Summary
Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen oder beliebigen Code auszuführen.
Product
Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.
Vulnerabilities 14
-
High 8.8
In prepare_to_draw_into_mask of SkBlurMaskFilterImpl.cpp, there is a possible heap overflow due to improper input valid…
-
High 8.4
Improper Validation of Array Index in Hypervisor
Memory corruption while Configuring the SMR/S2CR register in Bypass mode.
-
High 8.4
Buffer Over-read in MProc
Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
-
High 7.8
Stack-based Buffer Overflow in Performance
Memory corruption when invalid input is passed to invoke GPU Headroom API call.
-
High 7.8
Improper Input Validation in Video Analytics and Processing
Memory corruption while processing API calls to NPU with invalid input.
-
High 7.8
In DevmemValidateFlags of devicemem_server.c , there is a possible out of bounds write due to memory corruption. This c…
-
High 7.8
In resizeToAtLeast of SkRegion.cpp, there is a possible out of bounds write due to an integer overflow. This could lead…
-
High 7.8
GPU DDK - PowerVR: TLB invalidate UAF of dma_buf imported into multiple GPU devices
Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.
-
High 7.8
In multiple locations, there is a possible way to avoid unbinding of a service from the system due to a logic error in …
-
High 7.8
In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to partially bypass lock screen. This could …
-
High 7.8
In skia_alloc_func of SkDeflate.cpp, there is a possible out of bounds write due to an integer overflow. This could lea…
-
High 7.8
In isPackageDeviceAdmin of PackageManagerService.java, there is a possible edge case which could prevent the uninstalla…
-
High 7.5
Integer Overflow or Wraparound in WLAN Host Communication
Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present.
-
Medium 6.7
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of …
Revision history
-
#3
Neue Updates von SUSE aufgenommen
-
#2
Neue Updates von LENOVO aufgenommen
-
#1
Initiale Fassung
References
-
Lenovo Security Advisory LEN-180503 vom 2024-12-10
https://support.lenovo.com/us/en/product_security/LEN-180503
-
Android Patchday December 2024 vom 2024-12-02
https://source.android.com/docs/security/bulletin/2024-12-01
-
SUSE Security Update SUSE-SU-2026:4858-1 vom 2026-10-22
https://lists.suse.com/pipermail/sle-security-updates/2026-October/030022.html