Advisories · Technology

Android.

Every CVE that names Android among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-20991 CVE record

Android: In btm_ble_process_periodic_adv_sync_lost_evt of ble_scanner_hci_interface.cc…
- Android
Not analysed yet 24 Mar 2023
CVE-2023-20990 CVE record

Android: In btm_ble_rand_enc_complete of btm_ble.cc…
- Android
Not analysed yet 24 Mar 2023
CVE-2023-20989 CVE record

CVSS 4.4 Medium

Out-of-bounds read in Android
- Android
- Memory corruption
Not analysed yet 24 Mar 2023
CVE-2023-20988 CVE record

CVSS 4.5 Medium

Out-of-bounds read in Android
- Android
- Memory corruption
Not analysed yet 24 Mar 2023
CVE-2023-20987 CVE record

Android: In btm_read_link_quality_complete of btm_acl.cc…
- Android
Not analysed yet 24 Mar 2023
CVE-2023-20986 CVE record

Android: In btm_ble_clear_resolving_list_completecomplete of btm_ble_privacy.cc…
- Android
Not analysed yet 24 Mar 2023
CVE-2023-20985 CVE record

Android: In BTA_GATTS_HandleValueIndication of bta_gatts_api.cc…
- Android
Not analysed yet 24 Mar 2023
CVE-2023-20984 CVE record

Android: In ParseBqrLinkQualityEvt of btif_bqr.cc…
- Android
Not analysed yet 24 Mar 2023
CVE-2023-20983 CVE record

Android: In btm_ble_rand_enc_complete of btm_ble.cc…
- Android
Not analysed yet 24 Mar 2023
CVE-2023-20982 CVE record

Android: In btm_read_tx_power_complete of btm_acl.cc…
- Android
Not analysed yet 24 Mar 2023
CVE-2023-20981 CVE record

Android: In btu_ble_rc_param_req_evt of btu_hcif.cc…
- Android
Not analysed yet 24 Mar 2023
CVE-2023-20980 CVE record

Android: In btu_ble_ll_conn_param_upd_evt of btu_hcif.cc…
- Android
Not analysed yet 24 Mar 2023
CVE-2023-20979 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Android
- Android
- Memory corruption
Not analysed yet 24 Mar 2023
CVE-2023-20977 CVE record

CVSS 4.4 Medium

Out-of-bounds read in Android
- Android
- Memory corruption
Not analysed yet 24 Mar 2023
CVE-2023-20976 CVE record

CVSS 7.3 High

Improper input validation in Android
- Android
- CWE-20
Not analysed yet 24 Mar 2023
CVE-2023-20975 CVE record

CVSS 7.8 High

Incorrect authorization in Android
- Android
- Broken access control
Not analysed yet 24 Mar 2023
CVE-2023-20974 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Android
- Android
- Memory corruption
Not analysed yet 24 Mar 2023
CVE-2023-20973 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Android
- Android
- Memory corruption
Not analysed yet 24 Mar 2023
CVE-2023-20972 CVE record

CVSS 5.5 Medium

Buffer overflow in Android
- Android
- Memory corruption
Not analysed yet 24 Mar 2023
CVE-2023-20970 CVE record

CVSS 4.4 Medium

Out-of-bounds read in Android
- Android
- Memory corruption
Not analysed yet 24 Mar 2023
CVE-2023-20969 CVE record

CVSS 4.4 Medium

Out-of-bounds read in Android
- Android
- Memory corruption
Not analysed yet 24 Mar 2023
CVE-2023-20968 CVE record

CVSS 4.4 Medium

Out-of-bounds read in Android
- Android
- Memory corruption
Not analysed yet 24 Mar 2023
CVE-2023-20966 CVE record

CVSS 7.8 High

Out-of-bounds write in Android
- Android
- Memory corruption
Not analysed yet 24 Mar 2023
CVE-2023-20964 CVE record

CVSS 7.8 High

Android: In multiple functions of MediaSessionRecord.java…
- Android
- CWE-610
Not analysed yet 24 Mar 2023
CVE-2023-20963 CVE record

CVSS 7.8 HighCritical · KEVKEV

Improper certificate validation in Android
- Android
- Weak cryptography or TLS
Not analysed yet 24 Mar 2023
CVE-2023-20962 CVE record

CVSS 5.5 Medium

Exported Android component in Android
- Android
- CWE-926
Not analysed yet 24 Mar 2023
CVE-2023-20960 CVE record

CVSS 7.8 High

Improper input validation in Android
- Android
- CWE-20
Not analysed yet 24 Mar 2023
CVE-2023-20959 CVE record

CVSS 7.8 High

Missing authorization in Android
- Android
- Broken access control
Not analysed yet 24 Mar 2023
CVE-2023-20958 CVE record

CVSS 7.1 High

Out-of-bounds read in Android
- Android
- Memory corruption
Not analysed yet 24 Mar 2023
CVE-2023-20957 CVE record

CVSS 7.8 High

Android: In onAttach of SettingsPreferenceFragment.java…
- Android
- Privilege escalation
Not analysed yet 24 Mar 2023
CVE-2023-20956 CVE record

CVSS 4.4 Medium

Out-of-bounds write in Android
- Android
- Memory corruption
Not analysed yet 24 Mar 2023
CVE-2023-20955 CVE record

CVSS 7.8 High

Missing authorization in Android
- Android
- Broken access control
Not analysed yet 24 Mar 2023
CVE-2023-20954 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Android
- Android
- Memory corruption
Not analysed yet 24 Mar 2023
CVE-2023-20953 CVE record

CVSS 7.8 High

Android: In onPrimaryClipChanged of ClipboardListener.java…
- Android
Not analysed yet 24 Mar 2023
CVE-2023-20952 CVE record

CVSS 5.5 Medium

Out-of-bounds write in Android
- Android
- Memory corruption
Not analysed yet 24 Mar 2023
CVE-2023-20951 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Android
- Android
- Memory corruption
Not analysed yet 24 Mar 2023
CVE-2023-20947 CVE record

CVSS 7.8 High

Android: In getGroupState of GrantPermissionsViewModel.kt…
- Android
Not analysed yet 24 Mar 2023
CVE-2023-20936 CVE record

CVSS 7.8 High

Out-of-bounds write in Android
- Android
- Memory corruption
Not analysed yet 24 Mar 2023
CVE-2023-20931 CVE record

CVSS 7.8 High

Out-of-bounds write in Android
- Android
- Memory corruption
Not analysed yet 24 Mar 2023
CVE-2023-20929 CVE record

CVSS 5.5 Medium

Android: In sendHalfSheetCancelBroadcast of HalfSheetActivity.java…
- Android
Not analysed yet 24 Mar 2023
CVE-2023-20926 CVE record

CVSS 6.8 Medium

Missing authorization in Android
- Android
- Broken access control
Not analysed yet 24 Mar 2023
CVE-2023-20917 CVE record

CVSS 7.8 High

Android: In onTargetSelected of ResolverActivity.java…
- Android
Not analysed yet 24 Mar 2023
CVE-2023-20911 CVE record

CVSS 7.8 High

Uncontrolled resource consumption in Android
- Android
- Denial of service
Not analysed yet 24 Mar 2023
CVE-2023-20906 CVE record

CVSS 7.8 High

Android: In onPackageAddedInternal of PermissionManagerService.java…
- Android
Not analysed yet 24 Mar 2023
CVE-2022-42528 CVE record

In ffa_mrd_prot of shared_mem.c, there is a possible ID due to a logic error in the code.
- Android
Not analysed yet 24 Mar 2023
CVE-2022-42500 CVE record

Android: In OEM_OnRequest of sced.cpp, there is a possible shell command execution due to improper…
- Android
Not analysed yet 24 Mar 2023
CVE-2022-42499 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Android
- Android
- Memory corruption
Not analysed yet 24 Mar 2023
CVE-2022-42498 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Android
- Android
- Memory corruption
Not analysed yet 24 Mar 2023
CVE-2022-20542 CVE record

CVSS 7.8 High

Improper input validation in Android
- Android
- CWE-20
Not analysed yet 24 Mar 2023
CVE-2022-20532 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Integer overflow in Android
- Android
- Memory corruption
Not analysed yet 24 Mar 2023
CVE-2022-20499 CVE record

CVSS 5.5 Medium

Android: In validateForCommonR1andR2 of PasspointConfiguration.java…
- Android
Not analysed yet 24 Mar 2023
CVE-2022-20467 CVE record

CVSS 5.5 Medium

Android: In isBluetoothShareUri of BluetoothOppUtility.java…
- Android
Not analysed yet 24 Mar 2023
CVE-2023-20948 CVE record

CVSS 7.5 High

Out-of-bounds read in Android
- Android
- Memory corruption
Not analysed yet 28 Feb 2023
CVE-2023-20946 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Android: In onStart of BluetoothSwitchPreferenceController.java…
- Android
Not analysed yet 28 Feb 2023
CVE-2023-20945 CVE record

CVSS 7.8 High

Out-of-bounds write in Android
- Android
- Memory corruption
Not analysed yet 28 Feb 2023
CVE-2023-20944 CVE record

CVSS 7.8 High

Deserialization of untrusted data in Android
- Android
- Insecure deserialization
Not analysed yet 28 Feb 2023
CVE-2023-20943 CVE record

CVSS 7.8 High

Path traversal in Android
- Android
- Path traversal
Not analysed yet 28 Feb 2023
CVE-2023-20940 CVE record

CVSS 7.8 High

Improper signature verification in Android
- Android
- Weak cryptography or TLS
Not analysed yet 28 Feb 2023
CVE-2023-20939 CVE record

CVSS 7.8 High

Android: In multiple functions of looper_backed_event_loop.cpp…
- Android
- CWE-667
Not analysed yet 28 Feb 2023
CVE-2023-20938 CVE record

CVSS 8.1 High

Use after free in Android
- Android
- Memory corruption
Not analysed yet 28 Feb 2023