Platform
Android
6,319 known vulnerabilities.
145 results · Clear filters · Feed
-
Critical 10.0
In sg_remove_scat of scsi/sg.c, there is a possible memory corruption due to an unusual root cause. This could lead to …
-
Critical 9.8
In prop2cfg of btif_storage.cc, there is a possible out of bounds write due to an incorrect bounds check. This could le…
-
Critical 9.8
In process_service_attr_req and process_service_search_attr_req of sdp_server.cc, there is an out of bounds write due t…
-
Critical 9.8
In process_service_attr_req and process_service_search_attr_req of sdp_server.cc, there is an out of bounds write due t…
-
Critical 9.8
In the deserialization constructor of NanoAppFilter.java, there is a possible loss of data due to type confusion. This …
-
Critical 9.8
In the getHost() function of UriTest.java, there is the possibility of incorrect web origin determination. This could l…
-
Critical 9.8
In ArrayConcatVisitor of builtins-array.cc, there is a possible type confusion due to improper input validation. This c…
-
Critical 9.8
In impeg2d_mc_fullx_fully of impeg2d_mc.c there is a possible out of bound write due to missing bounds check. This coul…
-
Critical 9.8
In filterMask of SkEmbossMaskFilter.cpp, there is a possible out of bounds write due to an integer overflow. This could…
-
Critical 9.8
According to the researcher: "The TLS connections are encrypted against tampering or eavesdropping. However, the applic…
-
Critical 9.8
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.14.7 - Authentication Bypass
The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 4.14.7. This is due to insufficient verification on the 'phone' parameter of the 'firebase_sms_log…
-
Critical 9.8
In wl_notify_rx_mgmt_frame of wl_cfg80211.c, there is a possible out of bounds write due to an integer overflow. This c…
-
Critical 9.8
In circ_read of link_device_memory_legacy.c, there is a possible out of bounds write due to an incorrect bounds check. …
-
Critical 9.8
In lwis_fence_signal of lwis_debug.c, there is a possible Use after Free due to improper locking. This could lead to lo…
-
Critical 9.8
In BCMFASTPATH of dhd_msgbuf.c, there is a possible out of bounds write due to a missing bounds check. This could lead …
-
Critical 9.8CVE-2024-23708 Public exploit
In multiple functions of NotificationManagerService.java, there is a possible way to not show a toast message when a cl…
-
Critical 9.8
In multiple locations, there is a possible failure to persist or enforce user restrictions due to improper input valida…
-
Critical 9.8
In afe_callback of q6afe.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local …
-
Critical 9.8
A malicious DNS response can trigger a number of OOB reads, writes, and other memory issues
-
Critical 9.8
there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no…
-
Critical 9.1
Exported broadcast receivers allowing malicious apps to bypass broadcast protection.
-
Critical 9.1
In access_secure_service_from_temp_bond of btm_sec.cc, there is a possible way to achieve keystroke injection due to im…
-
Critical 9.8CVE-2024-0039 Public exploit
In attp_build_value_cmd of att_protocol.cc, there is a possible out of bounds write due to a missing bounds check. This…
-
Critical 9.8
In attp_build_read_by_type_value_cmd of att_protocol.cc , there is a possible out of bounds write due to improper input…
-
Critical 9.8
In readLogs of StatsService.cpp, there is a possible memory corruption due to a use after free. This could lead to loca…
-
Critical 9.8
-
Critical 9.8
U-Boot shell vulnerability resulting in Privilege escalation in a production device
-
Critical 9.8
In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition. This could lead to re…
-
Critical 9.8
In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible arbitrary code execution due to a use after fr…
-
Critical 9.8
In RGXBackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could le…
-
Critical 9.8
-
Critical 9.8
MStore API <= 4.10.7 - Unauthorized Account Access and Privilege Escalation
The MStore API plugin for WordPress is vulnerable to Unauthorized Account Access and Privilege Escalation in versions up to, and including, 4.10.7 due to improper implementation of the Apple login feature. This allows unauthenticated attackers to log in as an…
-
Critical 9.8
In processMessageImpl of ClientModeImpl.java, there is a possible credential disclosure in the TOFU flow due to a logic…
-
Critical 9.8
MStore API <= 4.0.1 - Unauthenticated SQL Injection
The MStore API plugin for WordPress is vulnerable to Unauthenticated Blind SQL Injection via the 'id' parameter in versions up to, and including, 4.0.1 due to insufficient escaping on the user supplied parameters and lack of sufficient preparation on the exis…
-
Critical 9.1
Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android. These could have …
-
Critical 9.8
MStore API <= 2.1.5 - Authentication Bypass
The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.1.5. This is due to unrestricted access to the 'register' and 'update_user_profile' routes. This makes it possible for unauthenticated attackers to …
-
Critical 9.8
MStore API <= 3.9.2 - Authentication Bypass
The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.9.2. This is due to insufficient verification on the user being supplied during the add listing REST API request through the plugin. This makes it p…
-
Critical 9.8
MStore API <= 3.9.0 - Authentication Bypass
The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.9.0. This is due to insufficient verification on the user being supplied during the coupon redemption REST API request through the plugin. This make…
-
Critical 9.8
MStore API <= 3.9.1 - Authentication Bypass
The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.9.1. This is due to insufficient verification on the user being supplied during the cart sync from mobile REST API request through the plugin. This …
-
Critical 9.8