Android
2441 vulnérabilités publiées citent ce produit. Les 200 plus récentes sont listées.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-21237 | Android-13 | In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or | MEDIUM 6.2 | 0.3 % | KEV | |
| CVE-2023-21236 | Android kernel | In aoc_service_set_read_blocked of aoc.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local es | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21226 | Android kernel | In SAEMM_RetrieveTaiList of SAEMM_ContextManagement.c, there is a possible out of bounds read due to an incorrect bounds check. This could l | HIGH 7.5 | 0.4 % | ||
| CVE-2023-21225 | Android kernel | there is a possible way to bypass the protected confirmation screen due to Failure to lock display power. This could lead to local escalatio | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21224 | Android kernel | In ss_ProcessReturnResultComponent of ss_MmConManagement.c, there is a possible out of bounds read due to a heap buffer overflow. This could | HIGH 7.5 | 0.5 % | ||
| CVE-2023-21223 | Android kernel | In LPP_ConvertGNSS_DataBitAssistance of LPP_CommonUtil.c, there is a possible out of bounds read due to a missing bounds check. This could l | HIGH 7.5 | 0.4 % | ||
| CVE-2023-21222 | Android kernel | In load_dt_data of storage.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21220 | Android kernel | there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote informat | HIGH 7.5 | 0.3 % | ||
| CVE-2023-21219 | Android kernel | there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote informat | HIGH 7.5 | 0.3 % | ||
| CVE-2023-21214 | Android-13 | In addGroupWithConfigInternal of p2p_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to loc | MEDIUM 4.4 | 0.1 % | ||
| CVE-2023-21213 | Android-13 | In initiateTdlsTeardownInternal of sta_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to l | MEDIUM 4.4 | 0.1 % | ||
| CVE-2023-21212 | Android-13 | In multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in | MEDIUM 4.4 | 0.1 % | ||
| CVE-2023-21211 | Android-13 | In multiple files, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure wit | MEDIUM 5.5 | 0.1 % | ||
| CVE-2023-21210 | Android-13 | In initiateHs20IconQueryInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead | MEDIUM 4.4 | 0.1 % | ||
| CVE-2023-21209 | Android-13 | In multiple functions of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local escal | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21208 | Android-13 | In setCountryCodeInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to loca | MEDIUM 4.4 | 0.1 % | ||
| CVE-2023-21207 | Android-13 | In initiateTdlsSetupInternal of sta_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to loca | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21206 | Android-13 | In initiateVenueUrlAnqpQueryInternal of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead | MEDIUM 4.4 | 0.1 % | ||
| CVE-2023-21205 | Android-13 | In startWpsPinDisplayInternal of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to loc | MEDIUM 5.5 | 0.1 % | ||
| CVE-2023-21204 | Android-13 | In multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in | MEDIUM 4.4 | 0.1 % | ||
| CVE-2023-21203 | Android-13 | In startWpsPbcInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local e | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21202 | Android-13 | In btm_delete_stored_link_key_complete of btm_devctl.cc, there is a possible out of bounds read due to a missing bounds check. This could le | MEDIUM 4.5 | 0.1 % | ||
| CVE-2023-21201 | Android-13 | In on_create_record_event of btif_sdp_server.cc, there is a possible out of bounds read due to a missing null check. This could lead to remo | HIGH 7.5 | 0.5 % | ||
| CVE-2023-21200 | Android-13 | In on_remove_iso_data_path of btm_iso_impl.h, there is a possible out of bounds read due to improper input validation. This could lead to lo | MEDIUM 5.5 | 0.1 % | ||
| CVE-2023-21199 | Android-13 | In btu_ble_proc_ltk_req of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local infor | MEDIUM 4.4 | 0.1 % | ||
| CVE-2023-21198 | Android-13 | In remove_sdp_record of btif_sdp_server.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local i | MEDIUM 5.5 | 0.1 % | ||
| CVE-2023-21197 | Android-13 | In btm_acl_process_sca_cmpl_pkt of btm_acl.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to r | HIGH 7.5 | 0.4 % | ||
| CVE-2023-21196 | Android-13 | In btm_ble_batchscan_filter_track_adv_vse_cback of btm_ble_batchscan.cc, there is a possible out of bounds read due to a missing bounds chec | MEDIUM 4.4 | 0.1 % | ||
| CVE-2023-21195 | Android-13 | In btm_ble_periodic_adv_sync_tx_rcvd of btm_ble_gap.cc, there is a possible out of bounds read due to an incorrect bounds check. This could | MEDIUM 4.5 | 0.1 % | ||
| CVE-2023-21194 | Android-13 | In gatt_dbg_op_name of gatt_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local informa | MEDIUM 4.4 | 0.1 % | ||
| CVE-2023-21193 | Android-13 | In VideoFrame of VideoFrame.h, there is a possible abort due to an integer overflow. This could lead to remote information disclosure with n | HIGH 7.5 | 0.4 % | ||
| CVE-2023-21192 | Android-13 | In setInputMethodWithSubtypeIdLocked of InputMethodManagerService.java, there is a possible way to setup input methods that are not enabled | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21191 | Android-13 | In fixNotification of NotificationManagerService.java, there is a possible bypass of notification hide preference due to a logic error in th | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21190 | Android-13 | In btm_acl_encrypt_change of btm_acl.cc, there is a possible way for a remote device to turn off encryption without resulting in a terminate | MEDIUM 5.0 | 0.1 % | ||
| CVE-2023-21189 | Android-13 | In startLockTaskMode of LockTaskController.java, there is a possible bypass of lock task mode due to a logic error in the code. This could l | HIGH 7.3 | 0.1 % | ||
| CVE-2023-21188 | Android-13 | In btm_ble_update_inq_result of btm_ble_gap.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to loc | MEDIUM 4.4 | 0.1 % | ||
| CVE-2023-21187 | Android-13 | In onCreate of UsbAccessoryUriActivity.java, there is a possible way to escape the Setup Wizard due to a logic error in the code. This could | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21186 | Android-13 | In LogResponse of Dns.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service | HIGH 7.5 | 0.5 % | ||
| CVE-2023-21185 | Android-13 | In multiple functions of WifiNetworkFactory.java, there is a missing permission check. This could lead to local escalation of privilege from | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21184 | Android-13 | In getCurrentPrivilegedPackagesForAllUsers of CarrierPrivilegesTracker.java, there is a possible permission bypass due to a logic error in t | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21183 | Android-13 | In ForegroundUtils of ForegroundUtils.java, there is a possible way to read NFC tag data while the app is still in the background due to a l | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21182 | Android-13 | In Exynos_parsing_user_data_registered_itu_t_t35 of VendorVideoAPI.cpp, there is a possible out of bounds read due to a missing bounds check | MEDIUM 4.4 | 0.1 % | ||
| CVE-2023-21181 | Android-13 | In btm_ble_update_inq_result of btm_ble_gap.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to loc | MEDIUM 4.4 | 0.1 % | ||
| CVE-2023-21180 | Android-13 | In xmlParseTryOrFinish of parser.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote informat | HIGH 7.5 | 0.5 % | ||
| CVE-2023-21179 | Android-13 | In parseSecurityParamsFromXml of XmlUtil.java, there is a possible bypass of user specified wifi encryption protocol due to improperly used | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21178 | Android-13 | In installKey of KeyUtil.cpp, there is a possible failure of file encryption due to a race condition. This could lead to local information d | MEDIUM 4.1 | 0.1 % | ||
| CVE-2023-21177 | Android-13 | In requestAppKeyboardShortcuts of WindowManagerService.java, there is a possible way to infer the app a user is interacting with due to a mi | MEDIUM 5.5 | 0.1 % | ||
| CVE-2023-21176 | Android-13 | In list_key_entries of utils.rs, there is a possible way to disable user credentials due to resource exhaustion. This could lead to local de | MEDIUM 4.4 | 0.1 % | ||
| CVE-2023-21175 | Android-13 | In onCreate of DataUsageSummary.java, there is a possible method for a guest user to enable or disable mobile data due to a permissions bypa | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21174 | Android-13 | In isPageSearchEnabled of BillingCycleSettings.java, there is a possible way for the guest user to change data limits due to a permissions b | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21173 | Android-13 | In multiple methods of DataUsageList.java, there is a possible way to learn about admin user's network activities due to a missing permissio | MEDIUM 5.5 | 0.1 % | ||
| CVE-2023-21172 | Android-13 | In multiple functions of WifiCallingSettings.java, there is a possible way to change calling preferences for the admin user due to a permiss | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21171 | Android-13 | In verifyInputEvent of InputDispatcher.cpp, there is a possible way to conduct click fraud due to side channel information disclosure. This | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21170 | Android-13 | In executeSetClientTarget of ComposerCommandEngine.h, there is a possible out of bounds read due to a missing bounds check. This could lead | MEDIUM 4.4 | 0.1 % | ||
| CVE-2023-21169 | Android-13 | In inviteInternal of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local informati | MEDIUM 4.4 | 0.1 % | ||
| CVE-2023-21168 | Android-13 | In convertCbYCrY of ColorConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local infor | MEDIUM 5.5 | 0.1 % | ||
| CVE-2023-21167 | Android-13 | In setProfileName of DevicePolicyManagerService.java, there is a possible way to crash the SystemUI menu due to a missing bounds check. This | MEDIUM 5.5 | 0.1 % | ||
| CVE-2023-21161 | Android kernel | In Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privi | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21160 | Android kernel | In BuildSetTcsFci of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local | MEDIUM 5.5 | 0.1 % | ||
| CVE-2023-21159 | Android kernel | In Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privi | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21158 | Android kernel | In encode of miscdata.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclo | MEDIUM 4.4 | 0.1 % | ||
| CVE-2023-21157 | Android kernel | In encode of wlandata.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of pri | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21156 | Android kernel | In BuildGetRadioNode of protocolmiscbulider.cpp, there is a possible out of bounds read due to improper input validation. This could lead to | MEDIUM 4.4 | 0.1 % | ||
| CVE-2023-21155 | Android kernel | In BuildSetRadioNode of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a missing null check. This could lead to loca | MEDIUM 5.5 | 0.1 % | ||
| CVE-2023-21154 | Android kernel | In StoreAdbSerialNumber of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to | MEDIUM 4.4 | 0.1 % | ||
| CVE-2023-21153 | Android kernel | In Do_AIMS_SET_CALL_WAITING of imsservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to loca | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21152 | Android kernel | In FaceStatsAnalyzer::InterpolateWeightList of face_stats_analyzer.cc, there is a possible out of bounds read due to a missing bounds check. | MEDIUM 5.5 | 0.1 % | ||
| CVE-2023-21151 | Android kernel | In the Google BMS kernel module, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21150 | Android kernel | In handle_set_parameters_ctrl of hal_socket.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to l | MEDIUM 4.4 | 0.1 % | ||
| CVE-2023-21149 | Android kernel | In registerGsmaServiceIntentReceiver of ShannonRcsService.java, there is a possible way to activate/deactivate RCS service due to a missing | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21148 | Android kernel | In BuildSetConfig of protocolimsbuilder.cpp, there is a possible out of bounds read due to a missing null check. This could lead to local in | MEDIUM 4.4 | 0.1 % | ||
| CVE-2023-21147 | Android kernel | In lwis_i2c_device_disable of lwis_device_i2c.c, there is a possible UAF due to a logic error in the code. This could lead to local escalati | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21146 | Android kernel | there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution pr | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21066 | Android kernel | In cd_CodeMsg of cd_codec.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution | CRITICAL 9.8 | 0.5 % | ||
| CVE-2022-20443 | Android-13 | In hasInputInfo of Layer.cpp, there is a possible bypass of user interaction requirements due to a tapjacking/overlay attack. This could lea | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21144 | Android-11 Android-12 Android-12L Android-13 | In doInBackground of NotificationContentInflater.java, there is a possible temporary denial or service due to long running operations. This | HIGH 7.5 | 0.7 % | ||
| CVE-2023-21143 | Android-11 Android-12 Android-12L Android-13 | In multiple functions of multiple files, there is a possible way to make the device unusable due to improper input validation. This could le | MEDIUM 5.5 | 0.1 % | ||
| CVE-2023-21142 | Android-11 Android-12 Android-12L Android-13 | In multiple files, there is a possible way to access traces in the dev mode due to a permissions bypass. This could lead to local informatio | MEDIUM 5.5 | 0.1 % | ||
| CVE-2023-21141 | Android-11 Android-12 Android-12L Android-13 | In several functions of several files, there is a possible way to access developer mode traces due to a permissions bypass. This could lead | MEDIUM 5.5 | 0.1 % | ||
| CVE-2023-21139 | Android-13 | In bindPlayer of MediaControlPanel.java, there is a possible launch arbitrary activity in SysUI due to Unsafe Intent. This could lead to loc | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21138 | Android-11 Android-12 Android-12L Android-13 | In onNullBinding of CallRedirectionProcessor.java, there is a possible long lived connection due to improper input validation. This could le | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21137 | Android-11 Android-12 Android-12L Android-13 | In several methods of JobStore.java, uncaught exceptions in job map parsing could lead to local persistent denial of service with no additio | MEDIUM 5.5 | 0.1 % | ||
| CVE-2023-21136 | Android-11 Android-12 Android-12L Android-13 | In multiple functions of JobStore.java, there is a possible way to cause a crash on startup due to improper input validation. This could lea | MEDIUM 5.5 | 0.1 % | ||
| CVE-2023-21135 | Android-11 Android-12 Android-12L Android-13 | In onCreate of NotificationAccessSettings.java, there is a possible failure to persist notifications settings due to improper input validati | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21131 | Android-11 Android-12 Android-12L Android-13 | In checkKeyIntentParceledCorrectly() of ActivityManagerService.java, there is a possible bypass of Parcel Mismatch mitigations due to a logi | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21130 | Android-13 | In btm_ble_periodic_adv_sync_lost of btm_ble_gap.cc, there is a possible remote code execution due to a buffer overflow. This could lead to | CRITICAL 9.8 | 0.5 % | ||
| CVE-2023-21129 | Android-11 Android-12 Android-12L Android-13 | In getFullScreenIntentDecision of NotificationInterruptStateProviderImpl.java, there is a possible activity launch while the app is in the b | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21128 | Android-11 Android-12 Android-12L Android-13 | In various functions of AppStandbyController.java, there is a possible way to break manageability scenarios due to a logic error in the code | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21127 | Android-11 Android-12 Android-12L Android-13 | In readSampleData of NuMediaExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote code | HIGH 8.8 | 0.5 % | ||
| CVE-2023-21126 | Android-13 | In bindOutputSwitcherAndBroadcastButton of MediaControlPanel.java, there is a possible launch arbitrary activity under SysUI due to Unsafe I | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21124 | Android-11 Android-12 Android-12L Android-13 | In run of multiple files, there is a possible escalation of privilege due to unsafe deserialization. This could lead to local escalation of | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21123 | Android-11 Android-12 Android-12L Android-13 | In multiple functions of multiple files, there is a possible way to bypass the DISALLOW_DEBUGGING_FEATURES restriction for tracing due to a | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21122 | Android-11 Android-12 Android-12L Android-13 | In various functions of various files, there is a possible way to bypass the DISALLOW_DEBUGGING_FEATURES restriction for tracing due to a mi | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21121 | Android-11 Android-12 | In onResume of AppManagementFragment.java, there is a possible way to prevent users from forgetting a previously connected VPN due to improp | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21120 | Android SoC | In multiple functions of cdm_engine.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21115 | Android-11 Android-12 Android-12L | In btm_sec_encrypt_change of btm_sec.cc, there is a possible way to downgrade the link key type due to improperly used crypto. This could le | HIGH 8.8 | 0.1 % | ||
| CVE-2023-21108 | Android-11 Android-12 Android-12L Android-13 | In sdpu_build_uuid_seq of sdp_discovery.cc, there is a possible out of bounds write due to a use after free. This could lead to remote code | HIGH 8.8 | 0.2 % | ||
| CVE-2023-21105 | Android-11 Android-12 Android-12L Android-13 | In multiple functions of ChooserActivity.java, there is a possible cross-user media read due to a confused deputy. This could lead to local | MEDIUM 5.5 | 0.1 % | ||
| CVE-2023-21101 | Android SoC | In multiple functions of WVDrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of | HIGH 7.0 | 0.1 % | ||
| CVE-2023-21095 | Android-12L Android-13 | In canStartSystemGesture of RecentsAnimationDeviceState.java, there is a possible partial lockscreen bypass due to a race condition. This co | MEDIUM 4.7 | 0.1 % | ||
| CVE-2021-0945 | Android SoC | In _PMRCreate of the PowerVR kernel driver, a missing bounds check means it is possible to overwrite heap memory via PhysmemNewRamBackedPMR. | CRITICAL 9.8 | 0.3 % | ||
| CVE-2021-0701 | Android SoC | In PVRSRVBridgeSyncPrimOpCreate of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could all | CRITICAL 9.8 | 0.3 % | ||
| CVE-2023-21118 | Android-11 Android-12 Android-12L Android-13 | In unflattenString8 of Sensor.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local informatio | MEDIUM 6.2 | 0.2 % | ||
| CVE-2023-21117 | Android-13 | In registerReceiverWithFeature of ActivityManagerService.java, there is a possible way for isolated processes to register a broadcast receiv | HIGH 8.4 | 0.1 % | ||
| CVE-2023-21116 | Android-11 Android-12 Android-12L Android-13 | In verifyReplacingVersionCode of InstallPackageHelper.java, there is a possible way to downgrade system apps below system image version due | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21112 | Android-11 Android-12 Android-12L Android-13 | In AnalyzeMfcResp of NxpMfcReader.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local informa | MEDIUM 5.5 | 0.1 % | ||
| CVE-2023-21111 | Android-11 Android-12 Android-12L Android-13 | In several functions of PhoneAccountRegistrar.java, there is a possible way to prevent an access to emergency services due to improper input | MEDIUM 6.2 | 0.1 % | ||
| CVE-2023-21110 | Android-11 Android-12 Android-12L Android-13 | In several functions of SnoozeHelper.java, there is a possible way to grant notifications access due to resource exhaustion. This could lead | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21109 | Android-11 Android-12 Android-12L Android-13 | In multiple places of AccessibilityService, there is a possible way to hide the app from the user due to a logic error in the code. This cou | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21107 | Android-11 Android-12 Android-12L Android-13 | In retrieveAppEntry of NotificationAccessDetails.java, there is a missing permission check. This could lead to local escalation of privilege | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21106 | Android kernel | In adreno_set_param of adreno_gpu.c, there is a possible memory corruption due to a double free. This could lead to local escalation of priv | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21104 | Android-12L Android-13 | In applySyncTransaction of WindowOrganizer.java, a missing permission check could lead to local information disclosure with no additional ex | MEDIUM 5.5 | 0.1 % | ||
| CVE-2023-21103 | Android-11 Android-12 Android-12L Android-13 | In registerPhoneAccount of PhoneAccountRegistrar.java, uncaught exceptions in parsing persisted user data could lead to local persistent den | MEDIUM 5.5 | 0.1 % | ||
| CVE-2023-21102 | Android kernel | In __efi_rt_asm_wrapper of efi-rt-wrapper.S, there is a possible bypass of shadow stack protection due to a logic error in the code. This co | HIGH 7.8 | 0.2 % | ||
| CVE-2023-20930 | Android-11 Android-12 Android-12L Android-13 | In pushDynamicShortcut of ShortcutPackage.java, there is a possible way to get the device into a boot loop due to resource exhaustion. This | MEDIUM 5.5 | 0.1 % | ||
| CVE-2023-20914 | Android-11 | In onSetRuntimePermissionGrantStateByDeviceAdmin of AdminRestrictedPermissionsUtils.java, there is a possible way for the work profile to re | MEDIUM 5.5 | 0.1 % | ||
| CVE-2021-0877 | Android SoC | Product: AndroidVersions: Android SoCAndroid ID: A-273754094 | CRITICAL 9.8 | 0.3 % | ||
| CVE-2023-21100 | Android-12 Android-12L Android-13 | In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privi | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21099 | Android-11 Android-12 Android-12L Android-13 | In multiple methods of PackageInstallerSession.java, there is a possible way to start foreground services from the background due to a logic | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21098 | Android-11 Android-12 Android-12L Android-13 | In multiple functions of AccountManagerService.java, there is a possible loading of arbitrary code into the System Settings app due to a con | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21097 | Android-11 Android-12 Android-12L Android-13 | In toUriInner of Intent.java, there is a possible way to launch an arbitrary activity due to a confused deputy. This could lead to local esc | HIGH 7.8 | 0.2 % | ||
| CVE-2023-21096 | Android-12 Android-12L Android-13 | In OnWakelockReleased of attribution_processor.cc, there is a use after free that could lead to remote code execution with no additional exe | CRITICAL 9.8 | 0.5 % | ||
| CVE-2023-21094 | Android-11 Android-12 Android-12L Android-13 | In sanitize of LayerState.cpp, there is a possible way to take over the screen display and swap the display content due to a missing permiss | HIGH 7.8 | 0.2 % | ||
| CVE-2023-21093 | Android-11 Android-12 Android-12L Android-13 | In extractRelativePath of FileUtils.java, there is a possible way to access files in a directory belonging to other applications due to a pa | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21092 | Android-11 Android-12 Android-12L Android-13 | In retrieveServiceLocked of ActiveServices.java, there is a possible way to dynamically register a BroadcastReceiver using permissions of Sy | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21091 | Android-13 | In canDisplayLocalUi of AppLocalePickerActivity.java, there is a possible way to change system app locales due to a missing permission check | MEDIUM 5.5 | 0.1 % | ||
| CVE-2023-21090 | Android-13 | In parseUsesPermission of ParsingPackageUtils.java, there is a possible boot loop due to resource exhaustion. This could lead to local denia | MEDIUM 5.0 | 0.1 % | ||
| CVE-2023-21089 | Android-11 Android-12 Android-12L Android-13 | In startInstrumentation of ActivityManagerService.java, there is a possible way to keep the foreground service alive while the app is in the | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21088 | Android-12 Android-12L Android-13 | In deliverOnFlushComplete of LocationProviderManager.java, there is a possible way to bypass background activity launch restrictions due to | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21087 | Android-11 Android-12 Android-12L Android-13 | In PreferencesHelper.java, an uncaught exception may cause the device to get stuck in a boot loop. This could lead to local persistent denia | MEDIUM 5.5 | 0.1 % | ||
| CVE-2023-21086 | Android-11 Android-12 Android-12L Android-13 | In isToggleable of SecureNfcEnabler.java and SecureNfcPreferenceController.java, there is a possible way to enable NFC from a secondary acco | HIGH 7.8 | 0.2 % | ||
| CVE-2023-21085 | Android-11 Android-12 Android-12L Android-13 | In nci_snd_set_routing_cmd of nci_hmsgs.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote | HIGH 8.8 | 0.2 % | ||
| CVE-2023-21084 | Android-13 | In buildPropFile of filesystem.go, there is a possible insecure hash due to an improperly used crypto. This could lead to local escalation o | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21083 | Android-11 Android-12 Android-12L Android-13 | In onNullBinding of CallScreeningServiceHelper.java, there is a possible way to record audio without showing a privacy indicator due to a pe | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21082 | Android-11 Android-12 Android-12L Android-13 | In getNumberFromCallIntent of NewOutgoingCallIntentBroadcaster.java, there is a possible way to enumerate other user's contact phone number | MEDIUM 5.5 | 0.1 % | ||
| CVE-2023-21081 | Android-11 Android-12 Android-12L Android-13 | In multiple functions of PackageInstallerService.java and related files, there is a possible way to bypass background activity launch restri | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21080 | Android-11 Android-12 Android-12L Android-13 | In register_notification_rsp of btif_rc.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local i | MEDIUM 5.5 | 0.1 % | ||
| CVE-2023-20967 | Android-11 Android-12 Android-12L Android-13 | In avdt_scb_hdl_pkt_no_frag of avdt_scb_act.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to | HIGH 7.8 | 0.1 % | ||
| CVE-2023-20950 | Android-11 Android-12 Android-12L | In AlarmManagerActivity of AlarmManagerActivity.java, there is a possible way to bypass background activity launch restrictions via a pendin | HIGH 7.8 | 0.1 % | ||
| CVE-2023-20941 | Android kernel | In acc_ctrlrequest_composite of f_accessory.c, there is a possible out of bounds write due to a missing bounds check. This could lead to phy | MEDIUM 6.6 | 0.2 % | ||
| CVE-2023-20935 | Android-11 Android-12 Android-12L Android-13 | In deserialize of multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information | MEDIUM 5.5 | 0.1 % | ||
| CVE-2023-20909 | Android-11 Android-12 Android-12L Android-13 | In multiple functions of RunningTasks.java, there is a possible privilege escalation due to a missing privilege check. This could lead to lo | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-0885 | Android SoC | In PVRSRVBridgeSyncPrimOpTake of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow | HIGH 7.8 | 0.1 % | ||
| CVE-2021-0884 | Android SoC | In PVRSRVBridgePhysmemImportSparseDmaBuf of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that | HIGH 7.8 | 0.1 % | ||
| CVE-2021-0883 | Android SoC | In PVRSRVBridgeCacheOpQueue of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow o | HIGH 7.8 | 0.1 % | ||
| CVE-2021-0882 | Android SoC | In PVRSRVBridgeRGXKickSync of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow ou | HIGH 7.8 | 0.1 % | ||
| CVE-2021-0881 | Android SoC | In PVRSRVBridgeRGXKickCDM of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out | HIGH 7.8 | 0.1 % | ||
| CVE-2021-0880 | Android SoC | In PVRSRVBridgeRGXKickTA3D of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow ou | HIGH 7.8 | 0.1 % | ||
| CVE-2021-0879 | Android SoC | In PVRSRVBridgeRGXTDMSubmitTransfer of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could | HIGH 7.8 | 0.1 % | ||
| CVE-2021-0878 | Android SoC | In PVRSRVBridgeServerSyncGetStatus of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could | HIGH 7.8 | 0.1 % | ||
| CVE-2021-0876 | Android SoC | In PVRSRVBridgePhysmemNewRamBackedLockedPMR of the PowerVR kernel driver, a missing size check means there is a possible integer overflow th | HIGH 7.8 | 0.1 % | ||
| CVE-2021-0875 | Android SoC | In PVRSRVBridgeChangeSparseMem of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allo | HIGH 7.8 | 0.1 % | ||
| CVE-2021-0874 | Android SoC | In PVRSRVBridgeDevicememHistorySparseChange of the PowerVR kernel driver, a missing size check means there is a possible integer overflow th | HIGH 7.8 | 0.1 % | ||
| CVE-2021-0873 | Android SoC | In PVRSRVBridgeRGXKickRS of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out- | HIGH 7.8 | 0.1 % | ||
| CVE-2021-0872 | Android SoC | In PVRSRVBridgeRGXKickVRDM of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow ou | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21079 | Android kernel | In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escala | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21078 | Android kernel | In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21077 | Android kernel | In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21076 | Android kernel | In createTransmitFollowupRequest of nan.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21075 | Android kernel | In get_svc_hash of nan.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of pr | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21073 | Android kernel | In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21072 | Android kernel | In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21071 | Android kernel | In dhd_prot_ioctcmplt_process of dhd_msgbuf.c, there is a possible out of bounds write due to improper input validation. This could lead to | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21070 | Android kernel | In add_roam_cache_list of wl_roam.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21069 | Android kernel | In wl_update_hidden_ap_ie of wl_cfgscan.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local e | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21068 | Android kernel | In (TBD) of (TBD), there is a possible way to boot with a hidden debug policy due to a missing warning to the user. This could lead to local | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21067 | Android kernel | Product: AndroidVersions: Android kernelAndroid ID: A-254114726References: N/A | HIGH 7.5 | 0.3 % | ||
| CVE-2023-21065 | Android kernel | In fdt_next_tag of fdt.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privile | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21064 | Android kernel | In DoSetPinControl of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escala | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21063 | Android kernel | In ParseWithAuthType of simdata.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escal | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21062 | Android kernel | In DoSetTempEcc of imsservice.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalat | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21061 | Android kernel | Product: AndroidVersions: Android kernelAndroid ID: A-229255400References: N/A | HIGH 7.5 | 0.3 % | ||
| CVE-2023-21060 | Android kernel | In sms_GetTpPiIe of sms_PduCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informat | HIGH 7.5 | 0.4 % | ||
| CVE-2023-21059 | Android kernel | In EUTRAN_LCS_DecodeFacilityInformationElement of LPP_LcsManagement.c, there is a possible out of bounds read due to a missing bounds check. | HIGH 7.5 | 0.4 % | ||
| CVE-2023-21058 | Android kernel | In lcsm_SendRrAcquiAssist of lcsm_bcm_assist.c, there is a possible out of bounds write due to a missing bounds check. This could lead to re | CRITICAL 9.8 | 0.5 % | ||
| CVE-2023-21057 | Android kernel | In ProfSixDecomTcpSACKoption of RohcPacketCommon, there is a possible out of bounds write due to a missing bounds check. This could lead to | CRITICAL 9.8 | 0.5 % | ||
| CVE-2023-21056 | Android kernel | In lwis_slc_buffer_free of lwis_device_slc.c, there is a possible memory corruption due to type confusion. This could lead to local escalati | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21055 | Android kernel | In dit_hal_ioctl of dit.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with | MEDIUM 6.4 | 0.1 % | ||
| CVE-2023-21054 | Android kernel | In EUTRAN_LCS_ConvertLCS_MOLRReq of LPP_CommonUtil.c, there is a possible out of bounds write due to a logic error in the code. This could l | HIGH 7.2 | 0.5 % | ||
| CVE-2023-21053 | Android kernel | In sms_ExtractCbLanguage of sms_CellBroadcast.c, there is a possible out of bounds read due to a missing bounds check. This could lead to re | HIGH 7.5 | 0.4 % | ||
| CVE-2023-21052 | Android kernel | In setToExternal of ril_external_client.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21051 | Android kernel | In dwc3_exynos_clk_get of dwc3-exynos.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21050 | Android kernel | In load_png_image of ExynosHWCHelper.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21049 | Android kernel | In append_camera_metadata of camera_metadata.c, there is a possible out of bounds read due to a missing bounds check. This could lead to loc | MEDIUM 4.4 | 0.1 % | ||
| CVE-2023-21048 | Android kernel | In handleEvent of nan.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclo | MEDIUM 4.4 | 0.1 % | ||
| CVE-2023-21047 | Android kernel | In ConvertToHalMetadata of aidl_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local inf | MEDIUM 4.4 | 0.1 % | ||
| CVE-2023-21046 | Android kernel | In ConvertToHalMetadata of aidl_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local | MEDIUM 4.4 | 0.1 % | ||
| CVE-2023-21045 | Android kernel | When cpif handles probe failures, there is a possible out of bounds read due to a use after free. This could lead to local information discl | MEDIUM 4.4 | 0.1 % | ||
| CVE-2023-21044 | Android kernel | In init of VendorGraphicBufferMeta, there is a possible out of bounds read due to a missing bounds check. This could lead to local informati | MEDIUM 4.4 | 0.1 % | ||
| CVE-2023-21043 | Android kernel | In (TBD) of (TBD), there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21042 | Android kernel | In (TBD) of (TBD), there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21041 | Android kernel | In append_to_params of param_util.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local esca | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21040 | Android kernel | In buildCommand of bluetooth_ccc.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local esca | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21039 | Android kernel | In dumpstateBoard of Dumpstate.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local inform | MEDIUM 4.4 | 0.1 % | ||
| CVE-2023-21038 | Android kernel | In cs40l2x_cp_trigger_queue_show of cs40l2x.c, there is a possible out of bounds write due to a use after free. This could lead to local esc | MEDIUM 6.7 | 0.1 % | ||
| CVE-2023-21036 | Android kernel | In BitmapExport.java, there is a possible failure to truncate images due to a logic error in the code.Product: AndroidVersions: Android kern | MEDIUM 5.5 | 0.5 % | ||
| CVE-2023-21035 | Android-13 | In multiple functions of BackupHelper.java, there is a possible way for an app to get permissions previously granted to another app with the | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21034 | Android-13 | In multiple functions of SensorService.cpp, there is a possible access of accurate sensor data due to a permissions bypass. This could lead | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21033 | Android-13 | In addNetwork of WifiManager.java, there is a possible way to trigger a persistent DoS due to resource exhaustion. This could lead to local | MEDIUM 5.5 | 0.1 % | ||
| CVE-2023-21032 | Android-13 | In _ufdt_output_node_to_fdt of ufdt_convert.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to loca | MEDIUM 4.4 | 0.1 % |