CVSS: 7.7EPSS: 0%CPEs: 2EXPL: 0CVE-2024-34738
https://notcve.org/view.php?id=CVE-2024-34738
15 Aug 2024 — In multiple functions of AppOpsService.java, there is a possible way for unprivileged apps to read their own restrictRead app-op states due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. • https://android.googlesource.com/platform/frameworks/base/+/21d764807b3dcd402d63e2b4c9fbae1c9965400a • CWE-266: Incorrect Privilege Assignment •
CVSS: 7.7EPSS: 0%CPEs: 4EXPL: 0CVE-2024-34737
https://notcve.org/view.php?id=CVE-2024-34737
15 Aug 2024 — In ensureSetPipAspectRatioQuotaTracker of ActivityClientController.java, there is a possible way to generate unmovable and undeletable pip windows due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. • https://android.googlesource.com/platform/frameworks/base/+/8b473b3f79642f42eeeffbfe572df6c6cbe9d79e •
CVSS: 6.2EPSS: 0%CPEs: 4EXPL: 0CVE-2024-34736
https://notcve.org/view.php?id=CVE-2024-34736
15 Aug 2024 — In setupVideoEncoder of StagefrightRecorder.cpp, there is a possible asynchronous playback when B-frame support is enabled. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. • https://android.googlesource.com/platform/frameworks/av/+/6cfd048292b2cc706811a22c9078208cfa8e6d24 •
CVSS: 7.7EPSS: 0%CPEs: 2EXPL: 0CVE-2024-34734
https://notcve.org/view.php?id=CVE-2024-34734
15 Aug 2024 — In onForegroundServiceButtonClicked of FooterActionsViewModel.kt, there is a possible way to disable the active VPN app from the lockscreen due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. • https://android.googlesource.com/platform/frameworks/base/+/207584fb6f820eba14251251d7e9331bfd57adb8 • CWE-1188: Initialization of a Resource with an Insecure Default •
CVSS: 7.7EPSS: 0%CPEs: 4EXPL: 0CVE-2024-34731
https://notcve.org/view.php?id=CVE-2024-34731
15 Aug 2024 — In multiple functions of TranscodingResourcePolicy.cpp, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. • https://android.googlesource.com/platform/frameworks/av/+/4b68b00993849b6a7f0e6d075bc2c8bb2e184e61 • CWE-368: Context Switching Race Condition •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2024-34727
https://notcve.org/view.php?id=CVE-2024-34727
15 Aug 2024 — In sdpu_compare_uuid_with_attr of sdp_utils.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. • https://android.googlesource.com/platform/packages/modules/Bluetooth/+/6afad4b377b5bc3f38b28296e746b674173f99d8 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 5.3EPSS: 0%CPEs: 4EXPL: 0CVE-2024-34723
https://notcve.org/view.php?id=CVE-2024-34723
09 Jul 2024 — In onTransact of ParcelableListBinder.java , there is a possible way to steal mAllowlistToken to launch an app from background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. En onTransact de ParcelableListBinder.java, existe una forma posible de robar mAllowlistToken para iniciar una aplicación en segundo plano debido a un error lógico en el código. Esto podría conducir a una ... • https://android.googlesource.com/platform/frameworks/base/+/c702bb71811993960debe0c18fcf8834cfa2454f • CWE-783: Operator Precedence Logic Error •
CVSS: 8.8EPSS: 0%CPEs: 4EXPL: 0CVE-2024-34722
https://notcve.org/view.php?id=CVE-2024-34722
09 Jul 2024 — In smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a protocol. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. En smp_proc_rand de smp_act.cc, existe una posible omisión de autenticación durante el emparejamiento BLE heredado debido a una implementación incorrecta de un protocolo. Esto podría conducir a una escalada remota de p... • https://android.googlesource.com/platform/packages/modules/Bluetooth/+/456f705b9acc78d8184536baff3d21b0bc11c957 • CWE-303: Incorrect Implementation of Authentication Algorithm •
CVSS: 6.2EPSS: 0%CPEs: 4EXPL: 0CVE-2024-34721
https://notcve.org/view.php?id=CVE-2024-34721
09 Jul 2024 — In ensureFileColumns of MediaProvider.java, there is a possible disclosure of files owned by another user due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. En sureFileColumns de MediaProvider.java, existe una posible divulgación de archivos propiedad de otro usuario debido a una validación de entrada incorrecta. Esto podría dar lugar a la divulgación de información local sin neces... • https://android.googlesource.com/platform/packages/providers/MediaProvider/+/7a1cbf5a8e17e6bff7c835fdd30dcc42b681db0a • CWE-922: Insecure Storage of Sensitive Information •
CVSS: 7.4EPSS: 0%CPEs: 4EXPL: 0CVE-2024-34720
https://notcve.org/view.php?id=CVE-2024-34720
09 Jul 2024 — In com_android_internal_os_ZygoteCommandBuffer_nativeForkRepeatedly of com_android_internal_os_ZygoteCommandBuffer.cpp, there is a possible method to perform arbitrary code execution in any app zygote processes due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. En com_android_internal_os_ZygoteCommandBuffer_nativeForkRepeatedly de com_android_internal_os_ZygoteCommandBuffer.cpp, e... • https://android.googlesource.com/platform/frameworks/base/+/293e9ac230851acbec73f5ab12928d113d6283e1 • CWE-783: Operator Precedence Logic Error •