Google

Android

8158 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2024-20092

  • EPSS 0.08%
  • Veröffentlicht 07.10.2024 03:15:02
  • Zuletzt bearbeitet 25.04.2025 18:37:36

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue I...

4.4

CVE-2024-20093

  • EPSS 0.1%
  • Veröffentlicht 07.10.2024 03:15:02
  • Zuletzt bearbeitet 27.10.2024 03:35:01

In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID:...

4.4

CVE-2024-20095

  • EPSS 0.1%
  • Veröffentlicht 07.10.2024 03:15:02
  • Zuletzt bearbeitet 27.10.2024 03:35:01

In m4u, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08996894; Issue ID: ...

4.4

CVE-2024-20096

  • EPSS 0.1%
  • Veröffentlicht 07.10.2024 03:15:02
  • Zuletzt bearbeitet 27.10.2024 03:35:01

In m4u, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08996900; Issue ID: ...

9.8

CVE-2024-44097

  • EPSS 0.16%
  • Veröffentlicht 02.10.2024 14:15:05
  • Zuletzt bearbeitet 24.07.2025 15:58:43

According to the researcher: "The TLS connections are encrypted against tampering or eavesdropping. However, the application does not validate the server certificate properly while initializing the TLS connection. This allows for a network attacker t...

7.8

CVE-2024-39435

  • EPSS 0.08%
  • Veröffentlicht 27.09.2024 08:15:04
  • Zuletzt bearbeitet 30.09.2024 18:13:33

In Logmanager service, there is a possible missing verification incorrect input. This could lead to local escalation of privilege with no additional execution privileges needed.

4.5

CVE-2024-39432

  • EPSS 0.18%
  • Veröffentlicht 27.09.2024 08:15:03
  • Zuletzt bearbeitet 30.09.2024 18:12:04

In UMTS RLC driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed.

4.4

CVE-2024-39433

  • EPSS 0.08%
  • Veröffentlicht 27.09.2024 08:15:03
  • Zuletzt bearbeitet 30.09.2024 18:14:45

In drm service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

4.4

CVE-2024-39434

  • EPSS 0.08%
  • Veröffentlicht 27.09.2024 08:15:03
  • Zuletzt bearbeitet 30.09.2024 18:14:03

In drm service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

4.5

CVE-2024-39431

  • EPSS 0.18%
  • Veröffentlicht 27.09.2024 08:15:02
  • Zuletzt bearbeitet 30.09.2024 18:09:30

In UMTS RLC driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed.