PT-2023-17910 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: In the unflattenString8 function of Sensor.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no addition...

PT-2023-17566 · Google · Widevine

Name of the Vulnerable Software and Affected Versions: Widevine affected versions not specified Description: The issue is caused by a logic error, leading to a possible out of bounds write. This could result in local escalation of privilege, with System execution privileges needed. User interacti...

PT-2023-17898 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-12L through Android-13 Description: A missing permission check in the applySyncTransaction function of WindowOrganizer.java could lead to local information disclosure without requiring additional execution privileges...

CVE-2023-20703

In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07767853; Issue ID: ALPS07767853...

PT-2023-17570 · Apu · Apu

Name of the Vulnerable Software and Affected Versions: apu affected versions not specified Description: The issue is related to a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User...

PT-2023-17565 · Adsp · Adsp

Name of the Vulnerable Software and Affected Versions: adsp affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check in adsp. This could lead to local escalation of privilege, with System execution privileges needed. User...

CVE-2023-20706

In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07767860; Issue ID: ALPS07767860...

CVE-2023-20726

In mnld, there is a possible leak of GPS location due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07735968 / ALPS07884552 For MT6880, MT6890, MT6980,...

PT-2023-17572 · Ril · Ril

Name of the Vulnerable Software and Affected Versions: ril affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check in ril. This could lead to local escalation of privilege with System execution privileges needed. User...

CVE-2023-21109

In multiple places of AccessibilityService, there is a possible way to hide the app from the user due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

PT-2023-1005 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a memory corruption vulnerability due to a use after free in multiple functions of binder.c. This could lead to local escalation of privilege with no additional...

UBUNTU-CVE-2023-21102

In efirtasmwrapper of efi-rt-wrapper.S, there is a possible bypass of shadow stack protection due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions...

ASB-A-261701167

In CopyTensorContentsGeneric of WorkloadUtils.hpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2023-17902

Name of the Vulnerable Software and Affected Versions Android versions Android-11 through Android-13 Description The issue is related to a logic error in the code of AccessibilityService, which could allow an app to be hidden from the user. This could lead to local escalation of privilege with no...

ASB-A-267360595

In TBD of TBD, there is a possible local arbitrary code execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

In inflate of inflate.c there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-242544249

...

AZL-26243 CVE-2023-21100 affecting package nodejs18 for versions less than 18.20.2-2

In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L...

CVE-2023-21087

In PreferencesHelper.java, an uncaught exception may cause the device to get stuck in a boot loop. This could lead to local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12...

CVE-2023-20967

In avdtscbhdlpktnofrag of avdtscbact.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...

CVE-2023-21088

In deliverOnFlushComplete of LocationProviderManager.java, there is a possible way to bypass background activity launch restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed fo...