Google Android

• CVE-2024-0047 Medium 5.5 In writeUserLP of UserManagerService.java, device policies are serialized with an incorrect tag due to a logic error in the code. This could lead to local denial of service when policies are deseriali 0.1%
• CVE-2024-0046 High 7.8 In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a logic error in the code. This could lead to local escalation of privilege with no 0.1%
• CVE-2024-0045 High 7.5 In smp_proc_sec_req of smp_act.cc, there is a possible out of bounds read due to improper input validation. This could lead to remote (proximal/adjacent) information disclosure with no additional exec 0.3%
• CVE-2024-0044 High 7.8 In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation. This could lead to local escalation of privilege with no additional execu 1.5%
• CVE-2024-0039 Critical 9.8 In attp_build_value_cmd of att_protocol.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges need 1.5%
• CVE-2024-0023 High 7.4 In ConvertRGBToPlanarYUV of Codec2BufferUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional executi 0.4%
• CVE-2024-0021 High 7.0 In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way for an app in the work profile to enable notification listener services due to a logic error in the code. This could 0.1%
• CVE-2024-0020 Medium 5.5 In onActivityResult of NotificationSoundPreference.java, there is a possible way to hear audio files belonging to a different user due to a confused deputy. This could lead to local information disclo 0.1%
• CVE-2024-0019 Medium 6.2 In setListening of AppOpsControllerImpl.java, there is a possible way to hide the microphone privacy indicator when restarting systemUI due to a missing check for active recordings. This could lead to 0.1%
• CVE-2024-0018 High 8.4 In convertYUV420Planar16ToY410 of ColorConverter.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional executi 0.1%
• CVE-2024-0017 Medium 5.5 In shouldUseNoOpLocation of CameraActivity.java, there is a possible confused deputy due to a permissions bypass. This could lead to local information disclosure with no additional execution privilege 0.1%
• CVE-2024-0016 Medium 6.5 In multiple locations, there is a possible out of bounds read due to a missing bounds check. This could lead to paired device information disclosure with no additional execution privileges needed. Use 0.2%
• CVE-2024-0015 High 7.8 In convertToComponentName of DreamService.java, there is a possible way to launch arbitrary protected activities due to intent redirection. This could lead to local escalation of privilege with User e 0.4%
• CVE-2023-40085 Low 3.3 In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privi <0.1%
• CVE-2023-21165 High 8.4 In DevmemIntUnmapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional exec <0.1%
• CVE-2024-0041 High 8.4 In removePersistentDot of SystemStatusAnimationSchedulerImpl.kt, there is a possible race condition due to a logic error in the code. This could lead to local escalation of privilege that fails to rem <0.1%
• CVE-2024-0040 High 7.5 In setParameter of MtpPacket.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. 2.0%
• CVE-2024-0038 High 8.4 In injectInputEventToInputFilter of AccessibilityManagerService.java, there is a possible arbitrary input event injection due to a missing permission check. This could lead to local escalation of priv 0.1%
• CVE-2024-0037 Low 3.3 In applyCustomDescription of SaveUi.java, there is a possible way to view images belonging to a different user due to a missing permission check. This could lead to local information disclosure with U 0.1%
• CVE-2024-0036 High 7.4 In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to bypass the restrictions on starting activities from the background due to a logic error in the code. This co 0.1%
• CVE-2024-0035 High 7.4 In onNullBinding of TileLifecycleManager.java, there is a possible way to launch an activity from the background due to a missing null check. This could lead to local escalation of privilege with no a 0.1%
• CVE-2024-0034 High 7.8 In BackgroundLaunchProcessController, there is a possible way to launch arbitrary activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional ex 0.1%
• CVE-2024-0033 High 8.4 In multiple functions of ashmem-dev.cpp, there is a possible missing seal due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed 0.2%
• CVE-2024-0032 Medium 6.8 In multiple locations, there is a possible way to request access to directories that should be hidden due to improper input validation. This could lead to local escalation of privilege with User execu 0.5%
