uthrasri / frameworks_base_AOSP10_r33_CVE-2023-21097

Other
0 stars 0 forks source link

baseandroid-10.0.0_r34: 222 vulnerabilities (highest severity is: 9.8) #6

Open mend-bolt-for-github[bot] opened 11 months ago

mend-bolt-for-github[bot] commented 11 months ago
Vulnerable Library - baseandroid-10.0.0_r34

Android framework classes and services

Library home page: https://android.googlesource.com/platform/frameworks/base

Vulnerable Source Files (2)

/core/java/android/app/Notification.java /services/core/java/com/android/server/notification/NotificationManagerService.java

Vulnerabilities

CVE Severity CVSS Dependency Type Fixed in (baseandroid version) Remediation Possible**
CVE-2023-20918 Critical 9.8 baseandroid-10.0.0_r34 Direct android-13.0.0_r61
CVE-2021-0433 High 8.0 baseandroid-10.0.0_r34 Direct android-11.0.0_r34
CVE-2024-23708 High 7.8 baseandroid-10.0.0_r34 Direct 0c095c365ede36257e829769194f9596a598e560
CVE-2023-45777 High 7.8 baseandroid-10.0.0_r34 Direct android-14.0.0_r16
CVE-2023-40140 High 7.8 baseandroid-10.0.0_r34 Direct N/A
CVE-2023-40117 High 7.8 baseandroid-10.0.0_r34 Direct N/A
CVE-2023-40095 High 7.8 baseandroid-10.0.0_r34 Direct android-14.0.0_r16
CVE-2023-21351 High 7.8 baseandroid-10.0.0_r34 Direct 26522c0e82fd3a9bcbd01409217291d97dcdabcf
CVE-2023-21286 High 7.8 baseandroid-10.0.0_r34 Direct android-13.0.0_r67
CVE-2023-21281 High 7.8 baseandroid-10.0.0_r34 Direct android-13.0.0_r67
CVE-2023-21272 High 7.8 baseandroid-10.0.0_r34 Direct android-13.0.0_r1
CVE-2023-21269 High 7.8 baseandroid-10.0.0_r34 Direct android-13.0.0_r67
CVE-2023-21266 High 7.8 detected in multiple dependencies Direct android-13.0.0_r58
CVE-2023-21145 High 7.8 baseandroid-10.0.0_r34 Direct android-13.0.0_r58
CVE-2023-21117 High 7.8 baseandroid-10.0.0_r34 Direct android-13.0.0_r49
CVE-2023-21110 High 7.8 baseandroid-10.0.0_r34 Direct android-13.0.0_r49
CVE-2023-21109 High 7.8 detected in multiple dependencies Direct android-13.0.0_r49
CVE-2023-21099 High 7.8 detected in multiple dependencies Direct android-13.0.0_r38
CVE-2023-21098 High 7.8 baseandroid-10.0.0_r34 Direct android-13.0.0_r38
CVE-2023-21089 High 7.8 baseandroid-10.0.0_r34 Direct android-13.0.0_r38
CVE-2023-21081 High 7.8 detected in multiple dependencies Direct android-13.0.0_r38
CVE-2023-21017 High 7.8 baseandroid-10.0.0_r34 Direct android-13.0.0_r32
CVE-2023-20993 High 7.8 baseandroid-10.0.0_r34 Direct N/A
CVE-2023-20964 High 7.8 detected in multiple dependencies Direct android-13.0.0_r32
CVE-2023-20963 High 7.8 baseandroid-10.0.0_r34 Direct android-13.0.0_r32
CVE-2023-20950 High 7.8 detected in multiple dependencies Direct android-13.0.0_r1
CVE-2023-20944 High 7.8 baseandroid-10.0.0_r34 Direct N/A
CVE-2023-20943 High 7.8 baseandroid-10.0.0_r34 Direct N/A
CVE-2023-20920 High 7.8 detected in multiple dependencies Direct android-13.0.0_r19
CVE-2023-20919 High 7.8 baseandroid-10.0.0_r34 Direct android-13.0.0_r19
CVE-2023-20917 High 7.8 baseandroid-10.0.0_r34 Direct android-13.0.0_r32
CVE-2023-20916 High 7.8 detected in multiple dependencies Direct android-13.0.0_r1
CVE-2023-20911 High 7.8 baseandroid-10.0.0_r34 Direct N/A
CVE-2023-20906 High 7.8 baseandroid-10.0.0_r34 Direct N/A
CVE-2022-20550 High 7.8 baseandroid-10.0.0_r34 Direct android-13.0.0_r16
CVE-2022-20495 High 7.8 baseandroid-10.0.0_r34 Direct android-13.0.0_r16
CVE-2022-20493 High 7.8 baseandroid-10.0.0_r34 Direct android-13.0.0_r16
CVE-2022-20492 High 7.8 baseandroid-10.0.0_r34 Direct android-13.0.0_r12
CVE-2022-20491 High 7.8 detected in multiple dependencies Direct android-13.0.0_r16
CVE-2022-20490 High 7.8 baseandroid-10.0.0_r34 Direct android-13.0.0_r12
CVE-2022-20489 High 7.8 baseandroid-10.0.0_r34 Direct android-13.0.0_r12
CVE-2022-20488 High 7.8 detected in multiple dependencies Direct android-13.0.0_r16
CVE-2022-20487 High 7.8 detected in multiple dependencies Direct android-13.0.0_r16
CVE-2022-20486 High 7.8 detected in multiple dependencies Direct android-13.0.0_r16
CVE-2022-20485 High 7.8 detected in multiple dependencies Direct android-13.0.0_r16
CVE-2022-20484 High 7.8 detected in multiple dependencies Direct android-13.0.0_r16
CVE-2022-20480 High 7.8 detected in multiple dependencies Direct android-13.0.0_r16
CVE-2022-20479 High 7.8 detected in multiple dependencies Direct android-13.0.0_r16
CVE-2022-20478 High 7.8 detected in multiple dependencies Direct android-13.0.0_r16
CVE-2022-20474 High 7.8 detected in multiple dependencies Direct android-13.0.0_r16
CVE-2022-20470 High 7.8 detected in multiple dependencies Direct android-13.0.0_r16
CVE-2022-20456 High 7.8 baseandroid-10.0.0_r34 Direct android-13.0.0_r12
CVE-2022-20452 High 7.8 baseandroid-10.0.0_r34 Direct android-13.0.0_r12
CVE-2022-20441 High 7.8 baseandroid-10.0.0_r34 Direct android-13.0.0_r12
CVE-2022-20419 High 7.8 detected in multiple dependencies Direct android-13.0.0_r7
CVE-2022-20356 High 7.8 baseandroid-10.0.0_r34 Direct N/A
CVE-2022-20354 High 7.8 baseandroid-10.0.0_r34 Direct N/A
CVE-2022-20142 High 7.8 baseandroid-10.0.0_r34 Direct android-12.1.0_r7
CVE-2022-20138 High 7.8 detected in multiple dependencies Direct android-12.1.0_r7
CVE-2022-20135 High 7.8 baseandroid-10.0.0_r34 Direct android-12.1.0_r7
CVE-2022-20124 High 7.8 baseandroid-10.0.0_r34 Direct android-12.1.0_r7
CVE-2022-20005 High 7.8 detected in multiple dependencies Direct android-12.1.0_r5
CVE-2022-20004 High 7.8 baseandroid-10.0.0_r34 Direct android-12.1.0_r5
CVE-2021-39704 High 7.8 baseandroid-10.0.0_r34 Direct N/A
CVE-2021-39696 High 7.8 baseandroid-10.0.0_r34 Direct android-12.1.0_r1
CVE-2021-39630 High 7.8 baseandroid-10.0.0_r34 Direct android-12.0.0_r26
CVE-2021-39619 High 7.8 detected in multiple dependencies Direct N/A
CVE-2021-0970 High 7.8 baseandroid-10.0.0_r34 Direct android-12.0.0_r16
CVE-2021-0932 High 7.8 baseandroid-10.0.0_r34 Direct N/A
CVE-2021-0928 High 7.8 detected in multiple dependencies Direct N/A
CVE-2021-0927 High 7.8 baseandroid-10.0.0_r34 Direct android-12.0.0_r8
CVE-2021-0799 High 7.8 baseandroid-10.0.0_r34 Direct android-12.0.0_r5
CVE-2021-0708 High 7.8 baseandroid-10.0.0_r34 Direct android-11.0.0_r43
CVE-2021-0705 High 7.8 detected in multiple dependencies Direct android-11.0.0_r43
CVE-2021-0683 High 7.8 baseandroid-10.0.0_r34 Direct android-11.0.0_r43
CVE-2021-0645 High 7.8 baseandroid-10.0.0_r34 Direct N/A
CVE-2021-0595 High 7.8 baseandroid-10.0.0_r34 Direct android-11.0.0_r39
CVE-2021-0513 High 7.8 detected in multiple dependencies Direct android-11.0.0_r38
CVE-2021-0478 High 7.8 baseandroid-10.0.0_r34 Direct android-11.0.0_r38
CVE-2021-0472 High 7.8 baseandroid-10.0.0_r34 Direct android-11.0.0_r36
CVE-2021-0442 High 7.8 baseandroid-10.0.0_r34 Direct android-11.0.0_r34
CVE-2021-0439 High 7.8 baseandroid-10.0.0_r34 Direct android-11.0.0_r34
CVE-2021-0391 High 7.8 detected in multiple dependencies Direct android-11.0.0_r32
CVE-2021-0339 High 7.8 detected in multiple dependencies Direct android-11.0.0_r1
CVE-2021-0337 High 7.8 detected in multiple dependencies Direct android-11.0.0_r19
CVE-2021-0334 High 7.8 baseandroid-10.0.0_r34 Direct android-11.0.0_r29
CVE-2021-0327 High 7.8 baseandroid-10.0.0_r34 Direct android-11.0.0_r29
CVE-2021-0317 High 7.8 baseandroid-10.0.0_r34 Direct android-11.0.0_r26
CVE-2021-0307 High 7.8 baseandroid-10.0.0_r34 Direct android-11.0.0_r26
CVE-2021-0306 High 7.8 detected in multiple dependencies Direct android-11.0.0_r26
CVE-2020-27059 High 7.8 baseandroid-10.0.0_r34 Direct android-11.0.0_r28
CVE-2020-0439 High 7.8 baseandroid-10.0.0_r34 Direct android-11.0.0_r12
CVE-2020-0417 High 7.8 baseandroid-10.0.0_r34 Direct android-10.0.0_r46
CVE-2020-0401 High 7.8 baseandroid-10.0.0_r34 Direct android-8.0.0_r50,android-8.1.0_r80,android-9.0.0_r60,android-10.0.0_r46
CVE-2020-0391 High 7.8 baseandroid-10.0.0_r34 Direct android-9.0.0_r60,android-10.0.0_r46
CVE-2020-0388 High 7.8 baseandroid-10.0.0_r34 Direct android-10.0.0_r46
CVE-2020-0257 High 7.8 baseandroid-10.0.0_r34 Direct android-10.0.0_r41
CVE-2020-0227 High 7.8 baseandroid-10.0.0_r34 Direct android-10.0.0_r37,android-9.0.0_r56,android-8.1.0_r76,android-8.0.0_r48
CVE-2020-0210 High 7.8 detected in multiple dependencies Direct android-10.0.0_r37
CVE-2020-0209 High 7.8 detected in multiple dependencies Direct android-10.0.0_r37
CVE-2020-0208 High 7.8 detected in multiple dependencies Direct android-10.0.0_r37
CVE-2020-0203 High 7.8 baseandroid-10.0.0_r34 Direct android-10.0.0_r37
CVE-2020-0166 High 7.8 baseandroid-10.0.0_r34 Direct android-10.0.0_r37
CVE-2020-0137 High 7.8 baseandroid-10.0.0_r34 Direct android-10.0.0_r37
CVE-2020-0115 High 7.8 baseandroid-10.0.0_r34 Direct android-10.0.0_r37,android-9.0.0_r56,android-8.1.0_r76,android-8.0.0_r47
CVE-2020-0114 High 7.8 baseandroid-10.0.0_r34 Direct android-10.0.0_r37
CVE-2020-0099 High 7.8 detected in multiple dependencies Direct android-8.0.0_r49, android-8.1.0_r79, android-9.0.0_r59, android-10.0.0_r44
CVE-2020-0098 High 7.8 detected in multiple dependencies Direct android-10.0.0_r34,android-8.0.0_r46,android-8.1.0_r76,android-9.0.0_r56
CVE-2020-0097 High 7.8 baseandroid-10.0.0_r34 Direct android-10.0.0_r34
CVE-2020-0074 High 7.8 detected in multiple dependencies Direct N/A
CVE-2023-21144 High 7.5 baseandroid-10.0.0_r34 Direct android-13.0.0_r50
CVE-2020-0442 High 7.5 baseandroid-10.0.0_r34 Direct android-11.0.0_r12
CVE-2020-0441 High 7.5 baseandroid-10.0.0_r34 Direct android-11.0.0_r12
CVE-2019-2232 High 7.5 baseandroid-10.0.0_r34 Direct android-8.0.0_r41;android-8.1.0_r71;android-9.0.0_r51;android-10.0.0_r17
CVE-2023-21251 High 7.3 baseandroid-10.0.0_r34 Direct android-13.0.0_r58
CVE-2023-20921 High 7.3 baseandroid-10.0.0_r34 Direct android-13.0.0_r19
CVE-2021-0954 High 7.3 baseandroid-10.0.0_r34 Direct N/A
CVE-2021-0319 High 7.3 baseandroid-10.0.0_r34 Direct android-11.0.0_r26
CVE-2021-0315 High 7.3 baseandroid-10.0.0_r34 Direct android-11.0.0_r26
CVE-2021-0314 High 7.3 baseandroid-10.0.0_r34 Direct android-11.0.0_r26
CVE-2022-20007 High 7.0 baseandroid-10.0.0_r34 Direct android-12.1.0_r5
CVE-2022-20006 High 7.0 detected in multiple dependencies Direct android-12.1.0_r5
CVE-2021-0688 High 7.0 baseandroid-10.0.0_r34 Direct android-11.0.0_r43
CVE-2023-21244 Medium 6.7 baseandroid-10.0.0_r34 Direct android-13.0.0_r61
CVE-2022-20504 Medium 6.7 detected in multiple dependencies Direct android-13.0.0_r16
CVE-2020-0124 Medium 6.7 detected in multiple dependencies Direct android-10.0.0_r37
CVE-2021-0969 Medium 6.5 baseandroid-10.0.0_r34 Direct N/A
CVE-2023-40139 Medium 5.5 baseandroid-10.0.0_r34 Direct N/A
CVE-2023-40121 Medium 5.5 baseandroid-10.0.0_r34 Direct N/A
CVE-2023-40109 Medium 5.5 baseandroid-10.0.0_r34 Direct android-14.0.0_r12
CVE-2023-40074 Medium 5.5 baseandroid-10.0.0_r34 Direct android-14.0.0_r1
CVE-2023-21292 Medium 5.5 baseandroid-10.0.0_r34 Direct android-13.0.0_r67
CVE-2023-21291 Medium 5.5 baseandroid-10.0.0_r34 Direct android-13.0.0_r67
CVE-2023-21288 Medium 5.5 baseandroid-10.0.0_r34 Direct android-13.0.0_r67
CVE-2023-21285 Medium 5.5 baseandroid-10.0.0_r34 Direct android-13.0.0_r67
CVE-2023-21284 Medium 5.5 detected in multiple dependencies Direct android-13.0.0_r67
CVE-2023-21280 Medium 5.5 detected in multiple dependencies Direct android-13.0.0_r67
CVE-2023-21279 Medium 5.5 baseandroid-10.0.0_r34 Direct android-13.0.0_r67
CVE-2023-21277 Medium 5.5 baseandroid-10.0.0_r34 Direct android-13.0.0_r67
CVE-2023-21267 Medium 5.5 baseandroid-10.0.0_r34 Direct android-13.0.0_r67
CVE-2023-21253 Medium 5.5 detected in multiple dependencies Direct N/A
CVE-2023-21249 Medium 5.5 baseandroid-10.0.0_r34 Direct N/A
CVE-2023-21240 Medium 5.5 baseandroid-10.0.0_r34 Direct android-13.0.0_r61
CVE-2023-21239 Medium 5.5 baseandroid-10.0.0_r34 Direct android-13.0.0_r61
CVE-2023-21238 Medium 5.5 baseandroid-10.0.0_r34 Direct android-13.0.0_r61
CVE-2023-21087 Medium 5.5 baseandroid-10.0.0_r34 Direct android-13.0.0_r38
CVE-2023-21026 Medium 5.5 baseandroid-10.0.0_r34 Direct android-13.0.0_r32
CVE-2023-20999 Medium 5.5 detected in multiple dependencies Direct android-13.0.0_r32
CVE-2023-20998 Medium 5.5 detected in multiple dependencies Direct android-13.0.0_r32
CVE-2023-20997 Medium 5.5 detected in multiple dependencies Direct android-13.0.0_r32
CVE-2023-20996 Medium 5.5 detected in multiple dependencies Direct android-13.0.0_r32
CVE-2023-20930 Medium 5.5 detected in multiple dependencies Direct android-13.0.0_r49
CVE-2023-20922 Medium 5.5 baseandroid-10.0.0_r34 Direct android-13.0.0_r16
CVE-2023-20909 Medium 5.5 detected in multiple dependencies Direct android-13.0.0_r38
CVE-2023-20908 Medium 5.5 baseandroid-10.0.0_r34 Direct android-13.0.0_r19
CVE-2022-20500 Medium 5.5 baseandroid-10.0.0_r34 Direct android-13.0.0_r16
CVE-2022-20494 Medium 5.5 baseandroid-10.0.0_r34 Direct android-13.0.0_r12
CVE-2022-20482 Medium 5.5 baseandroid-10.0.0_r34 Direct android-13.0.0_r16
CVE-2022-20476 Medium 5.5 baseandroid-10.0.0_r34 Direct N/A
CVE-2022-20457 Medium 5.5 baseandroid-10.0.0_r34 Direct android-13.0.0_r12
CVE-2022-20455 Medium 5.5 detected in multiple dependencies Direct N/A
CVE-2022-20448 Medium 5.5 baseandroid-10.0.0_r34 Direct android-13.0.0_r12
CVE-2022-20425 Medium 5.5 baseandroid-10.0.0_r34 Direct android-13.0.0_r7
CVE-2022-20414 Medium 5.5 detected in multiple dependencies Direct android-13.0.0_r7
CVE-2022-20143 Medium 5.5 baseandroid-10.0.0_r34 Direct android-12.1.0_r7
CVE-2022-20115 Medium 5.5 baseandroid-10.0.0_r34 Direct android-12.1.0_r5
CVE-2022-20011 Medium 5.5 baseandroid-10.0.0_r34 Direct android-12.1.0_r5
CVE-2021-39670 Medium 5.5 baseandroid-10.0.0_r34 Direct android-12.1.0_r5
CVE-2021-0934 Medium 5.5 detected in multiple dependencies Direct android-13.0.0_r11
CVE-2021-0931 Medium 5.5 baseandroid-10.0.0_r34 Direct android-12.0.0_r8
CVE-2021-0706 Medium 5.5 baseandroid-10.0.0_r34 Direct android-11.0.0_r43
CVE-2021-0704 Medium 5.5 baseandroid-10.0.0_r34 Direct N/A
CVE-2021-0686 Medium 5.5 baseandroid-10.0.0_r34 Direct android-11.0.0_r43
CVE-2021-0682 Medium 5.5 baseandroid-10.0.0_r34 Direct android-11.0.0_r43
CVE-2021-0653 Medium 5.5 baseandroid-10.0.0_r34 Direct android-11.0.0_r46
CVE-2021-0651 Medium 5.5 baseandroid-10.0.0_r34 Direct android-11.0.0_r46
CVE-2021-0644 Medium 5.5 baseandroid-10.0.0_r34 Direct android-11.0.0_r40
CVE-2021-0599 Medium 5.5 baseandroid-10.0.0_r34 Direct android-11.0.0_r38
CVE-2021-0521 Medium 5.5 detected in multiple dependencies Direct android-11.0.0_r38
CVE-2021-0480 Medium 5.5 baseandroid-10.0.0_r34 Direct android-11.0.0_r36
CVE-2021-0309 Medium 5.5 baseandroid-10.0.0_r34 Direct android-11.0.0_r26
CVE-2021-0304 Medium 5.5 baseandroid-10.0.0_r34 Direct Replace or update the following file: GlobalScreenshot.java
CVE-2020-27098 Medium 5.5 detected in multiple dependencies Direct android-11.0.0_r1
CVE-2020-27097 Medium 5.5 detected in multiple dependencies Direct android-11.0.0_r1
CVE-2020-0468 Medium 5.5 baseandroid-10.0.0_r34 Direct N/A
CVE-2020-0467 Medium 5.5 baseandroid-10.0.0_r34 Direct N/A
CVE-2020-0454 Medium 5.5 baseandroid-10.0.0_r34 Direct android-11.0.0_r12
CVE-2020-0443 Medium 5.5 baseandroid-10.0.0_r34 Direct android-11.0.0_r12
CVE-2020-0419 Medium 5.5 detected in multiple dependencies Direct N/A
CVE-2020-0415 Medium 5.5 baseandroid-10.0.0_r34 Direct N/A
CVE-2020-0389 Medium 5.5 baseandroid-10.0.0_r34 Direct android-10.0.0_r46
CVE-2020-0258 Medium 5.5 baseandroid-10.0.0_r34 Direct android-10.0.0_r41
CVE-2020-0249 Medium 5.5 baseandroid-10.0.0_r34 Direct android-8.0.0_r49,android-8.1.0_r79,android-9.0.0_r59,android-10.0.0_r41
CVE-2020-0248 Medium 5.5 baseandroid-10.0.0_r34 Direct android-10.0.0_r41
CVE-2020-0247 Medium 5.5 detected in multiple dependencies Direct android-8.0.0_r49,android-8.1.0_r79,android-9.0.0_r59,android-10.0.0_r41
CVE-2020-0239 Medium 5.5 baseandroid-10.0.0_r34 Direct android-9.0.0_r59,android-10.0.0_r41
CVE-2020-0178 Medium 5.5 baseandroid-10.0.0_r34 Direct android-10.0.0_r37
CVE-2020-0121 Medium 5.5 baseandroid-10.0.0_r34 Direct android-10.0.0_r37
CVE-2020-0116 Medium 5.5 baseandroid-10.0.0_r34 Direct android-10.0.0_r37
CVE-2020-0104 Medium 5.5 detected in multiple dependencies Direct android-10.0.0_r34,android-9.0.0_r56
CVE-2020-0119 Medium 5.3 baseandroid-10.0.0_r34 Direct android-10.0.0_r37
CVE-2022-20394 Medium 5.0 detected in multiple dependencies Direct android-13.0.0_r1
CVE-2021-0687 Medium 5.0 baseandroid-10.0.0_r34 Direct android-11.0.0_r43
CVE-2021-0322 Medium 5.0 detected in multiple dependencies Direct android-11.0.0_r26
CVE-2020-0092 Medium 5.0 detected in multiple dependencies Direct android-10.0.0_r34
CVE-2021-0443 Medium 4.7 baseandroid-10.0.0_r34 Direct android-11.0.0_r34
CVE-2019-2219 Medium 4.7 detected in multiple dependencies Direct android-9.0.0_r51;android-10.0.0_r17
CVE-2022-20497 Medium 4.6 baseandroid-10.0.0_r34 Direct android-13.0.0_r7
CVE-2022-20465 Medium 4.6 detected in multiple dependencies Direct android-13.0.0_r12
CVE-2022-20449 Medium 4.4 baseandroid-10.0.0_r34 Direct android-13.0.0_r16
CVE-2020-0135 Medium 4.4 baseandroid-10.0.0_r34 Direct android-10.0.0_r37
CVE-2022-20226 Low 3.9 detected in multiple dependencies Direct android-12.1.0_r7
CVE-2023-40138 Low 3.3 baseandroid-10.0.0_r34 Direct N/A
CVE-2023-40135 Low 3.3 baseandroid-10.0.0_r34 Direct N/A
CVE-2023-40134 Low 3.3 baseandroid-10.0.0_r34 Direct N/A
CVE-2023-21246 Low 3.3 baseandroid-10.0.0_r34 Direct android-13.0.0_r61
CVE-2022-20446 Low 3.3 detected in multiple dependencies Direct N/A
CVE-2022-20358 Low 3.3 baseandroid-10.0.0_r34 Direct N/A
CVE-2022-20338 Low 3.3 baseandroid-10.0.0_r34 Direct android-13.0.0_r1
CVE-2020-0412 Low 3.3 baseandroid-10.0.0_r34 Direct N/A
CVE-2019-9377 Low 3.3 baseandroid-10.0.0_r34 Direct android-10.0.0_r30
CVE-2022-20543 Low 2.3 detected in multiple dependencies Direct android-13.0.0_r16

**In some cases, Remediation PR cannot be created automatically for a vulnerability despite the availability of remediation

Details

Partial details (2 vulnerabilities) are displayed below due to a content size limitation in GitHub. To view information on the remaining vulnerabilities, navigate to the Mend Application.

CVE-2023-20918 ### Vulnerable Library - baseandroid-10.0.0_r34

Android framework classes and services

Library home page: https://android.googlesource.com/platform/frameworks/base

Found in base branch: master

### Vulnerable Source Files (1)

/core/java/android/app/ActivityOptions.java

### Vulnerability Details

In getPendingIntentLaunchFlags of ActivityOptions.java, there is a possible elevation of privilege due to a confused deputy with no additional execution privileges needed. User interaction is not needed for exploitation.

Publish Date: 2023-07-12

URL: CVE-2023-20918

### CVSS 3 Score Details (9.8)

Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: High - Integrity Impact: High - Availability Impact: High

For more information on CVSS3 Scores, click here.

### Suggested Fix

Type: Upgrade version

Origin: https://www.cve.org/CVERecord?id=CVE-2023-20918

Release Date: 2023-07-12

Fix Resolution: android-13.0.0_r61

Step up your Open Source Security Game with Mend [here](https://www.whitesourcesoftware.com/full_solution_bolt_github)
CVE-2021-0433 ### Vulnerable Library - baseandroid-10.0.0_r34

Android framework classes and services

Library home page: https://android.googlesource.com/platform/frameworks/base

Found in base branch: master

### Vulnerable Source Files (1)

/packages/CompanionDeviceManager/src/com/android/companiondevicemanager/DeviceChooserActivity.java

### Vulnerability Details

In onCreate of DeviceChooserActivity.java, there is a possible way to bypass user consent when pairing a Bluetooth device due to a tapjacking/overlay attack. This could lead to local escalation of privilege and pairing malicious devices with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-171221090

Publish Date: 2021-04-13

URL: CVE-2021-0433

### CVSS 3 Score Details (8.0)

Base Score Metrics: - Exploitability Metrics: - Attack Vector: Adjacent - Attack Complexity: Low - Privileges Required: None - User Interaction: Required - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: High - Integrity Impact: High - Availability Impact: High

For more information on CVSS3 Scores, click here.

### Suggested Fix

Type: Upgrade version

Origin: https://source.android.com/security/bulletin/2021-04-01

Release Date: 2022-02-13

Fix Resolution: android-11.0.0_r34

Step up your Open Source Security Game with Mend [here](https://www.whitesourcesoftware.com/full_solution_bolt_github)
mend-bolt-for-github[bot] commented 6 months ago

:heavy_check_mark: This issue was automatically closed by Mend because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the Mend inventory.

mend-bolt-for-github[bot] commented 5 months ago

:information_source: This issue was automatically re-opened by Mend because the vulnerable library in the specific branch(es) has been detected in the Mend inventory.

mend-bolt-for-github[bot] commented 5 months ago

:heavy_check_mark: This issue was automatically closed by Mend because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the Mend inventory.

mend-bolt-for-github[bot] commented 4 months ago

:information_source: This issue was automatically re-opened by Mend because the vulnerable library in the specific branch(es) has been detected in the Mend inventory.

mend-bolt-for-github[bot] commented 3 months ago

:heavy_check_mark: This issue was automatically closed by Mend because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the Mend inventory.

mend-bolt-for-github[bot] commented 3 months ago

:information_source: This issue was automatically re-opened by Mend because the vulnerable library in the specific branch(es) has been detected in the Mend inventory.