Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, beliebigen Programmcode auszuführen, einen Denial of Service Zustand herbeizuführen oder Informationen offenzulegen.
Product
Das Android Betriebssystem von Google ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.
Vulnerabilities 45
-
Critical 9.6
Heap buffer overflow in CefSharp
Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
KEV Nov 3, 2021 -
High 7.8CVE-2020-11261 Exploited
Memory corruption due to improper check to return error when user application requests memory allocation of a huge size…
KEV Dec 1, 2021 -
Medium 6.1CVE-2016-6328 Public exploit
A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can…
-
Medium 5.5
A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in the logic handling al…
-
Low 3.3
A flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows an attacker with a loca…
-
Unscored —
In Account of Account.java, there is a possible boot loop due to improper input validation. This could lead to local de…
-
Unscored —CVE-2020-0471 Public exploit
In reassemble_and_dispatch of packet_fragmenter.cc, there is a possible way to inject packets into an encrypted Bluetoo…
-
Unscored —
Possible out of bound read while WLAN frame parsing due to lack of check for body and header length in Snapdragon Auto,…
-
Unscored —
Possible stack out of bound write might happen due to time bitmap length and bit duration fields of the attributes like…
-
Unscored —
Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length …
-
Unscored —
Resource leakage issue during dci client registration due to reference count is not decremented if dci client registrat…
-
Unscored —
Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external compo…
-
Unscored —
Out of bound access issue while handling cvp process control command due to improper validation of buffer pointer recei…
-
Unscored —
Possible heap overflow while parsing NAL header due to lack of check of length of data received from user in Snapdragon…
-
Unscored —
Time-of-check time-of-use race condition While processing partition entries due to newly created buffer was read again …
-
Unscored —
Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Aut…
-
Unscored —
Possible Buffer over-read in ARP/NS parsing due to lack of check of packet length received in Snapdragon Auto, Snapdrag…
-
Unscored —
Use after free issue when importing a DMA buffer by using the CPU address of the buffer due to attachment is not cleane…
-
Unscored —
Memory corruption due to ioctl command size was incorrectly set to the size of a pointer and not enough storage is allo…
-
Unscored —
Out of bound read will happen if EAPOL Key length is less than expected while processing NAN shared key descriptor attr…
-
Unscored —
Use after free due to race condition when reopening the device driver repeatedly in Snapdragon Auto, Snapdragon Compute…
-
Unscored —
An improper free of uninitialized memory can occur in DIAG services in Snapdragon Compute, Snapdragon Industrial IOT, S…
-
Unscored —
A race between command submission and destroying the context can cause an invalid context being added to the list leads…
-
Unscored —
In onAuthenticated of AuthenticationClient.java, there is a possible tapjacking attack when requesting the user's finge…
-
Unscored —
In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Unscored —
In dispatchGraphTerminationMessage() of packages/services/Car/computepipe/runner/graph/StreamSetObserver.cpp, there is …
-
Unscored —
In several functions of GlobalScreenshot.java, there is a possible permission bypass due to an unsafe PendingIntent. Th…
-
Unscored —CVE-2021-0306 Public exploit
In addAllPermissions of PermissionManagerService.java, there is a possible permissions bypass when upgrading major Andr…
-
Unscored —
In updatePermissionSourcePackage of PermissionManagerService.java, there is a possible automatic runtime permission gra…
-
Unscored —CVE-2021-0308 Public exploit
In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check. This could l…
-
Unscored —
In onCreate of grantCredentialsPermissionActivity, there is a confused deputy. This could lead to local information dis…
-
Unscored —
In LazyServiceRegistrar of LazyServiceRegistrar.cpp, there is a possible memory corruption due to a use after free. Thi…
-
Unscored —
In ElementaryStreamQueue::dequeueAccessUnitH264() of ESQueue.cpp, there is a possible out of bounds write due to a miss…
-
Unscored —
In WAVSource::read of WAVExtractor.cpp, there is a possible out of bounds write due to an integer overflow. This could …
-
Unscored —CVE-2021-0313 Public exploit
In isWordBreakAfter of LayoutUtils.cpp, there is a possible way to slow or crash a TextView due to improper input valid…
-
Unscored —CVE-2021-0315 Public exploit
In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to convince the user to grant an app ac…
-
Unscored —CVE-2021-0316 Public exploit
In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds write due to a missing bounds check. This…
-
Unscored —
In createOrUpdate of Permission.java and related code, there is possible permission escalation due to a logic error. Th…
-
Unscored —CVE-2021-0318 Public exploit
In appendEventsToCacheLocked of SensorEventConnection.cpp, there is a possible out of bounds write due to a use-after-f…
-
Unscored —CVE-2021-0319 Public exploit
In checkCallerIsSystemOr of CompanionDeviceManagerService.java, there is a possible way to get a nearby Bluetooth devic…
-
Unscored —
In is_device_locked and set_device_locked of keystore_keymaster_enforcement.h, there is a possible bypass of lockscreen…
-
Unscored —
In enforceDumpPermissionForPackage of ActivityManagerService.java, there is a possible way to determine if a package is…
-
Unscored —
In onCreate of SlicePermissionActivity.java, there is a possible misleading string displayed due to improper input vali…
-
Unscored —CVE-2021-0323 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
-
Unscored —
In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalat…
Revision history
-
#10
Neue Updates von Red Hat aufgenommen
-
#9
Neue Updates von Red Hat aufgenommen
-
#8
Ausnutzung gemeldet
-
#7
Neue Updates von SUSE aufgenommen
-
#6
Neue Updates von SUSE aufgenommen
-
#5
Neue Updates von SUSE aufgenommen
-
#4
Neue Updates von Debian aufgenommen
-
#3
Neue Updates von BLACKBERRY aufgenommen
-
#2
Neue Updates von Arch Linux aufgenommen
-
#1
Initiale Fassung
References
-
Artikel auf the Hackernews vom 2021-03-22
https://thehackernews.com/2021/03/warning-new-android-zero-day.html
-
Android Patchday Januar vom 2021-01-04
https://source.android.com/security/bulletin/2021-01-01
-
Google Pixel Patchday Januar vom 2021-01-04
https://source.android.com/security/bulletin/pixel/2021-01-01
-
LG Security Bulletin SMR-JAN-2021
https://lgsecurity.lge.com/security_updates_mobile.html
-
Samsung Security Updates SMR-JAN-2021
https://security.samsungmobile.com/securityUpdate.smsb
-
Arch Linux Security Advisory ASA-202101-34 vom 2021-01-22
https://security.archlinux.org/ASA-202101-34/generate
-
BlackBerry Powered by Android Security Bulletin - January 2021
http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000073450
-
Debian Security Advisory DLA-2549 vom 2021-02-08
https://lists.debian.org/debian-lts-announce/2021/02/msg00010.html
-
SUSE Security Update SUSE-SU-2021:0353-1 vom 2021-02-09
https://lists.suse.com/pipermail/sle-security-updates/2021-February/008290.html
-
SUSE Security Update SUSE-SU-2021:0354-1 vom 2021-02-09
https://lists.suse.com/pipermail/sle-security-updates/2021-February/008292.html
-
SUSE Security Update SUSE-SU-2021:0532-1 vom 2021-02-19
https://lists.suse.com/pipermail/sle-security-updates/2021-February/008354.html
-
SUSE Security Update SUSE-SU-2021:0859-1 vom 2021-03-17
https://lists.suse.com/pipermail/sle-security-updates/2021-March/008502.html
-
Red Hat Security Advisory RHSA-2022:7700 vom 2022-11-08
https://access.redhat.com/errata/RHSA-2022:7700
-
Red Hat Security Advisory RHSA-2024:3486 vom 2024-05-30
https://access.redhat.com/errata/RHSA-2024:3486