DeutschShown in its original language — a full translation is planned for a future version.
Google Android: Mehrere Schwachstellen
view advisory published 2023-11-06
Ein Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen oder seine Rechte zu erweitern.
01
describes (45)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-40124US | medium5.5 | — | ||
In multiple locations, there is a possible cross-user read due to a confused deputy. This could lead to local information disclosure of photos or other images with no additional ex… | ||||
| CVE-2023-40115US | high7.8 | — | ||
In readLogs of StatsService.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privil… | ||||
| CVE-2023-40114US | high7.8 | — | ||
In multiple functions of MtpFfsHandle.cpp , there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional exe… | ||||
| CVE-2023-40113US | medium5.5OT elevated | — | ||
In multiple locations, there is a possible way for apps to access cross-user message data due to a missing permission check. This could lead to local information disclosure with no… | ||||
| CVE-2023-40112US | medium5.5 | — | ||
In ippSetValueTag of ipp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure of past print jobs or other print-… | ||||
| CVE-2023-40111US | high7.8 | — | ||
In setMediaButtonReceiver of MediaSessionRecord.java, there is a possible way to send a pending intent on behalf of system_server due to a confused deputy. This could lead to local… | ||||
| CVE-2023-40110US | high7.8 | — | ||
In multiple functions of MtpPacket.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional e… | ||||
| CVE-2023-40109US | high7.8 | Exploit | ||
In createFromParcel of UsbConfiguration.java, there is a possible background activity launch (BAL) due to a permissions bypass. This could lead to local escalation of privilege wit… | ||||
| CVE-2023-40107US | high7.8 | — | ||
In ARTPWriter of ARTPWriter.cpp, there is a possible use after free due to uninitialized data. This could lead to local escalation of privilege with no additional execution privile… | ||||
| CVE-2023-40106US | high7.8 | — | ||
In sanitizeSbn of NotificationManagerService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privi… | ||||
| CVE-2023-40105US | medium5.5OT elevated | — | ||
In backupAgentCreated of ActivityManagerService.java, there is a possible way to leak sensitive data due to a missing permission check. This could lead to local information disclos… | ||||
| CVE-2023-40104US | high7.5 | — | ||
In ca-certificates, there is a possible way to read encrypted TLS data due to untrusted cryptographic certificates. This could lead to remote information disclosure with no additio… | ||||
| CVE-2023-40100US | high7.8 | — | ||
In discovery_thread of Dns64Configuration.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional ex… | ||||
| CVE-2023-33074US | high7.8 | — | ||
Memory corruption in Audio when SSR event is triggered after music playback is stopped. | ||||
| CVE-2023-33061US | high7.5 | — | ||
Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame. | ||||
| CVE-2023-33059US | high7.8 | — | ||
Memory corruption in Audio while processing the VOC packet data from ADSP. | ||||
| CVE-2023-33056US | high7.5 | — | ||
Transient DOS in WLAN Firmware when firmware receives beacon including T2LM IE. | ||||
| CVE-2023-33055US | high7.8 | — | ||
Memory Corruption in Audio while invoking callback function in driver from ADSP. | ||||
| CVE-2023-33048US | high7.5 | — | ||
Transient DOS in WLAN Firmware while parsing t2lm buffers. | ||||
| CVE-2023-33047US | high7.5 | — | ||
Transient DOS in WLAN Firmware while parsing no-inherit IES. | ||||
showing 20 of 45
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan