406,096 results · Feed
-
Medium 5.3
In l2c_fcr_process_peer_cfg_req of l2c_fcr.cc, there is a possible memory safety issue due to an integer overflow. This…
-
High 8.4
In setOemUnlockAllowedByUser of OemLockService.java, there is a possible way to bypass FRP due to a missing permission …
-
Medium 4.0
In isValid of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead …
-
High 8.4
In notifyPictureProfileHandleSelection of MediaQualityService.java, there is a possible permission bypass due to a miss…
-
Medium 6.2
In handleConnectInternal of RpcServerTrusty.cpp, there is a possible denial of service due to a logic error in the code…
-
High 8.4
In multiple locations, there is a possible memory corruption due to a use-after-free. This could lead to local escalati…
-
High 8.4
In canPresent of PresentationController.java, there is a possible permission bypass due to a logic error in the code. T…
-
Medium 6.8
In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to physi…
-
Medium 4.0
In getSelectionBySubIds of ProviderUtil.java, there is a possible cross-user data leak due to a logic error in the code…
-
High 8.4
In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local …
-
High 8.4
In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to loca…
-
Medium 4.0
In _mupdf_get_hdr of wprint_mupdf.c, there is a possible out-of-bounds read due to an integer overflow. This could lead…
-
High 8.4
In deliverResult of AppTimeTracker.java, there is a possible background activity launch due to a confused deputy. This …
-
Medium 4.0
In multiple functions of MediaQualityService.java, there is a possible permission bypass due to a missing permission ch…
-
Critical 9.8
In oapvd_vlc_metadata of oapv_vlc.c, there is a possible memory corruption due to a double free. This could lead to rem…
-
High 8.4
In multiple functions of hppsfilter.c, there is a possible out-of-bounds write due to a stack buffer overflow. This cou…
-
High 8.4
In handleAudioEffectBroadcast of MusicFxHelper.java, there is a possible permission bypass due to a confused deputy. Th…
-
Medium 6.8
Nexbox A95X Amlogic S905X UART Unauthenticated Console Access
Nexbox A95X TV boxes built on the Amlogic S905X platform contain an unauthenticated console exposed via an internal UART header on the PCB that allows physical attackers to obtain an interactive shell as uid 2000 (system) without any credentials. Attackers wi…
-
High 8.4
In checkDestination of SmsUsageMonitor.java, there is a possible permission bypass due to improper input validation. Th…
-
High 7.5
In multiple locations, there is a possible denial of service due to improper input validation. This could lead to remot…
-
High 8.4
In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible permission bypass due to a missing per…
-
High 8.4
In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background activity launch due to a lo…
-
High 8.4
In resolveToHeavyWeightSwitcherIfNeeded of ActivityStarter.java, there is a possible background activity launch due to …
-
High 8.4
In modpowF4 of avb_rsa.c, there is a possible signature verification bypass due to a logic error in the code. This coul…
-
Medium 6.2
In updateNotificationChannel of PreferencesHelper.java, there is a possible ui obfuscation issue due to a logic error i…
-
Medium 5.3
In dec_vlc_read of oapv_vlc.c, there is a possible out-of-bounds read due to a heap buffer overflow. This could lead to…
-
Medium 4.0
In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to loca…
-
High 7.5
In parseMetaData of StagefrightMetadataRetriever.cpp, there is a possible denial of service due to a stack buffer overf…
-
High 8.4
In navigateUpTo of ActivityClientController.java, there is a possible permission bypass due to a logic error in the cod…
-
Medium 4.3
In multiple locations, there is a possible side channel information leak due to improperly used crypto. This could lead…
-
High 8.4
In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background application launch (bal) is…
-
High 8.4
In run of AddAccountSettings.java, there is a possible background activity launch due to a confused deputy. This could …
-
High 8.4
In do_fault_around of memory.c, there is a possible use after free due to a logic error in the code. This could lead to…
-
High 7.5
In parseChunk of MPEG4Extractor.cpp, there is a possible denial of service due to improper input validation. This could…
-
Medium 6.2
In multiple locations, there is a possible persistent denial of service due to improper input validation. This could le…
-
Critical 9.8
In png_set_tRNS of pngset.c, there is a possible memory corruption due to a use-after-free. This could lead to remote c…
-
High 8.4
In prepareWindowToDisplayDuringRelayout of WindowState.java, there is a possible permission bypass due to a logic error…
-
Medium 5.3
In process of C2SoftApvDec.cpp, there is a possible out-of-bounds read due to a logic error in the code. This could lea…
-
High 7.8
In updateInputWindows of InputMonitor.java, there is a possible tapjacking issue due to a logic error in the code. This…
-
High 8.4
In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalat…