DeutschShown in its original language — a full translation is planned for a future version.
Google Pixel: Mehrere Schwachstellen
view advisory published 2023-06-13
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Pixel ausnutzen, um seine Privilegien zu erhöhen, Informationen offenzulegen, einen Denial of Service zu verursachen oder beliebigen Programmcode auszuführen.
01
describes (107)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-21237US | medium5.5OT critical | KEV | ||
In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or insufficient UI. This could lead to loc… | ||||
| CVE-2023-21236US | medium6.7 | — | ||
In aoc_service_set_read_blocked of aoc.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execut… | ||||
| CVE-2023-21226US | high7.5 | — | ||
In SAEMM_RetrieveTaiList of SAEMM_ContextManagement.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure wit… | ||||
| CVE-2023-21225US | high7.8OT elevated | — | ||
there is a possible way to bypass the protected confirmation screen due to Failure to lock display power. This could lead to local escalation of privilege with no additional execut… | ||||
| CVE-2023-21224US | high7.5 | — | ||
In ss_ProcessReturnResultComponent of ss_MmConManagement.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure w… | ||||
| CVE-2023-21223US | high7.5 | — | ||
In LPP_ConvertGNSS_DataBitAssistance of LPP_CommonUtil.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure wit… | ||||
| CVE-2023-21222US | medium6.7 | — | ||
In load_dt_data of storage.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… | ||||
| CVE-2023-21220US | high7.5OT elevated | — | ||
there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with no additional execut… | ||||
| CVE-2023-21219US | high7.5OT elevated | — | ||
there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with no additional execut… | ||||
| CVE-2023-21214US | medium4.4 | — | ||
In addGroupWithConfigInternal of p2p_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disclosure with System ex… | ||||
| CVE-2023-21213US | medium4.4 | — | ||
In initiateTdlsTeardownInternal of sta_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the wifi… | ||||
| CVE-2023-21212US | medium4.4 | — | ||
In multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the wifi server with System execution pr… | ||||
| CVE-2023-21211US | medium5.5 | — | ||
In multiple files, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges nee… | ||||
| CVE-2023-21210US | medium4.4 | — | ||
In initiateHs20IconQueryInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with Sys… | ||||
| CVE-2023-21209US | medium6.7 | — | ||
In multiple functions of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local escalation of privilege with System execution… | ||||
| CVE-2023-21208US | medium4.4 | — | ||
In setCountryCodeInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System exe… | ||||
| CVE-2023-21207US | medium6.7 | — | ||
In initiateTdlsSetupInternal of sta_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System ex… | ||||
| CVE-2023-21206US | medium4.4 | — | ||
In initiateVenueUrlAnqpQueryInternal of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disclosure with Sy… | ||||
| CVE-2023-21205US | medium5.5 | — | ||
In startWpsPinDisplayInternal of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disclosure with no additi… | ||||
| CVE-2023-21204US | medium4.4 | — | ||
In multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the wifi server with System execution pr… | ||||
showing 20 of 107
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan