CVE-2023-20611

CVE-2023-20611 concerns a race-condition related use-after-free in the GPU component, leading to local escalation of privilege with SYSTEM privileges required and no user interaction. Patch ALPS07588678/ALPS07588678 is referenced. Multiple sources (NVD, Red Hat, CVE listings) corroborate the same...

ASB-A-243376549

In createTrack of AudioFlinger.cpp, there is a possible way to record audio without a privacy indicator due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

ASB-A-261367136

In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-20908

In several functions of SettingsState.java, there is a possible system crash loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11...

Google Android Elevation of Privilege Vulnerability (CNVD-2023-29379)

Google Android is a Linux-based open-source operating system from the U.S. company Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by attackers to cause a local privilege escalation without the need for additional execution privileges...

CVE-2022-44438

In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed...

CVE-2022-44439

In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed...

CVE-2022-44424

In music service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed...

CVE-2022-44436

In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed...

CVE-2022-39088

In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed...

CVE-2022-39087

In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed...

CVE-2022-39084

In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed...

CVE-2022-39085

In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed...

CVE-2022-39081

In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed...

CVE-2022-39081

In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed...

CVE-2022-39082

In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed...

CVE-2022-39083

In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed...

Design/Logic Flaw

In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed...

Design/Logic Flaw

In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed...

Design/Logic Flaw

In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed...