Product:

Android

(Google)
Repositories https://github.com/torvalds/linux
#Vulnerabilities 7236
Date Id Summary Products Score Patch Annotated
2024-02-05 CVE-2024-20012 In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08358566; Issue ID: ALPS08358566. Android 6.7
2024-02-07 CVE-2024-22012 there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Android 7.8
2025-05-05 CVE-2025-20668 In scp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09625562; Issue ID: MSV-3027. Android 7.8
2025-05-05 CVE-2025-20671 In thermal, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09698599; Issue ID: MSV-3228. Android 7.0
2024-04-08 CVE-2023-52346 In modem driver, there is a possible system crash due to improper input validation. This could lead to local information disclosure with System execution privileges needed Android N/A
2024-04-08 CVE-2023-52341 In Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed Android N/A
2024-04-08 CVE-2023-52342 In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote information disclosure no additional execution privileges needed Android N/A
2024-04-08 CVE-2023-52343 In SecurityCommand message after as security has been actived., there is a possible improper input validation. This could lead to remote information disclosure no additional execution privileges needed Android N/A