Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Android
(Google)| Repositories | https://github.com/torvalds/linux |
| #Vulnerabilities | 7236 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2024-07-09 | CVE-2024-34722 | In smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a protocol. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | Android | 8.8 | ||
| 2024-09-13 | CVE-2024-44092 | There is a possible LCS signing enforcement missing due to test/debugging code left in a production build. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | Android | 7.8 | ||
| 2024-11-28 | CVE-2018-9377 | In getIntentForIntentSender of ActivityManagerService.java, there is a possible way to access user metadata due to a pending intent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | Android | 5.5 | ||
| 2023-06-06 | CVE-2022-48391 | In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. | Android | 5.5 | ||
| 2023-06-06 | CVE-2022-48392 | In dialer service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. | Android | 7.8 | ||
| 2023-06-06 | CVE-2022-48448 | In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. | Android | 5.5 | ||
| 2023-06-06 | CVE-2022-48446 | In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. | Android | 5.5 | ||
| 2023-06-06 | CVE-2022-48447 | In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. | Android | 5.5 | ||
| 2023-06-06 | CVE-2023-30865 | In dialer service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. | Android | 5.5 | ||
| 2023-06-06 | CVE-2023-30863 | In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. | Android | 7.8 |