PT-2023-18171 · Unknown · Activity Manager

Name of the Vulnerable Software and Affected Versions: Activity Manager affected versions not specified Description: The issue is caused by a logic error in the code, allowing a possible background activity launch. This could lead to local escalation of privilege, with User execution privileges...

PT-2023-18100 · Unknown · Package Installer

Name of the Vulnerable Software and Affected Versions: Package Installer affected versions not specified Description: The issue allows an attacker to determine whether an app is installed without query permissions, due to side channel information disclosure. This could lead to local escalation of...

PT-2023-18103 · Unknown · Permission Manager

Name of the Vulnerable Software and Affected Versions: Permission Manager affected versions not specified Description: The issue allows an attacker to determine whether an app is installed without query permissions, due to side channel information disclosure. This could lead to local information...

PT-2023-18086 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: In ContentService, there is a possible way to read installed sync content providers due to side channel information disclosure. This could lead to local information disclosure with no...

PT-2023-18119 · Unknown · Activitystarter

Name of the Vulnerable Software and Affected Versions: ActivityStarter affected versions not specified Description: The issue is related to an unsafe PendingIntent in ActivityStarter, which could lead to a background activity launch. This might result in local escalation of privilege without...

PT-2023-18131 · Unknown · Libaudioclient

Name of the Vulnerable Software and Affected Versions: libaudioclient affected versions not specified Description: In libaudioclient, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed...

PT-2023-18172 · Unknown · Setupwizard

Name of the Vulnerable Software and Affected Versions: Setup Wizard affected versions not specified Description: The issue is related to an insecure default value in the Setup Wizard, which could allow saving a WiFi network. This could lead to local escalation of privilege with no additional...

CVE-2023-21338: Observable Discrepancy

In Input Method, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitatio...

PT-2023-18115 · Minikin · Minikin

Name of the Vulnerable Software and Affected Versions: Minikin affected versions not specified Description: The issue in Minikin allows for a possible way to trigger ANR by showing a malicious message due to resource exhaustion, leading to remote denial of service with no additional execution...

PT-2023-18149 · Systemui · Systemui

Name of the Vulnerable Software and Affected Versions: System UI affected versions not specified Description: The issue is related to a logic error in the code of System UI, which could allow a factory reset protection bypass. This bypass could lead to local escalation of privilege without...

PT-2023-18168 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is related to a missing permission check in the Settings application, allowing a user to change the SIM card. This could lead to local escalation of privilege without requirin...

PT-2023-18099 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to side channel information disclosure in Activity Manager, allowing an attacker to determine whether an app is installed without query permissions. This could lead to...

PT-2023-18116 · Telecom · Telecom

Name of the Vulnerable Software and Affected Versions: Telecomm affected versions not specified Description: The issue in Telecomm allows for local information disclosure due to a missing permission check, which could provide access to the call state. This can be exploited without requiring...

PT-2023-18107 · Unknown · Inputmethod

Name of the Vulnerable Software and Affected Versions: InputMethod affected versions not specified Description: The issue allows an attacker to determine whether an app is installed without query permissions, due to side channel information disclosure. This could lead to local information...

PT-2023-18165 · Sim · Sim

Name of the Vulnerable Software and Affected Versions: Sim affected versions not specified Description: The issue is related to a permission bypass that allows evading mobile preference restrictions. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2023-21300: Observable Discrepancy

In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitati...

PT-2023-18081 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to side channel information disclosure in ActivityManagerService, allowing an attacker to determine whether an app is installed without query permissions. This could le...

PT-2023-18124 · Unknown · Window Manager

Name of the Vulnerable Software and Affected Versions: Window Manager affected versions not specified Description: The issue allows an attacker to determine whether an app is installed without query permissions, due to side channel information disclosure. This could lead to local information...

CVE-2023-21348: Observable Discrepancy

In Window Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitati...

PT-2023-18113 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions affected versions not specified Description: In InputMethod, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local...