Filtered by vendor Google
Subscriptions
Filtered by product Android
Subscriptions
Total
7841 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2023-40082 | 1 Google | 1 Android | 2024-08-02 | 9.8 Critical |
| In modify_for_next_stage of fdt.rs, there is a possible way to render KASLR ineffective due to improperly used crypto. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2023-40120 | 1 Google | 1 Android | 2024-08-02 | 7.8 High |
| In multiple locations, there is a possible way to bypass user notification of foreground services due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2023-40089 | 1 Google | 1 Android | 2024-08-02 | 7.8 High |
| In getCredentialManagerPolicy of DevicePolicyManagerService.java, there is a possible method for users to select credential managers without permission due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2023-40074 | 1 Google | 1 Android | 2024-08-02 | 5.5 Medium |
| In saveToXml of PersistableBundle.java, invalid data could lead to local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2023-40098 | 1 Google | 1 Android | 2024-08-02 | 5.5 Medium |
| In mOnDone of NotificationConversationInfo.java, there is a possible way to access app notification data of another user due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2023-40078 | 1 Google | 1 Android | 2024-08-02 | 9.8 Critical |
| In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2023-40073 | 1 Google | 1 Android | 2024-08-02 | 5.5 Medium |
| In visitUris of Notification.java, there is a possible cross-user media read due to Confused Deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2023-40096 | 1 Google | 1 Android | 2024-08-02 | 7.8 High |
| In OpRecordAudioMonitor::onFirstRef of AudioRecordClient.cpp, there is a possible way to record audio from the background due to a missing flag. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2023-40077 | 1 Google | 1 Android | 2024-08-02 | 8.1 High |
| In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2023-40040 | 2 Google, Mycrops | 2 Android, Higrade | 2024-08-02 | 5.3 Medium |
| An issue was discovered in the MyCrops HiGrade "THC Testing & Cannabi" application 1.0.337 for Android. A remote attacker can start the camera feed via the com.cordovaplugincamerapreview.CameraActivity component in some situations. NOTE: this is only exploitable on Android versions that lack runtime permission checks, and of those only Android SDK 5.1.1 API 22 is consistent with the manifest. Thus, this applies only to Android Lollipop, affecting less than five percent of Android devices as of 2023. | ||||
| CVE-2023-40080 | 1 Google | 1 Android | 2024-08-02 | 7.8 High |
| In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2023-38554 | 2 Google, Unisoc | 14 Android, S8000, Sc7731e and 11 more | 2024-08-02 | 5.5 Medium |
| In wcn bsp driver, there is a possible out of bounds write due to a missing bounds check.This could lead to local denial of service with no additional execution privileges | ||||
| CVE-2023-38553 | 2 Google, Unisoc | 14 Android, S8000, Sc7731e and 11 more | 2024-08-02 | 6.7 Medium |
| In gnss service, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed | ||||
| CVE-2023-38463 | 2 Google, Unisoc | 9 Android, Sc7731e, Sc9832e and 6 more | 2024-08-02 | 5.5 Medium |
| In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges | ||||
| CVE-2023-38460 | 2 Google, Unisoc | 9 Android, Sc7731e, Sc9832e and 6 more | 2024-08-02 | 7.8 High |
| In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges | ||||
| CVE-2023-38466 | 2 Google, Unisoc | 13 Android, S8000, Sc9832e and 10 more | 2024-08-02 | 5.5 Medium |
| In ims service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges | ||||
| CVE-2023-38452 | 2 Google, Unisoc | 9 Android, Sc7731e, Sc9832e and 6 more | 2024-08-02 | 7.8 High |
| In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges | ||||
| CVE-2023-38459 | 2 Google, Unisoc | 9 Android, Sc7731e, Sc9832e and 6 more | 2024-08-02 | 7.8 High |
| In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges | ||||
| CVE-2023-38458 | 2 Google, Unisoc | 9 Android, Sc7731e, Sc9832e and 6 more | 2024-08-02 | 7.8 High |
| In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges | ||||
| CVE-2023-38445 | 2 Google, Unisoc | 9 Android, Sc7731e, Sc9832e and 6 more | 2024-08-02 | 5.5 Medium |
| In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges | ||||