Summary
Google heeft kwetsbaarheden verholpen in Android.
Details
Interpretaties
Een kwaadwillende kan de kwetsbaarheden misbruiken om zich verhoogde rechten toe te kennen op het device en zo willekeurige code uit te voeren, mogelijk met rechten van het systeem en toegang krijgen tot gevoelige gegevens.
Voor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafife app te installeren en draaien of een malafide link te volgen.
In deze update zijn ook kwetsbaarheden verholpen in closed-source componenten van Arm, Imagination Technologies, MediaTek en Qualcomm.Google heeft verder weinig inhoudelijke informatie bekend gesteld.
Oplossingen
Google heeft updates uitgebracht om de kwetsbaarheden te verhelpen in Android 12,13 en 14.
Samsung heeft updates uitgebracht om de voor Samsung relevante kwetsbaarheden te verhelpen in Samsung Mobile devices.
Zie bijgevoegde referenties voor meer informatie.
Vulnerabilities 54
-
High 7.4CVE-2024-4610 Exploited
Mali GPU Kernel Driver allows improper GPU memory processing operations
Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.This issue affects Bifrost GPU Ker…
KEV Jun 12, 2024 -
High 8.4
Double Free in HLOS
Memory corruption while performing finish HMAC operation when context is freed by keymaster.
-
High 8.4
Integer Overflow or Wraparound in Graphics
Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size.
-
High 8.4
Use After Free in Graphics
Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.
-
High 8.4
Use After Free in Graphics
Memory corruption while handling user packets during VBO bind operation.
-
High 8.4
In multiple locations, there is a possible way to bypass a restriction on adding new Wi-Fi connections due to a missing…
-
High 8.4
In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in t…
-
High 7.8
Mali GPU Firmware allows improper GPU processing operations
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Valhall GPU Firmware, Arm Ltd Arm 5th Gen GPU Architecture Firmware allows a local non-privileged user to make improper GPU processing operations to access a limi…
-
High 7.8
Improper access control in OneUIHome prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activi…
-
High 7.8
Improper access control in launchFullscreenIntent of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to…
-
High 7.8
Buffer Over-read in Trusted Execution Environment
Memory corruption while processing key blob passed by the user.
-
High 7.8
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Qualcomm IPC
Memory corruption when allocating and accessing an entry in an SMEM partition.
-
High 7.8
af_unix: Fix garbage collector racing against connect()
In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix garbage collector racing against connect() Garbage collector does not take into account the risk of embryo getting enqueued during the garbage collection. If such embryo has a pe…
-
High 7.8
In setMimeGroup of PackageManagerService.java, there is a possible way to hide the service from Settings due to a logic…
-
High 7.8
In multiple functions of StatsService.cpp, there is a possible memory corruption due to a use after free. This could le…
-
High 7.8
Improper access control in launchApp of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privi…
-
High 7.8
Improper access control in clickAdapterItem of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launc…
-
High 7.8
In PVRSRV_MMap of pvr_bridge_k.c, there is a possible arbitrary code execution due to a logic error in the code. This c…
-
High 7.7
Improper access control in Dar service prior to SMR Jul-2024 Release 1 allows local attackers to bypass restriction for…
-
High 7.5
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service…
-
High 7.5
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service…
-
High 7.5
Improper input validation in parsing application information from RTCP packet in librtp.so prior to SMR Jul-2024 Releas…
-
High 7.5
Improper input validation in parsing and distributing RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows r…
-
High 7.4CVE-2024-31320 Public exploit
In setSkipPrompt of AssociationRequest.java , there is a possible way to establish a companion device association witho…
-
High 7.4
In com_android_internal_os_ZygoteCommandBuffer_nativeForkRepeatedly of com_android_internal_os_ZygoteCommandBuffer.cpp,…
-
High 7.4
In smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect im…
-
High 7.4
In DevmemIntUnexportCtx of devicemem_server.c, there is a possible arbitrary code execution due to a race condition. Th…
-
High 7.3
Permissions, Privileges, and Access Control issues in TZ Secure OS
Memory corruption when an invoke call and a TEE call are bound for the same trusted application.
-
High 7.1
Use of Insufficiently Random Values in Core
Information disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual address space.
-
High 7.1
Buffer Over-read in TZ Secure OS
Transient DOS while loading the TA ELF file.
-
High 7.0
In _UnrefAndMaybeDestroy of pmr.c, there is a possible arbitrary code execution due to a race condition. This could lea…
-
Medium 6.7
In DevmemIntFreeDefBackingPage of devicemem_server.c, there is a possible arbitrary code execution due to a logic error…
-
Medium 6.5
Improper verification of signature in FilterProvider prior to SMR Jul-2024 Release 1 allows local attackers to execute …
-
Medium 6.2
In ensureFileColumns of MediaProvider.java, there is a possible disclosure of files owned by another user due to improp…
-
Medium 6.1
Improper input validation in libmediaextractorservice.so prior to SMR Jul-2024 Release 1 allows local attackers to trig…
-
Medium 5.9
Improper authentication in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to pair with devices.
-
Medium 5.9
Improper input validation in copying data to buffer cache in libsaped prior to SMR Jul-2024 Release 1 allows local atta…
-
Medium 5.9
Improper access control in KnoxCustomManagerService prior to SMR Jul-2024 Release 1 allows local attackers to configure…
-
Medium 5.5
Use of implicit intent for sensitive communication in Configuration message prior to SMR Jul-2024 Release 1 allows loca…
-
Medium 5.5
Exposure of sensitive information in proc file system prior to SMR Jul-2024 Release 1 allows local attackers to read ke…
-
Medium 5.3
Improper input validation in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to trigger abnormal behavior.
-
Medium 5.3
Improper input validation혻in parsing RTCP SR packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attacker…
-
Medium 5.3
Improper input validation in parsing RTCP RR packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attacker…
-
Medium 5.3
Improper input validation혻in parsing an item type from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 al…
-
Medium 5.3
Improper input validation in parsing an item data from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 al…
-
Medium 5.3
Improper input validation in parsing RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attack…
-
Medium 5.3
In onTransact of ParcelableListBinder.java , there is a possible way to steal mAllowlistToken to launch an app from bac…
-
Medium 4.3
Improper handling of exceptional conditions in Secure Folder prior to SMR Jul-2024 Release 1 allows physical attackers …
-
Medium 4.0
Use of implicit intent for sensitive communication in FCM function in IMS service prior to SMR Jul-2024 Release 1 allow…
-
Medium 4.0
Use of implicit intent for sensitive communication in SoftphoneClient in IMS service prior to SMR Jul-2024 Release 1 al…
-
Medium 4.0
Use of implicit intent for sensitive communication in RCS function in IMS service prior to SMR Jul-2024 Release 1 allow…
-
Medium 4.0
Improper authentication in MTP application prior to SMR Jul-2024 Release 1 allows local attackers to enter MTP mode wit…
-
Medium 4.0
Improper access control in system property prior to SMR Jul-2024 Release 1 allows local attackers to get device identif…
-
Unscored —CVE-2024-34584 Rejected
** REJECT ** DO NOT USE THIS CVE RECORD. Reason: An additional patch is required.
Revision history
-
#0
Initiele versie
References
-
Source - android
https://source.android.com/docs/security/bulletin/2024-07-01
-
Reference - cveprojectv5; nvd
https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=07