Search Results (Refine Search)
- Results Type: Overview
- Search Type: Search All
- CPE Product: cpe:/::android
Vuln ID | Summary | CVSS Severity |
---|---|---|
CVE-2023-42566 |
Out-of-bound write vulnerability in libsavsvc prior to SMR Dec-2023 Release 1 allows local attackers to execute arbitrary code. Published: December 04, 2023; 10:15:16 PM -0500 |
V3.1: 7.8 HIGH V2.0:(not available) |
CVE-2023-42565 |
Improper input validation vulnerability in Smart Clip prior to SMR Dec-2023 Release 1 allows local attackers with shell privilege to execute arbitrary code. Published: December 04, 2023; 10:15:16 PM -0500 |
V3.1: 6.7 MEDIUM V2.0:(not available) |
CVE-2023-42564 |
Improper access control in knoxcustom service prior to SMR Dec-2023 Release 1 allows attacker to send broadcast with system privilege. Published: December 04, 2023; 10:15:16 PM -0500 |
V3.1: 5.5 MEDIUM V2.0:(not available) |
CVE-2023-42563 |
Integer overflow vulnerability in landmarkCopyImageToNative of libFacePreProcessingjni.camera.samsung.so prior to SMR Dec-2023 Release 1 allows attacker to trigger heap overflow. Published: December 04, 2023; 10:15:16 PM -0500 |
V3.1: 7.8 HIGH V2.0:(not available) |
CVE-2023-42562 |
Integer overflow vulnerability in detectionFindFaceSupportMultiInstance of libFacePreProcessingjni.camera.samsung.so prior to SMR Dec-2023 Release 1 allows attacker to trigger heap overflow. Published: December 04, 2023; 10:15:16 PM -0500 |
V3.1: 7.8 HIGH V2.0:(not available) |
CVE-2023-42561 |
Heap out-of-bounds write vulnerability in bootloader prior to SMR Dec-2023 Release 1 allows a physical attacker to execute arbitrary code. Published: December 04, 2023; 10:15:15 PM -0500 |
V3.1: 6.8 MEDIUM V2.0:(not available) |
CVE-2023-42560 |
Heap out-of-bounds write vulnerability in dec_mono_audb of libsavsac.so prior to SMR Dec-2023 Release 1 allows an attacker to execute arbitrary code. Published: December 04, 2023; 10:15:15 PM -0500 |
V3.1: 7.8 HIGH V2.0:(not available) |
CVE-2023-42559 |
Improper exception management vulnerability in Knox Guard prior to SMR Dec-2023 Release 1 allows Knox Guard lock bypass via changing system time. Published: December 04, 2023; 10:15:15 PM -0500 |
V3.1: 5.2 MEDIUM V2.0:(not available) |
CVE-2023-42558 |
Out of bounds write vulnerability in HDCP in HAL prior to SMR Dec-2023 Release 1 allows attacker to perform code execution. Published: December 04, 2023; 10:15:15 PM -0500 |
V3.1: 7.8 HIGH V2.0:(not available) |
CVE-2023-42557 |
Out-of-bound write vulnerability in libIfaaCa prior to SMR Dec-2023 Release 1 allows local system attackers to execute arbitrary code. Published: December 04, 2023; 10:15:15 PM -0500 |
V3.1: 6.7 MEDIUM V2.0:(not available) |
CVE-2023-42556 |
Improper usage of implicit intent in Contacts prior to SMR Dec-2023 Release 1 allows attacker to get sensitive information. Published: December 04, 2023; 10:15:15 PM -0500 |
V3.1: 5.5 MEDIUM V2.0:(not available) |
CVE-2023-45781 |
In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Published: December 04, 2023; 6:15:26 PM -0500 |
V3.1: 5.5 MEDIUM V2.0:(not available) |
CVE-2023-45779 |
In the APEX module framework of AOSP, there is a possible malicious update to platform components due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. More details on this can be found in the referenced links. Published: December 04, 2023; 6:15:26 PM -0500 |
V3.1: 7.8 HIGH V2.0:(not available) |
CVE-2023-45777 |
In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to launch arbitrary activities using system privileges due to Parcel Mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Published: December 04, 2023; 6:15:26 PM -0500 |
V3.1: 7.8 HIGH V2.0:(not available) |
CVE-2023-45776 |
In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Published: December 04, 2023; 6:15:26 PM -0500 |
V3.1: 7.8 HIGH V2.0:(not available) |
CVE-2023-45775 |
In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Published: December 04, 2023; 6:15:26 PM -0500 |
V3.1: 7.8 HIGH V2.0:(not available) |
CVE-2023-45774 |
In fixUpIncomingShortcutInfo of ShortcutService.java, there is a possible way to view another user's image due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Published: December 04, 2023; 6:15:26 PM -0500 |
V3.1: 7.8 HIGH V2.0:(not available) |
CVE-2023-45773 |
In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Published: December 04, 2023; 6:15:26 PM -0500 |
V3.1: 7.8 HIGH V2.0:(not available) |
CVE-2023-40103 |
In multiple locations, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Published: December 04, 2023; 6:15:24 PM -0500 |
V3.1: 7.8 HIGH V2.0:(not available) |
CVE-2023-40098 |
In mOnDone of NotificationConversationInfo.java, there is a possible way to access app notification data of another user due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Published: December 04, 2023; 6:15:24 PM -0500 |
V3.1: 5.5 MEDIUM V2.0:(not available) |