Google

Android

7931 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2021-39623

  • EPSS 2.52%
  • Veröffentlicht 14.01.2022 20:15:10
  • Zuletzt bearbeitet 21.11.2024 06:19:49

In doRead of SimpleDecodingSource.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for expl...

7.3

CVE-2021-39625

  • EPSS 0.01%
  • Veröffentlicht 14.01.2022 20:15:10
  • Zuletzt bearbeitet 21.11.2024 06:19:49

In showCarrierAppInstallationNotification of EuiccNotificationManager.java, there is a possible way to gain an access to MediaProvider content due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privil...

7.8

CVE-2021-39626

  • EPSS 0.02%
  • Veröffentlicht 14.01.2022 20:15:10
  • Zuletzt bearbeitet 21.11.2024 06:19:49

In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege in Bluetooth settings with no additional execution privileges needed. User interact...

7.8

CVE-2021-39627

  • EPSS 0.01%
  • Veröffentlicht 14.01.2022 20:15:10
  • Zuletzt bearbeitet 21.11.2024 06:19:50

In sendLegacyVoicemailNotification of LegacyModeSmsHandler.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not ne...

7.8

CVE-2021-0959

  • EPSS 0.01%
  • Veröffentlicht 14.01.2022 20:15:09
  • Zuletzt bearbeitet 21.11.2024 05:43:18

In jit_memory_region.cc, there is a possible bypass of memory restrictions due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Produ...

7.8

CVE-2021-1035

  • EPSS 0.01%
  • Veröffentlicht 14.01.2022 20:15:09
  • Zuletzt bearbeitet 21.11.2024 05:43:26

In setLaunchIntent of BluetoothDevicePickerPreferenceController.java, there is a possible way to invoke an arbitrary broadcast receiver due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges...

7.8

CVE-2021-1036

  • EPSS 0.05%
  • Veröffentlicht 14.01.2022 20:15:09
  • Zuletzt bearbeitet 21.11.2024 05:43:26

In LocationSettingsActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitati...

5.3

CVE-2021-1037

  • EPSS 0.06%
  • Veröffentlicht 14.01.2022 20:15:09
  • Zuletzt bearbeitet 21.11.2024 05:43:26

The broadcast that DevicePickerFragment sends when a new device is paired doesn't have any permission checks, so any app can register to listen for it. This lets apps keep track of what devices are paired without requesting BLUETOOTH permissions.Prod...

10

CVE-2021-1049

  • EPSS 0.15%
  • Veröffentlicht 14.01.2022 20:15:09
  • Zuletzt bearbeitet 21.11.2024 05:43:27

Hacker one bug ID: 1343975Product: AndroidVersions: Android SoCAndroid ID: A-204256722

3.3

CVE-2022-22272

  • EPSS 0.02%
  • Veröffentlicht 10.01.2022 14:12:42
  • Zuletzt bearbeitet 21.11.2024 06:46:32

Improper authorization in TelephonyManager prior to SMR Jan-2022 Release 1 allows attackers to get IMSI without READ_PRIVILEGED_PHONE_STATE permission