DeutschShown in its original language — a full translation is planned for a future version.
Pixel Patchday Juni 2024: Mehrere Schwachstellen
view advisory published 2024-06-11
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen oder Informationen offenzulegen.
01
describes (50)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-32930US | — | — | ||
In plugin_ipc_handler of slc_plugin.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure of 4 bytes of stack mem… | ||||
| CVE-2024-32926US | — | — | ||
there is a possible information disclosure due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges neede… | ||||
| CVE-2024-32925US | — | — | ||
In dhd_prot_txstatus_process of dhd_msgbuf.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional exe… | ||||
| CVE-2024-32924US | — | — | ||
In DeregAcceptProcINT of cn_NrmmStateDeregInit.cpp, there is a possible denial of service due to a logic error in the code. This could lead to remote denial of service with no addi… | ||||
| CVE-2024-32923US | — | — | ||
there is a possible cellular denial of service due to a logic error in the code. This could lead to remote denial of service with no additional execution privileges needed. User in… | ||||
| CVE-2024-32922US | — | — | ||
In gpu_pm_power_on_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a logic error in the code. This could lead to local escalation of priv… | ||||
| CVE-2024-32921US | — | — | ||
In lwis_initialize_transaction_fences of lwis_fence.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with… | ||||
| CVE-2024-32920US | — | — | ||
In set_secure_reg of sac_handler.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure of 4 bytes of stack memory… | ||||
| CVE-2024-32919US | — | — | ||
In lwis_add_completion_fence of lwis_fence.c, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with no additional… | ||||
| CVE-2024-32918US | medium6.1 | — | ||
Permission Bypass allowing attackers to disable HDCP 2.2 encryption by not completing the HDCP Key Exchange initialization steps | ||||
| CVE-2024-32917US | — | — | ||
In pl330_dma_from_peri_start() of fp_spi_dma.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no addi… | ||||
| CVE-2024-32916US | — | — | ||
In fvp_freq_histogram_init of fvp.c, there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execut… | ||||
| CVE-2024-32915US | — | — | ||
In CellInfoListParserV2::FillCellInfo() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclo… | ||||
| CVE-2024-32914US | — | — | ||
In tpu_get_int_state of tpu.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution pr… | ||||
| CVE-2024-32913US | critical9.8 | — | ||
In wl_notify_rx_mgmt_frame of wl_cfg80211.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional executi… | ||||
| CVE-2024-32912US | medium5.5 | — | ||
there is a possible persistent Denial of Service due to test/debugging code left in a production build. This could lead to local denial of service of impaired use of the device wit… | ||||
| CVE-2024-32911US | critical9.8OT elevated | — | ||
There is a possible escalation of privilege due to improperly used crypto. This could lead to remote escalation of privilege with no additional execution privileges needed. User in… | ||||
| CVE-2024-32910US | medium5.5 | — | ||
In handle_msg_shm_map_req of trusty/user/base/lib/spi/srv/tipc/tipc.c, there is a possible stack data disclosure due to uninitialized data. This could lead to local information dis… | ||||
| CVE-2024-32909US | high7.8 | — | ||
In handle_msg of main.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution priv… | ||||
| CVE-2024-32908US | high7.8 | — | ||
In sec_media_protect of media.c, there is a possible permission bypass due to a race condition. This could lead to local escalation of privilege with no additional execution privil… | ||||
showing 20 of 50
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan