DeutschShown in its original language — a full translation is planned for a future version.
Android Patchday August 2024
view advisory published 2024-08-05
Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu erzeugen, beliebigen Code auszuführen oder vertrauliche Informationen offenzulegen
01
describes (46)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-34743US | high7.8 | — | ||
In setTransactionState of SurfaceFlinger.cpp, there is a possible way to perform tapjacking due to a logic error in the code. This could lead to local escalation of privilege with… | ||||
| CVE-2024-34742US | medium5.5 | — | ||
In shouldWrite of OwnersData.java, there is a possible edge case that prevents MDM policies from being persisted due to a logic error in the code. This could lead to local denial o… | ||||
| CVE-2024-34741US | high7.8 | Exploit | ||
In setForceHideNonSystemOverlayWindowIfNeeded of WindowState.java, there is a possible way for message content to be visible on the screensaver while lock screen visibility setting… | ||||
| CVE-2024-34740US | high7.8 | Exploit | ||
In attributeBytesBase64 and attributeBytesHex of BinaryXmlSerializer.java, there is a possible arbitrary XML injection due to an integer overflow. This could lead to local escalati… | ||||
| CVE-2024-34739US | high7.8 | Exploit | ||
In shouldRestrictOverlayActivities of UsbProfileGroupSettingsManager.java, there is a possible escape from SUW due to a logic error in the code. This could lead to local escalation… | ||||
| CVE-2024-34738US | high7.8 | — | ||
In multiple functions of AppOpsService.java, there is a possible way for unprivileged apps to read their own restrictRead app-op states due to a logic error in the code. This could… | ||||
| CVE-2024-34737US | high7.8 | — | ||
In ensureSetPipAspectRatioQuotaTracker of ActivityClientController.java, there is a possible way to generate unmovable and undeletable pip windows due to a logic error in the code.… | ||||
| CVE-2024-34736US | high7.8 | — | ||
In setupVideoEncoder of StagefrightRecorder.cpp, there is a possible asynchronous playback when B-frame support is enabled. This could lead to local escalation of privilege with no… | ||||
| CVE-2024-34734US | high7.8OT elevated | — | ||
In onForegroundServiceButtonClicked of FooterActionsViewModel.kt, there is a possible way to disable the active VPN app from the lockscreen due to an insecure default value. This c… | ||||
| CVE-2024-34731US | high7.0 | — | ||
In multiple functions of TranscodingResourcePolicy.cpp, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no addi… | ||||
| CVE-2024-34727US | high7.5 | — | ||
In sdpu_compare_uuid_with_attr of sdp_utils.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no addit… | ||||
| CVE-2024-31333US | high7.8 | — | ||
In _MMU_AllocLevel of mmu_common.c, there is a possible arbitrary code execution due to an integer overflow. This could lead to local escalation of privilege in the kernel with no… | ||||
| CVE-2024-20082US | — | — | ||
In Modem, there is a possible memory corruption due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interac… | ||||
| CVE-2024-33028US | high7.8 | — | ||
Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released. | ||||
| CVE-2024-33027US | high7.8 | — | ||
Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table. | ||||
| CVE-2024-33026US | — | — | ||
Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp. | ||||
| CVE-2024-33025US | — | — | ||
Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE. | ||||
| CVE-2024-33024US | — | — | ||
Transient DOS while parsing the ML IE when a beacon with length field inside the common info of ML IE greater than the ML IE length. | ||||
| CVE-2024-33023US | high7.8 | — | ||
Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events. | ||||
| CVE-2024-33020US | — | — | ||
Transient DOS while processing TID-to-link mapping IE elements. | ||||
showing 20 of 46
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan