DeutschShown in its original language — a full translation is planned for a future version.
Android Patchday - June 2024: Mehrere Schwachstellen
view advisory published 2024-06-03
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, um vertrauliche Informationen offenzulegen und um einen Denial-of-Service-Zustand zu erzeugen.
01
describes (40)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-31328US | — | — | ||
In broadcastIntentLockedTraced of BroadcastController.java, there is a possible way to launch arbitrary activities from the background on the paired companion phone due to a logic… | ||||
| CVE-2024-31327US | high7.0 | — | ||
In multiple functions of MessageQueueBase.h, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with no additional ex… | ||||
| CVE-2024-31326US | high7.8 | — | ||
In multiple locations, there is a possible way in which policy migration code will never be executed due to a logic error in the code. This could lead to local escalation of privil… | ||||
| CVE-2024-31325US | high7.8 | — | ||
In multiple locations, there is a possible way to reveal images across users data due to a logic error in the code. This could lead to local escalation of privilege with no additio… | ||||
| CVE-2024-31324US | high7.3 | — | ||
In hide of WindowState.java, there is a possible way to bypass tapjacking/overlay protection by launching the activity in portrait mode first and then rotating it to landscape mode… | ||||
| CVE-2024-31323US | high7.8 | — | ||
In onCreate of multiple files, there is a possible way to trick the user into granting health permissions due to tapjacking. This could lead to local escalation of privilege with n… | ||||
| CVE-2024-31322US | high7.8 | — | ||
In updateServicesLocked of AccessibilityManagerService.java, there is a possible way for an app to be hidden from the Setting while retaining Accessibility Service due to improper… | ||||
| CVE-2024-31319US | high7.8 | — | ||
In updateNotificationChannelFromPrivilegedListener of NotificationManagerService.java, there is a possible cross-user data leak due to a confused deputy. This could lead to local e… | ||||
| CVE-2024-31318US | high7.8OT elevated | — | ||
In CompanionDeviceManagerService.java, there is a possible way to pair a companion device without user acceptance due to a missing permission check. This could lead to local escala… | ||||
| CVE-2024-31317US | high7.8 | Exploit | ||
In multiple functions of ZygoteProcess.java, there is a possible way to achieve code execution as any app via WRITE_SECURE_SETTINGS due to unsafe deserialization. This could lead t… | ||||
| CVE-2024-31316US | high7.8 | — | ||
In onResult of AccountManagerService.java, there is a possible way to perform an arbitrary background activity launch due to parcel mismatch. This could lead to local escalation of… | ||||
| CVE-2024-31315US | high7.8 | — | ||
In multiple functions of ManagedServices.java, there is a possible way to hide an app with notification access in the Device & app notifications settings due to improper input vali… | ||||
| CVE-2024-31314US | medium5.5 | — | ||
In multiple functions of ShortcutService.java, there is a possible persistent DOS due to resource exhaustion. This could lead to local denial of service with no additional executio… | ||||
| CVE-2024-31313US | high7.8 | — | ||
In availableToWriteBytes of MessageQueueBase.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no a… | ||||
| CVE-2024-31312US | medium5.5OT elevated | — | ||
In multiple locations, there is a possible information leak due to a missing permission check. This could lead to local information disclosure exposing played media with no additio… | ||||
| CVE-2024-31311US | high7.8 | — | ||
In increment_annotation_count of stats_event.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no addi… | ||||
| CVE-2024-31310US | high7.8 | — | ||
In newServiceInfoLocked of AutofillManagerServiceImpl.java, there is a possible way to hide an enabled Autofill service app in the Autofill service settings due to improper input v… | ||||
| CVE-2024-23711US | high7.8 | — | ||
In DevmemXIntUnreserveRange of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege i… | ||||
| CVE-2024-23698US | high7.8 | — | ||
In RGXFWChangeOSidPriority of rgxfwutils.c, there is a possible arbitrary code execution due to a missing bounds check. This could lead to local escalation of privilege in the kern… | ||||
| CVE-2024-23697US | high7.8 | — | ||
In RGXCreateHWRTData_aux of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no… | ||||
showing 20 of 40
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan