Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen,, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu erzeugen oder vertrauliche Informationen offenzulegen.
Product
Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.
Vulnerabilities 31
-
High 7.8
media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating …
KEV Feb 5, 2025 -
Critical 9.8
Improper Validation of Array Index in WLAN Host Communication
Memory corruption while parsing the ML IE due to invalid frame content.
-
High 8.8
Improper Input Validation in Hypervisor
Memory corruption while configuring a Hypervisor based input virtual device.
-
High 8.8
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code executi…
-
High 8.2
Buffer Over-read in WLAN Host Cmn
Memory corruption during management frame processing due to mismatch in T2LM info element.
-
High 7.8
GPU DDK - Security: Exploitable PVRSRVBridgePhysmemWrapExtMem may lead to overwrite read-only file/memory (e.g. libc.so)
Software installed and run as a non-privileged user can trigger the GPU kernel driver to write to arbitrary read-only system files that have been mapped into application memory.
-
High 7.8
Use After Free in WLAN Host Communication
Memory corruption may occour occur when stopping the WLAN interface after processing a WMI command from the interface.
-
High 7.8
Improper Validation of Array Index in Camera Driver
Memory corruption while validating number of devices in Camera kernel .
-
High 7.8
Exploitable kernel use-after-free on psServerMMUContext due to reference count mismanagement
Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions.
-
High 7.8
GPU DDK - UAF of kernel memory in PMRUnlockPhysAddressesOSMem for on-demand non-4KB PMRs in system memory (UMA)
Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.
-
High 7.8
Improper Validation of Array Index in Camera
Memory corruption in Camera due to unusually high number of nodes passed to AXI port.
-
High 7.8
Improper Validation of Array Index in Camera
Memory corruption can occur in the camera when an invalid CID is used.
-
High 7.8
Improper Validation of Array Index in Camera
Memory corruption while power-up or power-down sequence of the camera sensor.
-
High 7.8
Improper Validation of Array Index in Graphics_Linux
Memory corruption while processing IOCTL from user space to handle GPU AHB bus error.
-
High 7.8
Mali GPU Kernel Driver allows improper GPU processing operations
Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to make improper GPU processing operations to gain access to already freed memory.This issue affec…
-
High 7.5
Buffer Over-read in Multi Mode Call Processor
Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem.
-
High 7.1
In wifi display, there is a possible missing permission check. This could lead to local escalation of privilege with no…
-
Medium 6.8
In V5 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…
-
Medium 6.7
In secmem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o…
-
Medium 6.6
In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…
-
Medium 6.2
In V5 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…
-
Medium 5.3
In applyCustomDescription of SaveUi.java, there is a possible way to view other user's images due to a confused deputy.…
-
Medium 4.1
GPU DDK - psContext->eDM gives OOB write
Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory.
-
Low 3.3
In applyCustomDescription of SaveUi.java, there is a possible way to view images belonging to a different user due to a…
-
Unscored —CVE-2023-40133 Public exploit
In multiple locations of DialogFillUi.java, there is a possible way to view another user's images due to a confused dep…
-
Unscored —
In isFullScreen of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This co…
-
Unscored —
In applyCustomDescription of SaveUi.java, there is a possible way to view another user's images due to a confused deput…
-
Unscored —
In setHeader of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. This…
-
Unscored —
In multiple functions of DialogFillUi.java, there is a possible way to view another user's images due to a confused dep…
-
Unscored —
In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could le…
-
Unscored —
In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could le…
Revision history
-
#1
Initiale Fassung
References
-
Android Patchday Februar 2025 vom 2025-02-03
https://source.android.com/docs/security/bulletin/2025-02-01
-
Artikel auf BleepingComputer
https://www.bleepingcomputer.com/news/security/google-fixes-android-kernel-zero-day-exploited-in-attacks/