Summary
Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen und seine Privilegien zu erhöhen.
Product
Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.
Vulnerabilities 110
-
High 7.8
In verifyDefaults of CardEmulationManager.java, there is a possible way to set a third party app as the default contact…
-
High 7.8
In Slice, there is a possible disclosure of installed applications due to side channel information disclosure. This cou…
-
High 7.8
In Package Installer, there is a possible way to determine whether an app is installed, without query permissions, due …
-
High 7.8
In InputMethod, there is a possible way to determine whether an app is installed, without query permissions, due to sid…
-
High 7.8
In Permission Manager, there is a possible way to bypass required permissions due to a missing permission check. This c…
-
High 7.8
In RemoteSpeechRecognitionService of RemoteSpeechRecognitionService.java, there is a possible way to launch an activity…
-
High 7.8
In UWB Google, there is a possible way for a malicious app to masquerade as system app com.android.uwb.resources due to…
-
High 7.8
In Sim, there is a possible way to evade mobile preference restrictions due to a permission bypass. This could lead to …
-
High 7.7
In multiple locations, there is a possible background activity launch due to a logic error in the code. This could lead…
-
High 7.5
In Minikin, there is a possible way to trigger ANR by showing a malicious message due to resource exhaustion. This coul…
-
High 7.3
In Print Service, there is a possible background activity launch due to a logic error in the code. This could lead to l…
-
Medium 5.5
In Usage Stats Service, there is a possible way to determine whether an app is installed, without query permissions due…
-
Medium 5.5
In Telephony, there is a possible way to retrieve the ICCID due to a logic error in the code. This could lead to local …
-
Unscored —
In Telecom, there is a possible way to determine whether an app is installed, without query permissions, due to side ch…
-
Unscored —
FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the funct…
-
Unscored —
In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for …
-
Unscored —
In PackageManagerNative, there is a possible way to determine whether an app is installed, without query permissions, d…
-
Unscored —
In Slice, there is a possible disclosure of installed packages due to a missing permission check. This could lead to lo…
-
Unscored —
In SliceManagerService, there is a possible way to check if a content provider is installed due to a missing null check…
-
Unscored —
In Permission, there is a possible way to determine whether an app is installed, without query permissions, due to side…
-
Unscored —
In SEPolicy, there is a possible way to access the factory MAC address due to a permissions bypass. This could lead to …
-
Unscored —
In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to…
-
Unscored —
In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to …
-
Unscored —
In ActivityManagerService, there is a possible way to determine whether an app is installed, without query permissions,…
-
Unscored —
In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to…
-
Unscored —
In Content, here is a possible way to determine whether an app is installed, without query permissions, due to side cha…
-
Unscored —
In Content Service, there is a possible way to determine whether an app is installed, without query permissions, due to…
-
Unscored —
In Content, there is a possible way to determine whether an app is installed, without query permissions, due to side ch…
-
Unscored —
In ContentService, there is a possible way to read installed sync content providers due to side channel information dis…
-
Unscored —
In Bluetooth, there is a possible way for a paired Bluetooth device to access a long term identifier for an Android dev…
-
Unscored —
In Composer, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation …
-
Unscored —
In libcore, there is a possible out of bounds read due to a missing bounds check. This could lead to local information …
-
Unscored —
In Bluetooth, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalatio…
-
Unscored —
In Settings, there is a possible way to control private DNS settings from a secondary user due to a permissions bypass.…
-
Unscored —
In IntentResolver, there is a possible cross-user media read due to a confused deputy. This could lead to local informa…
-
Unscored —
In Core, there is a possible way to forward calls without user knowledge due to a missing permission check. This could …
-
Unscored —
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatio…
-
Unscored —
In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote (proximal…
-
Unscored —
In Content, there is a possible way to determine whether an app is installed, without query permissions, due to side ch…
-
Unscored —
In ContentService, there is a possible way to determine whether an app is installed, without query permissions, due to …
-
Unscored —
In Content, there is a possible way to determine whether an app is installed, without query permissions, due to side ch…
-
Unscored —
In UsageStatsService, there is a possible way to read installed 3rd party apps due to side channel information disclosu…
-
Unscored —
In Device Policy, there is a possible way to verify if a particular admin app is registered on the device due to side c…
-
Unscored —
In Package Manager, there is a possible cross-user settings disclosure due to a missing permission check. This could le…
-
Unscored —
In Activity Manager, there is a possible way to determine whether an app is installed, without query permissions, due t…
-
Unscored —
In Settings, there is a possible way to determine whether an app is installed, without query permissions, due to side c…
-
Unscored —
In Package Manager Service, there is a possible way to determine whether an app is installed, without query permissions…
-
Unscored —
In Permission Manager, there is a possible way to determine whether an app is installed, without query permissions, due…
-
Unscored —
In Package Installer, there is a possible way to determine whether an app is installed, without query permissions, due …
-
Unscored —
In Activity Manager, there is a possible way to determine whether an app is installed due to a missing permission check…
-
Unscored —
In Overlay Manager, there is a possible way to determine whether an app is installed, without query permissions, due to…
-
Unscored —
In InputMethod, there is a possible way to determine whether an app is installed, without query permissions, due to sid…
-
Unscored —
In Text Services, there is a possible way to determine whether an app is installed, without query permissions, due to s…
-
Unscored —
In Text Services, there is a possible way to determine whether an app is installed, without query permissions, due to s…
-
Unscored —
In App Ops Service, there is a possible disclosure of information about installed packages due to a logic error in the …
-
Unscored —
In Settings, there is a possible way to determine whether an app is installed, without query permissions, due to side c…
-
Unscored —
In Input Method, there is a possible way to determine whether an app is installed, without query permissions, due to si…
-
Unscored —
In Input Method, there is a possible way to determine whether an app is installed, without query permissions, due to si…
-
Unscored —
In Telecomm, there is a possible way to get the call state due to a missing permission check. This could lead to local …
-
Unscored —
In ActivityStarter, there is a possible background activity launch due to an unsafe PendingIntent. This could lead to l…
-
Unscored —
In Job Scheduler, there is a possible way to determine whether an app is installed, without query permissions, due to s…
-
Unscored —
In Game Manager Service, there is a possible way to determine whether an app is installed, without query permissions, d…
-
Unscored —
In the Device Idle Controller, there is a possible way to determine whether an app is installed, without query permissi…
-
Unscored —
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informati…
-
Unscored —
In Window Manager, there is a possible way to determine whether an app is installed, without query permissions, due to …
-
Unscored —
In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to…
-
Unscored —
In Media Projection, there is a possible way to determine whether an app is installed, without query permissions, due t…
-
Unscored —
In NFA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc…
-
Unscored —
In NFA, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information dis…
-
Unscored —
In Package Manager Service, there is a possible way to determine whether an app is installed, without query permissions…
-
Unscored —
In libaudioclient, there is a possible out of bounds write due to a use after free. This could lead to local escalation…
-
Unscored —
In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proxima…
-
Unscored —
In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc…
-
Unscored —
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatio…
-
Unscored —
In Bluetooth, there is a possible out of bounds write due to improper input validation. This could lead to local escala…
-
Unscored —
In Bluetooth, there is a possibility of code-execution due to a use after free. This could lead to paired device escala…
-
Unscored —
In Usage, there is a possible permanent DoS due to resource exhaustion. This could lead to local denial of service with…
-
Unscored —
In ContactsProvider, there is a possible crash loop due to resource exhaustion. This could lead to local persistent den…
-
Unscored —
In Contacts, there is a possible crash loop due to resource exhaustion. This could lead to local denial of service in t…
-
Unscored —
In Scudo, there is a possible way for an attacker to predict heap allocation patterns due to insecure implementation/de…
-
Unscored —
In Scudo, there is a possible way to exploit certain heap OOB read/write issues due to an insecure implementation/desig…
-
Unscored —
In Audio, there is a possible out of bounds read due to missing bounds check. This could lead to local information disc…
-
Unscored —
In Usage Access, there is a possible way to display a Settings usage access restriction toggle screen due to a permissi…
-
Unscored —
In the Security Element API, there is a possible out of bounds write due to an integer overflow. This could lead to loc…
-
Unscored —
In Secure Element, there is a possible out of bounds write due to an integer overflow. This could lead to local escalat…
-
Unscored —
In libdexfile, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalatio…
-
Unscored —
In Telephony, there is a possible way for a guest user to change the preferred SIM due to a missing permission check. T…
-
Unscored —
In System UI, there is a possible factory reset protection bypass due to a logic error in the code. This could lead to …
-
Unscored —
In Sysproxy, there is a possible out of bounds write due to an integer underflow. This could lead to local escalation o…
-
Unscored —
In SELinux Policy, there is a possible restriction bypass due to a permissions bypass. This could lead to local informa…
-
Unscored —
In Telecomm, there is a possible way to silence the ring for calls of secondary users due to a missing permission check…
-
Unscored —
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatio…
-
Unscored —
In Bluetooth, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalatio…
-
Unscored —
In Media Resource Manager, there is a possible local arbitrary code execution due to use after free. This could lead to…
-
Unscored —
In Content Resolver, there is a possible method to access metadata about existing content providers on the device due t…
-
Unscored —
In Settings, there is a possible way for the user to unintentionally send extra data due to an unclear prompt. This cou…
-
Unscored —
In Package Manager, there is a possible possible permissions bypass due to an unsafe PendingIntent. This could lead to …
-
Unscored —
In Whitechapel, there is a possible out of bounds read due to memory corruption. This could lead to local information d…
-
Unscored —
In User Backup Manager, there is a possible way to leak a token to bypass user confirmation for backup due to log infor…
-
Unscored —
In Settings, there is a possible restriction bypass due to a missing permission check. This could lead to local escalat…
-
Unscored —
In Settings, there is a possible bypass of profile owner restrictions due to a missing permission check. This could lea…
-
Unscored —
In Messaging, there is a possible way to disable the messaging application due to improper input validation. This could…
-
Unscored —
In Bluetooth, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of…
-
Unscored —
In Settings, there is a possible way for the user to change SIM due to a missing permission check. This could lead to l…
-
Unscored —
In registerPhoneAccount of TelecomServiceImpl.java, there is a possible way to reveal images from another user due to a…
-
Unscored —
In Bluetooth, there is a possible out of bounds read due to a use after free. This could lead to remote information dis…
-
Unscored —
In Activity Manager, there is a possible background activity launch due to a logic error in the code. This could lead t…
-
Unscored —
In Setup Wizard, there is a possible way to save a WiFi network due to an insecure default value. This could lead to lo…
-
Unscored —
In sdksandbox, there is a possible strandhogg style overlay attack due to a logic error in the code. This could lead to…
-
Unscored —
In collapse of canonicalize_md.c, there is a possible out of bounds read due to a missing bounds check. This could lead…
Revision history
-
#1
Initiale Fassung
References
-
https://source.android.com/docs/security/bulletin/android-14 vom 2023-10-30
https://source.android.com/docs/security/bulletin/android-14