Skip to content
OpenAdvisories

Archive

March 2021

Vulnerabilities first published in this month (UTC), newest first.

1,455 results · Feed

  • Unscored —

    In convertToHidl of convert.cpp, there is a possible out of bounds read due to uninitialized data from ReturnFrameworkM…

  • Unscored —

    In the NXP NFC firmware, there is a possible insecure firmware update due to a logic error. This could lead to local es…

  • Unscored —

    In iaxxx_core_sensor_change_state of iaxxx-module.c, there is a possible out of bounds write due to a missing bounds ch…

  • Unscored —

    In the FingerTipS touch screen driver, there is a possible out of bounds read due to an integer overflow. This could le…

  • Unscored —

    In fts_driver_test_write of fts_proc.c, there is a possible out of bounds read due to a missing bounds check. This coul…

  • Unscored —

    In the FingerTipS touch screen driver, there is a possible out of bounds read due to an integer overflow. This could le…

  • Unscored —

    In the FingerTipS touch screen driver, there is a possible out of bounds write due to a heap buffer overflow. This coul…

  • Unscored —

    In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to…

  • Unscored —

    In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to…

  • Unscored —

    In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to…

  • Unscored —

    In the Titan-M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead…

  • Unscored —

    In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead…

  • Unscored —

    In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead…

  • Unscored —

    In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead…

  • Unscored —

    In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead…

  • Unscored —

    In setNightModeActivated of UiModeManagerService.java, there is a missing permission check. This could lead to local es…

  • Unscored —

    In onReceive of ImsPhoneCallTracker.java, there is a possible misattribution of data usage due to an incorrect broadcas…

  • Unscored —

    In FindQuotaDeviceForUuid of QuotaUtils.cpp, there is a possible use-after-free due to a race condition. This could lea…

  • Unscored —

    In onCreate of UsbConfirmActivity, there is a possible tapjacking vector due to an insecure default value. This could l…

  • Unscored —

    In createConnectToAvailableNetworkNotification of ConnectToNetworkNotificationBuilder.java, there is a possible connect…

  • Unscored —

    In done of CaptivePortalLoginActivity.java, there is a confused deputy. This could lead to local escalation of privileg…

  • Unscored —

    In checkSlicePermission of SliceManagerService.java, there is a possible resource exposure due to an incorrect permissi…

  • Unscored —

    In updateNotifications of DeviceStorageMonitorService.java, there is a possible permission bypass due to an unsafe Pend…

  • Unscored —

    In onReceive of DcTracker.java, there is a possible way to trigger a provisioning URL and modify other telephony settin…

  • Unscored —

    In getUpTo17bits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could…

  • Unscored —

    In getNbits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead…

  • Unscored —

    In DeltaPerformer::Write of delta_performer.cc, there is a possible use of untrusted input due to improper input valida…

  • Unscored —

    In checkUriPermission and related functions of MediaProvider.java, there is a possible way to access external files due…

  • Unscored —

    In onPackageModified of VoiceInteractionManagerService.java, there is a possible change of default applications due to …

  • Unscored —

    In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible out of bounds read due to a missing…

  • Unscored —

    In getMediaOutputSliceAction of RemoteMediaSlice.java, there is a possible permission bypass due to an unsafe PendingIn…

  • Unscored —

    In nci_proc_rf_management_ntf of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. Thi…

  • Unscored —

    In Write of NxpMfcReader.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to …

  • Unscored —

    In CrossProfileAppsServiceImpl.java, there is the possibility of an application's INTERACT_ACROSS_PROFILES grant state …

  • Unscored —

    In oggpack_look of bitwise.c, there is a possible out of bounds read due to a missing bounds check. This could lead to …

  • Unscored —

    In deletePackageVersionedInternal of PackageManagerService.java, there is a possible way to exit Screen Pinning due to …

  • Unscored —

    The fbgames protocol handler registered as part of Facebook Gameroom does not properly quote arguments passed to the ex…

  • Unscored —

    In the crypt function, we attempt to null terminate a buffer using the size of the input salt without validating that t…

  • Unscored —

    Due to incorrect string size calculations inside the preg_quote function, a large input string passed to the function c…

  • Unscored —

    Incorrect bounds calculations in substr_compare could lead to an out-of-bounds read when the second string argument pas…