NLShown in its original language — a full translation is planned for a future version.
Kwetsbaarheden verholpen in Google Android en Samsung Mobile
view advisory published 2024-10-08
Google heeft kwetsbaarheden verholpen in Android. Samsung heeft de voor Samsung mobile devices relevante kwetsbaarheden verholpen in Samsung Mobile.
01
describes (34)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-40677US | —OT elevated | — | ||
In shouldSkipForInitialSUW of AdvancedPowerUsageDetail.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local… | ||||
| CVE-2024-40676US | — | Exploit | ||
In checkKeyIntent of AccountManagerService.java, there is a possible way to bypass intent security check and install an unknown app due to a confused deputy. This could lead to loc… | ||||
| CVE-2024-40675US | — | — | ||
In parseUriInternal of Intent.java, there is a possible infinite loop due to improper input validation. This could lead to local denial of service with no additional execution priv… | ||||
| CVE-2024-40674US | — | — | ||
In validateSsid of WifiConfigurationUtil.java, there is a possible way to overflow a system configuration file due to a logic error in the code. This could lead to local denial of… | ||||
| CVE-2024-40673US | — | — | ||
In Source of ZipFile.java, there is a possible way for an attacker to execute arbitrary code by manipulating Dynamic Code Loading due to improper input validation. This could lead… | ||||
| CVE-2024-40672US | — | — | ||
In onCreate of ChooserActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege… | ||||
| CVE-2024-40670US | — | — | ||
In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User int… | ||||
| CVE-2024-40669US | — | — | ||
In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User int… | ||||
| CVE-2024-40651US | — | — | ||
In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution priv… | ||||
| CVE-2024-40649US | — | — | ||
In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution priv… | ||||
| CVE-2024-34748US | — | — | ||
In _DevmemXReservationPageAddress of devicemem_server.c, there is a possible use-after-free due to improper casting. This could lead to local escalation of privilege in the kernel… | ||||
| CVE-2024-34733US | — | — | ||
In DevmemXIntMapPages of devicemem_server.c, there is a possible arbitrary code execution due to an integer overflow. This could lead to local escalation of privilege in the kernel… | ||||
| CVE-2024-34732US | — | — | ||
In RGXMMUCacheInvalidate of rgxmem.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of privilege in the kernel with no a… | ||||
| CVE-2024-34669US | high8.8 | — | ||
Out-of-bounds write in parsing h.263+ format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User inter… | ||||
| CVE-2024-34668US | high8.8 | — | ||
Out-of-bounds write in parsing h.263 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User intera… | ||||
| CVE-2024-34667US | high8.8 | — | ||
Out-of-bounds write in parsing h.265 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User intera… | ||||
| CVE-2024-34666US | high8.8 | — | ||
Out-of-bounds write in parsing h.264 format in a specific mode in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system pri… | ||||
| CVE-2024-34665US | high8.8 | — | ||
Out-of-bounds write in parsing h.264 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User intera… | ||||
| CVE-2024-34664US | low2.4 | — | ||
Improper check for exception conditions in Knox Guard prior to SMR Oct-2024 Release 1 allows physical attackers to bypass Knox Guard in a multi-user environment. | ||||
| CVE-2024-34663US | medium5.5 | — | ||
Integer overflow in libSEF.quram.so prior to SMR Oct-2024 Release 1 allows local attackers to write out-of-bounds memory. | ||||
showing 20 of 34
02
references
External citations — patches, advisories, analysis.
- Reference - cveprojectv5; nvdexternal
- Reference - hkcertexternal
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan