DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Google Android: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2023-12-04
Ein entfernter Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen.
01
beschreibt (94)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-45866US | medium6.3 | Exploit | ||
Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentiall… | ||||
| CVE-2023-33107US | high7.8OT kritisch | KEV | ||
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. | ||||
| CVE-2023-33106US | high7.8OT kritisch | KEV | ||
Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND. | ||||
| CVE-2023-33098US | high7.5 | — | ||
Transient DOS while parsing WPA IES, when it is passed with length more than expected size. | ||||
| CVE-2023-33097US | high7.5 | — | ||
Transient DOS in WLAN Firmware while processing a FTMR frame. | ||||
| CVE-2023-33092US | high7.8 | — | ||
Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size. | ||||
| CVE-2023-33089US | high7.5 | — | ||
Transient DOS when processing a NULL buffer while parsing WLAN vdev. | ||||
| CVE-2023-33088US | high7.8 | — | ||
Memory corruption when processing cmd parameters while parsing vdev. | ||||
| CVE-2023-33087US | high7.8 | — | ||
Memory corruption in Core while processing RX intent request. | ||||
| CVE-2023-33081US | high7.5 | — | ||
Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast. | ||||
| CVE-2023-33080US | high7.5 | — | ||
Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame. | ||||
| CVE-2023-33079US | high7.8 | — | ||
Memory corruption in Audio while running invalid audio recording from ADSP. | ||||
| CVE-2023-33063US | high7.8OT kritisch | KEV | ||
Memory corruption in DSP Services during a remote call from HLOS to DSP. | ||||
| CVE-2023-33054US | critical9.1 | — | ||
Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data. | ||||
| CVE-2023-33053US | high7.8 | — | ||
Memory corruption in Kernel while parsing metadata. | ||||
| CVE-2023-33022US | high7.8 | — | ||
Memory corruption in HLOS while invoking IOCTL calls from user-space. | ||||
| CVE-2023-33018US | high7.8 | — | ||
Memory corruption while using the UIM diag command to get the operators name. | ||||
| CVE-2023-33017US | high7.8 | — | ||
Memory corruption in Boot while running a ListVars test in UEFI Menu during boot. | ||||
| CVE-2023-28588US | high7.5 | Exploit | ||
Transient DOS in Bluetooth Host while rfc slot allocation. | ||||
| CVE-2023-28587US | high7.8 | — | ||
Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level. | ||||
20 von 94 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan