Summary
Google heeft kwetsbaarheden verholpen in Android.
Details
Interpretaties
De kwetsbaarheden stellen een kwaadwillende in staat om zich verhoogde rechten toe te kennen, een Denial-of-Service te veroorzaken of toegang te krijgen tot gevoelige gegevens.
Voor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide link te openen, of een malafide app te installeren en draaien.
In deze updates zijn tevens kwetsbaarheden verholpen in Closed-source componenten van Imagination Technologies, MediaTek en Qualcomm.
Google heeft zoals gebruikelijk verder weinig inhoudelijke informatie vrijgegeven.
Oplossingen
Google heeft updates uitgebracht om de kwetsbaarheden te verhelpen in Android 12, 13 en 14.
Samsung heeft updates uitgebracht om de voor Samsung relevante kwetsbaarheden te verhelpen in Samsung Mobile devices.
Zie bijgevoegde referenties voor meer informatie.
Vulnerabilities 31
-
Critical 9.8
In modem, there is a possible out of bounds write due to improper input invalidation. This could lead to remote denial …
-
Critical 9.3
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OS
Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization.
-
Critical 9.3
Buffer Copy Without Checking Size of Input in Hypervisor
Memory corruption in Hypervisor when platform information mentioned is not aligned.
-
Critical 9.1
Improper Authentication in Multi-Mode Call Processor
Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.
-
High 8.4
In RGXCreateZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could l…
-
High 7.9
Improper access control vulnerability in SmartManagerCN prior to SMR Jun-2024 Release 1 allows local attackers to launc…
-
High 7.8
In multiple functions of ActivityManagerService.java, there is a possible way to escape Google Play protection due to a…
-
High 7.8
Buffer Copy Without Checking Size of Input in Trusted Execution Environment
Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.
-
High 7.8
binder: check offset alignment in binder_get_object()
In the Linux kernel, the following vulnerability has been resolved: binder: check offset alignment in binder_get_object() Commit 6d98eb95b450 ("binder: avoid potential data leakage when copying txn") introduced changes to how binder objects are copied. In doi…
-
High 7.8
In availableToWriteBytes of MessageQueueBase.h, there is a possible out of bounds write due to an incorrect bounds chec…
-
High 7.5
In modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote denial of…
-
High 7.5
Buffer Over-read in WLAN Firmware
Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame.
-
High 7.3
Heap out-of-bound write vulnerability in parsing grid image header in libsavscmn.so prior to SMR Jun-2024 Release 1 all…
-
High 7.3
Heap out-of-bound write vulnerability in parsing grid image in libsavscmn.so prior to SMR June-2024 Release 1 allows lo…
-
Medium 6.8
Mali GPU Kernel Driver allows improper GPU memory processing operations
Use After Free vulnerability in Arm Ltd Midgard GPU Kernel Driver, Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processi…
-
Medium 6.5
In modem, there is a possible selection of less-secure algorithm during the VoWiFi IKE due to a missing DH downgrade ch…
-
Medium 6.4
Stack-based buffer overflow vulnerability in bootloader prior to SMR Jun-2024 Release 1 allows physical attackers to ov…
-
Medium 6.4
Improper input validation vulnerability in chnactiv TA prior to SMR Jun-2024 Release 1 allows local privileged attacker…
-
Medium 6.3
In increment_annotation_count of stats_event.c, there is a possible out of bounds write due to a missing bounds check. …
-
Medium 6.2
Incorrect use of privileged API vulnerability in registerBatteryStatsCallback in BatteryStatsService prior to SMR Jun-2…
-
Medium 6.2
Incorrect use of privileged API vulnerability in getSemBatteryUsageStats in BatteryStatsService prior to SMR Jun-2024 R…
-
Medium 6.1
Improper input validation in libsheifdecadapter.so prior to SMR Jun-2024 Release 1 allows local attackers to lead to me…
-
Medium 5.9CVE-2024-1065 Public exploit
Mali GPU Kernel Driver allows improper GPU memory processing operations
Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to alr…
-
Medium 5.9
In modem, there is a possible system crash due to improper input validation. This could lead to remote denial of servic…
-
Medium 5.5
In multiple locations, there is a possible information leak due to a missing permission check. This could lead to local…
-
Medium 5.1
Improper component protection vulnerability in Samsung Dialer prior to SMR May-2024 Release 1 allows local attackers to…
-
Medium 4.6
Out-of-bounds read vulnerability in bootloader prior to SMR June-2024 Release 1 allows physical attackers to arbitrary …
-
Medium 4.2
Improper input validation vulnerability in caminfo driver prior to SMR Jun-2024 Release 1 allows local privileged attac…
-
Medium 4.0
In telephony, there is a possible information disclosure due to a missing permission check. This could lead to local in…
-
Medium 4.0
Improper caller verification vulnerability in SemClipboard prior to SMR June-2024 Release 1 allows local attackers to a…
-
Medium 4.0
Improper input validation vulnerability in libsavscmn.so prior to SMR Jun-2024 Release 1 allows local attackers to writ…
Revision history
-
#0
Initiele versie
References
-
Reference - cveprojectv5; nvd
https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=06
-
Reference - ncscclear
https://source.android.com/docs/security/bulletin/2024-06-01