Skip to content

Known vulnerabilities in Google Android

Is your version affected?

CVE Summary Score Published
CVE-2023-40093 In multiple files, there is a possible way that trimmed content could be included in PDF output due to a logic error… 5.5 Medium Feb 16, 2024
CVE-2023-40122 In applyCustomDescription of SaveUi.java, there is a possible way to view other user's images due to a confused deputy 5.3 Medium Feb 16, 2024
CVE-2023-40115 In readLogs of StatsService.cpp, there is a possible memory corruption due to a use after free 9.8 Critical Feb 15, 2024
CVE-2023-40124 In multiple locations, there is a possible cross-user read due to a confused deputy 5.5 Medium Feb 15, 2024
CVE-2023-40107 In ARTPWriter of ARTPWriter.cpp, there is a possible use after free due to uninitialized data 7.4 High Feb 15, 2024
CVE-2023-40106 In sanitizeSbn of NotificationManagerService.java, there is a possible way to launch an activity from the background due… 7.8 High Feb 15, 2024
CVE-2023-40114 In multiple functions of MtpFfsHandle.cpp , there is a possible out of bounds write due to a use after free 8.4 High Feb 15, 2024
CVE-2023-40113 In multiple locations, there is a possible way for apps to access cross-user message data due to a missing permission… 5.5 Medium Feb 15, 2024
CVE-2023-40112 In ippSetValueTag of ipp.c, there is a possible out of bounds read due to a missing bounds check 5.1 Medium Feb 15, 2024
CVE-2023-40111 In setMediaButtonReceiver of MediaSessionRecord.java, there is a possible way to send a pending intent on behalf of… 7.8 High Feb 15, 2024
CVE-2023-40110 In multiple functions of MtpPacket.cpp, there is a possible out of bounds write due to a heap buffer overflow 6.2 Medium Feb 15, 2024
CVE-2023-40109 In createFromParcel of UsbConfiguration.java, there is a possible background activity launch (BAL) due to a… 7.3 High Feb 15, 2024
CVE-2023-40105 In backupAgentCreated of ActivityManagerService.java, there is a possible way to leak sensitive data due to a missing… 5.5 Medium Feb 15, 2024
CVE-2023-40104 In ca-certificates, there is a possible way to read encrypted TLS data due to untrusted cryptographic certificates 7.5 High Feb 15, 2024
CVE-2023-40100 In discovery_thread of Dns64Configuration.cpp, there is a possible memory corruption due to a use after free 8.4 High Feb 15, 2024
CVE-2024-22012 there is a possible out of bounds write due to a missing bounds check 7.8 High Feb 7, 2024
CVE-2023-6181 An oversight in BCB handling of reboot reason that allows for persistent code execution Not rated Dec 11, 2023
CVE-2023-48425 U-Boot vulnerability resulting in persistent Code Execution  9.8 Critical Dec 11, 2023
CVE-2023-48424 U-Boot shell vulnerability resulting in Privilege escalation in a production device 9.8 Critical Dec 11, 2023
CVE-2023-48417 Missing Permission checks resulting in unauthorized access and Manipulation in KeyChainActivity Application Not rated Dec 11, 2023
CVE-2023-48423 In dhcp4_SetPDNAddress of dhcp4_Main.c, there is a possible out of bounds write due to a missing bounds check Not rated Dec 8, 2023
CVE-2023-48422 In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check Not rated Dec 8, 2023
CVE-2023-48421 In gpu_pixel_handle_buffer_liveness_update_ioctl of… 7.8 High Dec 8, 2023
CVE-2023-48420 there is a possible use after free due to a race condition Not rated Dec 8, 2023
CVE-2023-48416 In multiple locations, there is a possible null dereference due to a missing null check Not rated Dec 8, 2023

Other Google products