Search

Find a vulnerability

Search criteria

    Related vulnerabilities

    BDU:2025-01146 (CVE-2024-49743)

    Vulnerability from fstec – Published: 2025-02-05 – Updated: 2025-02-05 – View on bdu.fstec.ru Fixed
    VLAI
    Title
    Уязвимость компонента Framework операционных систем Android, позволяющая нарушителю повысить свои привилегии
    Summary
    Уязвимость компонента Framework операционных систем Android связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии
    Class
    Code vulnerability
    Status
    Confirmed by the vendor
    Exploitation
    Resource manipulation
    Incidents
    Being clarified
    Remediation
    Software update
    CWE
    • CWE-20 - Недостаточная проверка вводимых данных
    Aliases
    Impacted products
    Vendors
    Google Inc
    Products
    Android
    Versions
    12 (Android), 12L (Android), 13 (Android), 14 (Android), 15 (Android)
    Product types
    Operating system
    Platforms
    Google Inc Android 12, Google Inc Android 12L, Google Inc Android 13, Google Inc Android 14, Google Inc Android 15

    {
      "CVSS 2.0": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
      "CVSS 3.0": "AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "CVSS 4.0": "AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear",
      "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
      "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
      "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Google Inc",
      "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "12 (Android), 12L (Android), 13 (Android), 14 (Android), 15 (Android)",
      "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://source.android.com/docs/security/bulletin/2025-02-01\nhttps://android.googlesource.com/platform/frameworks/base/+/f1fd60bb80f9ea95c61b5392102a4afedd948188\nhttps://android.googlesource.com/platform/frameworks/base/+/b8a1a5d47c3916fe08deefaefd8772092b4fb03c\nhttps://android.googlesource.com/platform/frameworks/base/+/72a3d2d72c39fd48f0a960a1b3c1e16e307421df",
      "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "24.06.2024",
      "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "05.02.2025",
      "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "05.02.2025",
      "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2025-01146",
      "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2024-49743",
      "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
      "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
      "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Android",
      "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Google Inc Android 12 , Google Inc Android 12L , Google Inc Android 13 , Google Inc Android 14 , Google Inc Android 15 ",
      "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Framework \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Android, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
      "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
      "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
      "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Framework \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Android \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
      "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
      "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
      "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
      "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
      "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
      "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
      "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://source.android.com/docs/security/bulletin/2025-02-01?hl=ru\nhttps://www.cybersecurity-help.cz/vdb/SB2025020380",
      "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
      "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
      "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
      "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,8)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,8)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 4.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,9)"
    }

    CERTFR-2025-AVI-0091

    Vulnerability from certfr_avis - Published: 2025-02-04 - Updated: 2025-02-04

    De multiples vulnérabilités ont été découvertes dans Google Android. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, une atteinte à la confidentialité des données et un déni de service.

    Google indique que la vulnérabilité CVE-2024-53104 est activement exploitée dans le cadre d'attaques ciblées.

    Solutions

    Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

    Impacted products
    Vendor Product Description
    Google Android Android versions 12, 12L, 13, 14 et 15 sans le correctif de sécurité du 3 février 2025
    References
    Bulletin de sécurité Google Android 2025-02-03 vendor-advisory

    Show details on source website

    {
      "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
      "affected_systems": [
        {
          "description": "Android versions 12, 12L, 13, 14 et 15 sans le correctif de s\u00e9curit\u00e9 du 3 f\u00e9vrier 2025",
          "product": {
            "name": "Android",
            "vendor": {
              "name": "Google",
              "scada": false
            }
          }
        }
      ],
      "affected_systems_content": "",
      "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
      "cves": [
        {
          "name": "CVE-2025-0094",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-0094"
        },
        {
          "name": "CVE-2024-49721",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-49721"
        },
        {
          "name": "CVE-2024-49723",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-49723"
        },
        {
          "name": "CVE-2024-49839",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-49839"
        },
        {
          "name": "CVE-2024-49746",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-49746"
        },
        {
          "name": "CVE-2023-40136",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-40136"
        },
        {
          "name": "CVE-2025-0015",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-0015"
        },
        {
          "name": "CVE-2024-47892",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-47892"
        },
        {
          "name": "CVE-2024-45582",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-45582"
        },
        {
          "name": "CVE-2023-40138",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-40138"
        },
        {
          "name": "CVE-2023-40135",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-40135"
        },
        {
          "name": "CVE-2024-49843",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-49843"
        },
        {
          "name": "CVE-2023-40139",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-40139"
        },
        {
          "name": "CVE-2023-40122",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-40122"
        },
        {
          "name": "CVE-2025-0088",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-0088"
        },
        {
          "name": "CVE-2024-49832",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-49832"
        },
        {
          "name": "CVE-2024-49729",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-49729"
        },
        {
          "name": "CVE-2025-20635",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-20635"
        },
        {
          "name": "CVE-2025-0097",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-0097"
        },
        {
          "name": "CVE-2025-0091",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-0091"
        },
        {
          "name": "CVE-2024-49743",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-49743"
        },
        {
          "name": "CVE-2024-52935",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-52935"
        },
        {
          "name": "CVE-2024-46973",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-46973"
        },
        {
          "name": "CVE-2024-20141",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-20141"
        },
        {
          "name": "CVE-2024-39441",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-39441"
        },
        {
          "name": "CVE-2023-40134",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-40134"
        },
        {
          "name": "CVE-2024-0037",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-0037"
        },
        {
          "name": "CVE-2024-45571",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-45571"
        },
        {
          "name": "CVE-2024-45569",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-45569"
        },
        {
          "name": "CVE-2025-0096",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-0096"
        },
        {
          "name": "CVE-2024-49833",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-49833"
        },
        {
          "name": "CVE-2025-0095",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-0095"
        },
        {
          "name": "CVE-2023-40137",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-40137"
        },
        {
          "name": "CVE-2024-43705",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-43705"
        },
        {
          "name": "CVE-2024-53104",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-53104"
        },
        {
          "name": "CVE-2025-0099",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-0099"
        },
        {
          "name": "CVE-2025-20636",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-20636"
        },
        {
          "name": "CVE-2024-49834",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-49834"
        },
        {
          "name": "CVE-2024-20142",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-20142"
        },
        {
          "name": "CVE-2023-40133",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-40133"
        },
        {
          "name": "CVE-2025-0100",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-0100"
        },
        {
          "name": "CVE-2024-38404",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-38404"
        },
        {
          "name": "CVE-2025-20634",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-20634"
        },
        {
          "name": "CVE-2025-0098",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-0098"
        },
        {
          "name": "CVE-2024-38420",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-38420"
        },
        {
          "name": "CVE-2024-49741",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-49741"
        }
      ],
      "initial_release_date": "2025-02-04T00:00:00",
      "last_revision_date": "2025-02-04T00:00:00",
      "links": [],
      "reference": "CERTFR-2025-AVI-0091",
      "revisions": [
        {
          "description": "Version initiale",
          "revision_date": "2025-02-04T00:00:00.000000"
        }
      ],
      "risks": [
        {
          "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
        },
        {
          "description": "D\u00e9ni de service"
        },
        {
          "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
        },
        {
          "description": "\u00c9l\u00e9vation de privil\u00e8ges"
        }
      ],
      "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Google Android. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un d\u00e9ni de service.\n\nGoogle indique que la vuln\u00e9rabilit\u00e9 CVE-2024-53104 est activement exploit\u00e9e dans le cadre d\u0027attaques cibl\u00e9es.",
      "title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Android",
      "vendor_advisories": [
        {
          "published_at": "2025-02-03",
          "title": "Bulletin de s\u00e9curit\u00e9 Google Android",
          "url": "https://source.android.com/docs/security/bulletin/2025-02-01?hl=fr"
        }
      ]
    }

    WID-SEC-W-2025-0251

    Vulnerability from csaf_certbund - Published: 2025-02-03 23:00 - Updated: 2025-02-03 23:00
    Summary
    Google Android: Mehrere Schwachstellen
    Severity
    Hoch
    Scope
    46 vulnerabilities in this advisory, including CVE-2024-49743.
    CVE-2024-49743
    Known affected: 5 products
    Open the full advisory