PT-2024-15319 · Google +6 · Android +2

Name of the Vulnerable Software and Affected Versions: No specific software name or version is mentioned in the provided descriptions. Description: The issue is related to a logic error in the code of installExistingPackageAsUser in InstallPackageHelper.java. This error can lead to a carrier...

PT-2024-18519 · Nvram · Nvram

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to a missing bounds check in nvram, which could lead to local information disclosure. System execution privileges are needed for exploitation, and user interaction is...

PT-2024-18517 · Mediatek +1 · Mt6739 +19

Name of the Vulnerable Software and Affected Versions: In da affected versions not specified Description: The issue is related to a possible out of bounds write due to lack of validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is...

CVE-2023-40113

In multiple locations, there is a possible way for apps to access cross-user message data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2024-15309 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a possible missing seal due to a heap buffer overflow in multiple functions of ashmem-dev.cpp. This could lead to local escalation of privilege with no additional...

CVE-2024-20015

In telephony, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08441419; Issue ID: ALPS08441419...

PT-2024-18489 · Tvapi · Tvapi

Name of the Vulnerable Software and Affected Versions: TVAPI affected versions not specified Description: The issue is related to a possible out of bounds write in TVAPI due to a missing bounds check. This could lead to local escalation of privilege, with System execution privileges needed. User...

PT-2024-12359 · Mediatek +1 · Mt6762 +1

Name of the Vulnerable Software and Affected Versions: In battery affected versions not specified Description: The issue is related to a possible memory corruption due to a missing bounds check in the battery. This could lead to local escalation of privilege with System execution privileges neede...

CVE-2023-45773

In multiple functions of btmblegap.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-32863

In display drm, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07326314; Issue ID: ALPS07326314...

PT-2023-24085 · Mediatek +1 · Mt6761 +1

Name of the Vulnerable Software and Affected Versions: No specific software name or affected versions are mentioned in the provided descriptions. Description: In display, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with...

CVE-2023-21389

In Settings, there is a possible bypass of profile owner restrictions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21374

In System UI, there is a possible factory reset protection bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21339

In Minikin, there is a possible way to trigger ANR by showing a malicious message due to resource exhaustion. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21313

In Core, there is a possible way to forward calls without user knowledge due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2023-18167 · Bluetooth · Bluetooth

Name of the Vulnerable Software and Affected Versions: Bluetooth affected versions not specified Description: The issue is related to a use after free condition in Bluetooth, which can cause memory corruption. This could potentially lead to local escalation of privilege when connecting to a...

PT-2023-18161 · Unknown · Whitechapel

Name of the Vulnerable Software and Affected Versions: Whitechapel affected versions not specified Description: The issue in Whitechapel involves a possible out of bounds read due to memory corruption, which could lead to local information disclosure without requiring additional execution...

PT-2023-27289 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software name or versions are mentioned in the provided descriptions. Description: The issue is related to a confused deputy in multiple functions, potentially allowing an attacker to view another user's images. This could lead to...

PT-2023-5067 · Microsoft · Azure Kubernetes Service

Name of the Vulnerable Software and Affected Versions: Microsoft Azure Kubernetes Service affected versions not specified Description: The issue is related to insufficient access controls in the Microsoft Azure Kubernetes Service, which can be exploited by a remote attacker to elevate their...

CVE-2023-20836

In camsys, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07505629; Issue ID: ALPS07505629...