Vulnerability-Lookup

WID-SEC-W-2024-3328

Vulnerability from csaf_certbund - Published: 2024-11-04 23:00 - Updated: 2024-11-04 23:00

Summary

Android Patchday November 2024

Severity

Hoch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.

Angriff: Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen.

Betroffene Betriebssysteme: - Android

CVE-2023-35659

Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer bösartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer übermittelt wurde.

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2023-35686

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-20104

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-20106

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-21455

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-23385

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-23715

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-29779

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-31337

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-34719

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-34729

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-34747

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-36978

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-38402

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-38403

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-38405

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-38408

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-38415

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-38421

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-38422

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-38423

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-38424

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-40660

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-40661

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-40671

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-43047

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-43080

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-43081

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-43082

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-43083

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-43084

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-43085

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-43086

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-43087

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-43088

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-43089

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-43090

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-43091

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-43093

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

CVE-2024-46740

Affected products

Known affected 6 products

Product	Identifier	Version
Google Android 15 Google / Android	`cpe:/o:google:android:15`	15
Google Android 14 Google / Android	`cpe:/o:google:android:14`	14
Samsung Android Samsung	`cpe:/o:samsung:android:-`	—
Google Android 12L Google / Android	`cpe:/o:google:android:12l`	12L
Google Android 13 Google / Android	`cpe:/o:google:android:13`	13
Google Android 12 Google / Android	`cpe:/o:google:android:12`	12

References

4 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://source.android.com/docs/security/bulletin…	external
https://security.samsungmobile.com/securityUpdate.smsb	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Das Android Betriebssystem ist eine quelloffene Plattform f\u00fcr mobile Ger\u00e4te. Die Basis bildet der Linux-Kernel.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erh\u00f6hen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Android",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2024-3328 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3328.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2024-3328 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3328"
      },
      {
        "category": "external",
        "summary": "Android Security Bulletin November 2024 vom 2024-11-04",
        "url": "https://source.android.com/docs/security/bulletin/2024-11-01"
      },
      {
        "category": "external",
        "summary": "Samsung Mobile Security Updates",
        "url": "https://security.samsungmobile.com/securityUpdate.smsb"
      }
    ],
    "source_lang": "en-US",
    "title": "Android Patchday November 2024",
    "tracking": {
      "current_release_date": "2024-11-04T23:00:00.000+00:00",
      "generator": {
        "date": "2024-11-05T10:40:07.128+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.8"
        }
      },
      "id": "WID-SEC-W-2024-3328",
      "initial_release_date": "2024-11-04T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2024-11-04T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "12",
                "product": {
                  "name": "Google Android 12",
                  "product_id": "T020881",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:google:android:12"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "13",
                "product": {
                  "name": "Google Android 13",
                  "product_id": "T024488",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:google:android:13"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "14",
                "product": {
                  "name": "Google Android 14",
                  "product_id": "T035732",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:google:android:14"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "15",
                "product": {
                  "name": "Google Android 15",
                  "product_id": "T038021",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:google:android:15"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "12L",
                "product": {
                  "name": "Google Android 12L",
                  "product_id": "T038759",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:google:android:12l"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Android"
          }
        ],
        "category": "vendor",
        "name": "Google"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Samsung Android",
            "product": {
              "name": "Samsung Android",
              "product_id": "T032526",
              "product_identification_helper": {
                "cpe": "cpe:/o:samsung:android:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Samsung"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-35659",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2023-35659"
    },
    {
      "cve": "CVE-2023-35686",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2023-35686"
    },
    {
      "cve": "CVE-2024-20104",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-20104"
    },
    {
      "cve": "CVE-2024-20106",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-20106"
    },
    {
      "cve": "CVE-2024-21455",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-21455"
    },
    {
      "cve": "CVE-2024-23385",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-23385"
    },
    {
      "cve": "CVE-2024-23715",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-23715"
    },
    {
      "cve": "CVE-2024-29779",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-29779"
    },
    {
      "cve": "CVE-2024-31337",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-31337"
    },
    {
      "cve": "CVE-2024-34719",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-34719"
    },
    {
      "cve": "CVE-2024-34729",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-34729"
    },
    {
      "cve": "CVE-2024-34747",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-34747"
    },
    {
      "cve": "CVE-2024-36978",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-36978"
    },
    {
      "cve": "CVE-2024-38402",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-38402"
    },
    {
      "cve": "CVE-2024-38403",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-38403"
    },
    {
      "cve": "CVE-2024-38405",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-38405"
    },
    {
      "cve": "CVE-2024-38408",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-38408"
    },
    {
      "cve": "CVE-2024-38415",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-38415"
    },
    {
      "cve": "CVE-2024-38421",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-38421"
    },
    {
      "cve": "CVE-2024-38422",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-38422"
    },
    {
      "cve": "CVE-2024-38423",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-38423"
    },
    {
      "cve": "CVE-2024-38424",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-38424"
    },
    {
      "cve": "CVE-2024-40660",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-40660"
    },
    {
      "cve": "CVE-2024-40661",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-40661"
    },
    {
      "cve": "CVE-2024-40671",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-40671"
    },
    {
      "cve": "CVE-2024-43047",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-43047"
    },
    {
      "cve": "CVE-2024-43080",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-43080"
    },
    {
      "cve": "CVE-2024-43081",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-43081"
    },
    {
      "cve": "CVE-2024-43082",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-43082"
    },
    {
      "cve": "CVE-2024-43083",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-43083"
    },
    {
      "cve": "CVE-2024-43084",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-43084"
    },
    {
      "cve": "CVE-2024-43085",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-43085"
    },
    {
      "cve": "CVE-2024-43086",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-43086"
    },
    {
      "cve": "CVE-2024-43087",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-43087"
    },
    {
      "cve": "CVE-2024-43088",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-43088"
    },
    {
      "cve": "CVE-2024-43089",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-43089"
    },
    {
      "cve": "CVE-2024-43090",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-43090"
    },
    {
      "cve": "CVE-2024-43091",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-43091"
    },
    {
      "cve": "CVE-2024-43093",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-43093"
    },
    {
      "cve": "CVE-2024-46740",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Google Android. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie dem MediaProvider, der Documents UI oder den MediaTek-Komponenten. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen. Um die Schwachstelle erfolgreich auszunutzen, muss ein Benutzer mit einer b\u00f6sartigen Anwendung interagieren oder auf einen manipulierten Link klicken, der vom Angreifer \u00fcbermittelt wurde."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038021",
          "T035732",
          "T032526",
          "T038759",
          "T024488",
          "T020881"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-46740"
    }
  ]
}

CVE-2023-35659 (GCVE-0-2023-35659)

Vulnerability from cvelistv5 – Published: 2024-11-13 17:13 – Updated: 2024-11-20 16:20

Summary

In DevmemIntChangeSparse of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

Elevation of privilege

Assigner

google_android

References

1 reference

URL	Tags
https://source.android.com/security/bulletin/2024-11-01

Impacted products

1 product

Vendor	Product	Version
Google	Android	Affected: Android SoC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "android",
            "vendor": "google",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-35659",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-20T16:19:16.584787Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-20T16:20:05.777Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Android",
          "vendor": "Google",
          "versions": [
            {
              "status": "affected",
              "version": "Android SoC"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In DevmemIntChangeSparse of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevation of privilege",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-13T17:25:11.280Z",
        "orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
        "shortName": "google_android"
      },
      "references": [
        {
          "url": "https://source.android.com/security/bulletin/2024-11-01"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
    "assignerShortName": "google_android",
    "cveId": "CVE-2023-35659",
    "datePublished": "2024-11-13T17:13:19.072Z",
    "dateReserved": "2023-06-15T02:50:10.272Z",
    "dateUpdated": "2024-11-20T16:20:05.777Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-35686 (GCVE-0-2023-35686)

Vulnerability from cvelistv5 – Published: 2024-11-13 17:13 – Updated: 2024-11-20 16:18

Summary

In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

Elevation of privilege

Assigner

google_android

References

1 reference

URL	Tags
https://source.android.com/security/bulletin/2024-11-01

Impacted products

1 product

Vendor	Product	Version
Google	Android	Affected: Android SoC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-35686",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-20T16:17:50.783280Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-20T16:18:26.402Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Android",
          "vendor": "Google",
          "versions": [
            {
              "status": "affected",
              "version": "Android SoC"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevation of privilege",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-13T17:25:11.427Z",
        "orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
        "shortName": "google_android"
      },
      "references": [
        {
          "url": "https://source.android.com/security/bulletin/2024-11-01"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
    "assignerShortName": "google_android",
    "cveId": "CVE-2023-35686",
    "datePublished": "2024-11-13T17:13:19.238Z",
    "dateReserved": "2023-06-15T02:50:33.961Z",
    "dateUpdated": "2024-11-20T16:18:26.402Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-20104 (GCVE-0-2024-20104)

Vulnerability from cvelistv5 – Published: 2024-11-04 01:48 – Updated: 2024-11-04 11:10

Summary

In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09073261; Issue ID: MSV-1772.

Severity

8.4 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-787 - Out-of-bounds Write

Assigner

MediaTek

References

1 reference

URL	Tags
https://corp.mediatek.com/product-security-bullet…

Impacted products

1 product

Vendor	Product	Version
MediaTek, Inc.	MT6781, MT6789, MT6835, MT6855, MT6878, MT6879, MT6880, MT6886, MT6890, MT6895, MT6897, MT6980, MT6983, MT6985, MT6989, MT6990, MT8188, MT8370, MT8390, MT8676	Affected: Android 12.0, 13.0, 14.0, 15.0 / openWRT 19.07, 21.02, 23.05 / Yocto 4.0 / RDK-B 22Q3, 24Q1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6781",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6789",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6835",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6855",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6878",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6879",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6880:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6880",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6886",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6890",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6895",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6897",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6980:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6980",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6983",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6985",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6989",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6990",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt8188",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt8370:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt8370",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt8390:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt8390",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt8676",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
              "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
              "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "android",
            "vendor": "google",
            "versions": [
              {
                "status": "affected",
                "version": "12.0"
              },
              {
                "status": "affected",
                "version": "13.0"
              },
              {
                "status": "affected",
                "version": "15.0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:openwrt:luci:19.07.0:*:*:*:*:*:*:*",
              "cpe:2.3:o:openwrt:openwrt:21.02:*:*:*:*:*:*:*",
              "cpe:2.3:o:openwrt:openwrt:23.05:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "openwrt",
            "vendor": "openwrt",
            "versions": [
              {
                "status": "affected",
                "version": "19.07.0"
              },
              {
                "status": "affected",
                "version": "21.02"
              },
              {
                "status": "affected",
                "version": "23.05"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 8.4,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-20104",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-04T11:08:32.001855Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-04T11:10:59.833Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MT6781, MT6789, MT6835, MT6855, MT6878, MT6879, MT6880, MT6886, MT6890, MT6895, MT6897, MT6980, MT6983, MT6985, MT6989, MT6990, MT8188, MT8370, MT8390, MT8676",
          "vendor": "MediaTek, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "Android 12.0, 13.0, 14.0, 15.0 / openWRT 19.07, 21.02, 23.05 / Yocto 4.0 /  RDK-B 22Q3, 24Q1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09073261; Issue ID: MSV-1772."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-04T01:48:38.377Z",
        "orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
        "shortName": "MediaTek"
      },
      "references": [
        {
          "url": "https://corp.mediatek.com/product-security-bulletin/November-2024"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
    "assignerShortName": "MediaTek",
    "cveId": "CVE-2024-20104",
    "datePublished": "2024-11-04T01:48:38.377Z",
    "dateReserved": "2023-11-02T13:35:35.176Z",
    "dateUpdated": "2024-11-04T11:10:59.833Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-20106 (GCVE-0-2024-20106)

Vulnerability from cvelistv5 – Published: 2024-11-04 01:48 – Updated: 2024-11-04 10:56

Summary

In m4u, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08960505; Issue ID: MSV-1590.

Severity

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-843 - Type Confusion

Assigner

MediaTek

References

1 reference

URL	Tags
https://corp.mediatek.com/product-security-bullet…

Impacted products

1 product

Vendor	Product	Version
MediaTek, Inc.	MT6739, MT6761, MT6765, MT6768, MT6779, MT6785, MT6853, MT6873, MT6885, MT8666, MT8667, MT8673, MT8678	Affected: Android 12.0, 13.0, 14.0, 15.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6739",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6761",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6765",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6768",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6779",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6785",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6853",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6873",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt6885",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt8666",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt8667:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt8667",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt8673",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mt8678",
            "vendor": "mediatek",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
              "cpe:2.3:o:google:android:13.0:-:*:*:*:*:*:*",
              "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
              "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "android",
            "vendor": "google",
            "versions": [
              {
                "status": "affected",
                "version": "12.0"
              },
              {
                "status": "affected",
                "version": "13.0"
              },
              {
                "status": "affected",
                "version": "14.0"
              },
              {
                "status": "affected",
                "version": "15.0"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 6.7,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "HIGH",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-20106",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-04T10:55:32.960612Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-04T10:56:14.353Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MT6739, MT6761, MT6765, MT6768, MT6779, MT6785, MT6853, MT6873, MT6885, MT8666, MT8667, MT8673, MT8678",
          "vendor": "MediaTek, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "Android 12.0, 13.0, 14.0, 15.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In m4u, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08960505; Issue ID: MSV-1590."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-843",
              "description": "CWE-843 Type Confusion",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-04T01:48:40.379Z",
        "orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
        "shortName": "MediaTek"
      },
      "references": [
        {
          "url": "https://corp.mediatek.com/product-security-bulletin/November-2024"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
    "assignerShortName": "MediaTek",
    "cveId": "CVE-2024-20106",
    "datePublished": "2024-11-04T01:48:40.379Z",
    "dateReserved": "2023-11-02T13:35:35.176Z",
    "dateUpdated": "2024-11-04T10:56:14.353Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-21455 (GCVE-0-2024-21455)

Vulnerability from cvelistv5 – Published: 2024-10-07 12:58 – Updated: 2024-10-07 13:19

Title

Untrusted Pointer Dereference in DSP Service

Summary

Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-822 - Untrusted Pointer Dereference

Assigner

qualcomm

References

1 reference

URL	Tags
https://docs.qualcomm.com/product/publicresources…

Impacted products

1 product

Vendor	Product	Version
Qualcomm, Inc.	Snapdragon	Affected: QAM8295P Affected: QCA6584AU Affected: QCA6595 Affected: QCA6688AQ Affected: QCA6696 Affected: QCA6698AQ Affected: QCM6125 Affected: QCS6125 Affected: Qualcomm Video Collaboration VC1 Platform Affected: SA8295P Affected: SG4150P Affected: Snapdragon 680 4G Mobile Platform Affected: Snapdragon 685 4G Mobile Platform (SM6225-AD) Affected: Snapdragon Auto 5G Modem-RF Gen 2 Affected: WCD9370 Affected: WCD9375 Affected: WCN3950 Affected: WCN3980 Affected: WSA8810 Affected: WSA8815

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:qam8295p_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qam8295p_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qca6584au_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:qca6595_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qca6595_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:qca6688aq_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qca6688aq_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qca6696_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qca6698aq_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:qcm6125_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qcm6125_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:qcs6125_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qcs6125_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:qualcomm_video_collaboration_vc1_platform_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qualcomm_video_collaboration_vc1_platform_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:sa8295p_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "sa8295p_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:sg4150p_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "sg4150p_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:snapdragon_680_4g_mobile_platform_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "snapdragon_680_4g_mobile_platform_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "snapdragon_auto_5g_modem-rf_gen_2_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wcd9370_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wcd9375_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wcn3950_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wcn3980_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wsa8810_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wsa8815_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-21455",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-07T13:19:35.212684Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-07T13:19:44.091Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Snapdragon Auto",
            "Snapdragon Compute",
            "Snapdragon Industrial IOT"
          ],
          "product": "Snapdragon",
          "vendor": "Qualcomm, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "QAM8295P"
            },
            {
              "status": "affected",
              "version": "QCA6584AU"
            },
            {
              "status": "affected",
              "version": "QCA6595"
            },
            {
              "status": "affected",
              "version": "QCA6688AQ"
            },
            {
              "status": "affected",
              "version": "QCA6696"
            },
            {
              "status": "affected",
              "version": "QCA6698AQ"
            },
            {
              "status": "affected",
              "version": "QCM6125"
            },
            {
              "status": "affected",
              "version": "QCS6125"
            },
            {
              "status": "affected",
              "version": "Qualcomm Video Collaboration VC1 Platform"
            },
            {
              "status": "affected",
              "version": "SA8295P"
            },
            {
              "status": "affected",
              "version": "SG4150P"
            },
            {
              "status": "affected",
              "version": "Snapdragon 680 4G Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 685 4G Mobile Platform (SM6225-AD)"
            },
            {
              "status": "affected",
              "version": "Snapdragon Auto 5G Modem-RF Gen 2"
            },
            {
              "status": "affected",
              "version": "WCD9370"
            },
            {
              "status": "affected",
              "version": "WCD9375"
            },
            {
              "status": "affected",
              "version": "WCN3950"
            },
            {
              "status": "affected",
              "version": "WCN3980"
            },
            {
              "status": "affected",
              "version": "WSA8810"
            },
            {
              "status": "affected",
              "version": "WSA8815"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-822",
              "description": "CWE-822 Untrusted Pointer Dereference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-07T12:58:42.341Z",
        "orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
        "shortName": "qualcomm"
      },
      "references": [
        {
          "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html"
        }
      ],
      "title": "Untrusted Pointer Dereference in DSP Service"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
    "assignerShortName": "qualcomm",
    "cveId": "CVE-2024-21455",
    "datePublished": "2024-10-07T12:58:42.341Z",
    "dateReserved": "2023-12-12T06:07:46.903Z",
    "dateUpdated": "2024-10-07T13:19:44.091Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-23385 (GCVE-0-2024-23385)

Vulnerability from cvelistv5 – Published: 2024-11-04 10:04 – Updated: 2024-11-04 14:15

