Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um sich erweiterte Rechte zu verschaffen, vertrauliche Informationen preiszugeben und einen Denial-of-Service-Zustand auszulösen.
Product
Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.
Vulnerabilities 7
-
High 7.5
In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of…
-
Medium 6.6
In ppcfw_deny_sec_dram_access of ppcfw.c, there is a possible arbitrary read from TEE memory due to a logic error in th…
-
Medium 6.5
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 12…
-
Medium 5.1
In static long dev_send of tipc_dev_ql, there is a possible out of bounds read due to an incorrect bounds check. This c…
-
Medium 5.1
In ProtocolUnsolOnSSAdapter::GetServiceClass() of protocolcalladapter.cpp, there is a possible out-of-bounds read due t…
-
Medium 5.1
In closeChannel of secureelementimpl.cpp, there is a possible out of bounds read due to an incorrect bounds check. This…
-
Medium 5.1
there is a possible way to crash the modem due to a missing null check. This could lead to remote denial of service wit…
Revision history
-
#1
Initiale Fassung
References
-
Pixel Patchday März 2025 vom 2025-03-04
https://source.android.com/docs/security/bulletin/pixel/2025-03-01