Vulnerabilities (CVE)

Filtered by vendor Google Subscribe
Total 770 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-21263 1 Google 1 Android 2023-12-22 N/A 9.8 CRITICAL
In OSMMapPMRGeneric of pmr_os.c, there is a possible out of bounds write due to an uncaught exception. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-21228 1 Google 1 Android 2023-12-22 N/A 9.8 CRITICAL
In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-21218 1 Google 1 Android 2023-12-22 N/A 9.8 CRITICAL
In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-21217 1 Google 1 Android 2023-12-22 N/A 9.8 CRITICAL
In PMRWritePMPageList of TBD, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-21216 1 Google 1 Android 2023-12-22 N/A 9.8 CRITICAL
In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-21215 1 Google 1 Android 2023-12-22 N/A 9.8 CRITICAL
In DevmemIntAcquireRemoteCtx of devicemem_server.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-21166 1 Google 1 Android 2023-12-22 N/A 9.8 CRITICAL
In RGXBackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-21164 1 Google 1 Android 2023-12-22 N/A 9.8 CRITICAL
In DevmemIntMapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-21163 1 Google 1 Android 2023-12-22 N/A 9.8 CRITICAL
In PMR_ReadBytes of pmr.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-21162 1 Google 1 Android 2023-12-22 N/A 9.8 CRITICAL
In RGXUnbackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-6181 1 Google 2 Chromecast, Chromecast Firmware 2023-12-13 N/A 9.8 CRITICAL
An oversight in BCB handling of reboot reason that allows for persistent code execution
CVE-2023-48425 1 Google 2 Chromecast, Chromecast Firmware 2023-12-13 N/A 9.8 CRITICAL
U-Boot vulnerability resulting in persistent Code Execution 
CVE-2023-48424 1 Google 2 Chromecast, Chromecast Firmware 2023-12-13 N/A 9.8 CRITICAL
U-Boot shell vulnerability resulting in Privilege escalation in a production device
CVE-2023-48417 1 Google 2 Chromecast, Chromecast Firmware 2023-12-13 N/A 9.8 CRITICAL
Missing Permission checks resulting in unauthorized access and Manipulation in KeyChainActivity Application
CVE-2022-42537 1 Google 1 Android 2023-12-10 N/A 9.8 CRITICAL
Remote code execution
CVE-2022-42540 1 Google 1 Android 2023-12-10 N/A 9.8 CRITICAL
Elevation of privilege
CVE-2022-42538 1 Google 1 Android 2023-12-10 N/A 9.8 CRITICAL
Elevation of privilege
CVE-2022-42536 1 Google 1 Android 2023-12-10 N/A 9.8 CRITICAL
Remote code execution
CVE-2022-42541 1 Google 1 Android 2023-12-10 N/A 9.8 CRITICAL
Remote code execution
CVE-2023-35662 1 Google 1 Android 2023-12-10 N/A 9.8 CRITICAL
there is a possible out of bounds write due to buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.