Google Android

• CVE-2024-43090 Medium 5.0 In multiple locations, there is a possible cross-user image read due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interact 0.2%
• CVE-2024-43089 High 7.8 In updateInternal of MediaProvider.java , there is a possible access of another app's files due to a missing permission check. This could lead to local escalation of privilege with no additional execu <0.1%
• CVE-2024-43088 High 8.4 In multiple functions in AppInfoBase.java, there is a possible way to manipulate app permission settings belonging to another user on the device due to a missing permission check. This could lead to l 0.2%
• CVE-2024-43087 High 8.4 In getInstalledAccessibilityPreferences of AccessibilitySettings.java, there is a possible way to hide an enabled accessibility service in the accessibility service settings due to a logic error in th 0.1%
• CVE-2024-43086 Medium 5.5 In validateAccountsInternal of AccountManagerService.java, there is a possible way to leak account credentials to a third party app due to a confused deputy. This could lead to local information discl <0.1%
• CVE-2024-43085 High 7.8 In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents over USB without unlocking the device due to a logic error in the code. This could lead to local escalat 0.1%
• CVE-2024-43084 Medium 6.2 In visitUris of multiple files, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. Use <0.1%
• CVE-2024-43083 Medium 6.2 In validate of WifiConfigurationUtil.java , there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privile <0.1%
• CVE-2024-43082 Medium 5.5 In onActivityResult of EditUserPhotoController.java, there is a possible cross-user media read due to a confused deputy. This could lead to local information disclosure with no additional execution pr 0.1%
• CVE-2024-43081 High 7.8 In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a logic error in the code. This could lead to local escalation of privilege with no 0.1%
• CVE-2024-43080 High 7.8 In onReceive of AppRestrictionsFragment.java, there is a possible escalation of privilege due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution p 0.1%
• CVE-2024-40671 High 7.8 In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible way to achieve arbitrary code execution due to a missing permission check. This could lead to local escalation of privilege with no 0.1%
• CVE-2024-40661 High 7.8 In mayAdminGrantPermission of AdminRestrictedPermissionsUtils.java, there is a possible way to access the microphone due to a missing permission check. This could lead to local escalation of privilege <0.1%
• CVE-2024-40660 High 7.8 In setTransactionState of SurfaceFlinger.cpp, there is a possible way to change protected display attributes due to a logic error in the code. This could lead to local escalation of privilege with no 0.1%
• CVE-2024-34747 High 8.4 In DevmemXIntMapPages of devicemem_server.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional exec 0.1%
• CVE-2024-34729 High 8.4 In multiple locations, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privil 0.1%
• CVE-2024-34719 High 8.4 In multiple locations, there is a possible permissions bypass due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User interac 0.1%
• CVE-2024-31337 High 8.4 In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional ex 0.1%
• CVE-2024-23715 High 7.8 In PMRWritePMPageList of pmr.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution pr 0.1%
• CVE-2023-35686 High 7.8 In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional ex <0.1%
• CVE-2023-35659 High 7.8 In DevmemIntChangeSparse of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no ad 0.1%
• CVE-2024-47041 High 7.4 In valid_address of syscall.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. <0.1%
• CVE-2024-47035 High 7.4 In vring_init of external/headers/include/virtio/virtio_ring.h, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no addit <0.1%
• CVE-2024-47034 Medium 5.1 there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for <0.1%
• CVE-2024-47033 High 7.4 In lwis_allocator_free of lwis_allocator.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges need <0.1%
• CVE-2024-47031 High 7.4 Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-329163861. <0.1%
• CVE-2024-47030 Medium 5.1 Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-315191818. <0.1%
• CVE-2024-47029 Medium 5.1 In TrustySharedMemoryManager::GetSharedMemory of ondevice/trusty/trusty_shared_memory_manager.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local info <0.1%
• CVE-2024-47028 Medium 5.1 In ffu_flash_pack of ffu.c, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction <0.1%
• CVE-2024-47027 High 7.4 In sm_mem_compat_get_vmm_obj of lib/sm/shared_mem.c, there is a possible arbitrary physical memory access due to improper input validation. This could lead to local escalation of privilege with no add <0.1%
• CVE-2024-47026 Medium 5.1 In gsc_gsa_rescue of gsc_gsa.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. <0.1%
• CVE-2024-47025 Medium 5.1 In ppmp_protect_buf of drm_fw.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges ne <0.1%
• CVE-2024-47024 High 7.4 In vring_size of external/headers/include/virtio/virtio_ring.h, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional <0.1%
• CVE-2024-47023 High 7.4 there is a possible man-in-the-middle attack due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not 0.2%
• CVE-2024-47022 Medium 5.1 Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-331255656. 0.2%
• CVE-2024-47021 Medium 5.1 In sms_ExtractCbLanguage of sms_CellBroadcast.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution pri 0.2%
• CVE-2024-47020 Medium 5.1 Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ABL component, A-331966488. 0.2%
• CVE-2024-47019 Medium 5.5 In ProtocolEmbmsSaiListAdapter::Init() of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband <0.1%
• CVE-2024-47018 Medium 5.5 In pmucal_rae_handle_seq_int of flexpmu_cal_rae.c, there is a possible out of bounds read due to a buffer overflow. This could lead to local information disclosure with no additional execution privile <0.1%
• CVE-2024-47017 High 7.8 In ufshc_scsi_cmd of ufs.c, there is a possible stack variable use after free due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. <0.1%
• CVE-2024-47016 High 7.8 there is a possible privilege escalation due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need <0.1%
• CVE-2024-47015 Medium 5.5 In ProtocolMiscHwConfigChangeAdapter::GetData() of protocolmiscadapter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with b <0.1%
• CVE-2024-47014 High 8.8 Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-330537292. 0.2%
• CVE-2024-47013 High 7.8 In pmucal_rae_handle_seq_int of flexpmu_cal_rae.c, there is a possible arbitrary write due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileg <0.1%
• CVE-2024-47012 High 7.8 In mm_GetMobileIdIndexForNsUpdate of mm_GmmPduCodec.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional exe <0.1%
• CVE-2024-44101 High 7.5 there is a possible Null Pointer Dereference (modem crash) due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interactio 0.4%
• CVE-2024-44100 High 7.5 Android before 2024-10-05 on Google Pixel devices allows information disclosure in the modem component, A-299774545. 0.3%
• CVE-2024-44099 Medium 5.5 There is a possible Local bypass of user interaction due to an insecure default value. This could lead to local information disclosure with no additional execution privileges needed. User interaction <0.1%
• CVE-2024-44098 High 7.4 In lwis_device_event_states_clear_locked of lwis_event.c, there is a possible privilege escalation due to a double free. This could lead to local escalation of privilege with no additional execution p <0.1%
• CVE-2024-44097 Critical 9.8 According to the researcher: "The TLS connections are encrypted against tampering or eavesdropping. However, the application does not validate the server certificate properly while initializing the TL 0.2%