DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Google Pixel: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2023-06-13
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Pixel ausnutzen, um seine Privilegien zu erhöhen, Informationen offenzulegen, einen Denial of Service zu verursachen oder beliebigen Programmcode auszuführen.
01
beschreibt (107)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-21237US | medium5.5OT kritisch | KEV | ||
In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or insufficient UI. This could lead to loc… | ||||
| CVE-2023-21236US | medium6.7 | — | ||
In aoc_service_set_read_blocked of aoc.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execut… | ||||
| CVE-2023-21226US | high7.5 | — | ||
In SAEMM_RetrieveTaiList of SAEMM_ContextManagement.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure wit… | ||||
| CVE-2023-21225US | high7.8OT erhöht | — | ||
there is a possible way to bypass the protected confirmation screen due to Failure to lock display power. This could lead to local escalation of privilege with no additional execut… | ||||
| CVE-2023-21224US | high7.5 | — | ||
In ss_ProcessReturnResultComponent of ss_MmConManagement.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure w… | ||||
| CVE-2023-21223US | high7.5 | — | ||
In LPP_ConvertGNSS_DataBitAssistance of LPP_CommonUtil.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure wit… | ||||
| CVE-2023-21222US | medium6.7 | — | ||
In load_dt_data of storage.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… | ||||
| CVE-2023-21220US | high7.5OT erhöht | — | ||
there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with no additional execut… | ||||
| CVE-2023-21219US | high7.5OT erhöht | — | ||
there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with no additional execut… | ||||
| CVE-2023-21214US | medium4.4 | — | ||
In addGroupWithConfigInternal of p2p_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disclosure with System ex… | ||||
| CVE-2023-21213US | medium4.4 | — | ||
In initiateTdlsTeardownInternal of sta_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the wifi… | ||||
| CVE-2023-21212US | medium4.4 | — | ||
In multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the wifi server with System execution pr… | ||||
| CVE-2023-21211US | medium5.5 | — | ||
In multiple files, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges nee… | ||||
| CVE-2023-21210US | medium4.4 | — | ||
In initiateHs20IconQueryInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with Sys… | ||||
| CVE-2023-21209US | medium6.7 | — | ||
In multiple functions of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local escalation of privilege with System execution… | ||||
| CVE-2023-21208US | medium4.4 | — | ||
In setCountryCodeInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System exe… | ||||
| CVE-2023-21207US | medium6.7 | — | ||
In initiateTdlsSetupInternal of sta_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System ex… | ||||
| CVE-2023-21206US | medium4.4 | — | ||
In initiateVenueUrlAnqpQueryInternal of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disclosure with Sy… | ||||
| CVE-2023-21205US | medium5.5 | — | ||
In startWpsPinDisplayInternal of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disclosure with no additi… | ||||
| CVE-2023-21204US | medium4.4 | — | ||
In multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the wifi server with System execution pr… | ||||
20 von 107 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan