CVE-2021-0355

In kisd, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05425581...

CVE-2021-0356

CVE-2021-0356 affects Android 10 and Android 11 in the netdiag component, where improper input validation enables a local command-injection that can grant SYSTEM-level privileges without user interaction. The issue’s impact is described as local escalation with high confidentiality, integrity, an...

CVE-2021-0356

In netdiag, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05442014...

CVE-2021-0358

In netdiag, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05442022...

CVE-2021-0360

In netdiag, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS054420...

CVE-2021-0365

CVE-2021-0365 affects Android (Android-10 and Android-11) with a memory corruption issue in the display driver caused by a use-after-free. The vulnerability allows local escalation to System privileges without user interaction, as reported in multiple sources (NVD/Red Hat entry for CVE-2021-0365;...

Google Android System elevation of privilege vulnerability (CNVD-2021-13691)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the System component of Google Android 8.1, 9, 10, and 11. An attacker could exploit this vulnerability to cause a...

Google Android Media Framework Information Disclosure Vulnerability (CNVD-2021-13693)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the Media Framework component of Google Android 11. An attacker can exploit this vulnerability to obtain sensitive...

Google Android 缓冲区错误漏洞

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. A denial of service vulnerability exists in the Framework component of Google Android 10 and 11. An attacker can exploit this vulnerability to cause a denial of...

Google Android 资源管理错误漏洞

Google Android is a Linux-based open source operating system from the Google Open Handheld Alliance Google. A resource management error vulnerability exists in Google Android 11, which can be exploited by an attacker to perform a privileged local escalation of privileges...

Google Android Buffer Error Vulnerability

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. Google Android 11 suffers from a buffer error vulnerability that stems from incorrect kisd input validation, which may result in a read out-of-bounds condition. This could result in a loca...

Google Android 资源管理错误漏洞

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the Media Framework component of Google Android 11. An attacker can exploit this vulnerability to obtain sensitive...

Google Android 缓冲区错误漏洞

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. A remote code execution vulnerability exists in the Media Framework component of Google Android 8.1, 9, 10, and 11. An attacker can exploit this vulnerability to...

Google Android Command Injection Vulnerability

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. Google Android 11 suffers from a command injection vulnerability that stems from improper netdiag input validation leading to command injection. This could result in a local escalation of...

CVE-2020-27097

In checkGrantUriPermission of UriGrantsManagerService.java, there is a possible permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

CVE-2020-27098

In checkGrantUriPermission of UriGrantsManagerService.java, there is a possible way to access contacts due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-27097

In checkGrantUriPermission of UriGrantsManagerService.java, there is a possible permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

Design/Logic Flaw

In checkGrantUriPermission of UriGrantsManagerService.java, there is a possible permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

Design/Logic Flaw

In checkGrantUriPermission of UriGrantsManagerService.java, there is a possible way to access contacts due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-27098

In checkGrantUriPermission of UriGrantsManagerService.java, there is a possible way to access contacts due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...