DeutschShown in its original language — a full translation is planned for a future version.
Android Patchday Juli 2024
view advisory published 2024-07-01
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen und vertrauliche Informationen offenzulegen.
01
describes (27)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-34726US | high7.8 | — | ||
In PVRSRV_MMap of pvr_bridge_k.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with… | ||||
| CVE-2024-34725US | high7.0 | — | ||
In DevmemIntUnexportCtx of devicemem_server.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of privilege in the kernel… | ||||
| CVE-2024-34724US | high7.0 | — | ||
In _UnrefAndMaybeDestroy of pmr.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of privilege in the kernel with no addi… | ||||
| CVE-2024-34723US | high7.8 | — | ||
In onTransact of ParcelableListBinder.java , there is a possible way to steal mAllowlistToken to launch an app from background due to a logic error in the code. This could lead to… | ||||
| CVE-2024-34722US | high8.8 | — | ||
In smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a protocol. This could lead to remote escalat… | ||||
| CVE-2024-34721US | medium5.5 | — | ||
In ensureFileColumns of MediaProvider.java, there is a possible disclosure of files owned by another user due to improper input validation. This could lead to local information dis… | ||||
| CVE-2024-34720US | high7.8 | — | ||
In com_android_internal_os_ZygoteCommandBuffer_nativeForkRepeatedly of com_android_internal_os_ZygoteCommandBuffer.cpp, there is a possible method to perform arbitrary code executi… | ||||
| CVE-2024-31339US | high7.8 | — | ||
In multiple functions of StatsService.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execut… | ||||
| CVE-2024-31335US | high7.8 | — | ||
In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in… | ||||
| CVE-2024-31334US | high7.8 | — | ||
In DevmemIntFreeDefBackingPage of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privileg… | ||||
| CVE-2024-31332US | high7.8OT elevated | — | ||
In multiple locations, there is a possible way to bypass a restriction on adding new Wi-Fi connections due to a missing permission check. This could lead to local escalation of pri… | ||||
| CVE-2024-31331US | high7.3 | — | ||
In setMimeGroup of PackageManagerService.java, there is a possible way to hide the service from Settings due to a logic error in the code. This could lead to local escalation of pr… | ||||
| CVE-2024-31320US | high7.8 | Exploit | ||
In setSkipPrompt of AssociationRequest.java , there is a possible way to establish a companion device association without any confirmation due to CDM. This could lead to local esca… | ||||
| CVE-2024-23380US | high7.8 | — | ||
Memory corruption while handling user packets during VBO bind operation. | ||||
| CVE-2024-23373US | high7.8 | — | ||
Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released. | ||||
| CVE-2024-23372US | high7.8 | — | ||
Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size. | ||||
| CVE-2024-23368US | — | — | ||
Memory corruption when allocating and accessing an entry in an SMEM partition. | ||||
| CVE-2024-21469US | high7.8 | — | ||
Memory corruption when an invoke call and a TEE call are bound for the same trusted application. | ||||
| CVE-2024-21465US | high7.8 | — | ||
Memory corruption while processing key blob passed by the user. | ||||
| CVE-2024-21462US | medium5.5 | — | ||
Transient DOS while loading the TA ELF file. | ||||
showing 20 of 27
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan