PT-2023-17823 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In the ufdt output node to fdt function of ufdt convert.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution...

PT-2023-17742 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to the onPrimaryClipChanged function in ClipboardListener.java, where incorrect UI is shown before setup completion, potentially allowing bypass of factory reset protection. This...

PT-2023-17751 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-12 through Android-13 Description: The issue is related to a confused deputy in multiple functions of MediaSessionRecord.java, which could lead to a possible Intent rebroadcast. This might result in local denial of...

PT-2023-17761 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible out of bounds read in the btm create conn cancel complete function of btm sec.cc due to a missing bounds check. This could lead to local information disclosure,...

PT-2023-17770 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to Android-13 Description: The issue is related to a possible out of bounds read in the Bluetooth server due to a missing bounds check. This could lead to local information disclosure with System execution privileges...

PT-2023-17756 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to Android-13 Description: The issue is related to a possible out of bounds read in the p2p iface.cpp file due to a missing bounds check. This could lead to local information disclosure, with System execution privileges...

PT-2023-17772 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In the ParseBqrLinkQualityEvt function of btif bqr.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution...

PT-2023-17786 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to improper input validation, which can trigger a persistent reboot loop. This can lead to a local denial of service, requiring User execution privileges. No user interaction is...

PT-2023-17760 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In the btm vendor specific evt function of btm devctl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution...

PT-2023-17696 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: A permissions bypass issue in the PermissionManagerService.java allows for silent granting of a permission after a Target SDK update. This could lead to local escalation of privilege...

PT-2023-17795 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a missing permission check in the getAvailabilityStatus of several Transcode Permission Controllers. This could lead to a local escalation of privilege with no additional...

PT-2023-17774 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible out of bounds read in the btm ble clear resolving list complete function of btm ble privacy.cc due to a missing bounds check. This could lead to local information...

PT-2023-17780 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible out of bounds read in the btm ble process periodic adv sync lost evt function of ble scanner hci interface.cc. This could lead to local information disclosure,...

PT-2023-17773 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible out of bounds write in the BTA GATTS HandleValueIndication function of bta gatts api.cc due to improper input validation. This could lead to local escalation of...

PT-2023-17796 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to Android-13 Description: The issue is related to a missing bounds check in p2p iface.cpp, which could lead to a possible out of bounds read. This might result in local information disclosure, requiring System executio...

PT-2023-5119 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a buffer overflow read in the hostapd.cpp component of the Android operating system. This could lead to local information disclosure with System execution privileges needed, and...

PT-2023-17747 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue arises from missing permissions checks in the AddSupervisedUserActivity, allowing guest users to start the activity. This could lead to local escalation of privilege without requiring...

PT-2023-17771 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible out of bounds read due to a missing bounds check in the btm ble rand enc complete function of btm ble.cc or btm sec.cc. This could lead to local information disclosur...

PT-2023-17813 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible out of bounds write due to memory corruption in the BufferBlock of Suballocation.cpp. This could lead to local escalation of privilege with no additional execution...

PT-2023-17822 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android version Android-13 Description: In the setPowerMode function of HWC2.cpp, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with no additional execution privileges needed...