Google Android

• CVE-2024-27235 Medium 5.5 In plugin_extern_func of , there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User in <0.1%
• CVE-2024-27234 Medium 5.9 In fvp_set_target of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User i <0.1%
• CVE-2024-27233 High 7.8 In ppcfw_init_secpolicy of ppcfw.c, there is a possible permission bypass due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. Us <0.1%
• CVE-2024-27230 Medium 5.1 In ProtocolPsKeepAliveStatusAdapter::getCode() of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with base <0.1%
• CVE-2024-27229 High 7.5 In ss_SendCallBarringPwdRequiredIndMsg of ss_CallBarring.c, there is a possible null pointer deref due to a missing null check. This could lead to remote denial of service with no additional execution 0.4%
• CVE-2024-27228 Critical 9.8 there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for explo 0.6%
• CVE-2024-27227 Critical 9.8 A malicious DNS response can trigger a number of OOB reads, writes, and other memory issues 0.3%
• CVE-2024-27226 High 8.4 In tmu_config_gov_params of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. Us <0.1%
• CVE-2024-27225 Medium 4.4 In sendHciCommand of bluetooth_hci.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. Us <0.1%
• CVE-2024-27224 High 7.8 In strncpy of strncpy.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User in <0.1%
• CVE-2024-27223 Medium 5.1 In EUTRAN_LCS_DecodeFacilityInformationElement of LPP_LcsManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure after auth 0.1%
• CVE-2024-27222 High 7.8 In onSkipButtonClick of FaceEnrollFoldPage.java, there is a possible way to access the file the app cannot access due to Intent Redirect GRANT_URI_PERMISSIONS Attack. This could lead to local escalat <0.1%
• CVE-2024-27221 High 7.8 In update_policy_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User <0.1%
• CVE-2024-27220 High 8.4 In lpm_req_handler of , there is a possible out of bounds memory access due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. <0.1%
• CVE-2024-27219 High 8.4 In tmu_set_pi of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User int 0.1%
• CVE-2024-27218 Medium 6.2 In update_freq_data of , there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User inte <0.1%
• CVE-2024-27213 High 8.4 In BroadcastSystemMessage of servicemgr.cpp, there is a possible Remote Code Execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges 0.1%
• CVE-2024-27212 High 7.8 In init_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interacti 0.1%
• CVE-2024-27211 High 7.7 In AtiHandleAPOMsgType of ati_Main.c, there is a possible OOB write due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User i <0.1%
• CVE-2024-27210 High 7.8 In policy_check of fvp.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User i <0.1%
• CVE-2024-27209 High 8.4 there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed f <0.1%
• CVE-2024-27208 High 8.4 there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed f 0.1%
• CVE-2024-27207 Critical 9.1 Exported broadcast receivers allowing malicious apps to bypass broadcast protection. 0.3%
• CVE-2024-27206 High 7.5 there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed fo 0.3%
• CVE-2024-27205 High 8.4 there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for explo <0.1%
• CVE-2024-27204 High 8.4 In tmu_set_gov_active of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. 0.1%
• CVE-2024-25993 High 8.4 In tmu_reset_tmu_trip_counter of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges neede 0.1%
• CVE-2024-25992 High 7.8 In tmu_tz_control of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User 0.1%
• CVE-2024-25991 Low 3.3 In acpm_tmu_ipc_handler of tmu_plugin.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges n 0.1%
• CVE-2024-25990 Medium 6.4 In pktproc_perftest_gen_rx_packet_sktbuf_mode of link_rx_pktproc.c, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execut <0.1%
• CVE-2024-25989 Medium 5.9 In gpu_slc_liveness_update of pixel_gpu_slc.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privil <0.1%
• CVE-2024-25988 High 8.4 In SAEMM_DiscloseGuti of SAEMM_RadioMessageCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution 0.1%
• CVE-2024-25987 Medium 6.7 In pt_sysctl_command of pt.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User i <0.1%
• CVE-2024-25986 High 7.8 In ppmp_unprotect_buf of drm_fw.c, there is a possible compromise of protected memory due to a logic error in the code. This could lead to local escalation of privilege to TEE with no additional execu <0.1%
• CVE-2024-25985 High 8.4 In bigo_unlocked_ioctl of bigo.c, there is a possible UAF due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interacti <0.1%
• CVE-2024-25984 Medium 6.2 In dumpBatteryDefend of dump_power.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges ne <0.1%
• CVE-2024-22011 High 7.5 In ss_ProcessRejectComponent of ss_MmConManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional executio 0.3%
• CVE-2024-22010 Medium 5.5 In dvfs_plugin_caller of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. Us <0.1%
• CVE-2024-22009 High 7.1 In init_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interacti <0.1%
• CVE-2024-22008 High 7.8 In config_gov_time_windows of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges nee <0.1%
• CVE-2024-22007 Medium 6.2 In constraint_check of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User <0.1%
• CVE-2024-22006 Medium 5.3 OOB read in the TMU plugin that allows for memory disclosure in the power management subsystem of the device. 0.2%
• CVE-2024-22005 High 8.4 there is a possible Authentication Bypass due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed <0.1%
• CVE-2024-23717 Critical 9.1 In access_secure_service_from_temp_bond of btm_sec.cc, there is a possible way to achieve keystroke injection due to improper input validation. This could lead to remote (proximal/adjacent) escalation 0.4%
• CVE-2024-0053 Low 3.3 In getCustomPrinterIcon of PrintManagerService.java, there is a possible way to view other user's images due to a confused deputy. This could lead to local information disclosure with no additional ex 0.1%
• CVE-2024-0052 Medium 6.2 In multiple functions of healthconnect, there is a possible leakage of exercise route data due to a missing permission check. This could lead to local information disclosure with no additional executi 0.1%
• CVE-2024-0051 High 7.8 In onQueueFilled of SoftMPEG4.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges neede 0.1%
• CVE-2024-0050 High 7.1 In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a missing validation check. This could lead to a local non-security issue with no additional execution 0.1%
• CVE-2024-0049 High 7.8 In multiple locations, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User int 0.2%
• CVE-2024-0048 High 8.4 In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of null responses. This could lead to local escalation of privile 0.1%