9947 matches found
CVE-2024-53840
there is a possible biometric bypass due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-53842
In ccSendCcImsInfoIndMsg of ccMmConManagement.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-53837
In prepareresponse of lwisperiodicio.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-53838
In Exynosparsinguserdataregistereditutt35 of VendorVideoAPI.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-53840
Google Android devices are susceptible to a biometric bypass vulnerability with an unusual root cause. This flaw can lead to a local escalation of privilege (EoP) without requiring additional execution privileges or user interaction. The vulnerability specifically affects the FPS subcomponent on ...
CVE-2024-53839
In GetCellInfoList of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User Interaction is not needed for exploitation...
CVE-2024-53842
The Android operating system on Pixel phones is vulnerable to a critical out-of-bounds write (CWE-787) within the cc_SendCcImsInfoIndMsg function of the cc_MmConManagement.c file. The flaw is caused by a missing bounds check , which could allow a remote attacker to execute arbitrary code without ...
CVE-2024-53835
there is a possible biometric bypass due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-53834
The Google Android operating system is vulnerable to an out-of-bounds read in the sms_DisplayHexDumpOfPrivacyBuffer function of the sms_Utilities.c file. This flaw is caused by an incorrect bounds check , which could allow an attacker to perform remote information disclosure without requiring add...
CVE-2024-53835
there is a possible biometric bypass due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-53834
In smsDisplayHexDumpOfPrivacyBuffer of smsUtilities.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-47032
Google Android contains a heap buffer overflow vulnerability within the construct_transaction_from_cmd function of the lwis_ioctl.c file. This flaw allows for an out-of-bounds write , which could lead to a local escalation of privilege (EoP) without requiring additional execution privileges or us...
CVE-2024-11624
there is a possible to add apps to bypass VPN due to Undeclared Permission . This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-11624
Google Android suffers from an Elevation of Privilege (EoP) vulnerability in the VPN subcomponent. The root cause is an undeclared permission that allows an attacker to add applications to bypass a VPN. This can lead to a local escalation of privilege without requiring additional execution privil...
CVE-2024-43769
In isPackageDeviceAdmin of PackageManagerService.java, there is a possible edge case which could prevent the uninstallation of CloudDpc due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed...
CVE-2024-43764
In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to partially bypass lock screen. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-43762
In multiple locations, there is a possible way to avoid unbinding of a service from the system due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-43077
In DevmemValidateFlags of devicememserver.c , there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-43764
In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to partially bypass lock screen. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-43762
In multiple locations, there is a possible way to avoid unbinding of a service from the system due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...