DeutschShown in its original language — a full translation is planned for a future version.
Android Patchday April 2023
view advisory published 2023-04-03
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen, Code auszuführen und einen Denial-of-Service-Zustand zu verursachen.
01
describes (66)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-21100US | high7.8 | — | ||
In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privil… | ||||
| CVE-2023-21099US | high7.8 | — | ||
In multiple methods of PackageInstallerSession.java, there is a possible way to start foreground services from the background due to a logic error in the code. This could lead to l… | ||||
| CVE-2023-21098US | high7.8OT elevated | — | ||
In multiple functions of AccountManagerService.java, there is a possible loading of arbitrary code into the System Settings app due to a confused deputy. This could lead to local e… | ||||
| CVE-2023-21097US | high7.8 | Exploit | ||
In toUriInner of Intent.java, there is a possible way to launch an arbitrary activity due to a confused deputy. This could lead to local escalation of privilege with no additional… | ||||
| CVE-2023-21096US | critical9.8 | — | ||
In OnWakelockReleased of attribution_processor.cc, there is a use after free that could lead to remote code execution with no additional execution privileges needed. User interacti… | ||||
| CVE-2023-21094US | high7.8OT elevated | Exploit | ||
In sanitize of LayerState.cpp, there is a possible way to take over the screen display and swap the display content due to a missing permission check. This could lead to local esca… | ||||
| CVE-2023-21093US | high7.8 | — | ||
In extractRelativePath of FileUtils.java, there is a possible way to access files in a directory belonging to other applications due to a path traversal error. This could lead to l… | ||||
| CVE-2023-21092US | high7.8 | — | ||
In retrieveServiceLocked of ActiveServices.java, there is a possible way to dynamically register a BroadcastReceiver using permissions of System App due to improper input validatio… | ||||
| CVE-2023-21091US | medium5.5OT elevated | — | ||
In canDisplayLocalUi of AppLocalePickerActivity.java, there is a possible way to change system app locales due to a missing permission check. This could lead to local denial of ser… | ||||
| CVE-2023-21090US | medium5.0 | — | ||
In parseUsesPermission of ParsingPackageUtils.java, there is a possible boot loop due to resource exhaustion. This could lead to local denial of service with no additional executio… | ||||
| CVE-2023-21089US | high7.8 | — | ||
In startInstrumentation of ActivityManagerService.java, there is a possible way to keep the foreground service alive while the app is in the background. This could lead to local es… | ||||
| CVE-2023-21088US | high7.8 | — | ||
In deliverOnFlushComplete of LocationProviderManager.java, there is a possible way to bypass background activity launch restrictions due to a logic error in the code. This could le… | ||||
| CVE-2023-21087US | medium5.5 | — | ||
In PreferencesHelper.java, an uncaught exception may cause the device to get stuck in a boot loop. This could lead to local persistent denial of service with no additional executio… | ||||
| CVE-2023-21086US | high7.8 | Exploit | ||
In isToggleable of SecureNfcEnabler.java and SecureNfcPreferenceController.java, there is a possible way to enable NFC from a secondary account due to a permissions bypass. This co… | ||||
| CVE-2023-21085US | high8.8 | — | ||
In nci_snd_set_routing_cmd of nci_hmsgs.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code execution with… | ||||
| CVE-2023-21084US | medium6.7OT elevated | — | ||
In buildPropFile of filesystem.go, there is a possible insecure hash due to an improperly used crypto. This could lead to local escalation of privilege with System execution privil… | ||||
| CVE-2023-21083US | high7.8 | — | ||
In onNullBinding of CallScreeningServiceHelper.java, there is a possible way to record audio without showing a privacy indicator due to a permissions bypass. This could lead to loc… | ||||
| CVE-2023-21082US | medium5.5 | — | ||
In getNumberFromCallIntent of NewOutgoingCallIntentBroadcaster.java, there is a possible way to enumerate other user's contact phone number due to a confused deputy. This could lea… | ||||
| CVE-2023-21081US | high7.8 | — | ||
In multiple functions of PackageInstallerService.java and related files, there is a possible way to bypass background activity launch restrictions due to a logic error in the code.… | ||||
| CVE-2023-21080US | medium5.5 | — | ||
In register_notification_rsp of btif_rc.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional… | ||||
showing 20 of 66
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan