Archive
10 March 2021
Vulnerabilities first published on this day (UTC), newest first.
102 results · Feed
-
Unscored —
In onReceive of ImsPhoneCallTracker.java, there is a possible misattribution of data usage due to an incorrect broadcas…
-
Unscored —
In FindQuotaDeviceForUuid of QuotaUtils.cpp, there is a possible use-after-free due to a race condition. This could lea…
-
Unscored —
In onCreate of UsbConfirmActivity, there is a possible tapjacking vector due to an insecure default value. This could l…
-
Unscored —
In createConnectToAvailableNetworkNotification of ConnectToNetworkNotificationBuilder.java, there is a possible connect…
-
Unscored —
In done of CaptivePortalLoginActivity.java, there is a confused deputy. This could lead to local escalation of privileg…
-
Unscored —
In checkSlicePermission of SliceManagerService.java, there is a possible resource exposure due to an incorrect permissi…
-
Unscored —
In updateNotifications of DeviceStorageMonitorService.java, there is a possible permission bypass due to an unsafe Pend…
-
Unscored —
In onReceive of DcTracker.java, there is a possible way to trigger a provisioning URL and modify other telephony settin…
-
Unscored —
In getUpTo17bits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could…
-
Unscored —
In getNbits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead…
-
Unscored —
In DeltaPerformer::Write of delta_performer.cc, there is a possible use of untrusted input due to improper input valida…
-
Unscored —
In checkUriPermission and related functions of MediaProvider.java, there is a possible way to access external files due…
-
Unscored —
In onPackageModified of VoiceInteractionManagerService.java, there is a possible change of default applications due to …
-
Unscored —
In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible out of bounds read due to a missing…
-
Unscored —
In getMediaOutputSliceAction of RemoteMediaSlice.java, there is a possible permission bypass due to an unsafe PendingIn…
-
Unscored —
In nci_proc_rf_management_ntf of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. Thi…
-
Unscored —
In Write of NxpMfcReader.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to …
-
Unscored —
In CrossProfileAppsServiceImpl.java, there is the possibility of an application's INTERACT_ACROSS_PROFILES grant state …
-
Unscored —
In oggpack_look of bitwise.c, there is a possible out of bounds read due to a missing bounds check. This could lead to …
-
Unscored —
In deletePackageVersionedInternal of PackageManagerService.java, there is a possible way to exit Screen Pinning due to …
-
Unscored —
The fbgames protocol handler registered as part of Facebook Gameroom does not properly quote arguments passed to the ex…
-
Unscored —
In the crypt function, we attempt to null terminate a buffer using the size of the input salt without validating that t…
-
Unscored —
Due to incorrect string size calculations inside the preg_quote function, a large input string passed to the function c…
-
Unscored —
Incorrect bounds calculations in substr_compare could lead to an out-of-bounds read when the second string argument pas…
-
Unscored —
In-memory file operations (ie: using fopen on a data URI) did not properly restrict negative seeking, allowing for the …
-
Unscored —
xbuf_format_converter, used as part of exif_read_data, was appending a terminating null character to the generated stri…
-
Unscored —
An incorrect size calculation in ldap_escape may lead to an integer overflow when overly long input is passed in, resul…
-
Unscored —CVE-2021-0399 Public exploit
In qtaguid_untag of xt_qtaguid.c, there is a possible memory corruption due to a use after free. This could lead to loc…
-
Unscored —CVE-2021-0392 Public exploit
In main of main.cpp, there is a possible memory corruption due to a double free. This could lead to local escalation of…
-
Unscored —CVE-2021-0390 Public exploit
In various methods of WifiNetworkSuggestionsManager.java, there is a possible modification of suggested networks due to…
-
Unscored —CVE-2021-0397 Public exploit
In sdp_copy_raw_data of sdp_discovery.cc, there is a possible system compromise due to a double free. This could lead t…
-
Unscored —
In bindServiceLocked of ActiveServices.java, there is a possible foreground service launch due to a confused deputy. Th…
-
Unscored —CVE-2021-0391 Public exploit
In onCreate() of ChooseTypeAndAccountActivity.java, there is a possible way to learn the existence of an account, witho…
-
Unscored —CVE-2021-0394 Public exploit
In android_os_Parcel_readString8 of android_os_Parcel.cpp, there is a possible out of bounds read due to a missing boun…
-
Unscored —
In StopServicesAndLogViolations of reboot.cpp, there is possible memory corruption due to a use after free. This could …
-
Unscored —CVE-2021-0393 Public exploit
In Scanner::LiteralBuffer::NewCapacity of scanner.cc, there is a possible out of bounds write due to an integer overflo…
-
Unscored —CVE-2021-0396 Public exploit
In Builtins::Generate_ArgumentsAdaptorTrampoline of builtins-arm.cc and related files, there is a possible out of bound…
-
Unscored —
A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a …
-
Medium 5.3
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the sy…
-
Medium 6.2
A vulnerability exists in IBM SPSS Modeler Subscription Installer that allows a user with create symbolic link permissi…