Skip to content
OpenAdvisories

Platform

Android

6,319 known vulnerabilities.

1,170 results · Clear filters · Feed

  • High 7.6

    Microsoft Dynamics 365 Sales Spoofing Vulnerability

    Microsoft Dynamics 365 Sales Spoofing Vulnerability

  • High 7.5

    In l2cu_send_peer_config_rej of l2c_utils.cc, there is a possible out of bounds read due to a missing bounds check. Thi…

  • High 7.8

    In the development options section of the Settings app, there is a possible authentication bypass due to a missing perm…

  • High 7.5

    In HeadsetInterface::ClccResponse of btif_hf.cc, there is a possible out of bounds stack write due to a missing bounds …

  • High 8.4

    In writeToParcel of MediaPlayer.java, there is a possible serialization/deserialization mismatch due to improper input …

  • High 8.8

    In xmlMemStrdupLoc of xmlmemory.c, there is a possible out-of-bounds write due to an integer overflow. This could lead …

  • High 8.8

    In bff_Scanner_addOutPos of Scanner.c, there is a possible out-of-bounds write due to an incorrect bounds check. This c…

  • High 8.4

    In multiple functions of ShortcutService.java, there is a possible creation of a spoofed shortcut due to a missing perm…

  • High 7.7
    CVE-2018-9468 Public exploit

    In query of DownloadManager.java, there is a possible read/write of arbitrary files due to a permissions bypass. This c…

  • High 7.3

    Arbitrary Code execution in Car App Android Jetpack Library

    There exists a code execution vulnerability in the Car App Android Jetpack Library. CarAppService uses deserialization logic that allows construction of arbitrary java classes. This can lead to arbitrary code execution when combined with specific Java deseria…

  • High 8.8

    In the xmlSnprintfElementContent function of valid.c, there is a possible out of bounds write. This could lead to remot…

  • High 7.5

    In sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This…

  • High 7.8

    In createPhonebookDialogView and createMapDialogView of BluetoothPermissionActivity.java, there is a possible permissio…

  • High 8.4

    In startDevice of AAudioServiceStreamBase.cpp there is a possible out of bounds write due to a use after free. This cou…

  • High 7.8

    In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. Th…

  • High 7.5

    In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This cou…

  • High 7.8

    In f_hidg_read and hidg_disable of f_hid.c, there is a possible use-after-free due to improper locking. This could lead…

  • High 8.8
    CVE-2018-9411 Public exploit

    In decrypt of ClearKeyCasPlugin.cpp there is a possible out-of-bounds write due to a missing bounds check. This could l…

  • High 7.8

    In HWCSession::SetColorModeById of hwc_session.cpp, there is a possible out of bounds write due to a missing bounds che…

  • High 7.8

    In cmd_flash_mmc_sparse_img of dl_commands.c, there is a possible out of bounds write due to a missing bounds check. Th…

  • High 7.8

    In the Mediatek Preloader, there are out of bounds reads and writes due to an exposed interface that allows arbitrary p…

  • High 7.8

    In download.c there is a special mode allowing user to download data into memory and causing possible memory corruption…

  • High 7.8

    In bootloader there is fastboot command allowing user specified kernel command line arguments. This could lead to local…

  • High 7.8

    In FT_ACDK_CCT_V2_OP_ISP_SET_TUNING_PARAS of Meta_CCAP_Para.cpp, there is a possible out of bounds write due to imprope…

  • High 7.8

    In IMSA_Recv_Thread and VT_IMCB_Thread of ImsaClient.cpp and VideoTelephony.c, there is a possible out of bounds write …

  • High 7.5

    In the LG LAF component, there is a special command that allowed modification of certain partitions. This could lead to…

  • High 7.5

    In SMF_ParseMetaEvent of eas_smf.c, there is a possible integer overflow. This could lead to remote denial of service d…

  • High 7.8

    In several functions of DescramblerImpl.cpp, there is a possible use after free due to improper locking. This could lea…

  • High 7.5

    In ResStringPool::setTo of ResourceTypes.cpp, it's possible for an attacker to control the value of mStringPoolSize to …

  • High 7.8

    In writeTypedArrayList and readTypedArrayList of Parcel.java, there is a possible escalation of privilege due to type c…

  • High 7.8
    CVE-2018-9338 Public exploit

    In ResStringPool::setTo of ResourceTypes.cpp, there is a possible out of bounds write due to a missing bounds check. Th…

  • High 7.8

    In writeToParcel and createFromParcel of DcParamObject.java, there is a permission bypass due to a write size mismatch.…

  • High 7.5

    In ElementaryStreamQueue::dequeueAccessUnitMPEG4Video of ESQueue.cpp, there is a possible infinite loop leading to reso…

  • High 7.8

    In setAllowOnlyVpnForUids of NetworkManagementService.java, there is a possible security settings bypass due to a missi…

  • High 7.8

    In createFromParcel of MediaCas.java, there is a possible parcel read/write mismatch due to improper input validation. …

  • High 7.8

    In the read() function of ProcessStats.java, there is a possible read/write serialization issue leading to a permission…

  • High 7.8

    In createFromParcel of ViewPager.java, there is a possible read/write serialization issue leading to a permissions bypa…

  • High 7.3
    CVE-2024-43093 Exploited Public exploit

    In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to pre…

    KEV Nov 7, 2024
  • High 8.4

    In multiple functions in AppInfoBase.java, there is a possible way to manipulate app permission settings belonging to a…

  • High 7.8

    In updateInternal of MediaProvider.java , there is a possible access of another app's files due to a missing permission…