NLIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Kwetsbaarheden verholpen in Google Android en Samsung Mobile
Advisory ansehen veröffentlicht 2024-06-07
Google heeft kwetsbaarheden verholpen in Android.
01
beschreibt (31)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-31313US | high7.8 | — | ||
In availableToWriteBytes of MessageQueueBase.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no a… | ||||
| CVE-2024-31312US | medium5.5OT erhöht | — | ||
In multiple locations, there is a possible information leak due to a missing permission check. This could lead to local information disclosure exposing played media with no additio… | ||||
| CVE-2024-31311US | high7.8 | — | ||
In increment_annotation_count of stats_event.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no addi… | ||||
| CVE-2024-23696US | high7.8 | — | ||
In RGXCreateZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no ad… | ||||
| CVE-2024-20885US | low3.3 | — | ||
Improper component protection vulnerability in Samsung Dialer prior to SMR May-2024 Release 1 allows local attackers to make a call without proper permission. | ||||
| CVE-2024-20884US | high7.8 | — | ||
Incorrect use of privileged API vulnerability in getSemBatteryUsageStats in BatteryStatsService prior to SMR Jun-2024 Release 1 allows local attackers to use privileged API. | ||||
| CVE-2024-20883US | high7.8 | — | ||
Incorrect use of privileged API vulnerability in registerBatteryStatsCallback in BatteryStatsService prior to SMR Jun-2024 Release 1 allows local attackers to use privileged API. | ||||
| CVE-2024-20882US | medium4.6 | — | ||
Out-of-bounds read vulnerability in bootloader prior to SMR June-2024 Release 1 allows physical attackers to arbitrary data access. | ||||
| CVE-2024-20881US | medium6.7 | — | ||
Improper input validation vulnerability in chnactiv TA prior to SMR Jun-2024 Release 1 allows local privileged attackers lead to potential arbitrary code execution. | ||||
| CVE-2024-20880US | medium6.8 | — | ||
Stack-based buffer overflow vulnerability in bootloader prior to SMR Jun-2024 Release 1 allows physical attackers to overwrite memory. | ||||
| CVE-2024-20879US | high7.1 | — | ||
Improper input validation vulnerability in libsavscmn.so prior to SMR Jun-2024 Release 1 allows local attackers to write out-of-bounds memory. | ||||
| CVE-2024-20878US | high7.8 | — | ||
Heap out-of-bound write vulnerability in parsing grid image in libsavscmn.so prior to SMR June-2024 Release 1 allows local attackers to execute arbitrary code. | ||||
| CVE-2024-20877US | high7.8 | — | ||
Heap out-of-bound write vulnerability in parsing grid image header in libsavscmn.so prior to SMR Jun-2024 Release 1 allows local attackers to execute arbitrary code. | ||||
| CVE-2024-20876US | high7.8 | — | ||
Improper input validation in libsheifdecadapter.so prior to SMR Jun-2024 Release 1 allows local attackers to lead to memory corruption. | ||||
| CVE-2024-20875US | medium5.5 | — | ||
Improper caller verification vulnerability in SemClipboard prior to SMR June-2024 Release 1 allows local attackers to access arbitrary files. | ||||
| CVE-2024-20874US | high7.8 | — | ||
Improper access control vulnerability in SmartManagerCN prior to SMR Jun-2024 Release 1 allows local attackers to launch privileged activities. | ||||
| CVE-2024-20873US | medium6.0 | — | ||
Improper input validation vulnerability in caminfo driver prior to SMR Jun-2024 Release 1 allows local privileged attackers to write out-of-bounds memory. | ||||
| CVE-2024-23363US | — | — | ||
Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame. | ||||
| CVE-2023-43556US | high8.8 | — | ||
Memory corruption in Hypervisor when platform information mentioned is not aligned. | ||||
| CVE-2023-43551US | high7.5 | — | ||
Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command. | ||||
20 von 31 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Reference - cveprojectv5; nvdexternal
- Reference - ncscclearexternal
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan