GCVE - cpe:2.3:o:google:android:12.0l:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:google:android:12.0l:*:*:*:*:*:*:*

part: o version: 12.0l update: *

Vendor	Google (`f181d1eb-7269-5bae-b76e-e66ceb214562`)
Product	Android (`e58fd905-14d0-5c08-b14d-4d3138d61b03`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/aosp-mirror`	purl2cpe	2026-06-01 10:16:38.571107
`pkg:googlesource/android`	purl2cpe	2026-06-01 10:16:38.571108

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-34740`	vulnerable	2026-06-08 06:37:34.943350	Details available In attributeBytesBase64 and attributeBytesHex of BinaryXmlSerializer.java, there is a possible arbitrary XML injection due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Published: 2024-08-15T21:56:33.151Z Updated: 2024-08-16T14:07:11.752Z Open on db.gcve.eu Reference links https://android.googlesource.com/platform/frameworks/libs/modules-utils/+/700c28908051ceb55e1456d2d21229bc17c6895a https://android.googlesource.com/platform/frameworks/base/+/e8b6505647be558ed3a167a1e13c53dfc227d22b https://source.android.com/security/bulletin/2024-08-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-31325`	vulnerable	2026-06-08 06:35:31.312227	Details available In multiple locations, there is a possible way to reveal images across users data due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Published: 2024-07-09T20:09:16.399Z Updated: 2024-08-02T01:52:56.246Z Open on db.gcve.eu Reference links https://android.googlesource.com/platform/frameworks/base/+/9fcd2070f22c0c6b30ecdc914cef83b5891d5f68 https://source.android.com/security/bulletin/2024-06-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-31313`	vulnerable	2026-06-08 06:35:31.287726	Details available In availableToWriteBytes of MessageQueueBase.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Published: 2024-07-09T20:09:15.601Z Updated: 2024-08-02T01:52:56.323Z Open on db.gcve.eu Reference links https://android.googlesource.com/platform/system/libfmq/+/79bbf4aeef4b254c52da670a972e22956c8c659d https://source.android.com/security/bulletin/2024-06-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-31310`	vulnerable	2026-06-08 06:35:31.278977	Details available In newServiceInfoLocked of AutofillManagerServiceImpl.java, there is a possible way to hide an enabled Autofill service app in the Autofill service settings due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Published: 2024-07-09T20:09:15.312Z Updated: 2025-03-27T15:47:47.460Z Open on db.gcve.eu Reference links https://android.googlesource.com/platform/frameworks/base/+/74afbb05ca08738f66d82df867bbee66de4884bc https://source.android.com/security/bulletin/2024-06-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-23713`	vulnerable	2026-06-08 06:29:40.295733	Details available In migrateNotificationFilter of NotificationManagerService.java, there is a possible failure to persist notifications settings due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Published: 2024-05-07T21:01:29.338Z Updated: 2024-08-01T23:13:07.259Z Open on db.gcve.eu Reference links https://android.googlesource.com/platform/frameworks/base/+/ffd616dc3b919fe7705dbc7a25868483ae45466b https://source.android.com/security/bulletin/2024-04-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-23712`	vulnerable	2026-06-08 06:29:40.295040	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-23709`	vulnerable	2026-06-08 06:29:40.293028	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-0050`	not_vulnerable	2026-06-08 06:21:57.964885	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-0036`	vulnerable	2026-06-08 06:21:57.952331	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-0035`	vulnerable	2026-06-08 06:21:57.951071	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-0023`	vulnerable	2026-06-08 06:21:57.929224	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-40140`	vulnerable	2026-06-08 06:09:41.230258	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-40130`	vulnerable	2026-06-08 06:09:41.225000	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-40107`	vulnerable	2026-06-08 06:09:41.212130	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-40106`	vulnerable	2026-06-08 06:09:41.211174	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.