1178 matches found
CVE-2021-0991: Insertion of Sensitive Information into Log File
In OnMetadataChangedListener of AdvancedBluetoothDetailsHeaderController.java, there is a possible leak of Bluetooth MAC addresses due to log information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for...
PT-2021-13434
Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description In the setClientStateLocked function of SurfaceFlinger.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution...
PT-2021-13391 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-12 Description: The issue is related to a logic error in the code of DevicePolicyManagerService.java, specifically in the hasGrantedPolicy function. This error could lead to local information disclosure about the devi...
PT-2021-13397
Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a possible way to change the default payment app without user consent due to a tapjack overlay in the onCreate of PaymentDefaultDialog.java. This could lead to local escalation of...
CVE-2021-0953: Improper Preservation of Permissions
In setOnClickActivityIntent of SearchWidgetProvider.java, there is a possible way to access contacts and history bookmarks without permission due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for...
PT-2021-13389 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-12 Description: In the onNullBinding function of ManagedServices.java, there is a possible permission bypass due to an incorrectly unbound service. This could lead to local escalation of privilege with no additional...
The Android 12 Privacy Settings You Should Update Now
Google's new mobile operating system is finally rolling out to more phones. Here's what you need to tweak...
PT-2021-13349
Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a missing bounds check in the gatt process notification function of gatt cl.cc, which could lead to a possible out of bounds write. This might result in remote code execution over...
PT-2021-13353
Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description In the createOrUpdate function of Permission.java, there is a possible way to gain internal permissions due to a missing permission check. This could lead to local escalation of privilege with no...
PT-2021-13333
Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description In ActivityThread.java, there is a possible way to collide the content provider's authorities. This could lead to local escalation of privilege with no additional execution privileges needed. User...
PT-2021-13355
Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to an incorrect bounds check in the rw t4t sm detect ndef function of rw t4t.cc, which can lead to a possible out of bounds read. This could result in remote information disclosure d...
Google Android security vulnerabilities
Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA for short. an elevation of privilege vulnerability exists in the Framework component of Google Android version 12. No detailed vulnerability details are available...
ASB-A-188675581
In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
Information disclosure
In getAllSubInfoList of SubscriptionController.java, there is a possible way to retrieve a long term identifier without the correct permissions due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed...
CVE-2021-0643
CVE-2021-0643 describes an information disclosure vulnerability in Android where getAllSubInfoList in SubscriptionController.java could allow retrieval of a long-term identifier without proper permission checks. Affected products are Android 10–12. The issue is described across multiple sources (...
Android 12 Security Release NotesStay organized with collectionsSave and categorize content based on your preferences.
This Android Security Release Notes contains details of security vulnerabilities affecting Android devices which are addressed as part of Android 12. Android 12 devices with a security patch level of 2021-10-01 or later are protected against these issues Android 12, as released on AOSP, will have...
ASB-A-188913943
In ellipsize of Layout.java, there is a possible ANR due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation...