DeutschShown in its original language — a full translation is planned for a future version.
Android Patchday März 2023
view advisory published 2023-03-06
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen, Code auszuführen und einen Denial-of-Service-Zustand zu verursachen.
01
describes (55)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-4452US | high8.8 | — | ||
Insufficient data validation in crosvm in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium… | ||||
| CVE-2023-20966US | high7.8 | — | ||
In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privil… | ||||
| CVE-2023-20964US | high7.8 | — | ||
In multiple functions of MediaSessionRecord.java, there is a possible Intent rebroadcast due to a confused deputy. This could lead to local denial of service or escalation of privi… | ||||
| CVE-2023-20963US | high7.8OT critical | KEV | ||
In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed… | ||||
| CVE-2023-20962US | medium5.5 | — | ||
In getSliceEndItem of MediaVolumePreferenceController.java, there is a possible way to start foreground activity from the background due to an unsafe PendingIntent. This could lead… | ||||
| CVE-2023-20960US | high8.8 | — | ||
In launchDeepLinkIntentToRight of SettingsHomepageActivity.java, there is a possible way to launch arbitrary activities due to improper input validation. This could lead to local e… | ||||
| CVE-2023-20959US | high7.8OT elevated | — | ||
In AddSupervisedUserActivity, guest users are not prevented from starting the activity due to missing permissions checks. This could lead to local escalation of privilege with no a… | ||||
| CVE-2023-20958US | high7.1 | — | ||
In read_paint of ttcolr.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privil… | ||||
| CVE-2023-20957US | high7.8 | — | ||
In onAttach of SettingsPreferenceFragment.java, there is a possible bypass of Factory Reset Protections due to a confused deputy. This could lead to local escalation of privilege w… | ||||
| CVE-2023-20956US | medium4.4 | — | ||
In Import of C2SurfaceSyncObj.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with System execution priv… | ||||
| CVE-2023-20955US | high7.8OT elevated | Exploit | ||
In onPrepareOptionsMenu of AppInfoDashboardFragment.java, there is a possible way to bypass admin restrictions and uninstall applications for all users due to a missing permission… | ||||
| CVE-2023-20954US | critical9.8 | — | ||
In SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution pr… | ||||
| CVE-2023-20953US | high7.8 | — | ||
In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to bypass factory reset protection due to incorrect UI being shown prior to setup completion. This could… | ||||
| CVE-2023-20952US | medium5.5 | — | ||
In A2DP_BuildCodecHeaderSbc of a2dp_sbc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additiona… | ||||
| CVE-2023-20951US | critical9.8 | — | ||
In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional exe… | ||||
| CVE-2023-20947US | high7.8 | — | ||
In getGroupState of GrantPermissionsViewModel.kt, there is a possible way to keep a one-time permission granted due to a permissions bypass. This could lead to local escalation of… | ||||
| CVE-2023-20936US | high7.8 | — | ||
In bta_av_rc_disc_done of bta_av_act.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional… | ||||
| CVE-2023-20931US | high7.8 | — | ||
In avdt_scb_hdl_write_req of avdt_scb_act.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additi… | ||||
| CVE-2023-20929US | medium5.5 | — | ||
In sendHalfSheetCancelBroadcast of HalfSheetActivity.java, there is a possible way to learn nearby BT MAC addresses due to an unrestricted broadcast intent. This could lead to loca… | ||||
| CVE-2023-20926US | medium6.8OT elevated | — | ||
In onParentVisible of HeaderPrivacyIconsController.kt, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escal… | ||||
showing 20 of 55
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan