CVE-2023-21211

In multiple files, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262235998...

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel that stems from a heap buffer overflow in BuildSetTcsFci of the protocolmiscbuilder.cpp file, which may result in out-of-bounds reads...

CVE-2023-21066

In cdCodeMsg of cdcodec.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2023-21158

In encode of miscdata.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2023-21158

In encode of miscdata.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2023-21180

In xmlParseTryOrFinish of parser.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID...

CVE-2023-21151

In the Google BMS kernel module, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2023-21160

In BuildSetTcsFci of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

PT-2023-17950 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: In the encode of wlandata.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no...

PT-2023-18010 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a heap buffer overflow in the ss ProcessReturnResultComponent function of ss MmConManagement.c, which could lead to a possible out of bounds read. This might result in remote information...

CVE-2023-21181

In btmbleupdateinqresult of btmblegap.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

CVE-2023-21188

In btmbleupdateinqresult of btmblegap.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that stems from a heap buffer overflow in the Google BMS kernel, which may result in out-of-bounds writes...

CVE-2023-21211

In multiple files, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262235998...

PT-2023-17858 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a heap buffer overflow in the cd CodeMsg function of cd codec.c, which could lead to remote code execution without requiring additional execution privileges. User interaction is not necessar...

PT-2023-17951 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a heap buffer overflow in the encode function of miscdata.cpp, which could lead to a possible out of bounds read. This might result in local information disclosure, requiring System executio...

CVE-2023-21224

CVE-2023-21224 affects the Android kernel, specifically the ss_ProcessReturnResultComponent function in ss_MmConManagement.c. The vulnerability is a heap-buffer-overflow–induced out-of-bounds read that could lead to remote information disclosure without extra privileges or user interaction. Publi...

CVE-2023-21180

This CVE (CVE-2023-21180) affects Android 13. The issue is a heap buffer overflow in xmlParseTryOrFinish within parser.c, causing an out-of-bounds read. This can lead to remote information disclosure without exploit privileges and without user interaction. The publicly described mitigation refere...

CVE-2023-21066

CVE-2023-21066 describes a heap buffer overflow in the Android kernel, specifically in the cd_CodeMsg function of cd_codec.c. This causes an out-of-bounds write that could enable remote code execution with no privileges and no user interaction required. The vulnerability is documented across mult...

CVE-2023-21157

CVE-2023-21157 involves a heap buffer overflow in the Android kernel component wlandata.cpp, causing an out-of-bounds write that can lead to local privilege escalation with system-level privileges. The issue is triggered without user interaction. Affected software is Android kernel (wlandata.cpp)...