Title

Reachable Assertion in Modem

Summary

Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-617 - Reachable Assertion

Assigner

qualcomm

References

1 reference

URL	Tags
https://docs.qualcomm.com/product/publicresources…

Impacted products

1 product

Vendor	Product	Version
Qualcomm, Inc.	Snapdragon	Affected: APQ8017 Affected: APQ8037 Affected: AR8035 Affected: FastConnect 6200 Affected: FastConnect 6700 Affected: FastConnect 6900 Affected: FastConnect 7800 Affected: FSM10055 Affected: FSM10056 Affected: MSM8108 Affected: MSM8209 Affected: MSM8608 Affected: QCA6174A Affected: QCA6574A Affected: QCA6574AU Affected: QCA6584AU Affected: QCA6595AU Affected: QCA6696 Affected: QCA6698AQ Affected: QCA8081 Affected: QCA8337 Affected: QCC710 Affected: QCM4490 Affected: QCM8550 Affected: QCN6024 Affected: QCN6224 Affected: QCN6274 Affected: QCN9024 Affected: QCS4490 Affected: QCS8550 Affected: QEP8111 Affected: QFW7114 Affected: QFW7124 Affected: Qualcomm 205 Mobile Platform Affected: SDM429W Affected: SDX55 Affected: SDX57M Affected: SDX61 Affected: SDX71M Affected: SG8275P Affected: SM6370 Affected: SM8550P Affected: SM8635 Affected: Smart Audio 200 Platform Affected: Snapdragon 208 Processor Affected: Snapdragon 210 Processor Affected: Snapdragon 212 Mobile Platform Affected: Snapdragon 4 Gen 1 Mobile Platform Affected: Snapdragon 425 Mobile Platform Affected: Snapdragon 429 Mobile Platform Affected: Snapdragon 430 Mobile Platform Affected: Snapdragon 439 Mobile Platform Affected: Snapdragon 480 5G Mobile Platform Affected: Snapdragon 480+ 5G Mobile Platform (SM4350-AC) Affected: Snapdragon 695 5G Mobile Platform Affected: Snapdragon 8 Gen 1 Mobile Platform Affected: Snapdragon 8 Gen 2 Mobile Platform Affected: Snapdragon 8 Gen 3 Mobile Platform Affected: Snapdragon 8+ Gen 1 Mobile Platform Affected: Snapdragon 8+ Gen 2 Mobile Platform Affected: Snapdragon Auto 5G Modem-RF Gen 2 Affected: Snapdragon Wear 4100+ Platform Affected: Snapdragon X35 5G Modem-RF System Affected: Snapdragon X62 5G Modem-RF System Affected: Snapdragon X65 5G Modem-RF System Affected: Snapdragon X70 Modem-RF System Affected: Snapdragon X72 5G Modem-RF System Affected: Snapdragon X75 5G Modem-RF System Affected: WCD9326 Affected: WCD9340 Affected: WCD9360 Affected: WCD9370 Affected: WCD9375 Affected: WCD9380 Affected: WCD9385 Affected: WCD9390 Affected: WCD9395 Affected: WCN3610 Affected: WCN3615 Affected: WCN3620 Affected: WCN3660B Affected: WCN3680B Affected: WCN3950 Affected: WCN3980 Affected: WCN3988 Affected: WCN6755 Affected: WSA8810 Affected: WSA8815 Affected: WSA8830 Affected: WSA8832 Affected: WSA8835 Affected: WSA8840 Affected: WSA8845 Affected: WSA8845H

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "apq8017_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:apq8037_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "apq8037_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ar8035_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:fastconnect_6200_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "fastconnect_6200_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:fastconnect_6700_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "fastconnect_6700_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "fastconnect_6900_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "fastconnect_7800_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:fsm10055_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "fsm10055_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:fsm10056_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "fsm10056_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:msm8108_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "msm8108_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:msm8209_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "msm8209_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:msm8608_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "msm8608_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qca6174a_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:qca6574a_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qca6574a_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qca6574au_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qca6584au_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qca6595au_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qca6696_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qca6698aq_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qca8081_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qca8337_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:qcc710_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qcc710_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:qcm4490_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qcm4490_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:qcm8550_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qcm8550_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:qcn6024_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qcn6024_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:qcn6224_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qcn6224_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:qcn6274_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qcn6274_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:qcn9024_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qcn9024_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:qcs4490_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qcs4490_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:qcs8550_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qcs8550_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:qep8111_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qep8111_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:qfw7114_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qfw7114_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:qfw7124_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qfw7124_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:qualcomm_205_mobile_platform_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qualcomm_205_mobile_platform_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:sdm429w_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "sdm429w_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:sdx55_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "sdx55_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:sdx57m_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "sdx57m_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:sdx61_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "sdx61_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:sdx71m_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "sdx71m_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:sg8275p_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "sg8275p_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:sm6370_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "sm6370_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:sm8550p_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "sm8550p_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:sm8635_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "sm8635_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:smart_audio_200_platform_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "smart_audio_200_platform_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:snapdragon_208_processor_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "snapdragon_208_processor_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:snapdragon_210_processor_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "snapdragon_210_processor_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:snapdragon_212_mobile_platform_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "snapdragon_212_mobile_platform_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:snapdragon_4_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "snapdragon_4_gen_1_mobile_platform_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:snapdragon_425_mobile_platform_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "snapdragon_425_mobile_platform_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:snapdragon_429_mobile_platform_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "snapdragon_429_mobile_platform_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:snapdragon_430_mobile_platform_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "snapdragon_430_mobile_platform_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:snapdragon_439_mobile_platform_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "snapdragon_439_mobile_platform_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:snapdragon_480_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "snapdragon_480_5g_mobile_platform_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:snapdragon_695_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "snapdragon_695_5g_mobile_platform_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:snapdragon_8_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "snapdragon_8_gen_1_mobile_platform_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:snapdragon_8_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "snapdragon_8_gen_2_mobile_platform_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:snapdragon_8_gen_3_mobile_platform_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "snapdragon_8_gen_3_mobile_platform_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "snapdragon_auto_5g_modem-rf_gen_2_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:snapdragon_x35_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "snapdragon_x35_5g_modem-rf_system_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:snapdragon_x62_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "snapdragon_x62_5g_modem-rf_system_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:snapdragon_x65_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "snapdragon_x65_5g_modem-rf_system_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:snapdragon_x70_modem-rf_system_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "snapdragon_x70_modem-rf_system_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:snapdragon_x72_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "snapdragon_x72_5g_modem-rf_system_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:snapdragon_x75_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "snapdragon_x75_5g_modem-rf_system_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wcd9326_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wcd9326_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wcd9340_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wcd9360_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wcd9360_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wcd9370_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wcd9375_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wcd9380_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wcd9385_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wcd9390_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wcd9390_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wcd9395_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wcn3610_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wcn3610_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wcn3615_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wcn3615_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wcn3620_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wcn3620_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wcn3660b_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wcn3680b_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wcn3680b_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wcn3950_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wcn3980_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wcn3988_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wcn6755_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wcn6755_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wsa8810_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wsa8815_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wsa8830_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wsa8832_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wsa8835_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wsa8840_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wsa8845_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wsa8845h_firmware",
            "vendor": "qualcomm",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-23385",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-04T14:15:26.683035Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-04T14:15:34.635Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Snapdragon Auto",
            "Snapdragon Compute",
            "Snapdragon Industrial IOT",
            "Snapdragon MDM",
            "Snapdragon Mobile",
            "Snapdragon WBC",
            "Snapdragon Wearables"
          ],
          "product": "Snapdragon",
          "vendor": "Qualcomm, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "APQ8017"
            },
            {
              "status": "affected",
              "version": "APQ8037"
            },
            {
              "status": "affected",
              "version": "AR8035"
            },
            {
              "status": "affected",
              "version": "FastConnect 6200"
            },
            {
              "status": "affected",
              "version": "FastConnect 6700"
            },
            {
              "status": "affected",
              "version": "FastConnect 6900"
            },
            {
              "status": "affected",
              "version": "FastConnect 7800"
            },
            {
              "status": "affected",
              "version": "FSM10055"
            },
            {
              "status": "affected",
              "version": "FSM10056"
            },
            {
              "status": "affected",
              "version": "MSM8108"
            },
            {
              "status": "affected",
              "version": "MSM8209"
            },
            {
              "status": "affected",
              "version": "MSM8608"
            },
            {
              "status": "affected",
              "version": "QCA6174A"
            },
            {
              "status": "affected",
              "version": "QCA6574A"
            },
            {
              "status": "affected",
              "version": "QCA6574AU"
            },
            {
              "status": "affected",
              "version": "QCA6584AU"
            },
            {
              "status": "affected",
              "version": "QCA6595AU"
            },
            {
              "status": "affected",
              "version": "QCA6696"
            },
            {
              "status": "affected",
              "version": "QCA6698AQ"
            },
            {
              "status": "affected",
              "version": "QCA8081"
            },
            {
              "status": "affected",
              "version": "QCA8337"
            },
            {
              "status": "affected",
              "version": "QCC710"
            },
            {
              "status": "affected",
              "version": "QCM4490"
            },
            {
              "status": "affected",
              "version": "QCM8550"
            },
            {
              "status": "affected",
              "version": "QCN6024"
            },
            {
              "status": "affected",
              "version": "QCN6224"
            },
            {
              "status": "affected",
              "version": "QCN6274"
            },
            {
              "status": "affected",
              "version": "QCN9024"
            },
            {
              "status": "affected",
              "version": "QCS4490"
            },
            {
              "status": "affected",
              "version": "QCS8550"
            },
            {
              "status": "affected",
              "version": "QEP8111"
            },
            {
              "status": "affected",
              "version": "QFW7114"
            },
            {
              "status": "affected",
              "version": "QFW7124"
            },
            {
              "status": "affected",
              "version": "Qualcomm 205 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "SDM429W"
            },
            {
              "status": "affected",
              "version": "SDX55"
            },
            {
              "status": "affected",
              "version": "SDX57M"
            },
            {
              "status": "affected",
              "version": "SDX61"
            },
            {
              "status": "affected",
              "version": "SDX71M"
            },
            {
              "status": "affected",
              "version": "SG8275P"
            },
            {
              "status": "affected",
              "version": "SM6370"
            },
            {
              "status": "affected",
              "version": "SM8550P"
            },
            {
              "status": "affected",
              "version": "SM8635"
            },
            {
              "status": "affected",
              "version": "Smart Audio 200 Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 208 Processor"
            },
            {
              "status": "affected",
              "version": "Snapdragon 210 Processor"
            },
            {
              "status": "affected",
              "version": "Snapdragon 212 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 4 Gen 1 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 425 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 429 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 430 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 439 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 480 5G Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 480+ 5G Mobile Platform (SM4350-AC)"
            },
            {
              "status": "affected",
              "version": "Snapdragon 695 5G Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 8 Gen 1 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 8 Gen 2 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 8 Gen 3 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 8+ Gen 1 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 8+ Gen 2 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon Auto 5G Modem-RF Gen 2"
            },
            {
              "status": "affected",
              "version": "Snapdragon Wear 4100+ Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon X35 5G Modem-RF System"
            },
            {
              "status": "affected",
              "version": "Snapdragon X62 5G Modem-RF System"
            },
            {
              "status": "affected",
              "version": "Snapdragon X65 5G Modem-RF System"
            },
            {
              "status": "affected",
              "version": "Snapdragon X70 Modem-RF System"
            },
            {
              "status": "affected",
              "version": "Snapdragon X72 5G Modem-RF System"
            },
            {
              "status": "affected",
              "version": "Snapdragon X75 5G Modem-RF System"
            },
            {
              "status": "affected",
              "version": "WCD9326"
            },
            {
              "status": "affected",
              "version": "WCD9340"
            },
            {
              "status": "affected",
              "version": "WCD9360"
            },
            {
              "status": "affected",
              "version": "WCD9370"
            },
            {
              "status": "affected",
              "version": "WCD9375"
            },
            {
              "status": "affected",
              "version": "WCD9380"
            },
            {
              "status": "affected",
              "version": "WCD9385"
            },
            {
              "status": "affected",
              "version": "WCD9390"
            },
            {
              "status": "affected",
              "version": "WCD9395"
            },
            {
              "status": "affected",
              "version": "WCN3610"
            },
            {
              "status": "affected",
              "version": "WCN3615"
            },
            {
              "status": "affected",
              "version": "WCN3620"
            },
            {
              "status": "affected",
              "version": "WCN3660B"
            },
            {
              "status": "affected",
              "version": "WCN3680B"
            },
            {
              "status": "affected",
              "version": "WCN3950"
            },
            {
              "status": "affected",
              "version": "WCN3980"
            },
            {
              "status": "affected",
              "version": "WCN3988"
            },
            {
              "status": "affected",
              "version": "WCN6755"
            },
            {
              "status": "affected",
              "version": "WSA8810"
            },
            {
              "status": "affected",
              "version": "WSA8815"
            },
            {
              "status": "affected",
              "version": "WSA8830"
            },
            {
              "status": "affected",
              "version": "WSA8832"
            },
            {
              "status": "affected",
              "version": "WSA8835"
            },
            {
              "status": "affected",
              "version": "WSA8840"
            },
            {
              "status": "affected",
              "version": "WSA8845"
            },
            {
              "status": "affected",
              "version": "WSA8845H"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-617",
              "description": "CWE-617 Reachable Assertion",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-04T10:04:34.231Z",
        "orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
        "shortName": "qualcomm"
      },
      "references": [
        {
          "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html"
        }
      ],
      "title": "Reachable Assertion in Modem"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
    "assignerShortName": "qualcomm",
    "cveId": "CVE-2024-23385",
    "datePublished": "2024-11-04T10:04:34.231Z",
    "dateReserved": "2024-01-16T03:27:26.436Z",
    "dateUpdated": "2024-11-04T14:15:34.635Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-23715 (GCVE-0-2024-23715)

Vulnerability from cvelistv5 – Published: 2024-11-13 17:13 – Updated: 2024-11-20 16:17

Summary

In PMRWritePMPageList of pmr.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

Elevation of privilege

Assigner

google_android

References

1 reference

URL	Tags
https://source.android.com/security/bulletin/2024-11-01

Impacted products

1 product

Vendor	Product	Version
Google	Android	Affected: Android SoC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "android",
            "vendor": "google",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-23715",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-20T16:16:34.102704Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-20T16:17:14.833Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Android",
          "vendor": "Google",
          "versions": [
            {
              "status": "affected",
              "version": "Android SoC"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In PMRWritePMPageList of pmr.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevation of privilege",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-13T17:25:11.588Z",
        "orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
        "shortName": "google_android"
      },
      "references": [
        {
          "url": "https://source.android.com/security/bulletin/2024-11-01"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
    "assignerShortName": "google_android",
    "cveId": "CVE-2024-23715",
    "datePublished": "2024-11-13T17:13:19.354Z",
    "dateReserved": "2024-01-20T00:17:16.593Z",
    "dateUpdated": "2024-11-20T16:17:14.833Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-29779 (GCVE-0-2024-29779)

Vulnerability from cvelistv5 – Published: 2024-09-13 20:28 – Updated: 2025-03-13 14:24

Summary

there is a possible escalation of privilege due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Severity

7.4 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Elevation of privilege

Assigner

Google_Devices

References

1 reference

URL	Tags
https://source.android.com/security/bulletin/pixe…

Impacted products

1 product

Vendor	Product	Version
Google	Android	Affected: Android kernel

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "android",
            "vendor": "google",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.4,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-29779",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-04T04:55:38.848761Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-269",
                "description": "CWE-269 Improper Privilege Management",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-13T14:24:50.114Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Android",
          "vendor": "Google",
          "versions": [
            {
              "status": "affected",
              "version": "Android kernel"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "there is a possible escalation of privilege due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevation of privilege",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-13T20:28:34.935Z",
        "orgId": "83238938-5644-45f0-9007-c0392bcf6222",
        "shortName": "Google_Devices"
      },
      "references": [
        {
          "url": "https://source.android.com/security/bulletin/pixel/2024-09-01"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83238938-5644-45f0-9007-c0392bcf6222",
    "assignerShortName": "Google_Devices",
    "cveId": "CVE-2024-29779",
    "datePublished": "2024-09-13T20:28:34.935Z",
    "dateReserved": "2024-03-19T15:18:05.731Z",
    "dateUpdated": "2025-03-13T14:24:50.114Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-31337 (GCVE-0-2024-31337)

Vulnerability from cvelistv5 – Published: 2024-11-13 17:13 – Updated: 2024-11-15 21:18

Summary

Severity

8.4 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Elevation of privilege

Assigner

google_android

References

1 reference

URL	Tags
https://source.android.com/security/bulletin/2024-11-01

Impacted products

1 product

Vendor	Product	Version
Google	Android	Affected: Android SoC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:h:imaginationtech:powervr-gpu:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "powervr-gpu",
            "vendor": "imaginationtech",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 8.4,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-31337",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-15T21:18:11.321016Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-15T21:18:18.327Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Android",
          "vendor": "Google",
          "versions": [
            {
              "status": "affected",
              "version": "Android SoC"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevation of privilege",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-13T17:25:11.745Z",
        "orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
        "shortName": "google_android"
      },
      "references": [
        {
          "url": "https://source.android.com/security/bulletin/2024-11-01"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
    "assignerShortName": "google_android",
    "cveId": "CVE-2024-31337",
    "datePublished": "2024-11-13T17:13:19.522Z",
    "dateReserved": "2024-03-29T20:12:57.129Z",
    "dateUpdated": "2024-11-15T21:18:18.327Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-34719 (GCVE-0-2024-34719)

Vulnerability from cvelistv5 – Published: 2024-11-13 17:13 – Updated: 2024-12-04 04:55

Summary

In multiple locations, there is a possible permissions bypass due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Severity

8.4 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Elevation of privilege

Assigner

google_android

References

2 references

URL	Tags
https://android.googlesource.com/platform/package…
https://source.android.com/security/bulletin/2024-11-01

Impacted products

1 product

Vendor	Product	Version
Google	Android	Affected: 14 Affected: 13 Affected: 12L Affected: 12

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
              "cpe:2.3:o:google:android:12l:*:*:*:*:*:*:*",
              "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
              "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "android",
            "vendor": "google",
            "versions": [
              {
                "status": "affected",
                "version": "12.0"
              },
              {
                "status": "affected",
                "version": "12l"
              },
              {
                "status": "affected",
                "version": "13.0"
              },
              {
                "status": "affected",
                "version": "14.0"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 8.4,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-34719",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-03T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-862",
                "description": "CWE-862 Missing Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-04T04:55:39.167Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Android",
          "vendor": "Google",
          "versions": [
            {
              "status": "affected",
              "version": "14"
            },
            {
              "status": "affected",
              "version": "13"
            },
            {
              "status": "affected",
              "version": "12L"
            },
            {
              "status": "affected",
              "version": "12"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In multiple locations, there is a possible permissions bypass due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevation of privilege",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-13T17:25:11.906Z",
        "orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
        "shortName": "google_android"
      },
      "references": [
        {
          "url": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/b0e4375577ba7e21bd40edac5990bea418ecdc8c"
        },
        {
          "url": "https://source.android.com/security/bulletin/2024-11-01"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
    "assignerShortName": "google_android",
    "cveId": "CVE-2024-34719",
    "datePublished": "2024-11-13T17:13:19.624Z",
    "dateReserved": "2024-05-07T20:40:11.085Z",
    "dateUpdated": "2024-12-04T04:55:39.167Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

WID-SEC-W-2024-3328

CVE-2023-35659 (GCVE-0-2023-35659)

CVE-2023-35686 (GCVE-0-2023-35686)

CVE-2024-20104 (GCVE-0-2024-20104)

CVE-2024-20106 (GCVE-0-2024-20106)

CVE-2024-21455 (GCVE-0-2024-21455)

CVE-2024-23385 (GCVE-0-2024-23385)

CVE-2024-23715 (GCVE-0-2024-23715)

CVE-2024-29779 (GCVE-0-2024-29779)

CVE-2024-31337 (GCVE-0-2024-31337)

CVE-2024-34719 (GCVE-0-2024-34719)

Tags

Sightings

Nomenclature