• CVE-2024-0031 Critical 9.8 In attp_build_read_by_type_value_cmd of att_protocol.cc , there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional executio 0.6%
• CVE-2024-0030 Medium 5.5 In btif_to_bta_response of btif_gatt_util.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution priv 0.4%
• CVE-2024-0029 High 7.1 In multiple files, there is a possible way to capture the device screen when disallowed by device policy due to a logic error in the code. This could lead to local escalation of privilege with no addi 0.1%
• CVE-2024-0014 High 8.4 In startInstall of UpdateFetcher.java, there is a possible way to trigger a malicious config update due to a logic error. This could lead to local escalation of privilege with no additional execution 0.1%
• CVE-2023-40122 Medium 5.3 In applyCustomDescription of SaveUi.java, there is a possible way to view other user's images due to a confused deputy. This could lead to local information disclosure with no additional execution pri 0.3%
• CVE-2023-40093 Medium 5.5 In multiple files, there is a possible way that trimmed content could be included in PDF output due to a logic error in the code. This could lead to local information disclosure with no additional exe 0.1%
• CVE-2023-40124 Medium 5.5 In multiple locations, there is a possible cross-user read due to a confused deputy. This could lead to local information disclosure of photos or other images with no additional execution privileges n <0.1%
• CVE-2023-40115 Critical 9.8 In readLogs of StatsService.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User in 0.2%
• CVE-2023-40114 High 8.4 In multiple functions of MtpFfsHandle.cpp , there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges ne <0.1%
• CVE-2023-40113 Medium 5.5 In multiple locations, there is a possible way for apps to access cross-user message data due to a missing permission check. This could lead to local information disclosure with no additional executio <0.1%
• CVE-2023-40112 Medium 5.1 In ippSetValueTag of ipp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure of past print jobs or other print-related information, <0.1%
• CVE-2023-40111 High 7.8 In setMediaButtonReceiver of MediaSessionRecord.java, there is a possible way to send a pending intent on behalf of system_server due to a confused deputy. This could lead to local escalation of privi <0.1%
• CVE-2023-40110 Medium 6.2 In multiple functions of MtpPacket.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges 0.1%
• CVE-2023-40109 High 7.3 In createFromParcel of UsbConfiguration.java, there is a possible background activity launch (BAL) due to a permissions bypass. This could lead to local escalation of privilege with no additional exec 0.2%
• CVE-2023-40107 High 7.4 In ARTPWriter of ARTPWriter.cpp, there is a possible use after free due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User int <0.1%
• CVE-2023-40106 High 7.8 In sanitizeSbn of NotificationManagerService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additio <0.1%
• CVE-2023-40105 Medium 5.5 In backupAgentCreated of ActivityManagerService.java, there is a possible way to leak sensitive data due to a missing permission check. This could lead to local information disclosure with no addition <0.1%
• CVE-2023-40104 High 7.5 In ca-certificates, there is a possible way to read encrypted TLS data due to untrusted cryptographic certificates. This could lead to remote information disclosure with no additional execution privil 0.3%
• CVE-2023-40100 High 8.4 In discovery_thread of Dns64Configuration.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges n <0.1%
• CVE-2024-22012 High 7.8 there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed f <0.1%
• CVE-2023-6181 Unrated An oversight in BCB handling of reboot reason that allows for persistent code execution 0.4%
• CVE-2023-48425 Critical 9.8 U-Boot vulnerability resulting in persistent Code Execution  0.4%
• CVE-2023-48424 Critical 9.8 U-Boot shell vulnerability resulting in Privilege escalation in a production device 0.3%
• CVE-2023-48417 Unrated Missing Permission checks resulting in unauthorized access and Manipulation in KeyChainActivity Application 0.3%
• CVE-2023-48423 Unrated In dhcp4_SetPDNAddress of dhcp4_Main.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. 0.5%
• CVE-2023-48422 Unrated In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. 0.1%