Search Results (Refine Search)
- Keyword (text search): android
- Search Type: Search All
Vuln ID | Summary | CVSS Severity |
---|---|---|
CVE-2023-21205 |
In startWpsPinDisplayInternal of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262245376 Published: June 28, 2023; 2:15:15 PM -0400 |
V3.1: 5.5 MEDIUM V2.0:(not available) |
CVE-2023-21204 |
In multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the wifi server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262246231 Published: June 28, 2023; 2:15:15 PM -0400 |
V3.1: 4.4 MEDIUM V2.0:(not available) |
CVE-2023-21203 |
In startWpsPbcInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262246082 Published: June 28, 2023; 2:15:15 PM -0400 |
V3.1: 6.7 MEDIUM V2.0:(not available) |
CVE-2023-21202 |
In btm_delete_stored_link_key_complete of btm_devctl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure over Bluetooth with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-260568359 Published: June 28, 2023; 2:15:15 PM -0400 |
V3.1: 4.5 MEDIUM V2.0:(not available) |
CVE-2023-21201 |
In on_create_record_event of btif_sdp_server.cc, there is a possible out of bounds read due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-263545186 Published: June 28, 2023; 2:15:15 PM -0400 |
V3.1: 7.5 HIGH V2.0:(not available) |
CVE-2023-21200 |
In on_remove_iso_data_path of btm_iso_impl.h, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-236688764 Published: June 28, 2023; 2:15:15 PM -0400 |
V3.1: 5.5 MEDIUM V2.0:(not available) |
CVE-2023-21199 |
In btu_ble_proc_ltk_req of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-254445961 Published: June 28, 2023; 2:15:15 PM -0400 |
V3.1: 4.4 MEDIUM V2.0:(not available) |
CVE-2023-21198 |
In remove_sdp_record of btif_sdp_server.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-245517503 Published: June 28, 2023; 2:15:15 PM -0400 |
V3.1: 5.5 MEDIUM V2.0:(not available) |
CVE-2023-21197 |
In btm_acl_process_sca_cmpl_pkt of btm_acl.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-251427561 Published: June 28, 2023; 2:15:15 PM -0400 |
V3.1: 7.5 HIGH V2.0:(not available) |
CVE-2023-21196 |
In btm_ble_batchscan_filter_track_adv_vse_cback of btm_ble_batchscan.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-261857395 Published: June 28, 2023; 2:15:15 PM -0400 |
V3.1: 4.4 MEDIUM V2.0:(not available) |
CVE-2023-21195 |
In btm_ble_periodic_adv_sync_tx_rcvd of btm_ble_gap.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure over Bluetooth, if the firmware were compromised with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-233879420 Published: June 28, 2023; 2:15:15 PM -0400 |
V3.1: 4.5 MEDIUM V2.0:(not available) |
CVE-2023-21194 |
In gatt_dbg_op_name of gatt_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-260079141 Published: June 28, 2023; 2:15:15 PM -0400 |
V3.1: 4.4 MEDIUM V2.0:(not available) |
CVE-2023-21193 |
In VideoFrame of VideoFrame.h, there is a possible abort due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-233006499 Published: June 28, 2023; 2:15:15 PM -0400 |
V3.1: 7.5 HIGH V2.0:(not available) |
CVE-2023-21192 |
In setInputMethodWithSubtypeIdLocked of InputMethodManagerService.java, there is a possible way to setup input methods that are not enabled due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-227207653 Published: June 28, 2023; 2:15:15 PM -0400 |
V3.1: 7.8 HIGH V2.0:(not available) |
CVE-2023-21191 |
In fixNotification of NotificationManagerService.java, there is a possible bypass of notification hide preference due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-269738057 Published: June 28, 2023; 2:15:15 PM -0400 |
V3.1: 7.8 HIGH V2.0:(not available) |
CVE-2023-21190 |
In btm_acl_encrypt_change of btm_acl.cc, there is a possible way for a remote device to turn off encryption without resulting in a terminated connection due to an unusual root cause. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-251436534 Published: June 28, 2023; 2:15:15 PM -0400 |
V3.1: 5.0 MEDIUM V2.0:(not available) |
CVE-2023-21189 |
In startLockTaskMode of LockTaskController.java, there is a possible bypass of lock task mode due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-213942596 Published: June 28, 2023; 2:15:15 PM -0400 |
V3.1: 7.3 HIGH V2.0:(not available) |
CVE-2023-21188 |
In btm_ble_update_inq_result of btm_ble_gap.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-264624283 Published: June 28, 2023; 2:15:15 PM -0400 |
V3.1: 4.4 MEDIUM V2.0:(not available) |
CVE-2023-21187 |
In onCreate of UsbAccessoryUriActivity.java, there is a possible way to escape the Setup Wizard due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-246542917 Published: June 28, 2023; 2:15:15 PM -0400 |
V3.1: 7.8 HIGH V2.0:(not available) |
CVE-2023-21186 |
In LogResponse of Dns.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-261079188 Published: June 28, 2023; 2:15:15 PM -0400 |
V3.1: 7.5 HIGH V2.0:(not available) |