Page 51 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-21212 | Medium | 4.4 | 2023-06-28 | In multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the wifi server wit… |
CVE-2023-21211 | Medium | 5.5 | 2023-06-28 | In multiple files, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional exe… |
CVE-2023-21210 | Medium | 4.4 | 2023-06-28 | In initiateHs20IconQueryInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local informatio… |
CVE-2023-21209 | Medium | 6.7 | 2023-06-28 | In multiple functions of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local escalation of privilege… |
CVE-2023-21208 | Medium | 4.4 | 2023-06-28 | In setCountryCodeInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information discl… |
CVE-2023-21207 | Medium | 6.7 | 2023-06-28 | In initiateTdlsSetupInternal of sta_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of pri… |
CVE-2023-21206 | Medium | 4.4 | 2023-06-28 | In initiateVenueUrlAnqpQueryInternal of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local informati… |
CVE-2023-21205 | Medium | 5.5 | 2023-06-28 | In startWpsPinDisplayInternal of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disc… |
CVE-2023-21204 | Medium | 4.4 | 2023-06-28 | In multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the wifi server wit… |
CVE-2023-21203 | Medium | 6.7 | 2023-06-28 | In startWpsPbcInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privil… |
CVE-2023-21202 | Medium | 4.5 | 2023-06-28 | In btm_delete_stored_link_key_complete of btm_devctl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local informa… |
CVE-2023-21201 | High | 7.5 | 2023-06-28 | In on_create_record_event of btif_sdp_server.cc, there is a possible out of bounds read due to a missing null check. This could lead to remote denial of servic… |
CVE-2023-21200 | Medium | 5.5 | 2023-06-28 | In on_remove_iso_data_path of btm_iso_impl.h, there is a possible out of bounds read due to improper input validation. This could lead to local information dis… |
CVE-2023-21199 | Medium | 4.4 | 2023-06-28 | In btu_ble_proc_ltk_req of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure w… |
CVE-2023-21198 | Medium | 5.5 | 2023-06-28 | In remove_sdp_record of btif_sdp_server.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosu… |
CVE-2023-21197 | High | 7.5 | 2023-06-28 | In btm_acl_process_sca_cmpl_pkt of btm_acl.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information d… |
CVE-2023-21196 | Medium | 4.4 | 2023-06-28 | In btm_ble_batchscan_filter_track_adv_vse_cback of btm_ble_batchscan.cc, there is a possible out of bounds read due to a missing bounds check. This could lead… |
CVE-2023-21195 | Medium | 4.5 | 2023-06-28 | In btm_ble_periodic_adv_sync_tx_rcvd of btm_ble_gap.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local infor… |
CVE-2023-21194 | Medium | 4.4 | 2023-06-28 | In gatt_dbg_op_name of gatt_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in… |
CVE-2023-21193 | High | 7.5 | 2023-06-28 | In VideoFrame of VideoFrame.h, there is a possible abort due to an integer overflow. This could lead to remote information disclosure with no additional execut… |
CVE-2023-21192 | High | 7.8 | 2023-06-28 | In setInputMethodWithSubtypeIdLocked of InputMethodManagerService.java, there is a possible way to setup input methods that are not enabled due to improper inp… |
CVE-2023-21191 | High | 7.8 | 2023-06-28 | In fixNotification of NotificationManagerService.java, there is a possible bypass of notification hide preference due to a logic error in the code. This could… |
CVE-2023-21190 | Medium | 5.0 | 2023-06-28 | In btm_acl_encrypt_change of btm_acl.cc, there is a possible way for a remote device to turn off encryption without resulting in a terminated connection due to… |
CVE-2023-21189 | High | 7.3 | 2023-06-28 | In startLockTaskMode of LockTaskController.java, there is a possible bypass of lock task mode due to a logic error in the code. This could lead to local escala… |
CVE-2023-21188 | Medium | 4.4 | 2023-06-28 | In btm_ble_update_inq_result of btm_ble_gap.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disc… |
CVE-2023-21187 | High | 7.8 | 2023-06-28 | In onCreate of UsbAccessoryUriActivity.java, there is a possible way to escape the Setup Wizard due to a logic error in the code. This could lead to local esca… |
CVE-2023-21186 | High | 7.5 | 2023-06-28 | In LogResponse of Dns.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional… |
CVE-2023-21185 | High | 7.8 | 2023-06-28 | In multiple functions of WifiNetworkFactory.java, there is a missing permission check. This could lead to local escalation of privilege from the guest user wit… |
CVE-2023-21184 | High | 7.8 | 2023-06-28 | In getCurrentPrivilegedPackagesForAllUsers of CarrierPrivilegesTracker.java, there is a possible permission bypass due to a logic error in the code. This could… |
CVE-2023-21183 | High | 7.8 | 2023-06-28 | In ForegroundUtils of ForegroundUtils.java, there is a possible way to read NFC tag data while the app is still in the background due to a logic error in the c… |
CVE-2023-21182 | Medium | 4.4 | 2023-06-28 | In Exynos_parsing_user_data_registered_itu_t_t35 of VendorVideoAPI.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead t… |
CVE-2023-21181 | Medium | 4.4 | 2023-06-28 | In btm_ble_update_inq_result of btm_ble_gap.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disc… |
CVE-2023-21180 | High | 7.5 | 2023-06-28 | In xmlParseTryOrFinish of parser.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with… |
CVE-2023-21179 | High | 7.8 | 2023-06-28 | In parseSecurityParamsFromXml of XmlUtil.java, there is a possible bypass of user specified wifi encryption protocol due to improperly used crypto. This could… |
CVE-2023-21178 | Medium | 4.1 | 2023-06-28 | In installKey of KeyUtil.cpp, there is a possible failure of file encryption due to a race condition. This could lead to local information disclosure with Syst… |
CVE-2023-21177 | Medium | 5.5 | 2023-06-28 | In requestAppKeyboardShortcuts of WindowManagerService.java, there is a possible way to infer the app a user is interacting with due to a missing permission ch… |
CVE-2023-21176 | Medium | 4.4 | 2023-06-28 | In list_key_entries of utils.rs, there is a possible way to disable user credentials due to resource exhaustion. This could lead to local denial of service wit… |
CVE-2023-21175 | High | 7.8 | 2023-06-28 | In onCreate of DataUsageSummary.java, there is a possible method for a guest user to enable or disable mobile data due to a permissions bypass. This could lead… |
CVE-2023-21174 | High | 7.8 | 2023-06-28 | In isPageSearchEnabled of BillingCycleSettings.java, there is a possible way for the guest user to change data limits due to a permissions bypass. This could l… |
CVE-2023-21173 | Medium | 5.5 | 2023-06-28 | In multiple methods of DataUsageList.java, there is a possible way to learn about admin user's network activities due to a missing permission check. This could… |
CVE-2023-21172 | High | 7.8 | 2023-06-28 | In multiple functions of WifiCallingSettings.java, there is a possible way to change calling preferences for the admin user due to a permissions bypass. This c… |
CVE-2023-21171 | Medium | 6.7 | 2023-06-28 | In verifyInputEvent of InputDispatcher.cpp, there is a possible way to conduct click fraud due to side channel information disclosure. This could lead to local… |
CVE-2023-21170 | Medium | 4.4 | 2023-06-28 | In executeSetClientTarget of ComposerCommandEngine.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatio… |
CVE-2023-21169 | Medium | 4.4 | 2023-06-28 | In inviteInternal of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with… |
CVE-2023-21168 | Medium | 5.5 | 2023-06-28 | In convertCbYCrY of ColorConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure w… |
CVE-2023-21167 | Medium | 5.5 | 2023-06-28 | In setProfileName of DevicePolicyManagerService.java, there is a possible way to crash the SystemUI menu due to a missing bounds check. This could lead to loca… |
CVE-2023-21161 | Medium | 6.7 | 2023-06-28 | In Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System ex… |
CVE-2023-21160 | Medium | 5.5 | 2023-06-28 | In BuildSetTcsFci of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclo… |
CVE-2023-21159 | Medium | 6.7 | 2023-06-28 | In Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System ex… |
CVE-2023-21158 | Medium | 4.4 | 2023-06-28 | In encode of miscdata.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System ex… |
CVE-2023-21157 | Medium | 6.7 | 2023-06-28 | In encode of wlandata.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System… |
CVE-2023-21156 | Medium | 4.4 | 2023-06-28 | In BuildGetRadioNode of protocolmiscbulider.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information… |
CVE-2023-21155 | Medium | 5.5 | 2023-06-28 | In BuildSetRadioNode of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a missing null check. This could lead to local information discl… |
CVE-2023-21154 | Medium | 4.4 | 2023-06-28 | In StoreAdbSerialNumber of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information… |
CVE-2023-21153 | Medium | 6.7 | 2023-06-28 | In Do_AIMS_SET_CALL_WAITING of imsservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of pri… |
CVE-2023-21152 | Medium | 5.5 | 2023-06-28 | In FaceStatsAnalyzer::InterpolateWeightList of face_stats_analyzer.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to… |
CVE-2023-21151 | Medium | 6.7 | 2023-06-28 | In the Google BMS kernel module, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with S… |
CVE-2023-21150 | Medium | 4.4 | 2023-06-28 | In handle_set_parameters_ctrl of hal_socket.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information di… |
CVE-2023-21149 | High | 7.8 | 2023-06-28 | In registerGsmaServiceIntentReceiver of ShannonRcsService.java, there is a possible way to activate/deactivate RCS service due to a missing permission check. T… |
CVE-2023-21148 | Medium | 4.4 | 2023-06-28 | In BuildSetConfig of protocolimsbuilder.cpp, there is a possible out of bounds read due to a missing null check. This could lead to local information disclosur… |
CVE-2023-21147 | High | 7.8 | 2023-06-28 | In lwis_i2c_device_disable of lwis_device_i2c.c, there is a possible UAF due to a logic error in the code. This could lead to local escalation of privilege wit… |
CVE-2023-21146 | Medium | 6.7 | 2023-06-28 | there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. Us… |
CVE-2023-21066 | Critical | 9.8 | 2023-06-28 | In cd_CodeMsg of cd_codec.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional… |
CVE-2022-20443 | High | 7.8 | 2023-06-28 | In hasInputInfo of Layer.cpp, there is a possible bypass of user interaction requirements due to a tapjacking/overlay attack. This could lead to local escalati… |
CVE-2023-3422 | High | 8.8 | 2023-06-26 | Use after free in Guest View in Google Chrome prior to 114.0.5735.198 allowed an attacker who convinced a user to install a malicious extension to potentially… |
CVE-2023-3421 | High | 8.8 | 2023-06-26 | Use after free in Media in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2023-3420 | High | 8.8 | 2023-06-26 | Type Confusion in V8 in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2023-21144 | High | 7.5 | 2023-06-15 | In doInBackground of NotificationContentInflater.java, there is a possible temporary denial or service due to long running operations. This could lead to remot… |
CVE-2023-21143 | Medium | 5.5 | 2023-06-15 | In multiple functions of multiple files, there is a possible way to make the device unusable due to improper input validation. This could lead to local denial… |
CVE-2023-21142 | Medium | 5.5 | 2023-06-15 | In multiple files, there is a possible way to access traces in the dev mode due to a permissions bypass. This could lead to local information disclosure with n… |
CVE-2023-21141 | Medium | 5.5 | 2023-06-15 | In several functions of several files, there is a possible way to access developer mode traces due to a permissions bypass. This could lead to local informatio… |
CVE-2023-21139 | High | 7.8 | 2023-06-15 | In bindPlayer of MediaControlPanel.java, there is a possible launch arbitrary activity in SysUI due to Unsafe Intent. This could lead to local escalation of pr… |
CVE-2023-21138 | High | 7.8 | 2023-06-15 | In onNullBinding of CallRedirectionProcessor.java, there is a possible long lived connection due to improper input validation. This could lead to local escalat… |
CVE-2023-21137 | Medium | 5.5 | 2023-06-15 | In several methods of JobStore.java, uncaught exceptions in job map parsing could lead to local persistent denial of service with no additional execution privi… |
CVE-2023-21136 | Medium | 5.5 | 2023-06-15 | In multiple functions of JobStore.java, there is a possible way to cause a crash on startup due to improper input validation. This could lead to local denial o… |
CVE-2023-21135 | High | 7.8 | 2023-06-15 | In onCreate of NotificationAccessSettings.java, there is a possible failure to persist notifications settings due to improper input validation. This could lead… |
CVE-2023-21131 | High | 7.8 | 2023-06-15 | In checkKeyIntentParceledCorrectly() of ActivityManagerService.java, there is a possible bypass of Parcel Mismatch mitigations due to a logic error in the code… |
CVE-2023-21130 | Critical | 9.8 | 2023-06-15 | In btm_ble_periodic_adv_sync_lost of btm_ble_gap.cc, there is a possible remote code execution due to a buffer overflow. This could lead to remote code executi… |
CVE-2023-21129 | High | 7.8 | 2023-06-15 | In getFullScreenIntentDecision of NotificationInterruptStateProviderImpl.java, there is a possible activity launch while the app is in the background due to a… |
CVE-2023-21128 | High | 7.8 | 2023-06-15 | In various functions of AppStandbyController.java, there is a possible way to break manageability scenarios due to a logic error in the code. This could lead t… |
CVE-2023-21127 | High | 8.8 | 2023-06-15 | In readSampleData of NuMediaExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote code execution with no… |
CVE-2023-21126 | High | 7.8 | 2023-06-15 | In bindOutputSwitcherAndBroadcastButton of MediaControlPanel.java, there is a possible launch arbitrary activity under SysUI due to Unsafe Intent. This could l… |
CVE-2023-21124 | High | 7.8 | 2023-06-15 | In run of multiple files, there is a possible escalation of privilege due to unsafe deserialization. This could lead to local escalation of privilege with no a… |
CVE-2023-21123 | High | 7.8 | 2023-06-15 | In multiple functions of multiple files, there is a possible way to bypass the DISALLOW_DEBUGGING_FEATURES restriction for tracing due to a missing permission… |
CVE-2023-21122 | High | 7.8 | 2023-06-15 | In various functions of various files, there is a possible way to bypass the DISALLOW_DEBUGGING_FEATURES restriction for tracing due to a missing permission ch… |
CVE-2023-21121 | High | 7.8 | 2023-06-15 | In onResume of AppManagementFragment.java, there is a possible way to prevent users from forgetting a previously connected VPN due to improper input validation… |
CVE-2023-21120 | High | 7.8 | 2023-06-15 | In multiple functions of cdm_engine.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no a… |
CVE-2023-21115 | High | 8.8 | 2023-06-15 | In btm_sec_encrypt_change of btm_sec.cc, there is a possible way to downgrade the link key type due to improperly used crypto. This could lead to paired device… |
CVE-2023-21108 | High | 8.8 | 2023-06-15 | In sdpu_build_uuid_seq of sdp_discovery.cc, there is a possible out of bounds write due to a use after free. This could lead to remote code execution over Blue… |
CVE-2023-21105 | Medium | 5.5 | 2023-06-15 | In multiple functions of ChooserActivity.java, there is a possible cross-user media read due to a confused deputy. This could lead to local information disclos… |
CVE-2023-21101 | High | 7.0 | 2023-06-15 | In multiple functions of WVDrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no… |
CVE-2023-21095 | Medium | 4.7 | 2023-06-15 | In canStartSystemGesture of RecentsAnimationDeviceState.java, there is a possible partial lockscreen bypass due to a race condition. This could lead to local e… |
CVE-2021-0945 | Critical | 9.8 | 2023-06-15 | In _PMRCreate of the PowerVR kernel driver, a missing bounds check means it is possible to overwrite heap memory via PhysmemNewRamBackedPMR. This could lead to… |
CVE-2021-0701 | Critical | 9.8 | 2023-06-15 | In PVRSRVBridgeSyncPrimOpCreate of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds he… |
CVE-2023-2976 | Medium | 5.5 | 2023-06-14 | Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cr… |
CVE-2023-3217 | High | 8.8 | 2023-06-13 | Use after free in WebXR in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2023-3216 | High | 8.8 | 2023-06-13 | Type confusion in V8 in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2023-3215 | High | 8.8 | 2023-06-13 | Use after free in WebRTC in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
CVE-2023-3214 | High | 8.8 | 2023-06-13 | Use after free in Autofill payments in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… |
CVE-2023-32732 | Medium | 5.3 | 2023-06-09 | gRPC contains a vulnerability whereby a client can cause a termination of connection between a HTTP2 proxy and a gRPC server: a base64 encoding error for `-bin… |