| CVE-2023-40103 |
In multiple locations, there is a possible way to corrupt memory due to a double free
|
Not rated
|
Dec 4, 2023 |
| CVE-2023-40098 |
In mOnDone of NotificationConversationInfo.java, there is a possible way to access app notification data of another user…
|
Not rated
|
Dec 4, 2023 |
| CVE-2023-40097 |
In hasPermissionForActivity of PackageManagerHelper.java, there is a possible URI grant due to improper input validation
|
Not rated
|
Dec 4, 2023 |
| CVE-2023-40096 |
In OpRecordAudioMonitor::onFirstRef of AudioRecordClient.cpp, there is a possible way to record audio from the…
|
Not rated
|
Dec 4, 2023 |
| CVE-2023-40095 |
In createDontSendToRestrictedAppsBundle of PendingIntentUtils.java, there is a possible background activity launch due…
|
Not rated
|
Dec 4, 2023 |
| CVE-2023-40094 |
In keyguardGoingAway of ActivityTaskManagerService.java, there is a possible lock screen bypass due to a missing…
|
Not rated
|
Dec 4, 2023 |
| CVE-2023-40092 |
In verifyShortcutInfoPackage of ShortcutService.java, there is a possible way to see another user's image due to a…
|
Not rated
|
Dec 4, 2023 |
| CVE-2023-40091 |
In onTransact of IncidentService.cpp, there is a possible out of bounds write due to memory corruption
|
Not rated
|
Dec 4, 2023 |
| CVE-2023-40090 |
In BTM_BleVerifySignature of btm_ble.cc, there is a possible way to bypass signature validation due to side channel…
|
Not rated
|
Dec 4, 2023 |
| CVE-2023-40084 |
In run of MDnsSdListener.cpp, there is a possible memory corruption due to a use after free
|
Not rated
|
Dec 4, 2023 |
| CVE-2023-40083 |
In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check
|
Not rated
|
Dec 4, 2023 |
| CVE-2023-40089 |
In getCredentialManagerPolicy of DevicePolicyManagerService.java, there is a possible method for users to select…
|
Not rated
|
Dec 4, 2023 |
| CVE-2023-40088 |
In callback_thread_event of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible memory corruption…
|
8.8
High
|
Dec 4, 2023 |
| CVE-2023-40087 |
In transcodeQ*ToFloat of btif_avrcp_audio_track.cc, there is a possible out of bounds write due to a missing bounds…
|
Not rated
|
Dec 4, 2023 |
| CVE-2023-40082 |
In modify_for_next_stage of fdt.rs, there is a possible way to render KASLR ineffective due to improperly used crypto
|
Not rated
|
Dec 4, 2023 |
| CVE-2023-40081 |
In loadMediaDataInBgForResumption of MediaDataManager.kt, there is a possible way to view another user's images due…
|
Not rated
|
Dec 4, 2023 |
| CVE-2023-40080 |
In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a logic error in the code
|
Not rated
|
Dec 4, 2023 |
| CVE-2023-40079 |
In injectSendIntentSender of ShortcutService.java, there is a possible background activity launch due to a permissions…
|
Not rated
|
Dec 4, 2023 |
| CVE-2023-40078 |
In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to…
|
Not rated
|
Dec 4, 2023 |
| CVE-2023-40074 |
In saveToXml of PersistableBundle.java, invalid data could lead to local persistent denial of service with no additional…
|
Not rated
|
Dec 4, 2023 |
| CVE-2023-40073 |
In visitUris of Notification.java, there is a possible cross-user media read due to Confused Deputy
|
Not rated
|
Dec 4, 2023 |
| CVE-2023-40077 |
In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition
|
9.8
Critical
|
Dec 4, 2023 |
| CVE-2023-40076 |
In createPendingIntent of CredentialManagerUi.java, there is a possible way to access credentials from other users due…
|
5.5
Medium
|
Dec 4, 2023 |
| CVE-2023-40075 |
In forceReplaceShortcutInner of ShortcutPackage.java, there is a possible way to register unlimited packages due to a…
|
Not rated
|
Dec 4, 2023 |
| CVE-2023-35690 |
In RGXDestroyHWRTData of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception
|
Not rated
|
Dec 4, 2023 |