DeutschShown in its original language — a full translation is planned for a future version.
Google Android Pixel: Mehrere Schwachstellen
view advisory published 2023-12-06
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android Pixel ausnutzen, um beliebigen Code auszuführen, an vertrauliche Informationen zu gelangen, das System zum Absturz zu bringen (Denial-of-Service-Zustand) und seine Rechte zu erhöhen.
01
describes (33)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-37366US | — | — | ||
An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem Exynos 9810, Exynos 9610, Exynos 9820, Exynos 980, Exynos 850, Exynos 1080, Exynos 2100,… | ||||
| CVE-2023-48423US | critical9.8 | — | ||
In dhcp4_SetPDNAddress of dhcp4_Main.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution… | ||||
| CVE-2023-48422US | medium5.5 | — | ||
In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional executio… | ||||
| CVE-2023-48421US | high7.8 | — | ||
In gpu_pixel_handle_buffer_liveness_update_ioctl of private/google-modules/gpu/mali_kbase/platform/pixel/pixel_gpu_slc.c, there is a possible out of bounds write due to improper in… | ||||
| CVE-2023-48420US | medium6.4 | — | ||
there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed… | ||||
| CVE-2023-48416US | high7.5 | — | ||
In multiple locations, there is a possible null dereference due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed.… | ||||
| CVE-2023-48415US | medium5.5 | — | ||
In Init of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execut… | ||||
| CVE-2023-48414US | medium6.7 | — | ||
In the Pixel Camera Driver, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges n… | ||||
| CVE-2023-48413US | medium4.9 | — | ||
In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with System execution priv… | ||||
| CVE-2023-48412US | medium5.5 | — | ||
In private_handle_t of mali_gralloc_buffer.h, there is a possible information leak due to a logic error in the code. This could lead to local information disclosure with no additi… | ||||
| CVE-2023-48411US | medium5.5 | — | ||
In SignalStrengthAdapter::FillGsmSignalStrength() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local informa… | ||||
| CVE-2023-48410US | high7.5 | — | ||
In cd_ParseMsg of cd_codec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution pr… | ||||
| CVE-2023-48409US | high7.8 | — | ||
In gpu_pixel_handle_buffer_liveness_update_ioctl of private/google-modules/gpu/mali_kbase/mali_kbase_core_linux.c, there is a possible out of bounds write due to an integer overflo… | ||||
| CVE-2023-48408US | medium5.5 | — | ||
In ProtocolNetSimFileInfoAdapter() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure… | ||||
| CVE-2023-48407US | high7.8OT elevated | — | ||
there is a possible DCK won't be deleted after factory reset due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privile… | ||||
| CVE-2023-48406US | medium6.7 | — | ||
there is a possible permanent DoS or way for the modem to boot unverified firmware due to a logic error in the code. This could lead to local escalation of privilege with System ex… | ||||
| CVE-2023-48405US | medium6.7 | — | ||
there is a possible way for the secure world to write to NS memory due to a logic error in the code. This could lead to local escalation of privilege with System execution privileg… | ||||
| CVE-2023-48404US | high7.5 | — | ||
In ProtocolMiscCarrierConfigSimInfoIndAdapter of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informatio… | ||||
| CVE-2023-48403US | high7.5 | — | ||
In sms_DecodeCodedTpMsg of sms_PduCodec.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure if the attacker is… | ||||
| CVE-2023-48402US | high7.8OT elevated | — | ||
In ppcfw_enable of ppcfw.c, there is a possible EoP due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges need… | ||||
showing 20 of 33
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan