1178 matches found
PT-2021-13424
Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a permission confusion in the snoozeNotification function of NotificationListenerService.java. This confusion is caused by a misleading user consent dialog, which could lead to...
PT-2021-13428
Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a side channel information disclosure in the onCreate method of RequestIgnoreBatteryOptimizations.java. This could allow an attacker to determine whether an app is installed witho...
PT-2021-13391 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-12 Description: The issue is related to a logic error in the code of DevicePolicyManagerService.java, specifically in the hasGrantedPolicy function. This error could lead to local information disclosure about the devi...
PT-2021-13389 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-12 Description: In the onNullBinding function of ManagedServices.java, there is a possible permission bypass due to an incorrectly unbound service. This could lead to local escalation of privilege with no additional...
CVE-2021-0991: Insertion of Sensitive Information into Log File
In OnMetadataChangedListener of AdvancedBluetoothDetailsHeaderController.java, there is a possible leak of Bluetooth MAC addresses due to log information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for...
CVE-2021-0953: Improper Preservation of Permissions
In setOnClickActivityIntent of SearchWidgetProvider.java, there is a possible way to access contacts and history bookmarks without permission due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for...
The Android 12 Privacy Settings You Should Update Now
Google's new mobile operating system is finally rolling out to more phones. Here's what you need to tweak...
ASB-A-188675581
In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2021-13353
Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description In the createOrUpdate function of Permission.java, there is a possible way to gain internal permissions due to a missing permission check. This could lead to local escalation of privilege with no...
PT-2021-13355
Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to an incorrect bounds check in the rw t4t sm detect ndef function of rw t4t.cc, which can lead to a possible out of bounds read. This could result in remote information disclosure d...
PT-2021-13349
Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a missing bounds check in the gatt process notification function of gatt cl.cc, which could lead to a possible out of bounds write. This might result in remote code execution over...
PT-2021-13333
Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description In ActivityThread.java, there is a possible way to collide the content provider's authorities. This could lead to local escalation of privilege with no additional execution privileges needed. User...
Google Android 安全漏洞
Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA for short. an elevation of privilege vulnerability exists in the Framework component of Google Android version 12. No detailed vulnerability details are available...
Information disclosure
In getAllSubInfoList of SubscriptionController.java, there is a possible way to retrieve a long term identifier without the correct permissions due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed...
CVE-2021-0643
CVE-2021-0643 describes an information disclosure vulnerability in Android where getAllSubInfoList in SubscriptionController.java could allow retrieval of a long-term identifier without proper permission checks. Affected products are Android 10–12. The issue is described across multiple sources (...
Android 12 Security Release NotesStay organized with collectionsSave and categorize content based on your preferences.
This Android Security Release Notes contains details of security vulnerabilities affecting Android devices which are addressed as part of Android 12. Android 12 devices with a security patch level of 2021-10-01 or later are protected against these issues Android 12, as released on AOSP, will have...
ASB-A-188913943
In ellipsize of Layout.java, there is a possible ANR due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation...