UBUNTU-CVE-2022-20499

In validateForCommonR1andR2 of PasspointConfiguration.java, uncaught errors in parsing stored configs could lead to local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L...

UBUNTU-CVE-2023-20910

In add of WifiNetworkSuggestionsManager.java, there is a possible way to trigger permanent DoS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2023-17844 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible out of bounds read in the sms ExtractCbLanguage function of sms CellBroadcast.c due to a missing bounds check. This could lead to remote information disclosure with no additional...

CVE-2022-20542

In parseParamsBlob of types.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

CVE-2023-21040

In buildCommand of bluetoothccc.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

PT-2023-17766 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible out of bounds read in the GetNextSourceDataPacket function of bta av co.cc due to a missing bounds check. This could lead to local information disclosure with no...

PT-2023-17755 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to Android-13 Description: The issue is related to a missing bounds check in multiple functions of p2p iface.cpp, which could lead to an out of bounds read. This might result in local information disclosure, requiring...

PT-2023-17762 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In the btm ble add resolving list entry complete function of btm ble privacy.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure wi...

PT-2023-17785 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to improper input validation, which can trigger a persistent reboot loop. This can lead to a local denial of service, requiring User execution privileges. No user interaction is...

PT-2023-17792 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: A permission bypass issue exists in the getAvailabilityStatus of several Transcode Permission Controllers due to a missing permission check. This could lead to local escalation of...

PT-2023-17786 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to improper input validation, which can trigger a persistent reboot loop. This can lead to a local denial of service, requiring User execution privileges. No user interaction is...

PT-2023-17860 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue allows for local escalation of privilege due to a missing warning to the user, enabling the device to boot with a hidden debug policy. This can be exploited by preparing the...

PT-2023-17743 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: In the onPrepareOptionsMenu method of AppInfoDashboardFragment.java, there is a possible way to bypass admin restrictions and uninstall applications for all users due to a missing...

PT-2023-17852 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: In the sms GetTpPiIe function of sms PduCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed...

PT-2023-17788 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to improper input validation, which can trigger a persistent reboot loop. This can lead to a local denial of service and requires User execution privileges. Notably, user interacti...

PT-2023-17769 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible out of bounds read in the btu ble rc param req evt function of btu hcif.cc due to a missing bounds check. This could lead to local information disclosure, requiring...

PT-2023-14131 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue is caused by a logic error in the code of ffa mrd prot in shared mem.c. This could lead to local information disclosure with no additional execution privileges...

CVE-2023-20995

In captureImage of CustomizedSensor.cpp, there is a possible way to bypass the fingerprint unlock due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

PT-2023-17787 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to improper input validation, which can trigger a persistent reboot loop. This can lead to a local denial of service, requiring User execution privileges. No user interaction is...

PT-2023-17818 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In the parse printerAttributes function of ipphelper.c, there is a possible out of bounds read due to a string without a null-terminator. This could lead to remote information disclosure with no...