Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by attackers to gain elevated privileges...

PT-2023-15265 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to 13.0 Description: The issue is related to a missing bounds check in the camera driver, which could lead to a local denial of service. System execution privileges are needed to exploit this issue. Recommendations: For...

Apple Music 安全漏洞

Apple Music is a music software program from the American company Apple. Apple Music for Android version 4.2.0 suffers from a security vulnerability that stems from the fact that the application may be able to access contacts...

CVE-2023-38173 Microsoft Edge for Android Spoofing Vulnerability

...

The vulnerability of GPS HLOS driver for Android operating systems in Qualcomm embedded chips allows a hacker to trigger a service failure.

The vulnerability of the GPS HLOS driver for Android operating systems in Qualcomm embedded chips is related to the re-release of memory upon calling the cancellation registration function after registration. Exploiting this vulnerability can allow a hacker to cause a service failure...

CVE-2023-36888 Microsoft Edge for Android (Chromium-based) Tampering Vulnerability

...

PT-2023-25275 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is related to improper input validation in the getLocationCache function of GeoLocation.java. This could allow sending a mock location during an emergency call, leading to loc...

PT-2023-3843 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge for Android Chromium-based affected versions not specified Description: The issue is related to errors in the representation of information by the user interface. Exploitation of this issue may allow a remote attacker to perfor...

PT-2023-18035 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is related to a permissions bypass in multiple functions of OneTimePermissionUserManager.java. This could lead to local escalation of privilege with User execution privileges...

PT-2023-18031 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: A logic error in the showNextSecurityScreenOrFinish function of KeyguardSecurityContainerController.java allows access to the lock screen during device setup. This could lead to local...

Google Android elevation of privilege vulnerability (CNVD-2024-07854)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to an uncaught exception in ShortcutInfo.java's ShortcutInfo. An attacker can exploit this vulnerability to gain elevated privileges...

Google Android elevation of privilege vulnerability (CNVD-2023-60938)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain elevated privileges...

编号撤回

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability caused by an out-of-bounds read in ftopenfaceinternal of ftobjs.c, which can be exploited by an attacker to obtain sensitive information...

Google Android OS 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a denial of service vulnerability caused by a buffer overflow in validateForCommonR1 and R2 of PasspointConfiguration.java. An attacker can exploit this vulnerability to cause a denial of service...

CVE-2023-21219

there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroi...

PT-2023-17962 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a missing permission check in multiple methods of DataUsageList.java, which could allow learning about admin user's network activities. This could lead to local information...

PT-2023-4711 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a heap buffer overflow in the btm ble update inq result function of btm ble gap.cc, which could lead to a possible out of bounds read. This may result in local information...

CVE-2023-21175

In onCreate of DataUsageSummary.java, there is a possible method for a guest user to enable or disable mobile data due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

PT-2023-17961 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: A permissions bypass issue in multiple functions of WifiCallingSettings.java allows changing calling preferences for the admin user. This could lead to local escalation of privilege wit...

PT-2023-17963 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a permissions bypass in the isPageSearchEnabled function of BillingCycleSettings.java. This could allow a guest user to change data limits, potentially leading to local escalati...