DeutschShown in its original language — a full translation is planned for a future version.
Google Pixel: Mehrere Schwachstellen
view advisory published 2023-03-13
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Pixel ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.
01
describes (118)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-21079US | medium6.7 | — | ||
In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution… | ||||
| CVE-2023-21078US | medium6.7 | — | ||
In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with System execution privi… | ||||
| CVE-2023-21077US | medium6.7 | — | ||
In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with System execution privi… | ||||
| CVE-2023-21076US | medium6.7 | — | ||
In createTransmitFollowupRequest of nan.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System exe… | ||||
| CVE-2023-21075US | medium6.7 | — | ||
In get_svc_hash of nan.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges… | ||||
| CVE-2023-21073US | medium6.7 | — | ||
In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with System execution privi… | ||||
| CVE-2023-21072US | medium6.7 | — | ||
In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with System execution privi… | ||||
| CVE-2023-21071US | medium6.7 | — | ||
In dhd_prot_ioctcmplt_process of dhd_msgbuf.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with Syste… | ||||
| CVE-2023-21070US | medium6.7 | — | ||
In add_roam_cache_list of wl_roam.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… | ||||
| CVE-2023-21069US | medium6.7 | — | ||
In wl_update_hidden_ap_ie of wl_cfgscan.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execu… | ||||
| CVE-2023-21068US | high7.8 | — | ||
In (TBD) of (TBD), there is a possible way to boot with a hidden debug policy due to a missing warning to the user. This could lead to local escalation of privilege after preparing… | ||||
| CVE-2023-21067US | high7.5 | — | ||
Product: AndroidVersions: Android kernelAndroid ID: A-254114726References: N/A | ||||
| CVE-2023-21065US | medium6.7 | — | ||
In fdt_next_tag of fdt.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges need… | ||||
| CVE-2023-21064US | medium6.7 | — | ||
In DoSetPinControl of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution… | ||||
| CVE-2023-21063US | medium6.7 | — | ||
In ParseWithAuthType of simdata.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution… | ||||
| CVE-2023-21062US | medium6.7 | — | ||
In DoSetTempEcc of imsservice.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution p… | ||||
| CVE-2023-21061US | high7.5 | — | ||
Product: AndroidVersions: Android kernelAndroid ID: A-229255400References: N/A | ||||
| CVE-2023-21060US | high7.5 | — | ||
In sms_GetTpPiIe of sms_PduCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execut… | ||||
| CVE-2023-21059US | high7.5 | — | ||
In EUTRAN_LCS_DecodeFacilityInformationElement of LPP_LcsManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information d… | ||||
| CVE-2023-21058US | critical9.8 | — | ||
In lcsm_SendRrAcquiAssist of lcsm_bcm_assist.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional e… | ||||
showing 20 of 118
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan