DeutschShown in its original language — a full translation is planned for a future version.
Google Android Pixel: Mehrere Schwachstellen
view advisory published 2023-10-11
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android Pixel ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, seine Privilegien zu erweitern und Daten zu manipulieren.
01
describes (28)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-35663US | high7.5 | — | ||
In Init of protocolnetadapter.cpp, there is a possible out of bounds read
due to a missing bounds check. This could lead to remote information
disclosure with no addition… | ||||
| CVE-2023-35656US | high7.5 | — | ||
In multiple functions of protocolembmsadapter.cpp, there is a possible out
of bounds read due to a missing bounds check. This could lead to remote
information disclosure w… | ||||
| CVE-2023-3781US | high7.8 | — | ||
there is a possible use-after-free write due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction… | ||||
| CVE-2023-40142US | high7.8 | — | ||
In TBD of TBD, there is a possible way to bypass carrier restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional executio… | ||||
| CVE-2023-40141US | high7.8 | — | ||
In temp_residency_name_store of thermal_metrics.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no a… | ||||
| CVE-2023-35662US | critical9.8 | — | ||
there is a possible out of bounds write due to buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not nee… | ||||
| CVE-2023-35661US | high7.5 | — | ||
In ProfSixDecomTcpSACKoption of RohcPacketCommon.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no… | ||||
| CVE-2023-35660US | medium6.7 | — | ||
In lwis_transaction_client_cleanup of lwis_transaction.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with S… | ||||
| CVE-2023-35655US | medium6.7 | — | ||
In CanConvertPadV2Op of darwinn_mlir_converter_aidl.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with… | ||||
| CVE-2023-35654US | medium6.7 | — | ||
In ctrl_roi of stmvl53l1_module.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution p… | ||||
| CVE-2023-35653US | medium4.4OT elevated | — | ||
In TBD of TBD, there is a possible way to access location information due to a permissions bypass. This could lead to local information disclosure with System execution privileges… | ||||
| CVE-2023-35652US | high7.5 | — | ||
In ProtocolEmergencyCallListIndAdapter::Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information… | ||||
| CVE-2023-35649US | high7.2 | — | ||
In several functions of Exynos modem files, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with System execution pr… | ||||
| CVE-2023-35648US | critical9.8 | — | ||
In ProtocolMiscLceIndAdapter::GetConfLevel() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information… | ||||
| CVE-2023-35647US | critical9.8 | — | ||
In ProtocolEmbmsGlobalCellIdAdapter::Init() of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information… | ||||
| CVE-2023-35646US | critical9.8 | — | ||
In TBD of TBD, there is a possible stack buffer overflow due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. Use… | ||||
| CVE-2023-35645US | medium6.4 | — | ||
In tbd of tbd, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interac… | ||||
| CVE-2023-28571US | medium5.5 | — | ||
Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan. | ||||
| CVE-2023-28539US | high7.8 | — | ||
Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command. | ||||
| CVE-2023-22384US | high7.8 | — | ||
Memory Corruption in VR Service while sending data using Fast Message Queue (FMQ). | ||||
showing 20 of 28
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan