Google Android Security Vulnerability

Google Android is a Linux-based open source operating system from Google Inc. in the United States. Google Android suffers from a security vulnerability that originates in killBackgroundProcesses in ActivityManagerService.java, which can be exploited to evade Google Play protections via privilege...

PT-2023-24052 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a possible out of bounds write due to a permissions bypass in video. This could lead to local escalation of privilege with System execution privileges needed. User...

PT-2023-5677

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Android operating system's Bluetooth stack, specifically within the build read multi rsp function of gatt sr.cc. This issue is due to insufficient input validation, leadi...

PT-2023-24049 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: There is a possible information disclosure due to a missing bounds check in the display. This could lead to local information disclosure with System execution privileges needed. User...

CVE-2023-31014

NVIDIA GeForce Now for Android contains a vulnerability in the game launcher component, where a malicious application on the same device can process the implicit intent meant for the streamer component. A successful exploit of this vulnerability may lead to limited information disclosure, denial ...

CVE-2023-42468

The com.cutestudio.colordialer application through 2.1.8-2 for Android allows a remote attacker to initiate phone calls without user consent, because of improper export of the com.cutestudio.dialer.activities.DialerActivity component. A third-party application without any permissions can craft an...

CVE-2023-42471

The wave.ai.browser application through 1.0.35 for Android allows a remote attacker to execute arbitrary JavaScript code via a crafted intent. It contains a manifest entry that exports the wave.ai.browser.ui.splash.SplashScreen activity. This activity uses a WebView component to display web conte...

CVE-2023-40040

An issue was discovered in the MyCrops HiGrade "THC Testing & Cannabi" application 1.0.337 for Android. A remote attacker can start the camera feed via the com.cordovaplugincamerapreview.CameraActivity component in some situations. NOTE: this is only exploitable on Android versions that lack...

PT-2023-25253 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a missing permission check in multiple files, allowing the import of a contact from another user. This could lead to local...

PT-2023-25258 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a path traversal error in the computeValuesFromData function of FileUtils.java. This error could allow inserting files into other apps' external private directories,...

PT-2023-25267 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to the hasPermissionForActivity function in PackageManagerHelper.java, where a confused deputy could allow starting arbitrary components. This could lead to local...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in Google Android due to an insecure PendingIntent in the createQuickShareAction of SaveImageInBackgroundTask.java, which can be exploited by an attacker to elevate privileges...

Google Android 资源管理错误漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a code execution vulnerability that is caused by use after release in gattprocessprepwritersp in gattcl.cc. An attacker can exploit this vulnerability to execute arbitrary code on the system...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability caused by a logic error in the code in loadMediaResumptionControls of MediaResumeListener.kt. An attacker can exploit this vulnerability to obtain sensitiv...

Google Android SQL Injection Vulnerability

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

CVE-2023-30718

Improper export of android application components vulnerability in WifiApAutoHotspotEnablingActivity prior to SMR Sep-2023 Release 1 allows local attacker to change a Auto Hotspot setting...

The vulnerability of the data-usage-summary.java component in the Android operating system, related to permission handling errors, allows attackers to escalate their privileges.

The vulnerability of the data-usage-summary.java component in the Android operating system is related to permission handling errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2023-0238

Due to lack of a security policy, the WARP Mobile Client =6.29 for Android was susceptible to this vulnerability which allowed a malicious app installed on a victim's device to exploit a peculiarity in an Android function, wherein under certain conditions, the malicious app could dictate the task...

PT-2023-27498 · Unknown · Skylark App For Android +1

Name of the Vulnerable Software and Affected Versions: Skylark App for Android versions 6.2.13 and earlier Skylark App for iOS versions 6.2.13 and earlier Description: The issue is related to improper authorization in the handler for a custom URL scheme, allowing an attacker to lead a user to...