Platform
Android
6,158 known vulnerabilities.
314 results · Clear filters · Feed
-
Unscored —CVE-2022-20140 Public exploit
In read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an incorrect bounds check. This could l…
-
Unscored —CVE-2022-20138 Public exploit
In ACTION_MANAGED_PROFILE_PROVISIONED of DevicePolicyManagerService.java, there is a possible way for unprivileged app …
-
Unscored —CVE-2022-20130 Public exploit
In transportDec_OutOfBandConfig of tpdec_lib.cpp, there is a possible out of bounds write due to a heap buffer overflow…
-
Unscored —CVE-2022-20126 Public exploit
In setScanMode of AdapterService.java, there is a possible way to enable Bluetooth discovery mode without user interact…
-
Unscored —CVE-2022-20186 Public exploit
In kbase_mem_alias of mali_kbase_mem_linux.c, there is a possible arbitrary code execution due to improper input valida…
-
Unscored —CVE-2022-20120 Public exploit
Product: AndroidVersions: Android kernelAndroid ID: A-203213034References: N/A
-
Unscored —CVE-2022-20009 Public exploit
In various functions of the USB gadget subsystem, there is a possible out of bounds write due to a missing bounds check…
-
Unscored —CVE-2022-20007 Public exploit
In startActivityForAttachedApplicationIfNeeded of RootWindowContainer.java, there is a possible way to overlay an app t…
-
Unscored —CVE-2022-20005 Public exploit
In validateApkInstallLocked of PackageInstallerSession.java, there is a way to force a mismatch between running code an…
-
Unscored —CVE-2022-20004 Public exploit
In checkSlicePermission of SliceManagerService.java, it is possible to access any slice URI due to improper input valid…
-
Unscored —CVE-2021-39670 Public exploit
In setStream of WallpaperManager.java, there is a possible way to cause a permanent DoS due to improper input validatio…
-
Unscored —CVE-2021-39749 Public exploit
In WindowManager, there is a possible way to start non-exported and protected activities due to a missing permission ch…
-
Unscored —CVE-2021-39706 Public exploit
In onResume of CredentialStorage.java, there is a possible way to cleanup content of credentials storage due to a missi…
-
Unscored —CVE-2021-39704 Public exploit
In deleteNotificationChannelGroup of NotificationManagerService.java, there is a possible way to run foreground service…
-
Unscored —CVE-2021-39692 Public exploit
In onCreate of SetupLayoutActivity.java, there is a possible way to setup a work profile bypassing user consent due to …
-
Unscored —CVE-2021-39685 Public exploit
In various setup methods of the USB gadget subsystem, there is a possible out of bounds write due to an incorrect flag …
-
Unscored —CVE-2021-0963 Public exploit
In onCreate of KeyChainActivity.java, there is a possible way to use an app certificate stored in keychain due to a tap…
-
Unscored —CVE-2021-0954 Public exploit
In ResolverActivity, there is a possible user interaction bypass due to a tapjacking/overlay attack. This could lead to…
-
Unscored —CVE-2021-0928 Public exploit
In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due …
-
Medium 5.9CVE-2021-36808 Public exploit
A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before ver…
-
Unscored —CVE-2021-0705 Public exploit
In sanitizeSbn of NotificationManagerService.java, there is a possible way to keep service running in foreground and ke…
-
Unscored —CVE-2021-0652 Public exploit
In VectorDrawable::VectorDrawable of VectorDrawable.java, there is a possible way to introduce a memory corruption due …
-
Unscored —CVE-2021-0683 Public exploit
In runTraceIpcStop of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused …
-
Unscored —CVE-2021-0595 Public exploit
In lockAllProfileTasks of RootWindowContainer.java, there is a possible way to access the work profile without the prof…
-
Unscored —CVE-2021-0688 Public exploit
In lockNow of PhoneWindowManager.java, there is a possible lock screen bypass due to a race condition. This could lead …
-
Unscored —CVE-2021-0640 Public exploit
In noteAtomLogged of StatsdStats.cpp, there is a possible out of bounds write due to a missing bounds check. This could…
-
Unscored —CVE-2021-0519 Public exploit
In BITSTREAM_FLUSH of ih264e_bitstream.h, there is a possible out of bounds write due to a heap buffer overflow. This c…
-
High 7.6CVE-2021-33699 Public exploit
Task Hijacking is a vulnerability that affects the applications running on Android devices due to a misconfiguration in…
-
Unscored —CVE-2021-0586 Public exploit
In onCreate of DevicePickerFragment.java, there is a possible way to trick the user to select an unwanted bluetooth dev…
-
Unscored —CVE-2021-0589 Public exploit
In BTM_TryAllocateSCN of btm_scn.cc, there is a possible out of bounds write due to an incorrect bounds check. This cou…
-
Unscored —CVE-2021-0600 Public exploit
In onCreate of DeviceAdminAdd.java, there is a possible way to mislead a user to activate a device admin app due to imp…
-
Unscored —CVE-2021-0594 Public exploit
In onCreate of ConfirmConnectActivity, there is a possible remote bypass of user consent due to improper input validati…
-
Unscored —CVE-2021-0506 Public exploit
In ActivityPicker.java, there is a possible bypass of user interaction in intent resolution due to a tapjacking/overlay…
-
Unscored —CVE-2021-0507 Public exploit
In handle_rc_metamsg_cmd of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This cou…
-
Unscored —CVE-2021-0516 Public exploit
In p2p_process_prov_disc_req of p2p_pd.c, there is a possible out of bounds read and write due to a use after free. Thi…
-
Unscored —CVE-2021-0511 Public exploit
In Dex2oat of dex2oat.cc, there is a possible way to inject bytecode into an app due to improper input validation. This…
-
Unscored —CVE-2021-0510 Public exploit
In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds write due to an integer overflow. This could lead…
-
Unscored —CVE-2021-0509 Public exploit
In various functions of CryptoPlugin.cpp, there is a possible use after free due to a race condition. This could lead t…
-
Unscored —CVE-2021-0508 Public exploit
In various functions of DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to l…
-
Unscored —CVE-2021-0520 Public exploit
In several functions of MemoryFileSystem.cpp and related files, there is a possible use after free due to a race condit…