406,114 results · Feed
-
High 8.4
In multiple functions of dma-buf.c, there is a possible use after free due to a race condition. This could lead to loca…
-
High 8.4
In ksys_unshare of fork.c, there is a possible memory corruption due to a use after free. This could lead to local esca…
-
High 8.4
In multiple functions of fork.c, there is a possible use after free due to a logic error in the code. This could lead t…
-
High 8.4
In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could…
-
Medium 6.2
In multiple functions of SearchRequestDatabaseUtil.java, there is a possible way to access protected data due to SQL in…
-
Medium 6.2
In parseKnownActivityEmbeddingCerts of ParsingUtils.java, there is a possible permanent denial of service due to improp…
-
High 7.5
In parseContentType of PduParser.java, there is a possible denial of service due to an integer overflow. This could lea…
-
Medium 5.3
In rw_ci_data_cback of rw_ci.cc, there is a possible memory safety issue due to integer underflow. This could lead to r…
-
High 8.4
In multiple functions in multiple locations, there is a possible execution of sensitive USSD codes due to a confused de…
-
High 8.4
In validEfCfis of SIMRecords.java, there is a possible way to cause a denial of service due to an uncaught exception. T…
-
High 8.4
In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to trick the user into granting account…
-
High 8.4
In multiple locations, there is a possible memory safety issue due to a use-after-free. This could lead to remote escal…
-
High 8.4
In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote escalation…
-
Medium 6.2
In loadDescription of DeviceAdminAdd.java, there is a possible denial of service due to improper input validation. This…
-
High 8.4
In forwardToPreferredActionPickHandler of ContactsPickerActivity.kt, there is a possible intent redirection due to a co…
-
Medium 4.0
In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible information leak due to a confused dep…
-
High 8.4
In multiple functions of AllowBindAppWidgetActivity.java, there is a possible misunderstanding of reject/consent action…
-
High 8.4
In setNotificationListenerAccessGrantedForUserInternal of NotificationManagerService.java, there is a possible policy d…
-
High 8.4
In nfa_t4tnfcee_store_rx_buf of nfa_nfcee_act.cc, there is a possible way to achieve code execution due to a missing pe…
-
High 8.4
In UsbDialogHelper of UsbDialogHelper.java, there is a possible UI confusion due to misleading or insufficient UI. This…
-
Medium 4.0
In getXmlFileNameForUser of LocaleManagerService.java, there is a possible permission bypass due to a confusable path t…
-
High 7.8
In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper input valid…
-
High 8.4
In onActivityResult in multiple locations, there is a possible contact leak from protected profile due to a confused de…
-
Medium 6.2
In ShortcutInfo of ShortcutInfo.java, there is a possible way to crash the launcher via unauthorized shortcuts due to r…
-
High 8.4
In onResult of AccountManagerService.java, there is a possible untrusted/misleading UI issue due to a logic error in th…
-
High 8.4
In queryRemoteConnectionServices of ConnectionServiceWrapper.java, there is a possible permission bypass due to a confu…
-
Medium 4.0
In multiple functions of MediaCarouselController.kt, there is a possible way for media to show up after disablement due…
-
High 8.4
In multiple functions of SaveUi.java, there is a possible bypass of package installation requirements due to a logic er…
-
High 8.4
In onCreate of SettingsApplication.java, there is a possible cross-profile consent dialog label injection due to improp…
-
Medium 6.8
In onStrongAuthRequiredChanged of UsbService.java, there is a possible unauthenticated enabling of USB data due to a lo…
-
Medium 6.2
In multiple locations, there is a possible denial of service due to a missing permission check. This could lead to loca…
-
Medium 4.0
In multiple locations, there is a possible way to share files across profiles due to a logic error in the code. This co…
-
Medium 4.0
In getRingtone of RingtoneFactory.java, there is a possible unprivileged access risk due to a missing permission check.…
-
High 8.4
In writeGrantedUriPermissions of UriGrantsManagerService.java, there is a possible permission bypass due to improper in…
-
High 8.4
In shouldBlockDirectoryFromTree of ExternalStorageProvider.java, there is a possible way to access protected data due t…
-
High 8.4
In multiple locations, there is a possible method for a primary user to disable secure nfc on other full users due to i…
-
High 8.4
In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay …
-
High 8.4
In multiple locations, there is a possible way to trick a user into disclosing Autofill contents due to a tapjacking/ov…
-
High 7.8
Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Privilege Management vulnerabili…
-
Medium 5.3
Amlogic DroidLogic SubTitleService Out-of-Bounds Write via VobSub SET_CONTR
The VobSub subtitle decoder libsub_vob (part of the Amlogic DroidLogic SubTitleService), as shipped on Nexbox A95X (Amlogic S905X) TV boxes, contains an out-of-bounds write vulnerability in vob_fill_pixel() that allows remote attackers to corrupt stack memory…