Android@12.0 Security Vulnerabilities and Issues — Page 37 of Android@12.0 CVE List

3.3CVSS3.8AI score0.00025EPSS

CVE-2023-33880

In music service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

CVE-2023-33886

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

CVE-2023-33899

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

CVE-2023-33901

In bluetooth service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

CVE•added 2023/11/01 10:15 a.m.•26 views

CVE-2023-42652

In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed

5.5CVSS5.2AI score0.0004EPSS

CVE•added 2023/12/04 1:15 a.m.•26 views

CVE-2023-42699

In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

5.5CVSS5.3AI score0.00012EPSS

CVE•added 2024/01/18 3:15 a.m.•26 views

CVE-2023-48347

In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additional execution privileges needed

5.5CVSS5.4AI score0.00012EPSS

CVE•added 2021/12/15 7:15 p.m.•25 views

CVE-2021-0977

In phNxpNHal_DtaUpdate of phNxpNciHal_dta.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Andro...

6.7CVSS6.7AI score0.00015EPSS

CVE•added 2021/12/15 7:15 p.m.•25 views

CVE-2021-0996

In nfaHciCallback of HciEventManager.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure over NFC with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Andro...

4.5CVSS4.2AI score0.00028EPSS

CVE•added 2023/11/01 10:15 a.m.•25 views

CVE-2022-48460

In setting service, there is a possible undefined behavior due to incorrect error handling. This could lead to local denial of service with no additional execution privileges needed

5.5CVSS5.5AI score0.00035EPSS

4.4CVSS4.8AI score0.0001EPSS

CVE-2023-20758

In cmdq, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07636133; Issue ID: ALPS07636130.

6.7CVSS6.7AI score0.0002EPSS

CVE-2023-20767

In pqframework, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629585; Issue ID: ALPS07629584.

6.7CVSS6.7AI score0.00025EPSS

CVE-2023-20772

In vow, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07441796; Issue ID: ALPS07441796.

6.7CVSS6.6AI score0.00027EPSS

CVE-2023-20774

In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07292228; Issue ID: ALPS07292228.

CVE•added 2023/08/07 4:15 a.m.•25 views

CVE-2023-20814

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07453560; Issue ID: ALPS07453560.

6.7CVSS6.7AI score0.00015EPSS

CVE•added 2023/07/12 9:15 a.m.•25 views

CVE-2023-33893

In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

CVE•added 2023/07/12 9:15 a.m.•25 views

CVE-2023-33902

In bluetooth service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

5.5CVSS5.2AI score0.00033EPSS

CVE•added 2023/12/04 1:15 a.m.•25 views

CVE-2023-42731

In Gnss service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

4.4CVSS4.7AI score0.0002EPSS

CVE•added 2023/12/04 1:15 a.m.•25 views

CVE-2023-42751

In gnss service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

4.4CVSS4.8AI score0.00015EPSS

CVE•added 2024/01/18 3:15 a.m.•25 views

CVE-2023-48346

In video decoder, there is a possible improper input validation. This could lead to local denial of service with no additional execution privileges needed

5.5CVSS5.4AI score0.00011EPSS

CVE•added 2024/01/18 3:15 a.m.•25 views

CVE-2023-48356

In jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

4.4CVSS4.8AI score0.0001EPSS

CVE•added 2023/09/04 3:15 a.m.•24 views

CVE-2023-20824

In duraspeed, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privilege needed. User interaction is not needed for exploitation. Patch ID: ALPS07951402; Issue ID: ALPS07951402.

5.5CVSS5.1AI score0.00016EPSS

CVE-2023-30927

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

CVE•added 2023/12/04 4:15 a.m.•24 views

CVE-2023-32856

In display, there is a possible out of bounds read due to an incorrect status check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07993705; Issue ID: ALPS07993705.

4.4CVSS4.2AI score0.00041EPSS

CVE•added 2023/12/04 4:15 a.m.•24 views

CVE-2023-32861

In display, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08059081; Issue ID: ALPS08059081.

6.7CVSS6.6AI score0.00044EPSS

CVE-2023-33890

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

CVE-2023-33892

In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

4.4CVSS4.7AI score0.00011EPSS

CVE-2023-33896

In libimpl-ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

4.4CVSS4.6AI score0.0001EPSS

CVE-2023-42683

In gsp driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

7.8CVSS7.8AI score0.00019EPSS

CVE-2023-42696

In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

5.5CVSS5.3AI score0.00012EPSS

CVE-2023-42698

5.5CVSS5.3AI score0.00012EPSS

CVE-2023-42714

In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

CVE•added 2021/12/15 7:15 p.m.•23 views

CVE-2021-1007

In btu_hcif_process_event of btu_hcif.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID:...

4.4CVSS4.2AI score0.00016EPSS

CVE•added 2023/07/04 2:15 a.m.•23 views

CVE-2023-20761

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628604; Issue ID: ALPS07628582.

6.7CVSS6.7AI score0.0002EPSS

CVE•added 2023/07/12 9:15 a.m.•23 views

CVE-2023-30931

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

5.5CVSS5.2AI score0.00011EPSS

CVE•added 2023/12/04 4:15 a.m.•23 views

CVE-2023-32863

In display drm, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07326314; Issue ID: ALPS07326314.

6.7CVSS6.6AI score0.00044EPSS

CVE•added 2023/12/04 1:15 a.m.•23 views

CVE-2023-42706

5.5CVSS5.3AI score0.00024EPSS

CVE•added 2023/12/04 1:15 a.m.•23 views

CVE-2023-42747

In camera service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

7.8CVSS7.8AI score0.00022EPSS

CVE•added 2023/07/12 9:15 a.m.•22 views

CVE-2023-32789

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

5.5CVSS5.2AI score0.00012EPSS

CVE•added 2023/12/04 4:15 a.m.•22 views

CVE-2023-32868

In display drm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07363632; Issue ID: ALPS07363632.

6.7CVSS6.7AI score0.00033EPSS

5.5CVSS5.2AI score0.00012EPSS

CVE-2023-42673

In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

5.5CVSS5.2AI score0.00012EPSS

CVE-2023-42676

7.8CVSS7.8AI score0.00017EPSS

CVE-2023-42681

In ion service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

5.5CVSS5.4AI score0.00038EPSS

CVE-2023-42728

In phasecheckserver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed

5.5CVSS5.3AI score0.00024EPSS

CVE-2023-42730

In IMS service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

7.8CVSS7.8AI score0.00022EPSS

CVE-2023-42740

In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

7.8CVSS7.8AI score0.00022EPSS

CVE-2023-42748

In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

CVE•added 2023/08/07 2:15 a.m.•21 views

CVE-2022-47350

In camera driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

4.4CVSS4.6AI score0.00009EPSS

CVE•added 2023/07/12 9:15 a.m.•21 views

CVE-2023-33900

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.