NLShown in its original language — a full translation is planned for a future version.
Kwetsbaarheden verholpen in Google Android en Samsung Mobile
view advisory published 2024-09-05
Google heeft kwetsbaarheden verholpen in Android.
01
describes (53)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-39432US | medium4.5 | — | ||
In UMTS RLC driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed. | ||||
| CVE-2024-39431US | medium4.5 | — | ||
In UMTS RLC driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed. | ||||
| CVE-2024-40662US | high7.8 | — | ||
In scheme of Uri.java, there is a possible way to craft a malformed Uri object due to improper input validation. This could lead to local escalation of privilege with no additional… | ||||
| CVE-2024-40659US | medium5.5 | — | ||
In getRegistration of RemoteProvisioningService.java, there is a possible way to permanently disable the AndroidKeyStore key generation feature by updating the attestation keys of… | ||||
| CVE-2024-40658US | high7.8 | — | ||
In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no ad… | ||||
| CVE-2024-40657US | high7.8 | — | ||
In addPreferencesForType of AccountTypePreferenceLoader.java, there is a possible way to disable apps for other users due to a confused deputy. This could lead to local escalation… | ||||
| CVE-2024-40656US | medium5.5 | — | ||
In handleCreateConferenceComplete of ConnectionServiceWrapper.java, there is a possible way to reveal images across users due to a confused deputy. This could lead to local informa… | ||||
| CVE-2024-40655US | high7.8OT elevated | — | ||
In bindAndGetCallIdentification of CallScreeningServiceHelper.java, there is a possible way to maintain a while-in-use permission in the background due to a permissions bypass. Thi… | ||||
| CVE-2024-40654US | high7.8OT elevated | — | ||
In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges need… | ||||
| CVE-2024-40652US | high7.8OT elevated | — | ||
In onCreate of SettingsHomepageActivity.java, there is a possible way to access the Settings app while the device is provisioning due to a missing permission check. This could lead… | ||||
| CVE-2024-40650US | high7.8OT elevated | — | ||
In wifi_item_edit_content of styles.xml , there is a possible FRP bypass due to Missing check for FRP state. This could lead to local escalation of privilege with no additional exe… | ||||
| CVE-2024-31336US | high7.8 | — | ||
In PVRSRVBridgeRGXKickTA3D2 of server_rgxta3d_bridge.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privil… | ||||
| CVE-2024-23716US | high7.0 | — | ||
In DevmemIntPFNotify of devicemem_server.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege in the kernel with no addit… | ||||
| CVE-2024-34655US | medium5.5 | — | ||
Incorrect use of privileged API in UniversalCredentialManager prior to SMR Sep-2024 Release 1 allows local attackers to access privileged API related to UniversalCredentialManager. | ||||
| CVE-2024-34654US | medium5.5 | — | ||
Improper Export of android application component in My Files prior to SMR Sep-2024 Release 1 allows local attackers to access files with My Files' privilege. | ||||
| CVE-2024-34653US | medium4.6 | — | ||
Path Traversal in My Files prior to SMR Sep-2024 Release 1 allows physical attackers to access directories with My Files' privilege. | ||||
| CVE-2024-34652US | low3.3OT elevated | — | ||
Incorrect authorization in kperfmon prior to SMR Sep-2024 Release 1 allows local attackers to access information related to performance including app usage. | ||||
| CVE-2024-34651US | medium5.5OT elevated | — | ||
Improper authorization in My Files prior to SMR Sep-2024 Release 1 allows local attackers to access restricted data in My Files. | ||||
| CVE-2024-34650US | low3.3OT elevated | — | ||
Incorrect authorization in CocktailbarService prior to SMR Sep-2024 Release 1 allows local attackers to access privileged APIs related to Edge panel. | ||||
| CVE-2024-34649US | low2.4 | — | ||
Improper access control in new Dex Mode in multitasking framework prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access an unlocked screen. | ||||
showing 20 of 53
02
references
External citations — patches, advisories, analysis.
- Reference - cveprojectv5; nvdexternal
- Reference - certbundde; hkcertexternal
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan