DeutschShown in its original language — a full translation is planned for a future version.
Android Patchday — Februar 2024
view advisory published 2024-02-05
Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder seine Rechte zu erweitern.
01
describes (53)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-0041US | high7.0 | — | ||
In removePersistentDot of SystemStatusAnimationSchedulerImpl.kt, there is a possible race condition due to a logic error in the code. This could lead to local escalation of privile… | ||||
| CVE-2024-0040US | high7.5 | Exploit | ||
In setParameter of MtpPacket.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional executio… | ||||
| CVE-2024-0038US | high7.8OT elevated | — | ||
In injectInputEventToInputFilter of AccessibilityManagerService.java, there is a possible arbitrary input event injection due to a missing permission check. This could lead to loca… | ||||
| CVE-2024-0037US | low3.3OT elevated | — | ||
In applyCustomDescription of SaveUi.java, there is a possible way to view images belonging to a different user due to a missing permission check. This could lead to local informati… | ||||
| CVE-2024-0036US | high7.8 | — | ||
In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to bypass the restrictions on starting activities from the background due to a logic error… | ||||
| CVE-2024-0035US | high7.8 | — | ||
In onNullBinding of TileLifecycleManager.java, there is a possible way to launch an activity from the background due to a missing null check. This could lead to local escalation of… | ||||
| CVE-2024-0034US | high7.8OT elevated | — | ||
In BackgroundLaunchProcessController, there is a possible way to launch arbitrary activity from the background due to BAL Bypass. This could lead to local escalation of privilege w… | ||||
| CVE-2024-0033US | high7.8 | — | ||
In multiple functions of ashmem-dev.cpp, there is a possible missing seal due to a heap buffer overflow. This could lead to local escalation of privilege with no additional executi… | ||||
| CVE-2024-0032US | medium6.5 | — | ||
In multiple locations, there is a possible way to request access to directories that should be hidden due to improper input validation. This could lead to local escalation of privi… | ||||
| CVE-2024-0031US | critical9.8 | — | ||
In attp_build_read_by_type_value_cmd of att_protocol.cc , there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no… | ||||
| CVE-2024-0030US | medium5.5 | Exploit | ||
In btif_to_bta_response of btif_gatt_util.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no addit… | ||||
| CVE-2024-0029US | high7.8 | — | ||
In multiple files, there is a possible way to capture the device screen when disallowed by device policy due to a logic error in the code. This could lead to local escalation of pr… | ||||
| CVE-2024-0014US | high7.8 | — | ||
In startInstall of UpdateFetcher.java, there is a possible way to trigger a malicious config update due to a logic error. This could lead to local escalation of privilege with no a… | ||||
| CVE-2023-40122US | low3.3 | — | ||
In applyCustomDescription of SaveUi.java, there is a possible way to view other user's images due to a confused deputy. This could lead to local information disclosure with no addi… | ||||
| CVE-2023-40093US | medium5.5 | — | ||
In multiple files, there is a possible way that trimmed content could be included in PDF output due to a logic error in the code. This could lead to local information disclosure wi… | ||||
| CVE-2024-22012US | high7.8 | — | ||
there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interac… | ||||
| CVE-2023-43536US | — | — | ||
Transient DOS while parse fils IE with length equal to 1. | ||||
| CVE-2023-43534US | critical9.8 | — | ||
Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point. | ||||
| CVE-2023-43533US | — | — | ||
Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame. | ||||
| CVE-2023-43523US | — | — | ||
Transient DOS while processing 11AZ RTT management action frame received through OTA. | ||||
showing 20 of 53
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan