Archive
March 2023
Vulnerabilities first published in this month (UTC), newest first.
1,048 results · Clear filters · Feed
-
Medium 6.7
In UnwindingWorker of unwinding.cc, there is a possible out of bounds write due to a use after free. This could lead to…
-
Medium 6.7
In setToExternal of ril_external_client.cpp, there is a possible out of bounds write due to a missing bounds check. Thi…
-
Medium 6.4
In dit_hal_ioctl of dit.c, there is a possible use after free due to a race condition. This could lead to local escalat…
-
Medium 6.7
In dwc3_exynos_clk_get of dwc3-exynos.c, there is a possible out of bounds write due to an incorrect bounds check. This…
-
Medium 4.4
In forceStaDisconnection of hostapd.cpp, there is a possible out of bounds read due to a missing bounds check. This cou…
-
Medium 5.5
In AccountTypePreference of AccountTypePreference.java, there is a possible way to mislead the user about accounts inst…
-
Medium 6.7
In registerSignalHandlers of main.c, there is a possible local arbitrary code execution due to a use after free. This c…
-
Medium 4.4
In ConvertToHalMetadata of aidl_utils.cc, there is a possible out of bounds read due to a missing bounds check. This co…
-
Medium 5.5
In ih264e_init_proc_ctxt of ih264e_process.c, there is a possible out of bounds read due to a heap buffer overflow. Thi…
-
Medium 6.7
In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a heap buffer overflow. This could…
-
Medium 4.4
When cpif handles probe failures, there is a possible out of bounds read due to a use after free. This could lead to lo…
-
Medium 4.4
In append_camera_metadata of camera_metadata.c, there is a possible out of bounds read due to a missing bounds check. T…
-
Medium 6.7
In cs40l2x_cp_trigger_queue_show of cs40l2x.c, there is a possible out of bounds write due to a use after free. This co…
-
Medium 5.5
In register of UidObserverController.java, there is a missing permission check. This could lead to local information di…
-
Medium 4.4
In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This coul…
-
Medium 4.4
In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This coul…
-
Medium 4.4
In ufdt_local_fixup_prop of ufdt_overlay.c, there is a possible out of bounds read due to an incorrect bounds check. Th…
-
Medium 5.1
In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This coul…
-
Medium 4.4
In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This coul…
-
Medium 4.4
In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This coul…
-
Medium 4.4
In init of VendorGraphicBufferMeta, there is a possible out of bounds read due to a missing bounds check. This could le…
-
Medium 6.7
In (TBD) of (TBD), there is a possible way to corrupt memory due to a use after free. This could lead to local escalati…
-
Medium 4.7
In setPowerMode of HWC2.cpp, there is a possible out of bounds read due to a race condition. This could lead to local i…
-
Medium 5.5CVE-2023-21036 Public exploit
In BitmapExport.java, there is a possible failure to truncate images due to a logic error in the code.Product: AndroidV…
-
Medium 5.5
In updateInputChannel of WindowManagerService.java, there is a possible way to set a touchable region beyond its own Su…
-
Medium 5.5
In addNetwork of WifiManager.java, there is a possible way to trigger a persistent DoS due to resource exhaustion. This…
-
Medium 4.4
In handleEvent of nan.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to loc…
-
Medium 4.4
In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This coul…
-
Medium 4.4
In dumpstateBoard of Dumpstate.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could…
-
Medium 5.5
In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. Th…
-
Medium 4.4
In btm_ble_write_adv_enable_complete of btm_ble_gap.cc, there is a possible out of bounds read due to a missing bounds …
-
Medium 5.5
In btm_ble_add_resolving_list_entry_complete of btm_ble_privacy.cc, there is a possible out of bounds read due to a mis…
-
Medium 6.8
In onParentVisible of HeaderPrivacyIconsController.kt, there is a possible way to bypass factory reset protections due …
-
Medium 5.5
In sendHalfSheetCancelBroadcast of HalfSheetActivity.java, there is a possible way to learn nearby BT MAC addresses due…
-
Medium 4.4
In Import of C2SurfaceSyncObj.cpp, there is a possible out of bounds write due to a missing bounds check. This could le…
-
Medium 5.5
In getSliceEndItem of MediaVolumePreferenceController.java, there is a possible way to start foreground activity from t…
-
Medium 4.4
In btm_ble_read_remote_features_complete of btm_ble_gap.cc, there is a possible out of bounds read due to improper inpu…
-
Medium 4.5
In btm_read_rssi_complete of btm_acl.cc, there is a possible out of bounds read due to a missing bounds check. This cou…
-
Medium 4.4
In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This coul…
-
Medium 4.4
In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This coul…