot_yocto 6.5
2024-09-27 CVE-2024-39431 In UMTS RLC driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed. Android 4.5