Google Pixel: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 18

• High 7.9
  CVE-2023-0266 Exploited Public exploit

  Use after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel

  A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. …

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jan 30, 2023

  KEV Mar 30, 2023
• High 7.6
  CVE-2023-26072

  An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, E…

  Mar 13, 2023
• High 7.6
  CVE-2023-26073

  An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, E…

  Mar 13, 2023
• High 7.6
  CVE-2023-26074

  An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, E…

  Mar 13, 2023
• High 7.6
  CVE-2023-26075

  An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, E…

  Mar 10, 2023
• High 7.6
  CVE-2023-26076

  An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 1280, Exynos 2200, Exynos Modem…

  Mar 13, 2023
• Medium 6.8
  CVE-2023-28613

  An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, a…

  Apr 4, 2023
• Medium 6.8
  CVE-2023-29085

  An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exyno…

  Apr 14, 2023
• Medium 6.8
  CVE-2023-29086

  An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exyno…

  Apr 14, 2023
• Medium 6.8
  CVE-2023-29087

  An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exyno…

  Apr 14, 2023
• Medium 6.8
  CVE-2023-29088

  An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exyno…

  Apr 14, 2023
• Medium 6.8
  CVE-2023-29089

  An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exyno…

  Apr 14, 2023
• Medium 6.8
  CVE-2023-29090

  An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exyno…

  Apr 14, 2023
• Medium 6.8
  CVE-2023-29091

  An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exyno…

  Apr 14, 2023
• Medium 6.7
  CVE-2022-33298

  Use after free in Modem

  Memory corruption due to use after free in Modem while modem initialization.

  Qualcomm Snapdragon
  Apr 4, 2023
• Medium 6.7
  CVE-2022-33301

  Incorrect type conversion or cast in Audio

  Memory corruption due to incorrect type conversion or cast in audio while using audio playback/capture when crafted address is sent from AGM IPC to AGM.

  Qualcomm Snapdragon
  Apr 4, 2023
• Medium 5.9
  CVE-2022-33296

  Integer overflow to buffer overflow in Modem

  Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message.

  Qualcomm Snapdragon
  Apr 4, 2023
• Low 3.1
  CVE-2023-29092

  An issue was discovered in Exynos Mobile Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, and …

  May 9, 2023

Revision history

1. 2023-04-13 #2

   Neue Updates aufgenommen

2. 2023-04-10 #1

   Initiale Fassung

References

• Samsung Product Security Update April 2023 vom 2023-04-14
  https://semiconductor.samsung.com/support/quality-support/product-security-updates/
• Pixel Security Advisory vom 2023-04-10
  https://source.android.com/docs/security/bulletin/pixel/2023-04-01?hl=de