DeutschShown in its original language — a full translation is planned for a future version.
Google Android Patchday April 2024: Mehrere Schwachstellen
view advisory published 2024-04-01
Ein anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.
01
describes (28)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-23713US | high7.8 | — | ||
In migrateNotificationFilter of NotificationManagerService.java, there is a possible failure to persist notifications settings due to improper input validation. This could lead to… | ||||
| CVE-2024-23712US | medium5.5 | — | ||
In multiple functions of AppOpsService.java, there is a possible way to saturate the content of /data/system/appops_accesses.xml due to resource exhaustion. This could lead to loca… | ||||
| CVE-2024-23710US | high7.8 | — | ||
In assertPackageWithSharedUserIdIsPrivileged of InstallPackageHelper.java, there is a possible execution of arbitrary app code as a privileged app due to a logic error in the code.… | ||||
| CVE-2024-23704US | high7.8OT elevated | — | ||
In onCreate of WifiDialogActivity.java, there is a possible way to bypass the DISALLOW_ADD_WIFI_CONFIG restriction due to a missing permission check. This could lead to local escal… | ||||
| CVE-2024-0042US | high7.8 | — | ||
In TBD of TBD, there is a possible confusion of OEM and DRM certificates due to improperly used crypto. This could lead to local bypass of DRM content protection with no additional… | ||||
| CVE-2024-0027US | medium5.5 | — | ||
In multiple functions of SnoozeHelper.java, there is a possible way to cause a boot loop due to resource exhaustion. This could lead to local denial of service with no additional e… | ||||
| CVE-2024-0026US | medium5.5 | — | ||
In multiple functions of SnoozeHelper.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no addition… | ||||
| CVE-2024-0022US | medium5.5 | — | ||
In multiple functions of CompanionDeviceManagerService.java, there is a possible launch NotificationAccessConfirmationActivity of another user profile due to improper input validat… | ||||
| CVE-2024-21472US | high7.8 | — | ||
Memory corruption in Kernel while handling GPU operations. | ||||
| CVE-2024-21468US | high7.8 | — | ||
Memory corruption when there is failed unmap operation in GPU. | ||||
| CVE-2024-21463US | critical9.8 | — | ||
Memory corruption while processing Codec2 during v13k decoder pitch synthesis. | ||||
| CVE-2023-33115US | — | — | ||
Memory corruption while processing buffer initialization, when trusted report for certain report types are generated. | ||||
| CVE-2023-33101US | — | — | ||
Transient DOS while processing DL NAS TRANSPORT message with payload length 0. | ||||
| CVE-2023-33100US | — | — | ||
Transient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP specification. | ||||
| CVE-2023-33099US | — | — | ||
Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR. | ||||
| CVE-2023-33023US | high7.8 | — | ||
Memory corruption while processing finish_sign command to pass a rsp buffer. | ||||
| CVE-2023-28547US | high7.8 | — | ||
Memory corruption in SPS Application while requesting for public key in sorter TA. | ||||
| CVE-2024-20040US | — | — | ||
In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privilege… | ||||
| CVE-2024-20039US | — | — | ||
In modem protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. U… | ||||
| CVE-2023-33104US | — | — | ||
Transient DOS while processing PDU Release command with a parameter PDU ID out of range. | ||||
showing 20 of 28
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan