Page 37 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-31324 | High | 7.3 | 2024-07-09 | In hide of WindowState.java, there is a possible way to bypass tapjacking/overlay protection by launching the activity in portrait mode first and then rotating… |
CVE-2024-31323 | High | 7.8 | 2024-07-09 | In onCreate of multiple files, there is a possible way to trick the user into granting health permissions due to tapjacking. This could lead to local escalatio… |
CVE-2024-31322 | High | 7.8 | 2024-07-09 | In updateServicesLocked of AccessibilityManagerService.java, there is a possible way for an app to be hidden from the Setting while retaining Accessibility Ser… |
CVE-2024-31320 | High | 7.8 | 2024-07-09 | In setSkipPrompt of AssociationRequest.java , there is a possible way to establish a companion device association without any confirmation due to CDM. This cou… |
CVE-2024-31319 | High | 7.8 | 2024-07-09 | In updateNotificationChannelFromPrivilegedListener of NotificationManagerService.java, there is a possible cross-user data leak due to a confused deputy. This… |
CVE-2024-31318 | High | 7.8 | 2024-07-09 | In CompanionDeviceManagerService.java, there is a possible way to pair a companion device without user acceptance due to a missing permission check. This could… |
CVE-2024-31317 | High | 7.8 | 2024-07-09 | In multiple functions of ZygoteProcess.java, there is a possible way to achieve code execution as any app via WRITE_SECURE_SETTINGS due to unsafe deserializati… |
CVE-2024-31316 | High | 7.8 | 2024-07-09 | In onResult of AccountManagerService.java, there is a possible way to perform an arbitrary background activity launch due to parcel mismatch. This could lead t… |
CVE-2024-31315 | High | 7.8 | 2024-07-09 | In multiple functions of ManagedServices.java, there is a possible way to hide an app with notification access in the Device & app notifications settings due t… |
CVE-2024-31314 | Medium | 5.5 | 2024-07-09 | In multiple functions of ShortcutService.java, there is a possible persistent DOS due to resource exhaustion. This could lead to local denial of service with n… |
CVE-2024-31313 | High | 7.8 | 2024-07-09 | In availableToWriteBytes of MessageQueueBase.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation o… |
CVE-2024-31312 | Medium | 5.5 | 2024-07-09 | In multiple locations, there is a possible information leak due to a missing permission check. This could lead to local information disclosure exposing played… |
CVE-2024-31311 | High | 7.8 | 2024-07-09 | In increment_annotation_count of stats_event.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p… |
CVE-2024-31310 | High | 7.8 | 2024-07-09 | In newServiceInfoLocked of AutofillManagerServiceImpl.java, there is a possible way to hide an enabled Autofill service app in the Autofill service settings du… |
CVE-2024-23711 | High | 7.8 | 2024-07-09 | In DevmemXIntUnreserveRange of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local esca… |
CVE-2024-23698 | High | 7.8 | 2024-07-09 | In RGXFWChangeOSidPriority of rgxfwutils.c, there is a possible arbitrary code execution due to a missing bounds check. This could lead to local escalation of… |
CVE-2024-23697 | High | 7.8 | 2024-07-09 | In RGXCreateHWRTData_aux of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege i… |
CVE-2024-23696 | High | 7.8 | 2024-07-09 | In RGXCreateZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in… |
CVE-2024-23695 | High | 7.8 | 2024-07-09 | In CacheOpPMRExec of cache_km.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege in the ke… |
CVE-2023-21114 | High | 7.8 | 2024-07-09 | In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional exec… |
CVE-2023-21113 | High | 7.8 | 2024-07-09 | In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional exec… |
CVE-2024-6284 | High | 7.3 | 2024-07-03 | In https://github.com/google/nftables IP addresses were encoded in the wrong byte order, resulting in an nftables configuration which does not work as intend… |
CVE-2024-34599 | Medium | 4.0 | 2024-07-02 | Improper input validation in Tips prior to version 6.2.9.4 in Android 14 allows local attacker to send broadcast with Tips' privilege. |
CVE-2024-39430 | Medium | 5.1 | 2024-07-01 | In faceid servive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional executi… |
CVE-2024-39429 | Medium | 5.1 | 2024-07-01 | In faceid servive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional executi… |
CVE-2024-39428 | Medium | 6.8 | 2024-07-01 | In trusty service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution priv… |
CVE-2024-39427 | Medium | 5.1 | 2024-07-01 | In trusty service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution priv… |
CVE-2024-20081 | Medium | 6.7 | 2024-07-01 | In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System executi… |
CVE-2024-20080 | Critical | 9.8 | 2024-07-01 | In gnss service, there is a possible escalation of privilege due to improper certificate validation. This could lead to remote escalation of privilege with no… |
CVE-2024-20079 | Medium | 6.7 | 2024-07-01 | In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System executi… |
CVE-2024-20078 | Critical | 9.8 | 2024-07-01 | In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges neede… |
CVE-2024-38272 | Medium | 4.3 | 2024-06-26 | There exists a vulnerability in Quick Share/Nearby, where an attacker can bypass the accept file dialog on Quick Share Windows. Normally in Quick Share Windows… |
CVE-2024-38271 | Medium | 4.8 | 2024-06-26 | There exists a vulnerability in Quick Share/Nearby, where an attacker can force a victim to stay connected to a temporary hotspot created for the sharing. As p… |
CVE-2024-6293 | High | 8.8 | 2024-06-24 | Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2024-6292 | High | 8.8 | 2024-06-24 | Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2024-6291 | High | 8.8 | 2024-06-24 | Use after free in Swiftshader in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2024-6290 | High | 8.8 | 2024-06-24 | Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2024-6103 | High | 8.8 | 2024-06-20 | Use after free in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2024-6102 | High | 8.8 | 2024-06-20 | Out of bounds memory access in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… |
CVE-2024-6101 | High | 8.8 | 2024-06-20 | Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to perform out of bounds memory access via a crafted HTML… |
CVE-2024-6100 | High | 8.8 | 2024-06-20 | Type Confusion in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security s… |
CVE-2024-5899 | Low | 3.3 | 2024-06-18 | When Bazel Plugin in intellij imports a project (either using "import project" or "Auto import") the dialog for trusting the project is not displayed. This com… |
CVE-2024-32930 | Medium | 5.5 | 2024-06-13 | In plugin_ipc_handler of slc_plugin.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure of… |
CVE-2024-32929 | High | 8.1 | 2024-06-13 | In gpu_slc_get_region of pixel_gpu_slc.c, there is a possible EoP due to a use after free. This could lead to local escalation of privilege with no additional… |
CVE-2024-32926 | Medium | 5.5 | 2024-06-13 | there is a possible information disclosure due to side channel information disclosure. This could lead to local information disclosure with no additional execu… |
CVE-2024-32925 | High | 8.8 | 2024-06-13 | In dhd_prot_txstatus_process of dhd_msgbuf.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution w… |
CVE-2024-32924 | High | 7.5 | 2024-06-13 | In DeregAcceptProcINT of cn_NrmmStateDeregInit.cpp, there is a possible denial of service due to a logic error in the code. This could lead to remote denial of… |
CVE-2024-32923 | Medium | 4.0 | 2024-06-13 | there is a possible cellular denial of service due to a logic error in the code. This could lead to remote denial of service with no additional execution privi… |
CVE-2024-32922 | High | 7.4 | 2024-06-13 | In gpu_pm_power_on_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a logic error in the code. This could lead to loc… |
CVE-2024-32921 | High | 7.4 | 2024-06-13 | In lwis_initialize_transaction_fences of lwis_fence.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati… |
CVE-2024-32920 | High | 7.1 | 2024-06-13 | In set_secure_reg of sac_handler.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure of 4… |
CVE-2024-32919 | High | 7.8 | 2024-06-13 | In lwis_add_completion_fence of lwis_fence.c, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privile… |
CVE-2024-32918 | Medium | 6.1 | 2024-06-13 | Permission Bypass allowing attackers to disable HDCP 2.2 encryption by not completing the HDCP Key Exchange initialization steps |
CVE-2024-32917 | High | 7.1 | 2024-06-13 | In pl330_dma_from_peri_start() of fp_spi_dma.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p… |
CVE-2024-32916 | Medium | 5.9 | 2024-06-13 | In fvp_freq_histogram_init of fvp.c, there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with… |
CVE-2024-32915 | Medium | 4.3 | 2024-06-13 | In CellInfoListParserV2::FillCellInfo() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to loc… |
CVE-2024-32914 | Medium | 5.5 | 2024-06-13 | In tpu_get_int_state of tpu.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no ad… |
CVE-2024-32913 | Critical | 9.8 | 2024-06-13 | In wl_notify_rx_mgmt_frame of wl_cfg80211.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with… |
CVE-2024-32912 | Medium | 5.5 | 2024-06-13 | there is a possible persistent Denial of Service due to test/debugging code left in a production build. This could lead to local denial of service of impaired… |
CVE-2024-32911 | Critical | 9.8 | 2024-06-13 | There is a possible escalation of privilege due to improperly used crypto. This could lead to remote escalation of privilege with no additional execution privi… |
CVE-2024-32910 | Medium | 5.5 | 2024-06-13 | In handle_msg_shm_map_req of trusty/user/base/lib/spi/srv/tipc/tipc.c, there is a possible stack data disclosure due to uninitialized data. This could lead to… |
CVE-2024-32909 | High | 7.8 | 2024-06-13 | In handle_msg of main.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no addi… |
CVE-2024-32908 | High | 7.8 | 2024-06-13 | In sec_media_protect of media.c, there is a possible permission bypass due to a race condition. This could lead to local escalation of privilege with no additi… |
CVE-2024-32907 | High | 7.8 | 2024-06-13 | In memcall_add of memlog.c, there is a possible buffer overflow due to improper input validation. This could lead to local escalation of privilege with no addi… |
CVE-2024-32906 | High | 7.8 | 2024-06-13 | In AcvpOnMessage of avcp.cpp, there is a possible EOP due to uninitialized data. This could lead to local escalation of privilege with no additional execution… |
CVE-2024-32905 | Critical | 9.8 | 2024-06-13 | In circ_read of link_device_memory_legacy.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution… |
CVE-2024-32904 | Medium | 4.7 | 2024-06-13 | In ProtocolVsimOperationAdapter() of protocolvsimadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local in… |
CVE-2024-32903 | High | 7.8 | 2024-06-13 | In prepare_response_locked of lwis_transaction.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation… |
CVE-2024-32902 | High | 7.5 | 2024-06-13 | Remote prevention of access to cellular service with no user interaction (for example, crashing the cellular radio service with a malformed packet) |
CVE-2024-32901 | High | 7.8 | 2024-06-13 | In v4l2_smfc_qbuf of smfc-v4l2-ioctls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privileg… |
CVE-2024-32900 | High | 7.8 | 2024-06-13 | In lwis_fence_signal of lwis_debug.c, there is a possible Use after Free due to improper locking. This could lead to local escalation of privilege from hal_cam… |
CVE-2024-32899 | High | 7.0 | 2024-06-13 | In gpu_pm_power_off_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a race condition. This could lead to local escal… |
CVE-2024-32898 | Medium | 4.7 | 2024-06-13 | In ProtocolCellIdentityParserV4::Parse() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to lo… |
CVE-2024-32897 | Medium | 5.9 | 2024-06-13 | In ProtocolCdmaCallWaitingIndAdapter::GetCwInfo() of protocolsmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could l… |
CVE-2024-32896 | High | 7.8 | 2024-06-13 | there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges n… |
CVE-2024-32895 | High | 7.8 | 2024-06-13 | In BCMFASTPATH of dhd_msgbuf.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no… |
CVE-2024-32894 | High | 7.5 | 2024-06-13 | In bc_get_converted_received_bearer of bc_utilities.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informat… |
CVE-2024-32893 | Medium | 5.5 | 2024-06-13 | In _s5e9865_mif_set_rate of exynos_dvfs.c, there is a possible out of bounds read due to improper casting. This could lead to local information disclosure with… |
CVE-2024-32892 | High | 7.8 | 2024-06-13 | In handle_init of goodix/main/main.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no add… |
CVE-2024-32891 | High | 7.0 | 2024-06-13 | In sec_media_unprotect of media.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no addi… |
CVE-2024-29787 | High | 7.8 | 2024-06-13 | In lwis_process_transactions_in_queue of lwis_transaction.c, there is a possible use after free due to a use after free. This could lead to local escalation of… |
CVE-2024-29786 | Critical | 9.8 | 2024-06-13 | In pktproc_fill_data_addr_without_bm of link_rx_pktproc.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote cod… |
CVE-2024-29785 | Medium | 5.5 | 2024-06-13 | In aur_get_state of aurora.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no add… |
CVE-2024-29784 | High | 7.8 | 2024-06-13 | In prepare_response of lwis_periodic_io.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege… |
CVE-2024-29781 | High | 7.5 | 2024-06-13 | In ss_AnalyzeOssReturnResUssdArgIe of ss_OssAsnManagement.c, there is a possible out of bounds read due to improper input validation. This could lead to remote… |
CVE-2024-29780 | Medium | 5.5 | 2024-06-13 | In hwbcc_ns_deprivilege of trusty/user/base/lib/hwbcc/client/hwbcc.c, there is a possible uninitialized stack data disclosure due to uninitialized data. This c… |
CVE-2024-29778 | Medium | 4.7 | 2024-06-13 | In ProtocolPsDedicatedBearInfoAdapter::processQosSession of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This c… |
CVE-2024-5847 | High | 8.8 | 2024-06-11 | Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chro… |
CVE-2024-5846 | High | 8.8 | 2024-06-11 | Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chro… |
CVE-2024-5845 | High | 8.8 | 2024-06-11 | Use after free in Audio in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chrom… |
CVE-2024-5844 | High | 8.8 | 2024-06-11 | Heap buffer overflow in Tab Strip in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML… |
CVE-2024-5843 | Medium | 6.5 | 2024-06-11 | Inappropriate implementation in Downloads in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to obfuscate security UI via a malicious file. (Chr… |
CVE-2024-5842 | High | 8.8 | 2024-06-11 | Use after free in Browser UI in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perfor… |
CVE-2024-5841 | High | 8.8 | 2024-06-11 | Use after free in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2024-5840 | Medium | 6.5 | 2024-06-11 | Policy bypass in CORS in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromi… |
CVE-2024-5839 | Medium | 6.5 | 2024-06-11 | Inappropriate Implementation in Memory Allocator in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a… |
CVE-2024-5838 | High | 8.8 | 2024-06-11 | Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromiu… |
CVE-2024-5837 | High | 8.8 | 2024-06-11 | Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML pa… |
CVE-2024-5836 | High | 8.8 | 2024-06-11 | Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed an attacker who convinced a user to install a malicious extension to e… |
CVE-2024-5835 | High | 8.8 | 2024-06-11 | Heap buffer overflow in Tab Groups in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to… |