Android
by Google
CVEs (8,720)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-33912 | Med | 0.36 | 5.5 | 0.00 | Aug 7, 2023 | In Contacts service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges | ||
| CVE-2023-33911 | Med | 0.36 | 5.5 | 0.00 | Aug 7, 2023 | In vowifi service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges | ||
| CVE-2023-33910 | Med | 0.36 | 5.5 | 0.00 | Aug 7, 2023 | In Contacts Service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges | ||
| CVE-2023-33909 | Med | 0.36 | 5.5 | 0.00 | Aug 7, 2023 | In Contacts service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges | ||
| CVE-2023-33908 | Med | 0.36 | 5.5 | 0.00 | Aug 7, 2023 | In ims service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges | ||
| CVE-2023-33907 | Med | 0.36 | 5.5 | 0.00 | Aug 7, 2023 | In Contacts Service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges | ||
| CVE-2023-33906 | Med | 0.36 | 5.5 | 0.00 | Aug 7, 2023 | In Contacts Service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges | ||
| CVE-2023-21260 | Med | 0.36 | 5.5 | 0.00 | Jul 13, 2023 | In notification access permission dialog box, malicious application can embedded a very long service label that overflow the original user prompt and possibly contains mis-leading information to be appeared as a system message for user confirmation. | ||
| CVE-2023-21249 | Med | 0.36 | 5.5 | 0.00 | Jul 13, 2023 | In multiple functions of OneTimePermissionUserManager.java, there is a possible one-time permission retention due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. | ||
| CVE-2023-21243 | Med | 0.36 | 5.5 | 0.00 | Jul 13, 2023 | In validateForCommonR1andR2 of PasspointConfiguration.java, there is a possible way to inflate the size of a config file with no limits due to a buffer overflow. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed… | ||
| CVE-2023-21240 | Med | 0.36 | 5.5 | 0.00 | Jul 13, 2023 | In Policy of Policy.java, there is a possible boot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. | ||
| CVE-2023-21239 | Med | 0.36 | 5.5 | 0.00 | Jul 13, 2023 | In visitUris of Notification.java, there is a possible way to leak image data across user boundaries due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. | ||
| CVE-2023-21238 | Med | 0.36 | 5.5 | 0.00 | Jul 13, 2023 | In visitUris of RemoteViews.java, there is a possible leak of images between users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. | ||
| CVE-2023-20942 | Med | 0.36 | 5.5 | 0.00 | Jul 13, 2023 | In openMmapStream of AudioFlinger.cpp, there is a possible way to record audio without displaying the microphone privacy indicator due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction… | ||
| CVE-2021-0948 | Med | 0.36 | 5.5 | 0.00 | Jul 13, 2023 | The PVRSRVBridgeGetMultiCoreInfo ioctl in the PowerVR kernel driver can return uninitialized kernel memory to user space. The contents of this memory could contain sensitive information. | ||
| CVE-2023-33902 | Med | 0.36 | 5.5 | 0.00 | Jul 12, 2023 | In bluetooth service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. | ||
| CVE-2023-33901 | Med | 0.36 | 5.5 | 0.00 | Jul 12, 2023 | In bluetooth service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. | ||
| CVE-2023-33900 | Med | 0.36 | 5.5 | 0.00 | Jul 12, 2023 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. | ||
| CVE-2023-33899 | Med | 0.36 | 5.5 | 0.00 | Jul 12, 2023 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. | ||
| CVE-2023-33895 | Med | 0.36 | 5.5 | 0.00 | Jul 12, 2023 | In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
- risk 0.36cvss 5.5epss 0.00
In Contacts service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges
- risk 0.36cvss 5.5epss 0.00
In vowifi service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges
- risk 0.36cvss 5.5epss 0.00
In Contacts Service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges
- risk 0.36cvss 5.5epss 0.00
In Contacts service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges
- risk 0.36cvss 5.5epss 0.00
In ims service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges
- risk 0.36cvss 5.5epss 0.00
In Contacts Service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges
- risk 0.36cvss 5.5epss 0.00
In Contacts Service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges
- risk 0.36cvss 5.5epss 0.00
In notification access permission dialog box, malicious application can embedded a very long service label that overflow the original user prompt and possibly contains mis-leading information to be appeared as a system message for user confirmation.
- risk 0.36cvss 5.5epss 0.00
In multiple functions of OneTimePermissionUserManager.java, there is a possible one-time permission retention due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.
- risk 0.36cvss 5.5epss 0.00
In validateForCommonR1andR2 of PasspointConfiguration.java, there is a possible way to inflate the size of a config file with no limits due to a buffer overflow. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed…
- risk 0.36cvss 5.5epss 0.00
In Policy of Policy.java, there is a possible boot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
- risk 0.36cvss 5.5epss 0.00
In visitUris of Notification.java, there is a possible way to leak image data across user boundaries due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
- risk 0.36cvss 5.5epss 0.00
In visitUris of RemoteViews.java, there is a possible leak of images between users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
- risk 0.36cvss 5.5epss 0.00
In openMmapStream of AudioFlinger.cpp, there is a possible way to record audio without displaying the microphone privacy indicator due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction…
- risk 0.36cvss 5.5epss 0.00
The PVRSRVBridgeGetMultiCoreInfo ioctl in the PowerVR kernel driver can return uninitialized kernel memory to user space. The contents of this memory could contain sensitive information.
- risk 0.36cvss 5.5epss 0.00
In bluetooth service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
- risk 0.36cvss 5.5epss 0.00
In bluetooth service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
- risk 0.36cvss 5.5epss 0.00
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
- risk 0.36cvss 5.5epss 0.00
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
- risk 0.36cvss 5.5epss 0.00
In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Page 315 of 436