DeutschShown in its original language — a full translation is planned for a future version.
Google Android: Mehrere Schwachstellen
view advisory published 2023-09-05
Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen und beliebigen Code auszuführen.
01
describes (32)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-35687US | high7.8 | Exploit | ||
In MtpPropertyValue of MtpProperty.h, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution p… | ||||
| CVE-2023-35684US | high8.8 | — | ||
In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to an integer overflow. This could lead to paired device escalation of privilege with no additional ex… | ||||
| CVE-2023-35683US | medium5.5 | — | ||
In bindSelection of DatabaseUtils.java, there is a possible way to access files from other applications due to SQL injection. This could lead to local information disclosure with n… | ||||
| CVE-2023-35682US | high7.8 | — | ||
In hasPermissionForActivity of PackageManagerHelper.java, there is a possible way to start arbitrary components due to a confused deputy. This could lead to local escalation of pri… | ||||
| CVE-2023-35681US | critical9.8 | — | ||
In eatt_l2cap_reconfig_completed of eatt_impl.h, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional exe… | ||||
| CVE-2023-35680US | medium5.5 | — | ||
In multiple locations, there is a possible way to import contacts belonging to other users due to a confused deputy. This could lead to local information disclosure with no additio… | ||||
| CVE-2023-35679US | medium5.5 | — | ||
In MtpPropertyValue of MtpProperty.h, there is a possible out of bounds read due to uninitialized data. This could lead to local information disclosure with no additional execution… | ||||
| CVE-2023-35677US | medium5.5OT elevated | — | ||
In onCreate of DeviceAdminAdd.java, there is a possible way to forcibly add a device admin due to a missing permission check. This could lead to local denial of service (factory re… | ||||
| CVE-2023-35676US | high7.8 | — | ||
In createQuickShareAction of SaveImageInBackgroundTask.java, there is a possible way to trigger a background activity launch due to an unsafe PendingIntent. This could lead to loca… | ||||
| CVE-2023-35675US | medium5.5 | — | ||
In loadMediaResumptionControls of MediaResumeListener.kt, there is a possible way to play and listen to media files played by another user on the same device due to a logic error i… | ||||
| CVE-2023-35674US | high7.8OT critical | KEV | ||
In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local escalation of privilege with no… | ||||
| CVE-2023-35673US | high8.8 | — | ||
In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote (proximal/adjacent) code execution with no addi… | ||||
| CVE-2023-35671US | medium5.5 | Exploit | ||
In onHostEmulationData of HostEmulationManager.java, there is a possible way for a general purpose NFC reader to read the full card number and expiry details when the device is in… | ||||
| CVE-2023-35670US | high7.8 | — | ||
In computeValuesFromData of FileUtils.java, there is a possible way to insert files to other apps' external private directories due to a path traversal error. This could lead to lo… | ||||
| CVE-2023-35669US | high7.8 | — | ||
In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to control other running activities due to unsafe deserialization. This could lead to loca… | ||||
| CVE-2023-35667US | high7.8 | — | ||
In updateList of NotificationAccessSettings.java, there is a possible way to hide approved notification listeners in the settings due to a logic error in the code. This could lead… | ||||
| CVE-2023-35666US | high7.8 | — | ||
In bta_av_rc_msg of bta_av_act.cc, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional executio… | ||||
| CVE-2023-35665US | high7.8OT elevated | — | ||
In multiple files, there is a possible way to import a contact from another user due to a missing permission check. This could lead to local escalation of privilege with no additio… | ||||
| CVE-2023-35664US | medium5.5 | — | ||
In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additi… | ||||
| CVE-2023-35658US | high8.8 | — | ||
In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible privilege escalation due to a use after free. This could lead to remote (proximal/adjacent) code execution with no… | ||||
showing 20 of 32
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan