Platform
Android
6,319 known vulnerabilities.
1,170 results · Clear filters · Feed
-
High 7.8
In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents over USB without unlock…
-
High 8.4
In getInstalledAccessibilityPreferences of AccessibilitySettings.java, there is a possible way to hide an enabled acces…
-
High 7.8
In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible way to achieve arbitrary code execution due to a m…
-
High 7.8
In setTransactionState of SurfaceFlinger.cpp, there is a possible way to change protected display attributes due to a l…
-
High 7.8
In mayAdminGrantPermission of AdminRestrictedPermissionsUtils.java, there is a possible way to access the microphone du…
-
High 7.8
In onReceive of AppRestrictionsFragment.java, there is a possible escalation of privilege due to unsafe deserialization…
-
High 7.8
In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a l…
-
High 7.8
In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. Thi…
-
High 7.8
In DevmemIntChangeSparse of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in th…
-
High 8.4
In multiple locations, there is a possible permissions bypass due to a missing null check. This could lead to local esc…
-
High 8.4
In multiple locations, there is a possible arbitrary code execution due to a logic error in the code. This could lead t…
-
High 8.4
In DevmemXIntMapPages of devicemem_server.c, there is a possible use-after-free due to a logic error in the code. This …
-
High 8.4
In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. Thi…
-
High 7.8
In PMRWritePMPageList of pmr.c, there is a possible out of bounds write due to a logic error in the code. This could le…
-
High 7.4
In valid_address of syscall.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead…
-
High 7.4
In lwis_allocator_free of lwis_allocator.c, there is a possible memory corruption due to a use after free. This could l…
-
High 7.4
In vring_init of external/headers/include/virtio/virtio_ring.h, there is a possible out of bounds write due to a logic …
-
High 7.4
Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-329163861.
-
High 7.4
In sm_mem_compat_get_vmm_obj of lib/sm/shared_mem.c, there is a possible arbitrary physical memory access due to improp…
-
High 7.4
In vring_size of external/headers/include/virtio/virtio_ring.h, there is a possible out of bounds write due to an integ…
-
High 7.4
there is a possible man-in-the-middle attack due to a logic error in the code. This could lead to remote escalation of …
-
High 7.8
In pmucal_rae_handle_seq_int of flexpmu_cal_rae.c, there is a possible arbitrary write due to uninitialized data. This …
-
High 8.8
Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-330537292.
-
High 7.8
In ufshc_scsi_cmd of ufs.c, there is a possible stack variable use after free due to a use after free. This could lead …
-
High 7.8
there is a possible privilege escalation due to an insecure default value. This could lead to local escalation of privi…
-
High 7.5
Android before 2024-10-05 on Google Pixel devices allows information disclosure in the modem component, A-299774545.
-
High 7.5
there is a possible Null Pointer Dereference (modem crash) due to improper input validation. This could lead to remote …
-
High 7.8
In mm_GetMobileIdIndexForNsUpdate of mm_GmmPduCodec.c, there is a possible out of bounds write due to an incorrect boun…
-
High 7.4
In lwis_device_event_states_clear_locked of lwis_event.c, there is a possible privilege escalation due to a double free…
-
High 8.1
App Builder – Create Native Android & iOS Apps On The Flight <= 5.3.7 - Privilege Escalation and Account Takeover via Weak OTP
The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.3.7. This is due to the verify_otp_forgot_password() and update_password()…
-
High 7.5
In Brave Android prior to v1.67.116, domains in the Brave Shields popup are elided from the right instead of the left, …
-
High 7.8
There is a possible LCS signing enforcement missing due to test/debugging code left in a production build. This could l…
-
High 7.4
In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible memory corruption due to improper input validation. Thi…
-
High 7.4
In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible corrupt memory due to a logic error in the code. This c…
-
High 7.4
In ppmp_unprotect_buf of drm/code/drm_fw.c, there is a possible memory corruption due to a logic error in the code. Thi…
-
High 7.4
there is a possible escalation of privilege due to an unusual root cause. This could lead to local escalation of privil…
-
High 7.3
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Unauthorized User Registration
The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to unauthorized user registration in all versions up to, and including, 4.15.3. This is due to the plugin not checking that user registration is enabled prior to…
-
High 7.8
In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a heap buffer overflow…
-
High 7.8
In scheme of Uri.java, there is a possible way to craft a malformed Uri object due to improper input validation. This c…
-
High 7.8
In addPreferencesForType of AccountTypePreferenceLoader.java, there is a possible way to disable apps for other users d…