2023 CVEs (page 274)
Page 274 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-21059 | High | 7.5 | 2023-03-24 | In EUTRAN_LCS_DecodeFacilityInformationElement of LPP_LcsManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to… |
CVE-2023-21058 | Critical | 9.8 | 2023-03-24 | In lcsm_SendRrAcquiAssist of lcsm_bcm_assist.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution… |
CVE-2023-21057 | Critical | 9.8 | 2023-03-24 | In ProfSixDecomTcpSACKoption of RohcPacketCommon, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code executi… |
CVE-2023-21056 | Medium | 6.7 | 2023-03-24 | In lwis_slc_buffer_free of lwis_device_slc.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege wit… |
CVE-2023-21055 | Medium | 6.4 | 2023-03-24 | In dit_hal_ioctl of dit.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution p… |
CVE-2023-21054 | High | 7.2 | 2023-03-24 | In EUTRAN_LCS_ConvertLCS_MOLRReq of LPP_CommonUtil.c, there is a possible out of bounds write due to a logic error in the code. This could lead to remote code… |
CVE-2023-21053 | High | 7.5 | 2023-03-24 | In sms_ExtractCbLanguage of sms_CellBroadcast.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information di… |
CVE-2023-21052 | Medium | 6.7 | 2023-03-24 | In setToExternal of ril_external_client.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of priv… |
CVE-2023-21051 | Medium | 6.7 | 2023-03-24 | In dwc3_exynos_clk_get of dwc3-exynos.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privi… |
CVE-2023-21050 | Medium | 6.7 | 2023-03-24 | In load_png_image of ExynosHWCHelper.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of priv… |
CVE-2023-21049 | Medium | 4.4 | 2023-03-24 | In append_camera_metadata of camera_metadata.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc… |
CVE-2023-21048 | Medium | 4.4 | 2023-03-24 | In handleEvent of nan.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System ex… |
CVE-2023-21047 | Medium | 4.4 | 2023-03-24 | In ConvertToHalMetadata of aidl_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure… |
CVE-2023-21046 | Medium | 4.4 | 2023-03-24 | In ConvertToHalMetadata of aidl_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclos… |
CVE-2023-21045 | Medium | 4.4 | 2023-03-24 | When cpif handles probe failures, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with System e… |
CVE-2023-21044 | Medium | 4.4 | 2023-03-24 | In init of VendorGraphicBufferMeta, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with… |
CVE-2023-21043 | Medium | 6.7 | 2023-03-24 | In (TBD) of (TBD), there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution pr… |
CVE-2023-21042 | Medium | 6.7 | 2023-03-24 | In (TBD) of (TBD), there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution pr… |
CVE-2023-21041 | High | 7.8 | 2023-03-24 | In append_to_params of param_util.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege… |
CVE-2023-21040 | High | 7.8 | 2023-03-24 | In buildCommand of bluetooth_ccc.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege… |
CVE-2023-21039 | Medium | 4.4 | 2023-03-24 | In dumpstateBoard of Dumpstate.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure wi… |
CVE-2023-21038 | Medium | 6.7 | 2023-03-24 | In cs40l2x_cp_trigger_queue_show of cs40l2x.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privileg… |
CVE-2023-21036 | Medium | 5.5 | 2023-03-24 | In BitmapExport.java, there is a possible failure to truncate images due to a logic error in the code.Product: AndroidVersions: Android kernelAndroid ID: A-264… |
CVE-2023-21035 | High | 7.8 | 2023-03-24 | In multiple functions of BackupHelper.java, there is a possible way for an app to get permissions previously granted to another app with the same package name… |
CVE-2023-21034 | High | 7.8 | 2023-03-24 | In multiple functions of SensorService.cpp, there is a possible access of accurate sensor data due to a permissions bypass. This could lead to local escalation… |
CVE-2023-21033 | Medium | 5.5 | 2023-03-24 | In addNetwork of WifiManager.java, there is a possible way to trigger a persistent DoS due to resource exhaustion. This could lead to local denial of service w… |
CVE-2023-21032 | Medium | 4.4 | 2023-03-24 | In _ufdt_output_node_to_fdt of ufdt_convert.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information discl… |
CVE-2023-21031 | Medium | 4.7 | 2023-03-24 | In setPowerMode of HWC2.cpp, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with no additional… |
CVE-2023-21030 | High | 7.8 | 2023-03-24 | In Confirmation of keystore_cli_v2.cpp, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege in an… |
CVE-2023-21029 | Medium | 5.5 | 2023-03-24 | In register of UidObserverController.java, there is a missing permission check. This could lead to local information disclosure of app usage with User executio… |
CVE-2023-21028 | High | 7.5 | 2023-03-24 | In parse_printerAttributes of ipphelper.c, there is a possible out of bounds read due to a string without a null-terminator. This could lead to remote informat… |
CVE-2023-21027 | High | 7.5 | 2023-03-24 | In multiple functions of PasspointXmlUtils.java, there is a possible authentication misconfiguration due to a logic error in the code. This could lead to remot… |
CVE-2023-21026 | Medium | 5.5 | 2023-03-24 | In updateInputChannel of WindowManagerService.java, there is a possible way to set a touchable region beyond its own SurfaceControl due to a logic error in the… |
CVE-2023-21025 | Medium | 4.4 | 2023-03-24 | In ufdt_local_fixup_prop of ufdt_overlay.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information discl… |
CVE-2023-21024 | High | 7.8 | 2023-03-24 | In maybeFinish of FallbackHome.java, there is a possible delay of lockdown screen due to logic error. This could lead to local escalation of privilege with no… |
CVE-2023-21022 | High | 7.8 | 2023-03-24 | In BufferBlock of Suballocation.cpp, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no… |
CVE-2023-21021 | High | 7.8 | 2023-03-24 | In isTargetSdkLessThanQOrPrivileged of WifiServiceImpl.java, there is a possible way for the guest user to change admin user network settings due to a missing… |
CVE-2023-21020 | Medium | 6.7 | 2023-03-24 | In registerSignalHandlers of main.c, there is a possible local arbitrary code execution due to a use after free. This could lead to local escalation of privile… |
CVE-2023-21019 | Medium | 5.5 | 2023-03-24 | In ih264e_init_proc_ctxt of ih264e_process.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclo… |
CVE-2023-21018 | Medium | 6.7 | 2023-03-24 | In UnwindingWorker of unwinding.cc, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with Syst… |
CVE-2023-21017 | High | 7.8 | 2023-03-24 | In InstallStart of InstallStart.java, there is a possible way to change the installer package name due to an improper input validation. This could lead to loca… |
CVE-2023-21016 | Medium | 5.5 | 2023-03-24 | In AccountTypePreference of AccountTypePreference.java, there is a possible way to mislead the user about accounts installed on the device due to improper inpu… |
CVE-2023-21015 | High | 7.8 | 2023-03-24 | In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead… |
CVE-2023-21014 | Medium | 4.4 | 2023-03-24 | In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure w… |
CVE-2023-21013 | Medium | 4.4 | 2023-03-24 | In forceStaDisconnection of hostapd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure… |
CVE-2023-21012 | Medium | 4.4 | 2023-03-24 | In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure w… |
CVE-2023-21011 | Medium | 4.4 | 2023-03-24 | In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure w… |
CVE-2023-21010 | Medium | 4.4 | 2023-03-24 | In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure w… |
CVE-2023-21009 | Medium | 4.4 | 2023-03-24 | In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure w… |
CVE-2023-21008 | Medium | 4.4 | 2023-03-24 | In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure w… |
CVE-2023-21007 | Medium | 4.4 | 2023-03-24 | In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure w… |
CVE-2023-21006 | Medium | 4.4 | 2023-03-24 | In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure w… |
CVE-2023-21005 | High | 7.8 | 2023-03-24 | In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead… |
CVE-2023-21004 | High | 7.8 | 2023-03-24 | In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead… |
CVE-2023-21003 | High | 7.8 | 2023-03-24 | In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead… |
CVE-2023-21002 | High | 7.8 | 2023-03-24 | In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead… |
CVE-2023-21001 | High | 7.8 | 2023-03-24 | In onContextItemSelected of NetworkProviderSettings.java, there is a possible way for users to change the Wi-Fi settings of other users due to a missing permis… |
CVE-2023-21000 | High | 7.8 | 2023-03-24 | In MediaCodec.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution pr… |
CVE-2023-20999 | Medium | 5.5 | 2023-03-24 | In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial of service… |
CVE-2023-20998 | Medium | 5.5 | 2023-03-24 | In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial of service… |
CVE-2023-20997 | Medium | 5.5 | 2023-03-24 | In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial of service… |
CVE-2023-20996 | Medium | 5.5 | 2023-03-24 | In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial of service… |
CVE-2023-20995 | High | 7.8 | 2023-03-24 | In captureImage of CustomizedSensor.cpp, there is a possible way to bypass the fingerprint unlock due to a logic error in the code. This could lead to local es… |
CVE-2023-20994 | Medium | 6.7 | 2023-03-24 | In _ufdt_output_property_to_fdt of ufdt_convert.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalatio… |
CVE-2023-20993 | High | 7.8 | 2023-03-24 | In multiple functions of SnoozeHelper.java, there is a possible failure to persist settings due to an uncaught exception. This could lead to local escalation o… |
CVE-2023-20992 | Medium | 4.5 | 2023-03-24 | In on_iso_link_quality_read of btm_iso_impl.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl… |
CVE-2023-20991 | Medium | 4.4 | 2023-03-24 | In btm_ble_process_periodic_adv_sync_lost_evt of ble_scanner_hci_interface.cc , there is a possible out of bounds read due to a missing bounds check. This coul… |
CVE-2023-20990 | Medium | 4.4 | 2023-03-24 | In btm_ble_rand_enc_complete of btm_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosu… |
CVE-2023-20989 | Medium | 4.4 | 2023-03-24 | In btm_ble_write_adv_enable_complete of btm_ble_gap.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local informat… |
CVE-2023-20988 | Medium | 4.5 | 2023-03-24 | In btm_read_rssi_complete of btm_acl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure… |
CVE-2023-20987 | Medium | 4.5 | 2023-03-24 | In btm_read_link_quality_complete of btm_acl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis… |
CVE-2023-20986 | Medium | 4.4 | 2023-03-24 | In btm_ble_clear_resolving_list_completecomplete of btm_ble_privacy.cc, there is a possible out of bounds read due to a missing bounds check. This could lead t… |
CVE-2023-20985 | High | 7.8 | 2023-03-24 | In BTA_GATTS_HandleValueIndication of bta_gatts_api.cc, there is a possible out of bounds write due to improper input validation. This could lead to local esca… |
CVE-2023-20984 | Medium | 4.4 | 2023-03-24 | In ParseBqrLinkQualityEvt of btif_bqr.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure… |
CVE-2023-20983 | Medium | 4.4 | 2023-03-24 | In btm_ble_rand_enc_complete of btm_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosu… |
CVE-2023-20982 | Medium | 4.4 | 2023-03-24 | In btm_read_tx_power_complete of btm_acl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclos… |
CVE-2023-20981 | Medium | 4.4 | 2023-03-24 | In btu_ble_rc_param_req_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosu… |
CVE-2023-20980 | Medium | 5.5 | 2023-03-24 | In btu_ble_ll_conn_param_upd_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis… |
CVE-2023-20979 | Medium | 5.5 | 2023-03-24 | In GetNextSourceDataPacket of bta_av_co.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosu… |
CVE-2023-20977 | Medium | 4.4 | 2023-03-24 | In btm_ble_read_remote_features_complete of btm_ble_gap.cc, there is a possible out of bounds read due to improper input validation. This could lead to local i… |
CVE-2023-20976 | High | 7.3 | 2023-03-24 | In getConfirmationMessage of DefaultAutofillPicker.java, there is a possible way to mislead the user to select default autofill application due to improper inp… |
CVE-2023-20975 | High | 7.8 | 2023-03-24 | In getAvailabilityStatus of EnableContentCapturePreferenceController.java, there is a possible way to bypass DISALLOW_CONTENT_CAPTURE due to a permissions bypa… |
CVE-2023-20974 | Medium | 5.5 | 2023-03-24 | In btm_ble_add_resolving_list_entry_complete of btm_ble_privacy.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to lo… |
CVE-2023-20973 | Medium | 5.5 | 2023-03-24 | In btm_create_conn_cancel_complete of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information di… |
CVE-2023-20972 | Medium | 5.5 | 2023-03-24 | In btm_vendor_specific_evt of btm_devctl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclos… |
CVE-2023-20971 | High | 7.8 | 2023-03-24 | In removePermission of PermissionManagerServiceImpl.java, there is a possible way to obtain dangerous permissions without user consent due to a logic error in… |
CVE-2023-20970 | Medium | 4.4 | 2023-03-24 | In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure w… |
CVE-2023-20969 | Medium | 4.4 | 2023-03-24 | In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure w… |
CVE-2023-20968 | Medium | 4.4 | 2023-03-24 | In multiple functions of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure w… |
CVE-2023-20966 | High | 7.8 | 2023-03-24 | In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additi… |
CVE-2023-20964 | High | 7.8 | 2023-03-24 | In multiple functions of MediaSessionRecord.java, there is a possible Intent rebroadcast due to a confused deputy. This could lead to local denial of service o… |
CVE-2023-20963 | High | 7.8 | 2023-03-24 | In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User inter… |
CVE-2023-20962 | Medium | 5.5 | 2023-03-24 | In getSliceEndItem of MediaVolumePreferenceController.java, there is a possible way to start foreground activity from the background due to an unsafe PendingIn… |
CVE-2023-20960 | High | 8.8 | 2023-03-24 | In launchDeepLinkIntentToRight of SettingsHomepageActivity.java, there is a possible way to launch arbitrary activities due to improper input validation. This… |
CVE-2023-20959 | High | 7.8 | 2023-03-24 | In AddSupervisedUserActivity, guest users are not prevented from starting the activity due to missing permissions checks. This could lead to local escalation o… |
CVE-2023-20958 | High | 7.1 | 2023-03-24 | In read_paint of ttcolr.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additi… |
CVE-2023-20957 | High | 7.8 | 2023-03-24 | In onAttach of SettingsPreferenceFragment.java, there is a possible bypass of Factory Reset Protections due to a confused deputy. This could lead to local esca… |
CVE-2023-20956 | Medium | 4.4 | 2023-03-24 | In Import of C2SurfaceSyncObj.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with… |
CVE-2023-20955 | High | 7.8 | 2023-03-24 | In onPrepareOptionsMenu of AppInfoDashboardFragment.java, there is a possible way to bypass admin restrictions and uninstall applications for all users due to… |
CVE-2023-20954 | Critical | 9.8 | 2023-03-24 | In SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no ad… |