PT-2023-17913 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-12 Description: The issue is related to improper input validation in the onResume of AppManagementFragment.java. This could lead to local escalation of privilege with no additional execution...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android, which stems from incorrect input validation in CCCI, and can be exploited by an attacker to obtain local information. mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6873...

Google Android 竞争条件问题漏洞

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android, which originates from concurrent execution of shared resources in the TEEI driver using incorrect synchronization contention condition. MT6879, MT6885, MT6893, MT6895,...

MediaTek imgsensor 缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek imgsensor, which stems from a lack of bounds checking, and may result in out-of-bounds writes, which can be exploited by an attacker to cause a local privilege...

MediaTek netdiag 后置链接漏洞

MediaTek netdiag is an application chip from MediaTek China. Improved processing capabilities. A security vulnerability exists in the MediaTek component netdiag, which can be exploited by attackers to cause a local privilege escalation. The following products and versions are affected: chips,...

CVE-2021-39666

In extract of MediaMetricsItem.h, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...

CVE-2021-39620

In ipcSetDataReference of Parcel.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...

CVE-2021-0956

In NfcTag::discoverTechnologies activation of NfcTag.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additionalSystem execution privileges needed. User interaction is not needed for exploitation.Product:...