287 matches found
The vulnerability of the WorkSource function in Android operating systems, which allows a hacker to increase their privileges
The vulnerability of the WorkSource function in Android operating systems is related to errors in the certificate validation process. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2023-20931
In avdtscbhdlwritereq of avdtscbact.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...
CVE-2023-21030
In Confirmation of keystorecliv2.cpp, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...
CVE-2023-20962
In getSliceEndItem of MediaVolumePreferenceController.java, there is a possible way to start foreground activity from the background due to an unsafe PendingIntent. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...
CVE-2023-21024
In maybeFinish of FallbackHome.java, there is a possible delay of lockdown screen due to logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...
CVE-2023-20943
In clearApplicationUserData of ActivityManagerService.java, there is a possible way to remove system files due to a path traversal error. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...
CVE-2023-20921
In onPackageRemoved of AccessibilityManagerService.java, there is a possibility to automatically grant accessibility services due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from the American company Google. Google Android OS has a security vulnerability. An attacker exploits the vulnerability to cause local privilege escalation in BLE...
CVE-2022-42529
Product: AndroidVersions: Android kernelAndroid ID: A-235292841References: N/A...
CVE-2022-20524
In compose of Vibrator.cpp, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...
CVE-2022-20498
In fdtpathoffsetnamelen of fdtro.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11...
CVE-2022-20454
In fdtnexttag of fdt.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12...
PT-2022-14528 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue allows for a sandbox escape in the Settings, potentially bypassing factory reset protections. This could lead to local escalation of privilege if an attacker has physical access to the device...
PT-2022-14564 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to an insecure SEpolicy configuration in Android, which could lead to local information disclosure of network topography. No additional execution privileges are needed for...
PT-2022-14582 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-12L Description: The issue is related to improper input validation in the shouldAllowFgsWhileInUsePermissionLocked function of ActiveServices.java. This could allow starting a foreground service fro...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google, Inc. Google Android suffers from a security vulnerability that originates from a vulnerability in the PowerVR-GPU component of Imagination Technologies...
CVE-2022-20141
In ipcheckmcrcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
Google Android 安全漏洞
Google Android is a Linux-based open-source operating system from the U.S. company Google Google. Google Android has an information leakage vulnerability that can be exploited by attackers to obtain sensitive information...