CVE-2023-30864

In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

CVE-2023-30864

In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

CVE-2023-30864

Publicly available documents provided here do not contain concrete technical details (affected version, component specifics, exploit info). Technical specifics are not publicly disclosed in the supplied sources. Monitor for updates.

CVE-2023-30863

In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

CVE-2023-30863

In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

CVE-2023-30863

CVE-2023-30863 concerns the Connectivity Service and cites a missing permission check as the root cause. The vulnerability enables local escalation of privilege with no additional execution privileges, matching CVSS 3.1 metrics: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (base score 7.8). The connected ...

PT-2023-23019 · Unknown · Connectivity Service

Name of the Vulnerable Software and Affected Versions: Connectivity Service affected versions not specified Description: The issue is related to a possible missing permission check in the Connectivity Service. This could lead to local escalation of privilege with no additional execution privilege...

PT-2023-23018 · Unknown · Connectivity Service

Name of the Vulnerable Software and Affected Versions: Connectivity Service affected versions not specified Description: The issue is related to a possible missing permission check in the Connectivity Service. This could lead to local escalation of privilege with no additional execution privilege...

CVE-2022-20341

In ConnectivityService, there is a possible bypass of network permissions due to a missing permission check. This could lead to local information disclosure of tethering interfaces with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2021-0994

In requestRouteToHostAddress of ConnectivityService.java, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interactio...

Huawei HarmonyOS 安全漏洞

A security vulnerability exists in the Huawei HarmonyOS Wearables, an electronic watch from Huawei of China Huawei, and the Huawei HarmonyOS HwConnectivityExService service. An attacker could exploit the vulnerability to cause the system to crash and reboot...

The vulnerability of the updateCapabilities function (ConnectivityService.java) in the Android operating system, related to a lack of implementation for thread management, allows a perpetrator to access confidential information.

The vulnerability of the updateCapabilities function in ConnectivityService.java on the Android operating system is related to a lack of implementation for thread management. Exploiting this vulnerability could allow an attacker who operates remotely to gain access to confidential information...

CVE-2021-0517

In updateCapabilities of ConnectivityService.java, there is a possible incorrect network state determination due to a logic error in the code. This could lead to biasing of networking tasks to occur on non-VPN networks, which could lead to remote information disclosure, with no additional executi...

Google Android 信息泄露漏洞

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in Google Android ConnectivityService.java. An attacker can exploit this vulnerability to obtain sensitive informatio...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. A security vulnerability exists in Google Android/Pixel that stems from a lack of privilege checking in callCallbackForRequest in ConnectivityService.java, which could bypass privileges...

CVE-2020-27041

In showProvisioningNotification of ConnectivityService.java, there is an unsafe PendingIntent. This could lead to local information disclosure of notification data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0454

In callCallbackForRequest of ConnectivityService.java, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure of the current SSID with User execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-0454

In callCallbackForRequest of ConnectivityService.java, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure of the current SSID with User execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2019-20773

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software. Unprivileged applications can execute shell commands via the connectivity service. The LG ID is LVE-SMP-190008 August 2019...

Command injection

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software. Unprivileged applications can execute shell commands via the connectivity service. The LG ID is LVE-SMP-190008 August 2019...