PT-2023-17809 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: A heap buffer overflow in the ih264e init proc ctxt function of ih264e process.c could lead to a possible out of bounds read, resulting in local information disclosure. This issue does...

PT-2023-17746 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In the read paint function of ttcolr.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges...

PT-2023-17804 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In multiple locations of p2p iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. Us...

CVE-2022-42500

In OEMOnRequest of sced.cpp, there is a possible shell command execution due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2023-20917

In onTargetSelected of ResolverActivity.java, there is a possible way to share a wrong file due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2023-21001

In onContextItemSelected of NetworkProviderSettings.java, there is a possible way for users to change the Wi-Fi settings of other users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not neede...

PT-2023-17775 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is related to a possible out of bounds read in the btm read link quality complete function of btm acl.cc due to a missing bounds check. This could lead to local information...

CVE-2023-21027

In multiple functions of PasspointXmlUtils.java, there is a possible authentication misconfiguration due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

PT-2023-17801 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to Android-13 Description: The issue is related to a possible out of bounds read in the p2p iface.cpp file due to a missing bounds check. This could lead to local information disclosure, with System execution privileges...

PT-2023-12657 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In the parseTrackFragmentRun function of MPEG4Extractor.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote escalation of privilege with no additional...

CVE-2023-21021

In isTargetSdkLessThanQOrPrivileged of WifiServiceImpl.java, there is a possible way for the guest user to change admin user network settings due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

The vulnerability of Google Chrome’s Autofill function for Android allows a hacker to gain unauthorized access to protected information.

The vulnerability of Google Chrome’s Autofill function for Android is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information through a specially created HTML page...

CVE-2023-24923

Microsoft OneDrive for Android Information Disclosure Vulnerability...

CVE-2023-24882 Microsoft OneDrive for Android Information Disclosure Vulnerability

...

CVE-2023-24923 Microsoft OneDrive for Android Information Disclosure Vulnerability

...

CVE-2023-27895 Information Disclosure vulnerability in SAP Authenticator for Android

SAP Authenticator for Android - version 1.3.0, allows the screen to be captured, if an authorized attacker installs a malicious app on the mobile device. The attacker could extract the currently views of the OTP and the secret OTP alphanumeric token during the token setup. On successful...

PT-2023-21402 · Sap · Sap Authenticator For Android

Name of the Vulnerable Software and Affected Versions: SAP Authenticator for Android version 1.3.0 Description: The issue allows an authorized attacker to capture the screen if a malicious app is installed on the mobile device. This could lead to the extraction of the currently viewed OTP and the...

Google Android elevation of privilege vulnerability (CNVD-2023-36109)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by attackers to elevate privileges...

Google Android Out-of-Bounds Read Vulnerability (CNVD-2023-36116)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an out-of-bounds read vulnerability that can be exploited by attackers to obtain sensitive information...

Google Android elevation of privilege vulnerability (CNVD-2023-36107)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by attackers to elevate privileges...