DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Pixel Patchday Dezember 2024: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2024-12-05
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen oder vertrauliche Informationen offenzulegen.
01
beschreibt (14)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-53842US | — | — | ||
In cc_SendCcImsInfoIndMsg of cc_MmConManagement.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additiona… | ||||
| CVE-2024-53841US | —OT erhöht | — | ||
In startListeningForDeviceStateChanges, there is a possible Permission Bypass due to a confused deputy. This could lead to local escalation of privilege with no additional executio… | ||||
| CVE-2024-53840US | —OT erhöht | — | ||
there is a possible biometric bypass due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction… | ||||
| CVE-2024-53839US | — | — | ||
In GetCellInfoList() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband… | ||||
| CVE-2024-53838US | — | — | ||
In Exynos_parsing_user_data_registered_itu_t_t35 of VendorVideoAPI.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalatio… | ||||
| CVE-2024-53837US | — | — | ||
In prepare_response of lwis_periodic_io.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional e… | ||||
| CVE-2024-53836US | — | — | ||
In wbrc_bt_dev_write of wb_regon_coordinator.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with System execu… | ||||
| CVE-2024-53835US | —OT erhöht | — | ||
there is a possible biometric bypass due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction… | ||||
| CVE-2024-53834US | — | — | ||
In sms_DisplayHexDumpOfPrivacyBuffer of sms_Utilities.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure w… | ||||
| CVE-2024-53833US | — | — | ||
In prepare_response_locked of lwis_transaction.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with n… | ||||
| CVE-2024-47032US | — | — | ||
In construct_transaction_from_cmd of lwis_ioctl.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no a… | ||||
| CVE-2024-11624US | —OT erhöht | — | ||
there is a possible to add apps to bypass VPN due to Undeclared Permission . This could lead to local escalation of privilege with no additional execution privileges needed. User i… | ||||
| CVE-2024-39343US | — | — | ||
An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, Modem 5123, and Modem 5300. The baseband software… | ||||
| CVE-2024-8257US | — | — | ||
Google Android是美国谷歌（Google）公司的一套以Linux为基础的开源操作系统。
Google Android Pixel存在安全漏洞，该漏洞源于允许攻击者可以通过利用组件中的缺陷提升权限。 | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan