NLShown in its original language — a full translation is planned for a future version.
Kwetsbaarheden verholpen in Google Android en Samsung Mobile
view advisory published 2024-07-03
Google heeft kwetsbaarheden verholpen in Android.
01
describes (54)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-34726US | high7.8 | — | ||
In PVRSRV_MMap of pvr_bridge_k.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with… | ||||
| CVE-2024-34725US | high7.0 | — | ||
In DevmemIntUnexportCtx of devicemem_server.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of privilege in the kernel… | ||||
| CVE-2024-34724US | high7.0 | — | ||
In _UnrefAndMaybeDestroy of pmr.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of privilege in the kernel with no addi… | ||||
| CVE-2024-34723US | high7.8 | — | ||
In onTransact of ParcelableListBinder.java , there is a possible way to steal mAllowlistToken to launch an app from background due to a logic error in the code. This could lead to… | ||||
| CVE-2024-34722US | high8.8 | — | ||
In smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a protocol. This could lead to remote escalat… | ||||
| CVE-2024-34721US | medium5.5 | — | ||
In ensureFileColumns of MediaProvider.java, there is a possible disclosure of files owned by another user due to improper input validation. This could lead to local information dis… | ||||
| CVE-2024-34720US | high7.8 | — | ||
In com_android_internal_os_ZygoteCommandBuffer_nativeForkRepeatedly of com_android_internal_os_ZygoteCommandBuffer.cpp, there is a possible method to perform arbitrary code executi… | ||||
| CVE-2024-31339US | high7.8 | — | ||
In multiple functions of StatsService.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execut… | ||||
| CVE-2024-31335US | high7.8 | — | ||
In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in… | ||||
| CVE-2024-31334US | high7.8 | — | ||
In DevmemIntFreeDefBackingPage of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privileg… | ||||
| CVE-2024-31332US | high7.8OT elevated | — | ||
In multiple locations, there is a possible way to bypass a restriction on adding new Wi-Fi connections due to a missing permission check. This could lead to local escalation of pri… | ||||
| CVE-2024-31331US | high7.3 | — | ||
In setMimeGroup of PackageManagerService.java, there is a possible way to hide the service from Settings due to a logic error in the code. This could lead to local escalation of pr… | ||||
| CVE-2024-31320US | high7.8 | Exploit | ||
In setSkipPrompt of AssociationRequest.java , there is a possible way to establish a companion device association without any confirmation due to CDM. This could lead to local esca… | ||||
| CVE-2024-34595US | high7.8 | — | ||
Improper access control in clickAdapterItem of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities. | ||||
| CVE-2024-34594US | medium5.5 | — | ||
Exposure of sensitive information in proc file system prior to SMR Jul-2024 Release 1 allows local attackers to read kernel memory address. | ||||
| CVE-2024-34593US | high8.8 | — | ||
Improper input validation in parsing and distributing RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arbitrary code with system privile… | ||||
| CVE-2024-34592US | medium4.3 | — | ||
Improper input validation in parsing RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction… | ||||
| CVE-2024-34591US | medium4.3 | — | ||
Improper input validation in parsing an item data from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service.… | ||||
| CVE-2024-34590US | medium4.3 | — | ||
Improper input validation혻in parsing an item type from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service.… | ||||
| CVE-2024-34589US | medium6.5 | — | ||
Improper input validation in parsing RTCP RR packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is… | ||||
showing 20 of 54
02
references
External citations — patches, advisories, analysis.
- Reference - cveprojectv5; nvdexternal
- Source - androidexternal
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan