Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. Google Android has a security vulnerability that can be exploited by an attacker to potentially cause the disclosure of local information with required system execution privileges...

PT-2021-2466

Name of the Vulnerable Software and Affected Versions Android kernel versions affected versions not specified Description The issue is related to a possible out of bounds write in the iaxxx core sensor change state function of iaxxx-module.c due to a missing bounds check. This could lead to local...

PT-2021-2480

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds write in the Citadel chip firmware due to a missing bounds check. This could lead to local escalation of privilege, with System execution privileges needed. User...

PT-2021-2500

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to the Titan M security module in Android operating systems and is caused by initialization errors. This could lead to local information disclosure with System execution privileges needed. No...

PT-2021-2472

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to the Titan M security module in Android operating systems and is caused by initialization errors. This could lead to local information disclosure with System execution privileges needed, allowi...

PT-2021-2459

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to an integer overflow in the FingerTipS touch screen driver, which could lead to a possible out of bounds read. This may result in local information disclosure, requiring System execution...

ASB-A-173516292

In bindServiceLocked of ActiveServices.java, there is a possible foreground service launch due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

CVE-2021-0405

In performance driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID:...

CVE-2021-0402

In jpeg, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05433311...

Information disclosure

In mobilelogd, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05457039...

Out-of-bounds

In jpeg, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05433311...

CVE-2021-0406

In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS0547141...

CVE-2021-0405: Out-of-bounds Write

In performance driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID:...

CVE-2021-0366: Concurrent Execution using Shared Resource with Improper Synchronization

In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05371580; Issue ID:...

PT-2021-13081

Name of the Vulnerable Software and Affected Versions: Android version Android-11 Description: The issue is related to improper input validation in mobile log d, which could lead to local information disclosure. System execution privileges are needed for exploitation, and user interaction is not...

MediaTek netdiag 信息泄露漏洞

MediaTek netdiag is an application chip from MediaTek China. Improved processing capabilities. A security vulnerability exists in MediaTek netdiag. The vulnerability stems from a lack of privilege checking and could lead to the disclosure of local information with required system execution...

CVE-2021-0406: Out-of-bounds Write

In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS0547141...

CVE-2021-0402: Out-of-bounds Write

In jpeg, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05433311...

CVE-2021-0367: Concurrent Execution using Shared Resource with Improper Synchronization

In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05371580; Issue ID:...

CVE-2021-0336

In onReceive of BluetoothPermissionRequest.java, there is a possible permissions bypass due to a mutable PendingIntent. This could lead to local escalation of privilege that bypasses a permission check, with User execution privileges needed. User interaction is not needed for exploitation.Product...