NLIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Kwetsbaarheden verholpen in Google Android en Samsung Mobile
Advisory ansehen veröffentlicht 2024-08-06
Google heeft kwetsbaarheden verholpen in Android.
01
beschreibt (63)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-34743US | high7.8 | — | ||
In setTransactionState of SurfaceFlinger.cpp, there is a possible way to perform tapjacking due to a logic error in the code. This could lead to local escalation of privilege with… | ||||
| CVE-2024-34742US | medium5.5 | — | ||
In shouldWrite of OwnersData.java, there is a possible edge case that prevents MDM policies from being persisted due to a logic error in the code. This could lead to local denial o… | ||||
| CVE-2024-34741US | high7.8 | Exploit | ||
In setForceHideNonSystemOverlayWindowIfNeeded of WindowState.java, there is a possible way for message content to be visible on the screensaver while lock screen visibility setting… | ||||
| CVE-2024-34740US | high7.8 | Exploit | ||
In attributeBytesBase64 and attributeBytesHex of BinaryXmlSerializer.java, there is a possible arbitrary XML injection due to an integer overflow. This could lead to local escalati… | ||||
| CVE-2024-34739US | high7.8 | Exploit | ||
In shouldRestrictOverlayActivities of UsbProfileGroupSettingsManager.java, there is a possible escape from SUW due to a logic error in the code. This could lead to local escalation… | ||||
| CVE-2024-34738US | high7.8 | — | ||
In multiple functions of AppOpsService.java, there is a possible way for unprivileged apps to read their own restrictRead app-op states due to a logic error in the code. This could… | ||||
| CVE-2024-34737US | high7.8 | — | ||
In ensureSetPipAspectRatioQuotaTracker of ActivityClientController.java, there is a possible way to generate unmovable and undeletable pip windows due to a logic error in the code.… | ||||
| CVE-2024-34736US | high7.8 | — | ||
In setupVideoEncoder of StagefrightRecorder.cpp, there is a possible asynchronous playback when B-frame support is enabled. This could lead to local escalation of privilege with no… | ||||
| CVE-2024-34734US | high7.8OT erhöht | — | ||
In onForegroundServiceButtonClicked of FooterActionsViewModel.kt, there is a possible way to disable the active VPN app from the lockscreen due to an insecure default value. This c… | ||||
| CVE-2024-34731US | high7.0 | — | ||
In multiple functions of TranscodingResourcePolicy.cpp, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no addi… | ||||
| CVE-2024-34727US | high7.5 | — | ||
In sdpu_compare_uuid_with_attr of sdp_utils.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no addit… | ||||
| CVE-2024-31333US | high7.8 | — | ||
In _MMU_AllocLevel of mmu_common.c, there is a possible arbitrary code execution due to an integer overflow. This could lead to local escalation of privilege in the kernel with no… | ||||
| CVE-2024-20082US | — | — | ||
In Modem, there is a possible memory corruption due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interac… | ||||
| CVE-2024-34620US | high7.8 | — | ||
Improper privilege management in SumeNNService prior to SMR Aug-2024 Release 1 allows local attackers to start privileged service. | ||||
| CVE-2024-34619US | high8.8 | — | ||
Improper input validation in librtp.so prior to SMR Aug-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for tri… | ||||
| CVE-2024-34618US | low3.3 | — | ||
Improper access control in System property prior to SMR Aug-2024 Release 1 allows local attackers to access cell related information. | ||||
| CVE-2024-34617US | low3.3OT erhöht | — | ||
Improper handling of insufficient permission in Telephony prior to SMR Aug-2024 Release 1 allows local attackers to configure default Message application. | ||||
| CVE-2024-34616US | medium5.5OT erhöht | — | ||
Improper handling of insufficient permission in KnoxDualDARPolicy prior to SMR Aug-2024 Release 1 allows local attackers to access sensitive data. | ||||
| CVE-2024-34615US | high7.8 | — | ||
Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to cause memory corruption. | ||||
| CVE-2024-34614US | high7.8 | — | ||
Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code. | ||||
20 von 63 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Reference - cveprojectv5; nvdexternal
- Reference - hkcertexternal
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan