| CVE-2024-43090 |
In multiple locations, there is a possible cross-user image read due to a missing permission check
|
5.0
Medium
|
Nov 13, 2024 |
| CVE-2024-43089 |
In updateInternal of MediaProvider.java , there is a possible access of another app's files due to a missing…
|
7.8
High
|
Nov 13, 2024 |
| CVE-2024-43088 |
In multiple functions in AppInfoBase.java, there is a possible way to manipulate app permission settings belonging to…
|
8.4
High
|
Nov 13, 2024 |
| CVE-2024-43087 |
In getInstalledAccessibilityPreferences of AccessibilitySettings.java, there is a possible way to hide an enabled…
|
8.4
High
|
Nov 13, 2024 |
| CVE-2024-43086 |
In validateAccountsInternal of AccountManagerService.java, there is a possible way to leak account credentials to a…
|
5.5
Medium
|
Nov 13, 2024 |
| CVE-2024-43085 |
In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents over USB without…
|
7.8
High
|
Nov 13, 2024 |
| CVE-2024-43084 |
In visitUris of multiple files, there is a possible information disclosure due to a confused deputy
|
6.2
Medium
|
Nov 13, 2024 |
| CVE-2024-43082 |
In onActivityResult of EditUserPhotoController.java, there is a possible cross-user media read due to a confused deputy
|
5.5
Medium
|
Nov 13, 2024 |
| CVE-2024-43081 |
In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a…
|
7.8
High
|
Nov 13, 2024 |
| CVE-2024-43080 |
In onReceive of AppRestrictionsFragment.java, there is a possible escalation of privilege due to unsafe deserialization
|
7.8
High
|
Nov 13, 2024 |
| CVE-2024-43083 |
In validate of WifiConfigurationUtil.java , there is a possible persistent denial of service due to resource exhaustion
|
6.2
Medium
|
Nov 13, 2024 |
| CVE-2024-40661 |
In mayAdminGrantPermission of AdminRestrictedPermissionsUtils.java, there is a possible way to access the microphone due…
|
7.8
High
|
Nov 13, 2024 |
| CVE-2024-40660 |
In setTransactionState of SurfaceFlinger.cpp, there is a possible way to change protected display attributes due to a…
|
7.8
High
|
Nov 13, 2024 |
| CVE-2024-40671 |
In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible way to achieve arbitrary code execution due to a…
|
7.8
High
|
Nov 13, 2024 |
| CVE-2024-34747 |
In DevmemXIntMapPages of devicemem_server.c, there is a possible use-after-free due to a logic error in the code
|
8.4
High
|
Nov 13, 2024 |
| CVE-2024-34719 |
In multiple locations, there is a possible permissions bypass due to a missing null check
|
8.4
High
|
Nov 13, 2024 |
| CVE-2024-34729 |
In multiple locations, there is a possible arbitrary code execution due to a logic error in the code
|
8.4
High
|
Nov 13, 2024 |
| CVE-2024-31337 |
In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation
|
8.4
High
|
Nov 13, 2024 |
| CVE-2024-23715 |
In PMRWritePMPageList of pmr.c, there is a possible out of bounds write due to a logic error in the code
|
7.8
High
|
Nov 13, 2024 |
| CVE-2023-35686 |
In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation
|
7.8
High
|
Nov 13, 2024 |
| CVE-2023-35659 |
In DevmemIntChangeSparse of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the…
|
7.8
High
|
Nov 13, 2024 |
| CVE-2024-46964 |
The com.video.downloader.all (aka All Video Downloader) application through 11.28 for Android allows an attacker to…
|
8.1
High
|
Nov 11, 2024 |
| CVE-2024-46963 |
The com.superfast.video.downloader (aka Super Unlimited Video Downloader - All in One) application through 5.1.9 for…
|
8.1
High
|
Nov 11, 2024 |
| CVE-2024-46962 |
The SYQ com.downloader.video.fast (aka Master Video Downloader) application through 2.0 for Android allows an attacker…
|
9.1
Critical
|
Nov 11, 2024 |
| CVE-2024-46966 |
The Ikhgur mn.ikhgur.khotoch (aka Video Downloader Pro & Browser) application through 1.0.42 for Android allows an…
|
8.1
High
|
Nov 11, 2024 |