CVE-2023-33907

In Contacts Service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges...

CVE-2023-33906

In Contacts Service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges...

PT-2023-24556 · Unknown · Contacts Service

Name of the Vulnerable Software and Affected Versions: Contacts Service affected versions not specified Description: The issue is related to a possible missing permission check in the Contacts Service. This could lead to local information disclosure with no additional execution privileges...

PT-2023-24558 · Unisoc (Shanghai) Technologies Co. +1 · Sc9832E/Sc9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a possible missing permission check in the ims service. This could lead to local information disclosure with no additional execution...

PT-2023-24563 · Unknown · Contacts Service

Name of the Vulnerable Software and Affected Versions: Contacts service affected versions not specified Description: The issue is related to a possible missing permission check in the Contacts service. This could lead to local information disclosure with no additional execution privileges...

PT-2023-5745 · Mediatek · Nvram

Name of the Vulnerable Software and Affected Versions: Nvram affected versions not specified Description: The issue is related to a missing bounds check in nvram, which could lead to a possible out of bounds write. This may result in local information disclosure, requiring System execution...

PT-2023-5708 · Unknown · Wlan Driver

Name of the Vulnerable Software and Affected Versions: WLAN driver affected versions not specified Description: The issue is related to a possible out of bounds write in the wlan driver due to improper input validation. This could lead to local information disclosure with System execution...

PT-2023-5713 · Mediatek · Mediatek Wlan Service

Name of the Vulnerable Software and Affected Versions: MediaTek WLAN service affected versions not specified Description: The issue is related to a possible out of bounds read in the wlan service due to improper input validation. This could lead to local information disclosure with System executi...

PT-2023-4284 · Mediatek · Keyinstall

Name of the Vulnerable Software and Affected Versions: keyinstall component of MediaTek microprogram software affected versions not specified Description: The issue is related to insufficient input validation in the keyinstall component, which can lead to information disclosure. Exploitation of...

ASB-A-269456018

In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-280797684

In multiple functions of StatusHints.java, there is a possible way to reveal images across users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

ASB-A-236688380

In openContentUri of ActivityManagerService.java, there is a possible way for a third party app to obtain restricted files due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-269455813

In parseInputs of ShimPreparedModel.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-271851153

In setMetadata of MediaSessionRecord.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21239

In visitUris of Notification.java, there is a possible way to leak image data across user boundaries due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21239

In visitUris of Notification.java, there is a possible way to leak image data across user boundaries due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21239

CVE-2023-21239 is in the Android Framework (Notification.java, visitUris) and enables local information disclosure via a confused deputy, leaking image data across user boundaries with no extra privileges and no user interaction required. Public details describe the root cause and affected AOSP v...

CVE-2023-21239

In visitUris of Notification.java, there is a possible way to leak image data across user boundaries due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21238

In visitUris of RemoteViews.java, there is a possible leak of images between users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-33894

In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...