Platform
Android
6,158 known vulnerabilities.
314 results · Clear filters · Feed
-
Unscored —CVE-2020-0138 Public exploit
In get_element_attr_rsp of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This coul…
-
Unscored —CVE-2020-0162 Public exploit
In parseSampleAuxiliaryInformationOffsets of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper …
-
Unscored —CVE-2020-0181 Public exploit
In exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an integer overflow. This…
-
Unscored —CVE-2020-0198 Public exploit
In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could l…
-
Unscored —CVE-2020-0137 Public exploit
In setIPv6AddrGenMode of NetworkManagementService.java, there is a possible bypass of networking permissions due to a m…
-
Unscored —CVE-2020-0160 Public exploit
In setSyncSampleParams of SampleTable.cpp, there is possible resource exhaustion due to a missing bounds check. This co…
-
Unscored —CVE-2020-0136 Public exploit
In multiple locations of Parcel.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lea…
-
Unscored —CVE-2020-0218 Public exploit
In loadSoundModel and related functions of SoundTriggerHwService.cpp, there is possible out of bounds write due to a ra…
-
Unscored —CVE-2020-0209 Public exploit
In multiple functions of AccountManager.java, there is a possible permissions bypass. This could lead to local escalati…
-
Unscored —CVE-2020-0192 Public exploit
In ih264d_decode_slice_thread of ih264d_thread_parse_decode.c, there is a possible out of bounds read due to improper i…
-
Unscored —CVE-2020-0203 Public exploit
In freeIsolatedUidLocked of ProcessList.java, there is a possible UID reuse due to improper cleanup. This could lead to…
-
Unscored —CVE-2020-0113 Public exploit
In sendCaptureResult of Camera3OutputUtils.cpp, there is a possible out of bounds read due to a use after free. This co…
-
Unscored —CVE-2020-0121 Public exploit
In updateUidProcState of AppOpsService.java, there is a possible permission bypass due to a logic error. This could lea…
-
Unscored —CVE-2020-0114 Public exploit
In onCreateSliceProvider of KeyguardSliceProvider.java, there is a possible confused deputy due to a PendingIntent erro…
-
Unscored —CVE-2020-0096 Public exploit
In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deput…
-
Unscored —CVE-2020-0082 Public exploit
In ExternalVibration of ExternalVibration.java, there is a possible activation of an arbitrary intent due to unsafe des…
-
High 7.8
In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient…
KEV Nov 3, 2021 -
High 7.8
In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could…
KEV Nov 3, 2021 -
High 8.8CVE-2020-0022 Public exploit
In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds ca…
-
Unscored —CVE-2020-0014 Public exploit
It is possible for a malicious application to construct a TYPE_TOAST window manually and make that window clickable. Th…
-
Unscored —CVE-2020-0001 Public exploit
In getProcessRecordLocked of ActivityManagerService.java isolated apps are not handled correctly. This could lead to lo…
-
Unscored —CVE-2020-0009 Public exploit
In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. Thi…
-
Unscored —CVE-2019-9465 Public exploit
In the Titan M handling of cryptographic operations, there is a possible information disclosure due to an unusual root …
-
Unscored —CVE-2019-8791 Public exploit
An issue existed in the parsing of URL schemes. This issue was addressed with improved URL validation. This issue is fi…
-
Unscored —CVE-2019-11931 Public exploit
A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user…
-
Unscored —CVE-2019-2198 Public exploit
In Download Provider, there is a possible SQL injection vulnerability. This could lead to local information disclosure …
-
Unscored —CVE-2019-2196 Public exploit
In Download Provider, there is possible SQL injection. This could lead to local information disclosure with no addition…
-
Unscored —CVE-2019-2205 Public exploit
In ProxyResolverV8::SetPacScript of proxy_resolver_v8.cc, there is a possible memory corruption due to a use after free…
-
Unscored —CVE-2019-11933 Public exploit
A heap buffer overflow bug in libpl_droidsonroids_gif before 1.2.19, as used in WhatsApp for Android before version 2.1…
-
High 7.8
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interact…
KEV Nov 3, 2021 -
High 8.8
android-gif-drawable Double Free vulnerability
A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications, allows remote attackers to execute arb…
-
Unscored —CVE-2019-2107 Public exploit
In ihevcd_parse_pps of ihevcd_parse_headers.c, there is a possible out of bounds write due to a missing bounds check. T…
-
Unscored —CVE-2019-2025 Public exploit
In binder_thread_read of binder.c, there is a possible use-after-free due to improper locking. This could lead to local…
-
Unscored —CVE-2019-2023 Public exploit
In ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PI…
-
Unscored —CVE-2019-1999 Public exploit
In binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper locking. This could lead t…
-
Unscored —CVE-2019-2000 Public exploit
In several functions of binder.c, there is possible memory corruption due to a use after free. This could lead to local…
-
Unscored —CVE-2018-9539 Public exploit
In the ClearKey CAS descrambler, there is a possible use after free due to a race condition. This could lead to local e…
-
Unscored —CVE-2018-9445 Public exploit
In readMetadata of Utils.cpp, there is a possible path traversal bug due to a confused deputy. This could lead to local…
-
Unscored —CVE-2018-9488 Public exploit
In the SELinux permissions of crash_dump.te, there is a permissions bypass due to a missing restriction. This could lea…
-
Unscored —CVE-2018-9493 Public exploit
In the content provider of the download manager, there is a possible SQL injection due to improper input validation. Th…
