Summary
Ein anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, einen Denial-of-Service-Zustand zu erzeugen oder vertrauliche Informationen offenzulegen.
Product
Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.
Vulnerabilities 29
-
High 8.8
Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-330537292.
-
High 7.8
In mm_GetMobileIdIndexForNsUpdate of mm_GmmPduCodec.c, there is a possible out of bounds write due to an incorrect boun…
-
High 7.8
In pmucal_rae_handle_seq_int of flexpmu_cal_rae.c, there is a possible arbitrary write due to uninitialized data. This …
-
High 7.8
there is a possible privilege escalation due to an insecure default value. This could lead to local escalation of privi…
-
High 7.8
In ufshc_scsi_cmd of ufs.c, there is a possible stack variable use after free due to a use after free. This could lead …
-
High 7.5
Android before 2024-10-05 on Google Pixel devices allows information disclosure in the modem component, A-299774545.
-
High 7.5
there is a possible Null Pointer Dereference (modem crash) due to improper input validation. This could lead to remote …
-
High 7.4
In lwis_device_event_states_clear_locked of lwis_event.c, there is a possible privilege escalation due to a double free…
-
High 7.4
there is a possible man-in-the-middle attack due to a logic error in the code. This could lead to remote escalation of …
-
High 7.4
In vring_size of external/headers/include/virtio/virtio_ring.h, there is a possible out of bounds write due to an integ…
-
High 7.4
In sm_mem_compat_get_vmm_obj of lib/sm/shared_mem.c, there is a possible arbitrary physical memory access due to improp…
-
High 7.4
Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-329163861.
-
High 7.4
In lwis_allocator_free of lwis_allocator.c, there is a possible memory corruption due to a use after free. This could l…
-
High 7.4
In vring_init of external/headers/include/virtio/virtio_ring.h, there is a possible out of bounds write due to a logic …
-
High 7.4
In valid_address of syscall.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead…
-
Medium 5.9
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, Exynos 990, Exynos 1080,…
-
Medium 5.5
There is a possible Local bypass of user interaction due to an insecure default value. This could lead to local informa…
-
Medium 5.5
In ProtocolMiscHwConfigChangeAdapter::GetData() of protocolmiscadapter.cpp, there is a possible out-of-bounds read due …
-
Medium 5.5
In pmucal_rae_handle_seq_int of flexpmu_cal_rae.c, there is a possible out of bounds read due to a buffer overflow. Thi…
-
Medium 5.5
In ProtocolEmbmsSaiListAdapter::Init() of protocolembmsadapter.cpp, there is a possible out of bounds read due to a mis…
-
Medium 5.1
Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ABL component, A-331966488.
-
Medium 5.1
In sms_ExtractCbLanguage of sms_CellBroadcast.c, there is a possible out of bounds read due to a missing bounds check. …
-
Medium 5.1
Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-331255656.
-
Medium 5.1
In ppmp_protect_buf of drm_fw.c, there is a possible information disclosure due to a logic error in the code. This coul…
-
Medium 5.1
In gsc_gsa_rescue of gsc_gsa.c, there is a possible out of bounds read due to an incorrect bounds check. This could lea…
-
Medium 5.1
In ffu_flash_pack of ffu.c, there is a possible out of bounds read due to an integer overflow. This could lead to local…
-
Medium 5.1
In TrustySharedMemoryManager::GetSharedMemory of ondevice/trusty/trusty_shared_memory_manager.cc, there is a possible o…
-
Medium 5.1
Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-315191818.
-
Medium 5.1
there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure w…
Revision history
-
#1
Initiale Fassung
References
-
Pixel Update Bulletin vom 2024-10-15
https://source.android.com/docs/security/bulletin/pixel/2024-10-01