PT-2023-27267 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a missing check in the createDontSendToRestrictedAppsBundle function of PendingIntentUtils.java, which could lead to a possible background activity launch. This migh...

PT-2023-7530 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to 2023-12-05 security patch Description: The issue is related to the APEX module framework of AOSP, where improperly used crypto could lead to a malicious update of platform components. This could result in local...

SUSE CVE-2017-0393

A denial of service vulnerability in libvpx in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1,...

SUSE CVE-2017-0553

An elevation of privilege vulnerability in libnl could enable a local malicious application to execute arbitrary code within the context of the Wi-Fi service. This issue is rated as Moderate because it first requires compromising a privileged process and is mitigated by current platform...

PT-2023-27276 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the latest patchday Description: The issue is related to improper input validation, allowing for the bypass of user notification of foreground services. This could lead to local escalation of privilege with no...

PT-2023-22933 · Google · Android 11 +3

Name of the Vulnerable Software and Affected Versions: Camera versions prior to 11.0.16.43 in Android 11 Camera versions 12.0.07.53 through 12.1.03.10 in Android 12 Camera versions 13.0.01.43 through 13.1.00.83 in Android 13 Description: The issue allows a local attacker to access specific files...

PT-2023-4485 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome on Android versions prior to 116.0.5845.96 Description: The issue is related to an inappropriate implementation in the WebShare component of Google Chrome for Android, which can allow a remote attacker to spoof the contents of a...

PT-2023-18064 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is related to a confused deputy in the setMetadata function of MediaSessionRecord.java. This could lead to local information disclosure, allowing an attacker to view another...

Viatom Health ViHealth Security Breach

Viatom Health ViHealth is a health management application from Viatom Health. A security vulnerability exists in Viatom Health ViHealth for Android v.2.74.58 and earlier versions, which originates from a vulnerability that allows remote attackers to execute arbitrary code via the...

PT-2023-18041 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is caused by a logic error in the code of SettingsHomepageActivity.java, allowing the launch of arbitrary activities via Settings. This could lead to local escalation of...

PT-2023-18029 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is related to a buffer overflow in the validateForCommonR1andR2 function of PasspointConfiguration.java. This could lead to local denial of service with no additional executio...

Vulnerabilities fixed in Google Android and Samsung Mobile

Google has fixed vulnerabilities in Android. Also fixed vulnerabilities in closed-source parts of Android that are developed by third parties, such as Qualcomm, Arm, Imagination Technologies and Mediatek. The vulnerabilities potentially enable a malicious person to execute attacks that result in...

PT-2023-21674 · Brave · Brave Browser

Name of the Vulnerable Software and Affected Versions: Brave Browser Android versions prior to 1.52.117 Description: An Open Redirect issue exists where the built-in QR scanner in Brave Browser Android navigated to scanned URLs automatically without showing the URL first. Now, the user must...

PT-2023-17993 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to Android-13 Description: The issue is related to a possible out of bounds read due to a missing bounds check in multiple files. This could lead to local information disclosure in the wifi server, requiring System...

PT-2023-17983 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to Android-13 Description: The issue is related to a possible out of bounds read in the btm ble periodic adv sync tx rcvd function of btm ble gap.cc. This could lead to local information disclosure over Bluetooth if the...

PT-2023-17982 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible out of bounds read in the gatt dbg op name function of gatt utils.cc due to a missing bounds check. This could lead to local information disclosure in the Bluetooth...

PT-2023-17986 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is related to a possible out of bounds read in the remove sdp record function of btif sdp server.cc. This could lead to local information disclosure with no additional executi...

CVE-2023-21137

In several methods of JobStore.java, uncaught exceptions in job map parsing could lead to local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Androi...

CVE-2023-21141

In several functions of several files, there is a possible way to access developer mode traces due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2023-21129

In getFullScreenIntentDecision of NotificationInterruptStateProviderImpl.java, there is a possible activity launch while the app is in the background due to a BAL bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed fo...