Vulnerabilities (CVE)

Filtered by vendor Google Subscribe
Total 12688 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-29753 1 Google 1 Android 2025-06-17 N/A 7.7 HIGH
In tmu_set_control_temp_step of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-29752 1 Google 1 Android 2025-06-17 N/A 7.8 HIGH
In tmu_set_tr_num_thresholds of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-29751 1 Google 1 Android 2025-06-17 N/A 5.5 MEDIUM
In asn1_ec_pkey_parse_p384 of asn1_common.c, there is a possible OOB Read due to a missing null check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-29750 1 Google 1 Android 2025-06-17 N/A 5.5 MEDIUM
In km_exp_did_inner of kmv.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-29749 1 Google 1 Android 2025-06-17 N/A 8.4 HIGH
In tmu_set_tr_thresholds of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-29747 1 Google 1 Android 2025-06-17 N/A 5.9 MEDIUM
In _dvfs_get_lv of dvfs.c, there is a possible out of bounds read due to a missing null check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-29746 1 Google 1 Android 2025-06-17 N/A 8.4 HIGH
In lpm_req_handler of lpm.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-29744 1 Google 1 Android 2025-06-17 N/A 5.5 MEDIUM
In tmu_get_gov_time_windows, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-29743 1 Google 1 Android 2025-06-17 N/A 7.7 HIGH
In tmu_set_temp_lut of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-29742 1 Google 1 Android 2025-06-17 N/A 5.5 MEDIUM
In apply_minlock_constraint of dvfs.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-29741 1 Google 1 Android 2025-06-17 N/A 7.8 HIGH
In pblS2mpuResume of s2mpu.c, there is a possible mitigation bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-29740 1 Google 1 Android 2025-06-17 N/A 7.4 HIGH
In tmu_set_table of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-29739 1 Google 1 Android 2025-06-17 N/A 5.5 MEDIUM
In tmu_get_temp_lut of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-29738 1 Google 1 Android 2025-06-17 N/A 5.5 MEDIUM
In gov_init, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-27232 1 Google 1 Android 2025-06-17 N/A 5.5 MEDIUM
In asn1_ec_pkey_parse of asn1_common.c, there is a possible OOB read due to a missing null check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-27231 1 Google 1 Android 2025-06-17 N/A 5.9 MEDIUM
In tmu_get_tr_stats of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-1283 2 Fedoraproject, Google 2 Fedora, Chrome 2025-06-17 N/A 9.8 CRITICAL
Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-32877 2 Google, Mediatek 22 Android, Mt6762, Mt6765 and 19 more 2025-06-17 N/A 6.7 MEDIUM
In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08308070.
CVE-2024-20002 2 Google, Mediatek 59 Android, Mt5583, Mt5586 and 56 more 2025-06-17 N/A 6.7 MEDIUM
In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03961715; Issue ID: DTV03961715.
CVE-2024-0811 2 Fedoraproject, Google 2 Fedora, Chrome 2025-06-16 N/A 4.3 MEDIUM
Inappropriate implementation in Extensions API in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. (Chromium security severity: Low)