Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erweitern, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.
Product
Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.
Vulnerabilities 46
-
High 7.9
Use after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel
A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. …
KEV Mar 30, 2023 -
Critical 9.8
-
High 8.4
In registerReceiverWithFeature of ActivityManagerService.java, there is a possible way for isolated processes to regist…
-
High 8.4
Incorrect Type Conversion or Cast in Graphics
Memory corruption in Graphics while importing a file.
-
High 8.4
Improper Release of Memory Before Removing Last Reference (`Memory Leak`) in Graphics
Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.
-
High 7.8
Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive
Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key.
-
High 7.8
In multiple functions of SnoozeHelper.java, there is a possible failure to persist settings due to an uncaught exceptio…
-
High 7.8
In __efi_rt_asm_wrapper of efi-rt-wrapper.S, there is a possible bypass of shadow stack protection due to a logic error…
-
High 7.8
In adreno_set_param of adreno_gpu.c, there is a possible memory corruption due to a double free. This could lead to loc…
-
High 7.8
In retrieveAppEntry of NotificationAccessDetails.java, there is a missing permission check. This could lead to local es…
-
High 7.8CVE-2023-21109 Public exploit
In multiple places of AccessibilityService, there is a possible way to hide the app from the user due to a logic error …
-
High 7.8
In several functions of SnoozeHelper.java, there is a possible way to grant notifications access due to resource exhaus…
-
High 7.5
Null pointer dereference in Modem
Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH.
-
High 7.5
Reachable assertion in Modem
Transient DOS due to reachable assertion in Modem during OSI decode scheduling.
-
High 7.5
Reachable assertion in Modem
Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.
-
High 7.5
Reachable assertion in Modem
Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported.
-
High 7.3
Buffer over-read in Trusted Execution Environment
Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation.
-
Medium 6.7
Improper validation of array index in computer vision.
Memory corruption due to improper validation of array index in computer vision while testing EVA kernel without sending any frames.
-
Medium 6.7
In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio…
-
Medium 6.7
In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio…
-
Medium 6.7CVE-2023-20696 Public exploit
In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio…
-
Medium 6.7
In adsp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of …
-
Medium 6.7
In verifyReplacingVersionCode of InstallPackageHelper.java, there is a possible way to downgrade system apps below syst…
-
Medium 6.2
In several functions of PhoneAccountRegistrar.java, there is a possible way to prevent an access to emergency services …
-
Medium 6.2CVE-2023-21118 Public exploit
In unflattenString8 of Sensor.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lea…
-
Medium 5.6
sslh Packet Dumping probe.c hexdump format string
A vulnerability, which was classified as critical, has been found in sslh. This issue affects the function hexdump of the file probe.c of the component Packet Dumping Handler. The manipulation of the argument msg_info leads to format string. The attack may be…
-
Medium 5.5
In thermal service, there is a possible out of bounds write due to a missing bounds check. This could lead to local den…
-
Medium 5.5
In onSetRuntimePermissionGrantStateByDeviceAdmin of AdminRestrictedPermissionsUtils.java, there is a possible way for t…
-
Medium 5.5
In pushDynamicShortcut of ShortcutPackage.java, there is a possible way to get the device into a boot loop due to resou…
-
Medium 5.5
In registerPhoneAccount of PhoneAccountRegistrar.java, uncaught exceptions in parsing persisted user data could lead to…
-
Medium 5.5
In applySyncTransaction of WindowOrganizer.java, a missing permission check could lead to local information disclosure …
-
Medium 5.5
In AnalyzeMfcResp of NxpMfcReader.cc, there is a possible out of bounds read due to a missing bounds check. This could …
-
Medium 4.4
An issue was discovered in the Arm Mali Kernel Driver. A non-privileged user can make improper GPU memory processing op…
-
Medium 4.4
In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could local denial o…
-
Medium 4.4
In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could local denial o…
-
Medium 4.4
In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local …
-
Medium 4.4
In spipe drive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial …
-
Medium 4.4
In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local informati…
-
Medium 4.4
In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local informati…
-
Low 3.3CVE-2022-20338 Public exploit
In HierarchicalUri.readFrom of Uri.java, there is a possible way to craft a malformed Uri object due to improper input …
-
Low 3.3
In mnld, there is a possible leak of GPS location due to a missing permission check. This could lead to local informati…
-
Unscored —CVE-2021-39617 Rejected
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigat…
-
Unscored —CVE-2022-20444 Rejected
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigat…
-
Unscored —CVE-2022-46395 Public exploit
An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing opera…
-
Unscored —
An issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non-privileged user can make im…
-
Unscored —
A possible out-of-bounds read and write (due to an improper length check of shared memory) was discovered in Arm NN And…
Revision history
-
#4
Neue Updates von Oracle Linux aufgenommen
-
#3
Neue Updates von Ubuntu aufgenommen
-
#2
Neue Updates von Ubuntu aufgenommen
-
#1
Initiale Fassung
References
-
Oracle Linux Security Advisory ELSA-2023-5069 vom 2023-09-15
http://linux.oracle.com/errata/ELSA-2023-5069.html
-
Ubuntu Security Notice USN-6134-1 vom 2023-06-01
https://ubuntu.com/security/notices/USN-6134-1
-
Ubuntu Security Notice USN-6096-1 vom 2023-05-23
https://ubuntu.com/security/notices/USN-6096-1
-
Samsung Security Updates May 2023 vom 2023-05-01
https://security.samsungmobile.com/securityUpdate.smsb
-
Google Pixel Patchday Mai vom 2023-05-01
https://source.android.com/docs/security/bulletin/pixel/2023-05-01?hl=de
-
Google Android Patchday Mai vom 2023-05-01
https://source.android.com/docs/security/bulletin/2023-05-01