Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen, beliebigen Code zur Ausführung zu bringen und einen Denial-of-Service-Zustand auszulösen.
Product
Das Android Betriebssystem von Google ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.
Vulnerabilities 78
-
High 7.8CVE-2021-39793 Exploited
In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the…
KEV Apr 11, 2022 -
Critical 9.3
Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon…
-
High 8.4
Possible out of bounds access due to improper input validation during graphics profiling in Snapdragon Auto, Snapdragon…
-
High 8.2
Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdrag…
-
High 8.2
An Out of Bounds read may potentially occur while processing an IBSS beacon, in Snapdragon Auto, Snapdragon Compute, Sn…
-
High 8.1
Possible buffer overflow to improper validation of hash segment of file while allocating memory in Snapdragon Connectiv…
-
High 7.8
Improper cleaning of secure memory between authenticated users can lead to face authentication bypass in Snapdragon Aut…
-
High 7.8
Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon C…
-
High 7.8
Possible out of bound write due to improper validation of number of timer values received from firmware while syncing t…
-
High 7.8
Possible out of bound read due to improper length calculation of WMI message. in Snapdragon Auto, Snapdragon Compute, S…
-
High 7.5
Possible assertion due to improper validation of invalid NR CSI-IM resource configuration in Snapdragon Auto, Snapdrago…
-
High 7.5
Possible assertion due to improper validation of TCI configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon C…
-
High 7.5
Possible assertion due to improper validation of OTA configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon C…
-
High 7.2
A possible stack-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitr…
-
High 7.2
A possible heap-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitra…
-
Medium 6.7
Improper Input Validation in Audio
Possible out of bound access in audio module due to lack of validation of user provided input.
-
Medium 5.5
Possible buffer overflow due to improper data validation of external commands sent via DIAG interface in Snapdragon Aut…
-
Medium 4.0
An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66 and v5.4.54. Th…
-
Unscored —
An issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5. The copy-on-write imp…
-
Unscored —
In NotificationStackScrollLayout of NotificationStackScrollLayout.java, there is a possible way to bypass Factory Reset…
-
Unscored —CVE-2021-33624 Public exploit
In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted (e.g., because of type confus…
-
Unscored —
A vulnerability was found in the Linux kernel in versions prior to v5.14-rc1. Missing size validations on inbound SCTP …
-
Unscored —
hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checkin…
-
Unscored —
In PackageManager, there is a possible permanent denial of service due to resource exhaustion. This could lead to local…
-
Unscored —
In ih264d_parse_decode_slice of ih264d_parse_slice.c, there is a possible out of bounds write due to a heap buffer over…
-
Unscored —CVE-2021-39685 Public exploit
In various setup methods of the USB gadget subsystem, there is a possible out of bounds write due to an incorrect flag …
-
Unscored —
In several functions of binder.c, there is a possible way to represent the wrong domain to SELinux due to a race condit…
-
Unscored —
In multiple functions of odsign_main.cpp, there is a possible way to persist system attack due to a logic error in the …
-
Unscored —
In setDisplayPadding of WallpaperManagerService.java, there is a possible way to cause a persistent DoS due to improper…
-
Unscored —CVE-2021-39692 Public exploit
In onCreate of SetupLayoutActivity.java, there is a possible way to setup a work profile bypassing user consent due to …
-
Unscored —
In onUidStateChanged of AppOpsService.java, there is a possible way to access location without a visible indicator due …
-
Unscored —
In parse of RoleParser.java, there is a possible way for default apps to get permissions explicitly denied by the user …
-
Unscored —
In createOrUpdate of BasePermission.java, there is a possible permission bypass due to a logic error in the code. This …
-
Unscored —
In checkFileUriDestination of DownloadProvider.java, there is a possible way to bypass external storage private directo…
-
Unscored —
In aio_poll_complete_work of aio.c, there is a possible memory corruption due to a use after free. This could lead to l…
-
Unscored —
In serviceConnection of ControlsProviderLifecycleManager.kt, there is a possible way to keep service running in foregro…
-
Unscored —
In onCreate of RequestManageCredentials.java, there is a possible way for a third party app to install certificates wit…
-
Unscored —
In updateState of UsbDeviceManager.java, there is a possible unauthorized access of files due to a confused deputy. Thi…
-
Unscored —CVE-2021-39704 Public exploit
In deleteNotificationChannelGroup of NotificationManagerService.java, there is a possible way to run foreground service…
-
Unscored —CVE-2021-39705 Rejected
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigat…
-
Unscored —CVE-2021-39706 Public exploit
In onResume of CredentialStorage.java, there is a possible way to cleanup content of credentials storage due to a missi…
-
Unscored —
In onReceive of AppRestrictionsFragment.java, there is a possible way to start a phone call without permissions due to …
-
Unscored —
In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to an incorrect bounds check. T…
-
Unscored —
In sendSipAccountsRemovedNotification of SipAccountRegistry.java, there is a possible permission bypass due to an unsaf…
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-202160245References: N/A
-
Unscored —
In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to Incorrect Size Value. This could …
-
Unscored —
In TBD of TBD, there is a possible user after free vulnerability due to a race condition. This could lead to local esca…
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-173788806References: Upstream kernel
-
Unscored —
In ion_buffer_kmap_get of ion.c, there is a possible use-after-free due to an integer overflow. This could lead to loca…
-
Unscored —
In __show_regs of process.c, there is a possible leak of kernel memory and addresses due to log information disclosure.…
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-206977562References: N/A
-
Unscored —
In iaxxx_btp_write_words of iaxxx-btp.c, there is a possible out of bounds read due to an incorrect bounds check. This …
-
Unscored —
In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to a…
-
Unscored —
In lwis_top_register_io of lwis_device_top.c, there is a possible out of bounds write due to an integer overflow. This …
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-207433926References: N/A
-
Unscored —
In TBD of TBD, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of…
-
Unscored —
In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds read due to an…
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-209014813References: N/A
-
Unscored —
In TuningProviderBase::GetTuningTreeSet of tuning_provider_base.cc, there is a possible out of bounds read due to a mis…
-
Unscored —
In gasket_free_coherent_memory_all of gasket_page_table.c, there is a possible memory corruption due to a double free. …
-
Unscored —
In cd_ParseMsg of cd_codec.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead …
-
Unscored —
In eicPresentationRetrieveEntryValue of acropora/app/identity/libeic/EicPresentation.c, there is a possible information…
-
Unscored —
In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local esc…
-
Unscored —
In TBD of TBD, there is a possible out of bounds read due to a missing bounds check. This could lead to local informati…
-
Unscored —
In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to a…
-
Unscored —
In copy_io_entries of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead…
-
Unscored —
In amcs_cdev_unlocked_ioctl of audiometrics.c, there is a possible out of bounds write due to improper input validation…
-
Unscored —
In sendMessage of OneToOneChatImpl.java (? TBD), there is a possible way to send an RCS message without permissions due…
-
Unscored —
In gasket_alloc_coherent_memory of gasket_page_table.c, there is a possible memory corruption due to a race condition. …
-
Unscored —
In prepare_io_entry and prepare_response of lwis_ioctl.c and lwis_periodic_io.c, there is a possible out of bounds writ…
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-208229524References: N/A
-
Unscored —
In usb_gadget_giveback_request of core.c, there is a possible use after free out of bounds read due to a race condition…
-
Unscored —
prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows unprivileged users to tr…
-
Unscored —
An issue was discovered in net/tipc/crypto.c in the Linux kernel before 5.14.16. The Transparent Inter-Process Communic…
-
Unscored —
In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_ut…
-
Unscored —
In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escal…
-
Unscored —
In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escal…
-
Unscored —
In ims service, there is a possible escalation of privilege due to a missing permission check. This could lead to local…
Revision history
-
#17
fehlgeleitete Linux Updates entfernt, CVSS korrigiert
-
#16
Neue Updates von SUSE aufgenommen
-
#15
Neue Updates von SUSE aufgenommen
-
#14
Neue Updates von SUSE aufgenommen
-
#13
Neue Updates von SUSE aufgenommen
-
#12
Neue Updates von SUSE aufgenommen
-
#11
Neue Updates von SUSE aufgenommen
-
#10
Neue Updates von SUSE aufgenommen
-
#9
Neue Updates von SUSE aufgenommen
-
#8
Neue Updates von SUSE aufgenommen
-
#7
Exploit-Status zu CVE-2021-39793 aufgenommen
-
#6
Neue Updates von SUSE aufgenommen
-
#5
Neue Updates von SUSE aufgenommen
-
#4
Neue Updates von SUSE aufgenommen
-
#3
Neue Updates von SUSE aufgenommen
-
#2
Neue Updates von Debian aufgenommen
-
#1
Initiale Fassung
References
-
Android Security Advisory vom 2022-03-07
https://source.android.com/security/bulletin/2022-03-01
-
Android Pixel Security Advisory vom 2022-03-07
https://source.android.com/security/bulletin/pixel/2022-03-01
-
inTheWild CVE-2021-39793
https://inthewild.io/vuln/CVE-2021-39793