DeutschShown in its original language — a full translation is planned for a future version.
Google Android: Mehrere Schwachstellen
view advisory published 2023-12-04
Ein entfernter Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen.
01
describes (94)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-45866US | medium6.3 | Exploit | ||
Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentiall… | ||||
| CVE-2023-33107US | high7.8OT critical | KEV | ||
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. | ||||
| CVE-2023-33106US | high7.8OT critical | KEV | ||
Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND. | ||||
| CVE-2023-33098US | high7.5 | — | ||
Transient DOS while parsing WPA IES, when it is passed with length more than expected size. | ||||
| CVE-2023-33097US | high7.5 | — | ||
Transient DOS in WLAN Firmware while processing a FTMR frame. | ||||
| CVE-2023-33092US | high7.8 | — | ||
Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size. | ||||
| CVE-2023-33089US | high7.5 | — | ||
Transient DOS when processing a NULL buffer while parsing WLAN vdev. | ||||
| CVE-2023-33088US | high7.8 | — | ||
Memory corruption when processing cmd parameters while parsing vdev. | ||||
| CVE-2023-33087US | high7.8 | — | ||
Memory corruption in Core while processing RX intent request. | ||||
| CVE-2023-33081US | high7.5 | — | ||
Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast. | ||||
| CVE-2023-33080US | high7.5 | — | ||
Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame. | ||||
| CVE-2023-33079US | high7.8 | — | ||
Memory corruption in Audio while running invalid audio recording from ADSP. | ||||
| CVE-2023-33063US | high7.8OT critical | KEV | ||
Memory corruption in DSP Services during a remote call from HLOS to DSP. | ||||
| CVE-2023-33054US | critical9.1 | — | ||
Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data. | ||||
| CVE-2023-33053US | high7.8 | — | ||
Memory corruption in Kernel while parsing metadata. | ||||
| CVE-2023-33022US | high7.8 | — | ||
Memory corruption in HLOS while invoking IOCTL calls from user-space. | ||||
| CVE-2023-33018US | high7.8 | — | ||
Memory corruption while using the UIM diag command to get the operators name. | ||||
| CVE-2023-33017US | high7.8 | — | ||
Memory corruption in Boot while running a ListVars test in UEFI Menu during boot. | ||||
| CVE-2023-28588US | high7.5 | Exploit | ||
Transient DOS in Bluetooth Host while rfc slot allocation. | ||||
| CVE-2023-28587US | high7.8 | — | ||
Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level. | ||||
showing 20 of 94
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan