Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, um vertrauliche Informationen offenzulegen und um einen Denial-of-Service-Zustand zu erzeugen.
Product
Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.
Vulnerabilities 38
-
Critical 9.8
In modem, there is a possible out of bounds write due to improper input invalidation. This could lead to remote denial …
-
Critical 9.3
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OS
Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization.
-
Critical 9.3
Buffer Copy Without Checking Size of Input in Hypervisor
Memory corruption in Hypervisor when platform information mentioned is not aligned.
-
Critical 9.1
Improper Authentication in Multi-Mode Call Processor
Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.
-
High 8.8
In broadcastIntentLockedTraced of BroadcastController.java, there is a possible way to launch arbitrary activities from…
-
High 8.4
In CacheOpPMRExec of cache_km.c, there is a possible out of bounds write due to an integer overflow. This could lead to…
-
High 8.4
In RGXCreateZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could l…
-
High 8.4
In updateNotificationChannelFromPrivilegedListener of NotificationManagerService.java, there is a possible cross-user d…
-
High 7.8
In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalat…
-
High 7.8
In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalat…
-
High 7.8
In multiple functions of ActivityManagerService.java, there is a possible way to escape Google Play protection due to a…
-
High 7.8
Buffer Copy Without Checking Size of Input in Trusted Execution Environment
Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.
-
High 7.8
In RGXFWChangeOSidPriority of rgxfwutils.c, there is a possible arbitrary code execution due to a missing bounds check.…
-
High 7.8
In DevmemXIntUnreserveRange of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in…
-
High 7.8
binder: check offset alignment in binder_get_object()
In the Linux kernel, the following vulnerability has been resolved: binder: check offset alignment in binder_get_object() Commit 6d98eb95b450 ("binder: avoid potential data leakage when copying txn") introduced changes to how binder objects are copied. In doi…
-
High 7.8
In newServiceInfoLocked of AutofillManagerServiceImpl.java, there is a possible way to hide an enabled Autofill service…
-
High 7.8
In availableToWriteBytes of MessageQueueBase.h, there is a possible out of bounds write due to an incorrect bounds chec…
-
High 7.8
In onResult of AccountManagerService.java, there is a possible way to perform an arbitrary background activity launch d…
-
High 7.8CVE-2024-31317 Public exploit
In multiple functions of ZygoteProcess.java, there is a possible way to achieve code execution as any app via WRITE_SEC…
-
High 7.8
In CompanionDeviceManagerService.java, there is a possible way to pair a companion device without user acceptance due t…
-
High 7.8
In onCreate of multiple files, there is a possible way to trick the user into granting health permissions due to tapjac…
-
High 7.8
In hide of WindowState.java, there is a possible way to bypass tapjacking/overlay protection by launching the activity …
-
High 7.8
In multiple locations, there is a possible way to reveal images across users data due to a logic error in the code. Thi…
-
High 7.8
In multiple locations, there is a possible way in which policy migration code will never be executed due to a logic err…
-
High 7.5
In modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote denial of…
-
High 7.5
Buffer Over-read in WLAN Firmware
Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame.
-
High 7.3
In RGXCreateHWRTData_aux of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could…
-
Medium 6.8
Mali GPU Kernel Driver allows improper GPU memory processing operations
Use After Free vulnerability in Arm Ltd Midgard GPU Kernel Driver, Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processi…
-
Medium 6.5
In modem, there is a possible selection of less-secure algorithm during the VoWiFi IKE due to a missing DH downgrade ch…
-
Medium 6.3
In increment_annotation_count of stats_event.c, there is a possible out of bounds write due to a missing bounds check. …
-
Medium 6.3
In updateServicesLocked of AccessibilityManagerService.java, there is a possible way for an app to be hidden from the S…
-
Medium 6.2
In multiple functions of ShortcutService.java, there is a possible persistent DOS due to resource exhaustion. This coul…
-
Medium 5.9CVE-2024-1065 Public exploit
Mali GPU Kernel Driver allows improper GPU memory processing operations
Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to alr…
-
Medium 5.9
In modem, there is a possible system crash due to improper input validation. This could lead to remote denial of servic…
-
Medium 5.5
In multiple locations, there is a possible information leak due to a missing permission check. This could lead to local…
-
Medium 5.3
In multiple functions of ManagedServices.java, there is a possible way to hide an app with notification access in the D…
-
Medium 5.3
In multiple functions of MessageQueueBase.h, there is a possible out of bounds write due to a race condition. This coul…
-
Medium 4.0
In telephony, there is a possible information disclosure due to a missing permission check. This could lead to local in…
Revision history
-
#3
Referenz(en) aufgenommen: EUVD-2024-29224
-
#2
CVE's ergänzt
-
#1
Initiale Fassung
References
-
Android Patchday Juni 2024 vom 2024-06-03
https://source.android.com/docs/security/bulletin/2024-06-01