Google Android Code Execution Vulnerability (CNVD-2024-02677)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a code execution vulnerability that is caused by use after release in gattprocessprepwritersp in gattcl.cc. An attacker can exploit this vulnerability to execute arbitrary code on the system...

CVE-2023-35658

In gattprocessprepwritersp of gattcl.cc, there is a possible privilege escalation due to a use after free. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-35658

In gattprocessprepwritersp of gattcl.cc, there is a possible privilege escalation due to a use after free. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-35658

CVE-2023-35658 affects the Android Bluetooth stack (gatt_process_prep_write_rsp in gatt_cl.cc), where a use-after-free can cause privilege escalation and remote code execution without extra privileges or user interaction. The issue is described across multiple sources as a proximal code execution...

CVE-2023-35658

In gattprocessprepwritersp of gattcl.cc, there is a possible privilege escalation due to a use after free. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-20951

CVE-2023-20951 is an Android RCE issue caused by an out-of-bounds write in gatt_process_prep_write_rsp (gatt_cl.cc). The vulnerability affects Android 11–13 and can enable remote code execution with no privileges and no user interaction, per multiple sources. The Android Security Bulletin (March ...

CVE-2023-20951

In gattprocessprepwritersp of gattcl.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12...

CVE-2021-0918

CVE-2021-0918 affects Android 12 with a Bluetooth GATT vulnerability: in gatt_process_notification (gatt_cl.cc) an out-of-bounds write due to missing bounds check could enable remote code execution via a specially crafted Bluetooth transmission. Exploitation requires no user interaction and can o...