Platform
Android
6,158 known vulnerabilities.
314 results · Clear filters · Feed
-
Unscored —CVE-2020-0471 Public exploit
In reassemble_and_dispatch of packet_fragmenter.cc, there is a possible way to inject packets into an encrypted Bluetoo…
-
Unscored —CVE-2021-0316 Public exploit
In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds write due to a missing bounds check. This…
-
Unscored —CVE-2021-0318 Public exploit
In appendEventsToCacheLocked of SensorEventConnection.cpp, there is a possible out of bounds write due to a use-after-f…
-
Unscored —CVE-2021-0319 Public exploit
In checkCallerIsSystemOr of CompanionDeviceManagerService.java, there is a possible way to get a nearby Bluetooth devic…
-
Unscored —CVE-2021-0308 Public exploit
In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check. This could l…
-
Unscored —CVE-2021-0306 Public exploit
In addAllPermissions of PermissionManagerService.java, there is a possible permissions bypass when upgrading major Andr…
-
Unscored —CVE-2020-0463 Public exploit
In sdp_server_handle_client_req of sdp_server.cc, there is a possible out of bounds read due to a missing bounds check.…
-
Unscored —CVE-2020-0458 Public exploit
In SPDIFEncoder::writeBurstBufferBytes and related methods of SPDIFEncoder.cpp, there is a possible out of bounds write…
-
Unscored —CVE-2020-0453 Public exploit
In updateNotification of BeamTransferManager.java, there is a possible permission bypass due to an unsafe PendingIntent…
-
Unscored —CVE-2020-0452 Public exploit
In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could…
-
Unscored —CVE-2020-0451 Public exploit
In sbrDecoder_AssignQmfChannels2SbrChannels of sbrdecoder.cpp, there is a possible out of bounds write due to a heap bu…
-
Unscored —CVE-2020-0409 Public exploit
In create of FileMap.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local …
-
Unscored —CVE-2020-0418 Public exploit
In getPermissionInfosForGroup of Utils.java, there is a logic error. This could lead to local escalation of privilege w…
-
Unscored —CVE-2020-0443 Public exploit
In LocaleList of LocaleList.java, there is a possible forced reboot due to an uncaught exception. This could lead to lo…
-
Unscored —CVE-2020-0439 Public exploit
In generatePackageInfo of PackageManagerService.java, there is a possible permissions bypass due to an incorrect permis…
-
Unscored —CVE-2020-0421 Public exploit
In appendFormatV of String8.cpp, there is a possible out of bounds write due to incorrect error handling. This could le…
-
Unscored —CVE-2020-0423 Public exploit
In binder_release_work of binder.c, there is a possible use-after-free due to improper locking. This could lead to loca…
-
Unscored —CVE-2020-0377 Public exploit
In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. T…
-
Unscored —CVE-2020-0413 Public exploit
In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. T…
-
Unscored —CVE-2020-0416 Public exploit
In multiple settings screens, there are possible tapjacking attacks due to an insecure default value. This could lead t…
-
Unscored —CVE-2020-0391 Public exploit
In applyPolicy of PackageManagerService.java, there is possible arbitrary command execution as System due to an unenfor…
-
Unscored —CVE-2020-0394 Public exploit
In onCreate of BluetoothPairingDialog.java, there is a possible tapjacking vector due to an insecure default value. Thi…
-
Unscored —CVE-2020-0245 Public exploit
In DecodeFrameCombinedMode of combined_decode.cpp, there is a possible out of bounds write due to a heap buffer overflo…
-
Unscored —CVE-2020-0401 Public exploit
In setInstallerPackageName of PackageManagerService.java, there is a missing permission check. This could lead to local…
-
Unscored —CVE-2020-0392 Public exploit
In getLayerDebugInfo of SurfaceFlinger.cpp, there is a possible code execution due to a double free. This could lead to…
-
Unscored —CVE-2020-0381 Public exploit
In Parse_wave of eas_mdls.c, there is a possible out of bounds write due to an integer overflow. This could lead to rem…
-
Unscored —CVE-2020-0380 Public exploit
In allocExcessBits of bitalloc.c, there is a possible out of bounds write due to an incorrect bounds check. This could …
-
Unscored —CVE-2020-0242 Public exploit
In reset of NuPlayerDriver.cpp, there is a possible use-after-free due to improper locking. This could lead to local es…
-
Unscored —CVE-2020-0241 Public exploit
In NuPlayerStreamListener of NuPlayerStreamListener.cpp, there is possible memory corruption due to a double free. This…
-
Unscored —CVE-2020-0240 Public exploit
In NewFixedDoubleArray of factory.cc, there is a possible out of bounds write due to an integer overflow. This could le…
-
Unscored —CVE-2020-0108 Public exploit
In postNotification of ServiceRecord.java, there is a possible bypass of foreground process restrictions due to an unca…
-
Unscored —CVE-2020-0226 Public exploit
In createWithSurfaceParent of Client.cpp, there is a possible out of bounds write due to type confusion. This could lea…
-
Unscored —CVE-2020-0225 Public exploit
In a2dp_vendor_ldac_decoder_decode_packet of a2dp_vendor_ldac_decoder.cc, there is a possible out of bounds write due t…
-
Unscored —CVE-2020-0227 Public exploit
In onCommand of CompanionDeviceManagerService.java, there is a possible permissions bypass due to a missing permission …
-
Unscored —CVE-2020-0201 Public exploit
In showSecurityFields of WifiConfigController.java there is a possible credential leak due to a confused deputy. This c…
-
Unscored —CVE-2020-0219 Public exploit
In onCreate of SliceDeepLinkSpringBoard.java there is a possible insecure Intent. This could lead to local elevation of…
-
Unscored —CVE-2020-0215 Public exploit
In onCreate of ConfirmConnectActivity.java, there is a possible leak of Bluetooth information due to a permissions bypa…
-
Unscored —CVE-2020-0188 Public exploit
In onCreatePermissionRequest of SettingsSliceProvider.java, there is a possible permissions bypass due to a PendingInte…
-
Unscored —CVE-2020-0183 Public exploit
In handleMessage of BluetoothManagerService, there is an incomplete reset. This could lead to local escalation of privi…
-
Unscored —CVE-2020-0155 Public exploit
In phNxpNciHal_send_ese_hal_cmd of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds …