Platform
Android
6,319 known vulnerabilities.
1,170 results · Clear filters · Feed
-
High 7.8CVE-2024-31317 Public exploit
In multiple functions of ZygoteProcess.java, there is a possible way to achieve code execution as any app via WRITE_SEC…
-
High 7.8
In RGXFWChangeOSidPriority of rgxfwutils.c, there is a possible arbitrary code execution due to a missing bounds check.…
-
High 7.3
In RGXCreateHWRTData_aux of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could…
-
High 7.8
In DevmemXIntUnreserveRange of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in…
-
High 7.8
In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalat…
-
High 7.8
In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalat…
-
High 8.4
In RGXCreateZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could l…
-
High 8.4
In CacheOpPMRExec of cache_km.c, there is a possible out of bounds write due to an integer overflow. This could lead to…
-
High 8.8
In dhd_prot_txstatus_process of dhd_msgbuf.c, there is a possible out of bounds write due to a missing bounds check. Th…
-
High 7.5
In DeregAcceptProcINT of cn_NrmmStateDeregInit.cpp, there is a possible denial of service due to a logic error in the c…
-
High 7.4
In lwis_initialize_transaction_fences of lwis_fence.c, there is a possible out of bounds write due to a missing bounds …
-
High 7.4
In gpu_pm_power_on_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a logic e…
-
High 7.1
In set_secure_reg of sac_handler.c, there is a possible out of bounds read due to a missing bounds check. This could le…
-
High 7.1
In pl330_dma_from_peri_start() of fp_spi_dma.c, there is a possible out of bounds write due to a missing bounds check. …
-
High 7.8
In lwis_add_completion_fence of lwis_fence.c, there is a possible escalation of privilege due to type confusion. This c…
-
High 7.5
There is a possible escalation of privilege due to improperly used crypto. This could lead to remote escalation of priv…
-
High 7.8
In AcvpOnMessage of avcp.cpp, there is a possible EOP due to uninitialized data. This could lead to local escalation of…
-
High 8.4
In sec_media_protect of media.c, there is a possible permission bypass due to a race condition. This could lead to loca…
-
High 8.1
In handle_msg of main.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to lo…
-
High 8.4
In memcall_add of memlog.c, there is a possible buffer overflow due to improper input validation. This could lead to lo…
-
High 7.0
In gpu_pm_power_off_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a race c…
-
High 7.5
Remote prevention of access to cellular service with no user interaction (for example, crashing the cellular radio serv…
-
High 7.4
In prepare_response_locked of lwis_transaction.c, there is a possible out of bounds write due to improper input validat…
-
High 7.8
In v4l2_smfc_qbuf of smfc-v4l2-ioctls.c, there is a possible out of bounds write due to a missing bounds check. This co…
-
High 8.1CVE-2024-32896 Exploited
there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege wi…
KEV Jun 13, 2024 -
High 7.5
In bc_get_converted_received_bearer of bc_utilities.c, there is a possible out of bounds read due to a missing bounds c…
-
High 8.1
In _s5e9865_mif_set_rate of exynos_dvfs.c, there is a possible out of bounds read due to improper casting. This could l…
-
High 7.0
In sec_media_unprotect of media.c, there is a possible memory corruption due to a race condition. This could lead to lo…
-
High 7.8
In handle_init of goodix/main/main.c, there is a possible memory corruption due to type confusion. This could lead to l…
-
High 7.7
In prepare_response of lwis_periodic_io.c, there is a possible out of bounds write due to an integer overflow. This cou…
-
High 7.4
In lwis_process_transactions_in_queue of lwis_transaction.c, there is a possible use after free due to a use after free…
-
High 7.5
In ss_AnalyzeOssReturnResUssdArgIe of ss_OssAsnManagement.c, there is a possible out of bounds read due to improper inp…
-
High 8.1
In gpu_slc_get_region of pixel_gpu_slc.c, there is a possible EoP due to a use after free. This could lead to local esc…
-
High 7.5
Acrobat Android : OverSecured Finding : Overwriting arbitrary files via attacker-controlled output file paths
Acrobat Mobile Sign Android versions 24.4.2.33155 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a security feature bypass. An attacker could exploit this vulner…
-
High 7.5
'OfferBox' App for Android versions 2.0.0 to 2.3.17 and 'OfferBox' App for iOS versions 2.1.7 to 2.6.14 use a hard-code…
-
High 7.8
In multiple locations, there is a possible permissions bypass due to improper input validation. This could lead to loca…
-
High 7.8
In sendIntentSender of ActivityManagerService.java, there is a possible background activity launch due to a logic error…
-
High 7.8
In multiple methods of UserManagerService.java, there is a possible failure to persist or enforce user restrictions due…
-
High 7.8
In multiple locations, there is a possible notification listener grant to an app running in the work profile due to a l…
-
High 7.4
In multiple locations, there is a possible bypass of health data permissions due to an improper input validation. This …