Platform
Android
6,319 known vulnerabilities.
1,170 results · Clear filters · Feed
-
High 8.4
In RGXMMUCacheInvalidate of rgxmem.c, there is a possible arbitrary code execution due to a race condition. This could …
-
High 8.4
In DevmemXIntMapPages of devicemem_server.c, there is a possible arbitrary code execution due to an integer overflow. T…
-
High 8.4
In _DevmemXReservationPageAddress of devicemem_server.c, there is a possible use-after-free due to improper casting. Th…
-
High 8.4
In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation…
-
High 8.4
In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation…
-
High 8.4
In onCreate of ChooserActivity.java, there is a possible way to bypass factory reset protections due to a missing permi…
-
High 8.4
In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privi…
-
High 8.4
In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privi…
-
High 8.8
In TdlsexRxFrameHandle of the MTK WLAN driver, there is a possible out of bounds write due to a missing bounds check. T…
-
High 8.8
In DGifSlurp of dgif_lib.c, there is a possible out of bounds write due to an integer overflow. This could lead to remo…
-
High 7.8
In onCreate of NotificationAccessConfirmationActivity.java , there is a possible way to hide an app with notification a…
-
High 7.8
In growData of Parcel.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to…
-
High 7.8
In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to bypass parcel mismatch mit…
-
High 8.8
In gatts_process_find_info of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This c…
-
High 8.8
In gatts_process_read_req of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This co…
-
High 7.8
In multiple locations, there is a possible failure to persist permissions settings due to resource exhaustion. This cou…
-
High 7.8
In multiple functions of CompanionDeviceManagerService.java, there is a possible way to grant permissions without user …
-
High 7.8
In applyTaskFragmentOperation of WindowOrganizerController.java, there is a possible way to launch arbitrary activities…
-
High 7.0
In multiple functions of AccountManagerService.java, there is a possible way to bypass permissions and launch protected…
-
High 7.8
In writeInplace of Parcel.cpp, there is a possible out of bounds write. This could lead to local escalation of privileg…
-
High 7.5
In multiple functions of ConnectivityService.java, there is a possible way for a Wi-Fi AP to determine what site a devi…
-
High 7.8
In setActualDefaultRingtoneUri of RingtoneManager.java, there is a possible way to bypass content providers read permis…
-
High 7.8
In multiple locations, there is a possible bypass of user consent to enabling new Bluetooth HIDs due to a logic error i…
-
High 8.8
In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This coul…
-
High 7.8
In multiple locations, there is a possible way to obtain access to a folder due to a tapjacking/overlay attack. This co…
-
High 7.8
In multiple locations, there is a possible way to obtain any system permission due to a logic error in the code. This c…
-
High 7.8
In many locations, there is a possible way to access kernel memory in user space due to an incorrect bounds check. This…
-
High 7.8
In multiple functions of mnh-sm.c, there is a possible way to trigger a heap overflow due to an integer overflow. This …
-
High 7.8
In multiple locations, there is a possible way to read protected files due to a missing permission check. This could le…
-
High 7.0
In onAttachFragment of ShareIntentActivity.java, there is a possible way for an app to read files in the messages app d…
-
High 7.8
In multiple functions of Parcel.cpp, there is a possible way to bypass address space layout randomization. This could l…
-
High 7.8
In multiple functions of WifiServiceImpl.java, there is a possible way to activate Wi-Fi hotspot from a non-owner profi…
-
High 7.8CVE-2018-9375 Public exploit
In multiple functions of UserDictionaryProvider.java, there is a possible way to add and delete words in the user dicti…
-
High 7.8
GDI+ Remote Code Execution Vulnerability
GDI+ Remote Code Execution Vulnerability
-
High 7.8
In DevmemIntMapPages of devicemem_server.c, there is a possible physical page uaf due to a logic error in the code. Thi…
-
High 7.8
In startListeningForDeviceStateChanges, there is a possible Permission Bypass due to a confused deputy. This could lead…
-
High 7.8
In Exynos_parsing_user_data_registered_itu_t_t35 of VendorVideoAPI.cpp, there is a possible out of bounds write due to …
-
High 7.8
there is a possible biometric bypass due to an unusual root cause. This could lead to local escalation of privilege wit…
-
High 7.8
In prepare_response of lwis_periodic_io.c, there is a possible out of bounds write due to an integer overflow. This cou…
-
High 7.8
there is a possible biometric bypass due to an unusual root cause. This could lead to local escalation of privilege wit…