Android

CVEs (8,720)

CVE	Vendor / Product	Sev	Risk	CVSS	Published	Description
CVE-2024-20117	Mediatek vdec	Med	0.29	4.4	Nov 4, 2024	In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09008925; Issue ID: MSV-1681.
CVE-2024-20112	Mediatek isp	Med	0.29	4.4	Nov 4, 2024	In isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09071481; Issue ID: MSV-1730.
CVE-2024-47028	Google Android	Med	0.29	4.4	Oct 25, 2024	In ffu_flash_pack of ffu.c, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-20097	Mediatek vdec	Med	0.29	4.4	Oct 7, 2024	In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID: MSV-1630.
CVE-2024-20096	Mediatek m4u	Med	0.29	4.4	Oct 7, 2024	In m4u, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08996900; Issue ID: MSV-1635.
CVE-2024-20095	Mediatek m4u	Med	0.29	4.4	Oct 7, 2024	In m4u, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08996894; Issue ID: MSV-1636.
CVE-2024-20093	Mediatek vdec	Med	0.29	4.4	Oct 7, 2024	In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID: MSV-1699.
CVE-2024-20091	Mediatek vdec	Med	0.29	4.4	Oct 7, 2024	In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID: MSV-1701.
CVE-2024-44096	Google Android	Med	0.29	4.4	Sep 13, 2024	there is a possible arbitrary read due to an insecure default value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-20088	Mediatek keyInstall	Med	0.29	4.4	Sep 2, 2024	In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08932099; Issue ID: MSV-1543.
CVE-2024-20085	Mediatek power	Med	0.29	4.4	Sep 2, 2024	In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08944204; Issue ID: MSV-1560.
CVE-2024-20084	Mediatek power	Med	0.29	4.4	Sep 2, 2024	In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08944210; Issue ID: MSV-1561.
CVE-2024-20058	Mediatek keyInstall	Med	0.29	4.4	May 6, 2024	In keyInstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08580204; Issue ID: ALPS08580204.
CVE-2024-23658	UNISOC camera driver	Med	0.29	4.4	Apr 8, 2024	In camera driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed
CVE-2023-52536	UNISOC faceid service	Med	0.29	4.4	Apr 8, 2024	In faceid service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2023-52535	UNISOC vsp driver	Med	0.29	4.4	Apr 8, 2024	In vsp driver, there is a possible missing verification incorrect input. This could lead to local denial of service with no additional execution privileges needed
CVE-2023-52350	UNISOC ril service	Med	0.29	4.4	Apr 8, 2024	In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2023-52349	UNISOC ril service	Med	0.29	4.4	Apr 8, 2024	In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2023-52348	UNISOC ril service	Med	0.29	4.4	Apr 8, 2024	In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2023-52346	UNISOC modem driver	Med	0.29	4.4	Apr 8, 2024	In modem driver, there is a possible system crash due to improper input validation. This could lead to local information disclosure with System execution privileges needed

CVE-2024-20117MedNov 4, 2024
Mediatek
vdec
risk 0.29cvss 4.4epss 0.00
In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09008925; Issue ID: MSV-1681.
CVE-2024-20112MedNov 4, 2024
Mediatek
isp
risk 0.29cvss 4.4epss 0.00
In isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09071481; Issue ID: MSV-1730.
CVE-2024-47028MedOct 25, 2024
Google
Android
risk 0.29cvss 4.4epss 0.00
In ffu_flash_pack of ffu.c, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-20097MedOct 7, 2024
Mediatek
vdec
risk 0.29cvss 4.4epss 0.00
In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID: MSV-1630.
CVE-2024-20096MedOct 7, 2024
Mediatek
m4u
risk 0.29cvss 4.4epss 0.00
In m4u, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08996900; Issue ID: MSV-1635.
CVE-2024-20095MedOct 7, 2024
Mediatek
m4u
risk 0.29cvss 4.4epss 0.00
In m4u, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08996894; Issue ID: MSV-1636.
CVE-2024-20093MedOct 7, 2024
Mediatek
vdec
risk 0.29cvss 4.4epss 0.00
In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID: MSV-1699.
CVE-2024-20091MedOct 7, 2024
Mediatek
vdec
risk 0.29cvss 4.4epss 0.00
In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID: MSV-1701.
CVE-2024-44096MedSep 13, 2024
Google
Android
risk 0.29cvss 4.4epss 0.00
there is a possible arbitrary read due to an insecure default value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-20088MedSep 2, 2024
Mediatek
keyInstall
risk 0.29cvss 4.4epss 0.00
In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08932099; Issue ID: MSV-1543.
CVE-2024-20085MedSep 2, 2024
Mediatek
power
risk 0.29cvss 4.4epss 0.00
In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08944204; Issue ID: MSV-1560.
CVE-2024-20084MedSep 2, 2024
Mediatek
power
risk 0.29cvss 4.4epss 0.00
In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08944210; Issue ID: MSV-1561.
CVE-2024-20058MedMay 6, 2024
Mediatek
keyInstall
risk 0.29cvss 4.4epss 0.00
In keyInstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08580204; Issue ID: ALPS08580204.
CVE-2024-23658MedApr 8, 2024
UNISOC
camera driver
risk 0.29cvss 4.4epss 0.00
In camera driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed
CVE-2023-52536MedApr 8, 2024
UNISOC
faceid service
risk 0.29cvss 4.4epss 0.00
In faceid service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2023-52535MedApr 8, 2024
UNISOC
vsp driver
risk 0.29cvss 4.4epss 0.00
In vsp driver, there is a possible missing verification incorrect input. This could lead to local denial of service with no additional execution privileges needed
CVE-2023-52350MedApr 8, 2024
UNISOC
ril service
risk 0.29cvss 4.4epss 0.00
In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2023-52349MedApr 8, 2024
UNISOC
ril service
risk 0.29cvss 4.4epss 0.00
In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2023-52348MedApr 8, 2024
UNISOC
ril service
risk 0.29cvss 4.4epss 0.00
In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2023-52346MedApr 8, 2024
UNISOC
modem driver
risk 0.29cvss 4.4epss 0.00
In modem driver, there is a possible system crash due to improper input validation. This could lead to local information disclosure with System execution privileges needed

Page 387 of 436