Android
by Google
CVEs (8,720)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-32814 | Med | 0.29 | 4.4 | 0.00 | Sep 4, 2023 | In gnss service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08031947; Issue ID: ALPS08031947. | ||
| CVE-2023-32813 | Med | 0.29 | 4.4 | 0.00 | Sep 4, 2023 | In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017370; Issue ID: ALPS08017370. | ||
| CVE-2023-32810 | Med | 0.29 | 4.4 | 0.00 | Sep 4, 2023 | In bluetooth driver, there is a possible out of bounds read due to improper input validation. This could lead to local information leak with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07867212; Issue ID: ALPS07867212. | ||
| CVE-2023-32809 | Med | 0.29 | 4.4 | 0.00 | Sep 4, 2023 | In bluetooth driver, there is a possible read and write access to registers due to improper access control of register interface. This could lead to local leak of sensitive information with System execution privileges needed. User interaction is not needed for exploitation.… | ||
| CVE-2023-32808 | Med | 0.29 | 4.4 | 0.00 | Sep 4, 2023 | In bluetooth driver, there is a possible read and write access to registers due to improper access control of register interface. This could lead to local leak of sensitive information with System execution privileges needed. User interaction is not needed for exploitation.… | ||
| CVE-2023-32807 | Med | 0.29 | 4.4 | 0.00 | Sep 4, 2023 | In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588360; Issue ID: ALPS07588360. | ||
| CVE-2023-20836 | Med | 0.29 | 4.4 | 0.00 | Sep 4, 2023 | In camsys, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07505629; Issue ID: ALPS07505629. | ||
| CVE-2023-20833 | Med | 0.29 | 4.4 | 0.00 | Sep 4, 2023 | In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017756; Issue ID: ALPS08017764. | ||
| CVE-2023-20823 | Med | 0.29 | 4.4 | 0.00 | Sep 4, 2023 | In cmdq, there is a possible out of bounds read due to an incorrect status check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08021592; Issue ID: ALPS08021592. | ||
| CVE-2023-38468 | Med | 0.29 | 4.4 | 0.00 | Sep 4, 2023 | In urild service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed | ||
| CVE-2023-38467 | Med | 0.29 | 4.4 | 0.00 | Sep 4, 2023 | In urild service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed | ||
| CVE-2022-48453 | Med | 0.29 | 4.4 | 0.00 | Sep 4, 2023 | In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed | ||
| CVE-2022-48452 | Med | 0.29 | 4.4 | 0.00 | Sep 4, 2023 | In Ifaa service, there is a possible missing permission check. This could lead to local denial of service with System execution privileges needed | ||
| CVE-2022-47353 | Med | 0.29 | 4.4 | 0.00 | Sep 4, 2023 | In vdsp device, there is a possible system crash due to improper input validation.This could lead to local denial of service with System execution privileges needed | ||
| CVE-2022-47352 | Med | 0.29 | 4.4 | 0.00 | Sep 4, 2023 | In camera driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed | ||
| CVE-2023-20818 | Med | 0.29 | 4.4 | 0.00 | Aug 7, 2023 | In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07460540; Issue ID: ALPS07460540. | ||
| CVE-2023-20813 | Med | 0.29 | 4.4 | 0.00 | Aug 7, 2023 | In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07453549; Issue ID: ALPS07453549. | ||
| CVE-2023-20812 | Med | 0.29 | 4.4 | 0.00 | Aug 7, 2023 | In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07944987; Issue ID: ALPS07944987. | ||
| CVE-2023-20810 | Med | 0.29 | 4.4 | 0.00 | Aug 7, 2023 | In IOMMU, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03692061; Issue ID: DTV03692061. | ||
| CVE-2023-20798 | Med | 0.29 | 4.4 | 0.00 | Aug 7, 2023 | In pda, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07147572; Issue ID: ALPS07421076. |
- risk 0.29cvss 4.4epss 0.00
In gnss service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08031947; Issue ID: ALPS08031947.
- risk 0.29cvss 4.4epss 0.00
In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017370; Issue ID: ALPS08017370.
- risk 0.29cvss 4.4epss 0.00
In bluetooth driver, there is a possible out of bounds read due to improper input validation. This could lead to local information leak with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07867212; Issue ID: ALPS07867212.
- risk 0.29cvss 4.4epss 0.00
In bluetooth driver, there is a possible read and write access to registers due to improper access control of register interface. This could lead to local leak of sensitive information with System execution privileges needed. User interaction is not needed for exploitation.…
- risk 0.29cvss 4.4epss 0.00
In bluetooth driver, there is a possible read and write access to registers due to improper access control of register interface. This could lead to local leak of sensitive information with System execution privileges needed. User interaction is not needed for exploitation.…
- risk 0.29cvss 4.4epss 0.00
In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588360; Issue ID: ALPS07588360.
- risk 0.29cvss 4.4epss 0.00
In camsys, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07505629; Issue ID: ALPS07505629.
- risk 0.29cvss 4.4epss 0.00
In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017756; Issue ID: ALPS08017764.
- risk 0.29cvss 4.4epss 0.00
In cmdq, there is a possible out of bounds read due to an incorrect status check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08021592; Issue ID: ALPS08021592.
- risk 0.29cvss 4.4epss 0.00
In urild service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
- risk 0.29cvss 4.4epss 0.00
In urild service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
- risk 0.29cvss 4.4epss 0.00
In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
- risk 0.29cvss 4.4epss 0.00
In Ifaa service, there is a possible missing permission check. This could lead to local denial of service with System execution privileges needed
- risk 0.29cvss 4.4epss 0.00
In vdsp device, there is a possible system crash due to improper input validation.This could lead to local denial of service with System execution privileges needed
- risk 0.29cvss 4.4epss 0.00
In camera driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
- risk 0.29cvss 4.4epss 0.00
In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07460540; Issue ID: ALPS07460540.
- risk 0.29cvss 4.4epss 0.00
In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07453549; Issue ID: ALPS07453549.
- risk 0.29cvss 4.4epss 0.00
In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07944987; Issue ID: ALPS07944987.
- risk 0.29cvss 4.4epss 0.00
In IOMMU, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03692061; Issue ID: DTV03692061.
- risk 0.29cvss 4.4epss 0.00
In pda, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07147572; Issue ID: ALPS07421076.
Page 391 of 436