Latest vulnerabilities
Every new CVE with its exploitation status, public exploits and fixes — from more than 20 public sources, updated hourly.
- Tracked
- 409,013
- Last 24h
- 791
- Critical, 7 days
- 351
- Known exploited
- 1,779
107,903 results · Clear filters · Feed
-
Medium 4.0
In checkLastKnownCellIdAccessPermission of TelephonyPermissions.java, there is a possible permission bypass due to a mi…
-
Medium 4.0
In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local…
-
Medium 6.2
In deserialize of legacy.rs, there is a possible denial of service due to a missing bounds check. This could lead to lo…
-
Medium 6.2
In setApplicationRestrictions of DevicePolicyManagerService.java, there is a possible denial of service due to resource…
-
Medium 5.3
In decode_packed_entry_number of codebook.c, there is a possible out-of-bounds read due to a logic error in the code. T…
-
Medium 4.0
In getTouchOcclusionMode of WindowState.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. …
-
Medium 4.0
In getSubscriptionProperty of SubscriptionManagerService.java, there is a possible information disclosure due to a miss…
-
Medium 4.0
In checkQueryPermission of TelephonyProvider.java, there is a possible permission bypass due to a logic error in the co…
-
Medium 4.0
In validateImageInfo of Bitmap.cpp, there is a possible out-of-bounds read due to a precondition check failure. This co…
-
Medium 5.3
In l2c_fcr_process_peer_cfg_req of l2c_fcr.cc, there is a possible memory safety issue due to an integer overflow. This…
-
Medium 4.0
In isValid of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead …
-
Medium 6.2
In handleConnectInternal of RpcServerTrusty.cpp, there is a possible denial of service due to a logic error in the code…
-
Medium 6.8
In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to physi…
-
Medium 4.0
In getSelectionBySubIds of ProviderUtil.java, there is a possible cross-user data leak due to a logic error in the code…
-
Medium 4.0
In _mupdf_get_hdr of wprint_mupdf.c, there is a possible out-of-bounds read due to an integer overflow. This could lead…
-
Medium 4.0
In multiple functions of MediaQualityService.java, there is a possible permission bypass due to a missing permission ch…
-
Medium 6.8
Nexbox A95X Amlogic S905X UART Unauthenticated Console Access
Nexbox A95X TV boxes built on the Amlogic S905X platform contain an unauthenticated console exposed via an internal UART header on the PCB that allows physical attackers to obtain an interactive shell as uid 2000 (system) without any credentials. Attackers wi…
-
Medium 6.2
In updateNotificationChannel of PreferencesHelper.java, there is a possible ui obfuscation issue due to a logic error i…
-
Medium 5.3
In dec_vlc_read of oapv_vlc.c, there is a possible out-of-bounds read due to a heap buffer overflow. This could lead to…
-
Medium 4.0
In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to loca…
-
Medium 4.3
In multiple locations, there is a possible side channel information leak due to improperly used crypto. This could lead…
-
Medium 6.2
In multiple locations, there is a possible persistent denial of service due to improper input validation. This could le…
-
Medium 5.3
In process of C2SoftApvDec.cpp, there is a possible out-of-bounds read due to a logic error in the code. This could lea…
-
Medium 4.0
In checkNearbyDevicesPermission of WifiP2pServiceImpl.java, there is a possible permission bypass due to a confused dep…
-
Medium 6.2
In multiple locations, there is a possible denial of service due to improper input validation. This could lead to local…
-
Medium 4.0
In onPersistentGroupsChanged of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permiss…
-
Medium 4.0
In multiple functions of Helpers.java, there is a possible information disclosure due to improper input validation. Thi…
-
Medium 6.2
In multiple functions of SearchRequestDatabaseUtil.java, there is a possible way to access protected data due to SQL in…
-
Medium 6.2
In parseKnownActivityEmbeddingCerts of ParsingUtils.java, there is a possible permanent denial of service due to improp…
-
Medium 5.3
In rw_ci_data_cback of rw_ci.cc, there is a possible memory safety issue due to integer underflow. This could lead to r…
-
Medium 6.2
In loadDescription of DeviceAdminAdd.java, there is a possible denial of service due to improper input validation. This…
-
Medium 4.0
In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible information leak due to a confused dep…
-
Medium 4.0
In getXmlFileNameForUser of LocaleManagerService.java, there is a possible permission bypass due to a confusable path t…
-
Medium 6.2
In ShortcutInfo of ShortcutInfo.java, there is a possible way to crash the launcher via unauthorized shortcuts due to r…
-
Medium 4.0
In multiple functions of MediaCarouselController.kt, there is a possible way for media to show up after disablement due…
-
Medium 6.8
In onStrongAuthRequiredChanged of UsbService.java, there is a possible unauthenticated enabling of USB data due to a lo…
-
Medium 6.2
In multiple locations, there is a possible denial of service due to a missing permission check. This could lead to loca…
-
Medium 4.0
In multiple locations, there is a possible way to share files across profiles due to a logic error in the code. This co…
-
Medium 4.0
In getRingtone of RingtoneFactory.java, there is a possible unprivileged access risk due to a missing permission check.…
-
Medium 5.3
Amlogic DroidLogic SubTitleService Out-of-Bounds Write via VobSub SET_CONTR
The VobSub subtitle decoder libsub_vob (part of the Amlogic DroidLogic SubTitleService), as shipped on Nexbox A95X (Amlogic S905X) TV boxes, contains an out-of-bounds write vulnerability in vob_fill_pixel() that allows remote attackers to corrupt stack memory…