DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Samsung Android: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2023-12-04
Ein Angreifer kann mehrere Schwachstellen in Samsung Android ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.
01
beschreibt (51)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-45781US | medium5.5 | — | ||
In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User execution privileges… | ||||
| CVE-2023-45777US | high7.8 | Exploit | ||
In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to launch arbitrary activities using system privileges due to Parcel Mismatch. This could… | ||||
| CVE-2023-45776US | high7.8 | — | ||
In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additiona… | ||||
| CVE-2023-45775US | high7.8 | — | ||
In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additiona… | ||||
| CVE-2023-45774US | high7.8 | — | ||
In fixUpIncomingShortcutInfo of ShortcutService.java, there is a possible way to view another user's image due to a confused deputy. This could lead to local escalation of privileg… | ||||
| CVE-2023-45773US | high7.8 | — | ||
In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with User execution… | ||||
| CVE-2023-40103US | high7.8 | — | ||
In multiple locations, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege with no additional execution privileges need… | ||||
| CVE-2023-40098US | medium5.5 | — | ||
In mOnDone of NotificationConversationInfo.java, there is a possible way to access app notification data of another user due to a logic error in the code. This could lead to local… | ||||
| CVE-2023-40097US | high7.8 | — | ||
In hasPermissionForActivity of PackageManagerHelper.java, there is a possible URI grant due to improper input validation. This could lead to local escalation of privilege with no a… | ||||
| CVE-2023-40096US | high7.8 | — | ||
In OpRecordAudioMonitor::onFirstRef of AudioRecordClient.cpp, there is a possible way to record audio from the background due to a missing flag. This could lead to local escalation… | ||||
| CVE-2023-40095US | high7.8 | — | ||
In createDontSendToRestrictedAppsBundle of PendingIntentUtils.java, there is a possible background activity launch due to a missing check. This could lead to local escalation of pr… | ||||
| CVE-2023-40094US | high7.8OT erhöht | — | ||
In keyguardGoingAway of ActivityTaskManagerService.java, there is a possible lock screen bypass due to a missing permission check. This could lead to local escalation of privilege… | ||||
| CVE-2023-40092US | medium5.5 | — | ||
In verifyShortcutInfoPackage of ShortcutService.java, there is a possible way to see another user's image due to a confused deputy. This could lead to local information disclosure… | ||||
| CVE-2023-40091US | high7.8 | — | ||
In onTransact of IncidentService.cpp, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no additional executio… | ||||
| CVE-2023-40090US | medium6.5 | — | ||
In BTM_BleVerifySignature of btm_ble.cc, there is a possible way to bypass signature validation due to side channel information disclosure. This could lead to remote escalation of… | ||||
| CVE-2023-40089US | high7.8OT erhöht | — | ||
In getCredentialManagerPolicy of DevicePolicyManagerService.java, there is a possible method for users to select credential managers without permission due to a missing permission… | ||||
| CVE-2023-40088US | high8.8 | — | ||
In callback_thread_event of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible memory corruption due to a use after free. This could lead to remote (proximal/a… | ||||
| CVE-2023-40087US | high8.8 | — | ||
In transcodeQ*ToFloat of btif_avrcp_audio_track.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to paired device escalation of privilege… | ||||
| CVE-2023-40084US | high7.8 | Exploit | ||
In run of MDnsSdListener.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privilege… | ||||
| CVE-2023-40083US | medium5.5 | — | ||
In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User execution privileges… | ||||
20 von 51 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan