Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, Informationen offenzulegen, einen Denial of Service Absturz herbeizuführen, seine Privilegien zu erhöhen oder unbekannte Auswirkungen zu verursachen.
Product
Das Android Betriebssystem von Google ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.
Vulnerabilities 44
-
High 7.5
Square OkHttp can accept the wrong certificate
In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction…
-
Unscored —
An issue was discovered in net/ipv6/ip6mr.c in the Linux kernel before 4.11. By setting a specific socket option, an at…
-
Unscored —
Possible buffer overflow while updating ikev2 parameters due to lack of check of input validation for certain parameter…
-
Unscored —
Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header e…
-
Unscored —
User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and…
-
Unscored —
Out of bound access in computer vision control due to improper validation of command length before processing it in Sna…
-
Unscored —
Possible memory corruption in BSI module due to improper validation of parameter count in Snapdragon Auto, Snapdragon C…
-
Unscored —
Stack overflow may occur if GSM/WCDMA broadcast config size received from user is larger than variable length array in …
-
Unscored —
Arbitrary memory write issue in video driver while setting the internal buffers in Snapdragon Auto, Snapdragon Compute,…
-
Unscored —
Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Sna…
-
Unscored —
Possible denial of service due to RTT responder consistently rejects all FTMR by transmitting FTM1 with failure status …
-
Unscored —
Possible out of bounds while accessing global control elements due to race condition in Snapdragon Auto, Snapdragon Com…
-
Unscored —
Before enqueuing a frame to the PE queue for further processing, an entry in a hash table can be deleted and using a st…
-
Unscored —
Possible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE length in received beac…
-
Unscored —
Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper…
-
Unscored —
Possible race condition during async fastrpc session after sending RPC message due to the fastrpc ctx gets free during …
-
Unscored —
Possible denial of service while handling host WMI command due to improper validation in Snapdragon Auto, Snapdragon Co…
-
Unscored —
Denial of service while processing fine timing measurement request (FTMR) frame with reserved bits set in the FTM param…
-
Unscored —
Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to informat…
-
Unscored —
Improper access control when using mmap with the kgsl driver with a special offset value that can be provided to map th…
-
Unscored —
A buffer overflow can occur when playing an MKV clip due to lack of input validation in Snapdragon Auto, Snapdragon Com…
-
Unscored —
An Untrusted Pointer Dereference can occur while doing USB control transfers, if multiple requests of different standar…
-
Unscored —
Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to informat…
-
Unscored —
Arithmetic overflow can happen while processing NOA IE due to improper error handling in Snapdragon Auto, Snapdragon Co…
-
Unscored —
Denial of service in WLAN module due to improper check of subtypes in logic where excessive frames are dropped in Snapd…
-
Unscored —CVE-2021-0302 Public exploit
In PackageInstaller, there is a possible tapjacking attack due to an insecure default value. This could lead to local e…
-
Unscored —
In PackageInstaller, there is a possible tapjacking attack due to an insecure default value. This could lead to local e…
-
Unscored —CVE-2021-0314 Public exploit
In onCreate of UninstallerActivity, there is a possible way to uninstall an all without informed user consent due to a …
-
Unscored —CVE-2021-0325 Public exploit
In ih264d_parse_pslice of ih264d_parse_pslice.c, there is a possible out of bounds write due to a heap buffer overflow.…
-
Unscored —CVE-2021-0326 Public exploit
In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lea…
-
Unscored —CVE-2021-0327 Public exploit
In getContentProviderImpl of ActivityManagerService.java, there is a possible permission bypass due to non-restored bin…
-
Unscored —CVE-2021-0328 Public exploit
In onBatchScanReports and deliverBatchScan of GattService.java, there is a possible way to retrieve Bluetooth scan resu…
-
Unscored —CVE-2021-0329 Public exploit
In several native functions called by AdvertiseManager.java, there is a possible out of bounds write due to a missing b…
-
Unscored —CVE-2021-0330 Public exploit
In add_user_ce and remove_user_ce of storaged.cpp, there is a possible use-after-free due to improper locking. This cou…
-
Unscored —CVE-2021-0331 Public exploit
In onCreate of NotificationAccessConfirmationActivity.java, there is a possible overlay attack due to an insecure defau…
-
Unscored —CVE-2021-0332 Public exploit
In bootFinished of SurfaceFlinger.cpp, there is a possible memory corruption due to a use after free. This could lead t…
-
Unscored —CVE-2021-0333 Public exploit
In onCreate of BluetoothPermissionActivity.java, there is a possible permissions bypass due to a tapjacking overlay tha…
-
Unscored —CVE-2021-0334 Public exploit
In onTargetSelected of ResolverActivity.java, there is a possible settings bypass allowing an app to become the default…
-
Unscored —
In process of C2SoftHevcDec.cpp, there is a possible out of bounds write due to a use after free. This could lead to re…
-
Unscored —CVE-2021-0336 Public exploit
In onReceive of BluetoothPermissionRequest.java, there is a possible permissions bypass due to a mutable PendingIntent.…
-
Unscored —CVE-2021-0337 Public exploit
In moveInMediaStore of FileSystemProvider.java, there is a possible file exposure due to stale metadata. This could lea…
-
Unscored —
In SystemSettingsValidators, there is a possible permanent denial of service due to missing bounds checks on UI setting…
-
Unscored —CVE-2021-0339 Public exploit
In loadAnimation of WindowContainer.java, there is a possible way to keep displaying a malicious app while a target app…
-
Unscored —CVE-2021-0340 Public exploit
In parseNextBox of IsoInterface.java, there is a possible leak of unredacted location information due to improper input…
Revision history
-
#6
Neue Updates von Red Hat aufgenommen
-
#5
Neue Updates von Red Hat aufgenommen
-
#4
Exploit aufgenommen
-
#3
Neue Updates von BLACKBERRY aufgenommen
-
#2
Referenz(en) aufgenommen: FEDORA-2021-5F268AB238, FEDORA-2021-1A2443BAA0
-
#1
Initiale Fassung
References
-
Red Hat Security Advisory RHSA-2023:2723 vom 2023-05-10
https://access.redhat.com/errata/RHSA-2023:2723
-
Android Patchday Februar vom 2021-02-01
https://source.android.com/security/bulletin/2021-02-01
-
Pixel Patchday Februar vom 2021-02-01
https://source.android.com/security/bulletin/pixel/2021-02-01
-
BlackBerry Security Bulletin
http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000073888
-
Exploit auf Sploitus.com vom 2021-02-08
https://sploitus.com/exploit?id=079D9338-3FF4-5D52-B1F5-09F5177D7C9B
-
Red Hat Security Advisory RHSA-2023:0756 vom 2023-02-14
https://access.redhat.com/errata/RHSA-2023:0756