Google: >> Android >> 11.0 Security Vulnerabilities
In onCreate of NotificationAccessSettings.java, there is a possible failure to persist notifications settings due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-260570119
CVSS Score
7.8
EPSS Score
0.0
Published
2023-06-15
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07843845; Issue ID: ALPS07843845.
CVSS Score
6.7
EPSS Score
0.0
Published
2023-06-06
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07843845; Issue ID: ALPS07843841.
CVSS Score
6.7
EPSS Score
0.0
Published
2023-06-06
In email service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score
5.5
EPSS Score
0.0
Published
2023-06-06
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
CVSS Score
5.5
EPSS Score
0.0
Published
2023-06-06
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
CVSS Score
5.5
EPSS Score
0.0
Published
2023-06-06
In dialer service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score
5.5
EPSS Score
0.0
Published
2023-06-06
In email service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score
5.5
EPSS Score
0.0
Published
2023-06-06
In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
CVSS Score
5.5
EPSS Score
0.0
Published
2023-06-06
In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
CVSS Score
5.5
EPSS Score
0.0
Published
2023-06-06