Platform
Android
6,158 known vulnerabilities.
1,157 results · Clear filters · Feed
-
High 8.4
In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission …
-
High 7.8
An unprivileged application can exploit a lack of package/signature validation in SystemUI's `RemoteQCController` when …
-
High 7.8
The report details a heap Use-After-Free (UAF) vulnerability within the `android.hardware.automotive.evs-default` HAL s…
-
High 7.5
The vulnerability is a heap out-of-bounds read in the EVS HAL's `getStreamList()` method. An attacker can craft a `Came…
-
High 7.8
An unprivileged application can bypass the `android.car.permission.CAR_DISPLAY_IN_CLUSTER` permission by registering an…
-
High 7.4
In multiple locations, there is a possible memory corruption due to a race condition. This could lead to local escalati…
-
High 8.4
In multiple locations, there is a possible use-after-free due to a logic error in the code. This could lead to local es…
-
High 7.4
In arm_lpae_split_blk_unmap of io-pgtable-arm-common.c, there is a possible memory corruption due to a race condition. …
-
High 7.4
In __pkvm_pages_to_ppages of mmu.c, there is a possible out-of-bounds write due to a race condition. This could lead to…
-
High 8.4
In resolveAidConflictLocked of RegisteredAidCache.java, there is a possible permission bypass due to a confused deputy.…
-
High 8.4
In sendAnomalyProfile of ProfilingService.java, there is a possible path traversal issue due to path traversal. This co…
-
High 8.4
In multiple locations, there is a possible out-of-bounds write due to an integer overflow. This could lead to local esc…
-
High 8.4
In insertInternal of MmsProvider.java, there is a possible multiuser isolation issue due to a missing permission check.…
-
High 8.4
In multiple locations, there is a possible permission bypass due to an uncaught exception. This could lead to local esc…
-
High 8.4
In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalat…
-
High 8.4
In getEntryFileName of ZipFileRO.cpp, there is a possible memory safety issue due to a heap buffer overflow. This could…
-
High 8.4
In multiple functions of NfcService.java, there is a possible permission bypass due to a missing permission check. This…
-
High 8.4
In setOemUnlockAllowedByUser of OemLockService.java, there is a possible way to bypass FRP due to a missing permission …
-
High 8.4
In notifyPictureProfileHandleSelection of MediaQualityService.java, there is a possible permission bypass due to a miss…
-
High 8.4
In multiple locations, there is a possible memory corruption due to a use-after-free. This could lead to local escalati…
-
High 8.4
In canPresent of PresentationController.java, there is a possible permission bypass due to a logic error in the code. T…
-
High 8.4
In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local …
-
High 8.4
In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to loca…
-
High 8.4
In deliverResult of AppTimeTracker.java, there is a possible background activity launch due to a confused deputy. This …
-
High 8.4
In multiple functions of hppsfilter.c, there is a possible out-of-bounds write due to a stack buffer overflow. This cou…
-
High 8.4
In handleAudioEffectBroadcast of MusicFxHelper.java, there is a possible permission bypass due to a confused deputy. Th…
-
High 8.4
In checkDestination of SmsUsageMonitor.java, there is a possible permission bypass due to improper input validation. Th…
-
High 7.5
In multiple locations, there is a possible denial of service due to improper input validation. This could lead to remot…
-
High 8.4
In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible permission bypass due to a missing per…
-
High 8.4
In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background activity launch due to a lo…
-
High 8.4
In resolveToHeavyWeightSwitcherIfNeeded of ActivityStarter.java, there is a possible background activity launch due to …
-
High 8.4
In modpowF4 of avb_rsa.c, there is a possible signature verification bypass due to a logic error in the code. This coul…
-
High 7.5
In parseMetaData of StagefrightMetadataRetriever.cpp, there is a possible denial of service due to a stack buffer overf…
-
High 8.4
In navigateUpTo of ActivityClientController.java, there is a possible permission bypass due to a logic error in the cod…
-
High 8.4
In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background application launch (bal) is…
-
High 8.4
In run of AddAccountSettings.java, there is a possible background activity launch due to a confused deputy. This could …
-
High 8.4
In do_fault_around of memory.c, there is a possible use after free due to a logic error in the code. This could lead to…
-
High 7.5
In parseChunk of MPEG4Extractor.cpp, there is a possible denial of service due to improper input validation. This could…
-
High 8.4
In prepareWindowToDisplayDuringRelayout of WindowState.java, there is a possible permission bypass due to a logic error…
-
High 7.8
In updateInputWindows of InputMonitor.java, there is a possible tapjacking issue due to a logic error in the code. This…