PT-2023-17753 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: The issue is related to a heap buffer overflow in the inflate function of inflate.c, which could lead to a local escalation of privilege without requiring additional execution...

PT-2023-17777 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In the btm ble write adv enable complete function of btm ble gap.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System...

PT-2023-17762 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In the btm ble add resolving list entry complete function of btm ble privacy.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure wi...

PT-2023-17787 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to improper input validation, which can trigger a persistent reboot loop. This can lead to a local denial of service, requiring User execution privileges. No user interaction is...

PT-2023-17788 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to improper input validation, which can trigger a persistent reboot loop. This can lead to a local denial of service and requires User execution privileges. Notably, user interacti...

PT-2023-17782 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: The issue is related to uncaught exceptions in multiple functions of SnoozeHelper.java, which could lead to a failure to persist settings. This might result in a local escalation of...

PT-2023-17764 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to improper input validation in the getConfirmationMessage function of DefaultAutofillPicker.java. This could potentially mislead the user into selecting a default autofill...

PT-2023-17743 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: In the onPrepareOptionsMenu method of AppInfoDashboardFragment.java, there is a possible way to bypass admin restrictions and uninstall applications for all users due to a missing...

PT-2023-17751 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-12 through Android-13 Description: The issue is related to a confused deputy in multiple functions of MediaSessionRecord.java, which could lead to a possible Intent rebroadcast. This might result in local denial of...

PT-2023-17741 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: The issue is related to a possible out of bounds write due to a missing bounds check in the A2DP BuildCodecHeaderSbc function of a2dp sbc.cc. This could lead to local information...

PT-2023-17761 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible out of bounds read in the btm create conn cancel complete function of btm sec.cc due to a missing bounds check. This could lead to local information disclosure,...

PT-2023-17770 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to Android-13 Description: The issue is related to a possible out of bounds read in the Bluetooth server due to a missing bounds check. This could lead to local information disclosure with System execution privileges...

PT-2023-17772 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In the ParseBqrLinkQualityEvt function of btif bqr.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution...

PT-2023-17786 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to improper input validation, which can trigger a persistent reboot loop. This can lead to a local denial of service, requiring User execution privileges. No user interaction is...

PT-2023-5119 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a buffer overflow read in the hostapd.cpp component of the Android operating system. This could lead to local information disclosure with System execution privileges needed, and...

PT-2023-17749 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-12L through Android-13 Description: The issue is related to improper input validation in the launchDeepLinkIntentToRight function of SettingsHomepageActivity.java. This could allow the launch of arbitrary activities,...

PT-2023-17760 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In the btm vendor specific evt function of btm devctl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution...

PT-2023-17696 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: A permissions bypass issue in the PermissionManagerService.java allows for silent granting of a permission after a Target SDK update. This could lead to local escalation of privilege...

PT-2023-12656 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-12 through Android-13 Description: The issue arises from uncaught errors in parsing stored configurations within the validateForCommonR1andR2 function of PasspointConfiguration.java. This can lead to a local persisten...

PT-2023-17795 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a missing permission check in the getAvailabilityStatus of several Transcode Permission Controllers. This could lead to a local escalation of privilege with no additional...