Platform
Android
6,319 known vulnerabilities.
1,170 results · Clear filters · Feed
-
High 7.1
In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a missing validation c…
-
High 8.4
In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to inc…
-
High 7.8
In multiple locations, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local …
-
High 7.8
In onQueueFilled of SoftMPEG4.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could le…
-
High 7.8
In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a l…
-
High 7.5
In smp_proc_sec_req of smp_act.cc, there is a possible out of bounds read due to improper input validation. This could …
-
High 7.8CVE-2024-0044 Public exploit
In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input vali…
-
High 8.4
Element Android Intent Redirection
Element Android is an Android Matrix Client. Element Android version 1.4.3 through 1.6.10 is vulnerable to intent redirection, allowing a third-party malicious application to start any internal activity by passing some extra parameters. Possible impact includ…
-
High 7.4CVE-2024-0023 Public exploit
In ConvertRGBToPlanarYUV of Codec2BufferUtils.cpp, there is a possible out of bounds write due to an incorrect bounds c…
-
High 8.4
In convertYUV420Planar16ToY410 of ColorConverter.cpp, there is a possible out of bounds write due to a heap buffer over…
-
High 7.0
In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way for an app in the work profile to e…
-
High 8.4
In DevmemIntUnmapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This …
-
High 7.8CVE-2024-0015 Public exploit
In convertToComponentName of DreamService.java, there is a possible way to launch arbitrary protected activities due to…
-
High 8.4
In removePersistentDot of SystemStatusAnimationSchedulerImpl.kt, there is a possible race condition due to a logic erro…
-
High 7.5CVE-2024-0040 Public exploit
In setParameter of MtpPacket.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead…
-
High 8.4
In injectInputEventToInputFilter of AccessibilityManagerService.java, there is a possible arbitrary input event injecti…
-
High 7.4
In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to bypass the restrictions on …
-
High 7.4
In onNullBinding of TileLifecycleManager.java, there is a possible way to launch an activity from the background due to…
-
High 8.4
In multiple functions of ashmem-dev.cpp, there is a possible missing seal due to a heap buffer overflow. This could lea…
-
High 7.8
In BackgroundLaunchProcessController, there is a possible way to launch arbitrary activity from the background due to B…
-
High 7.1
In multiple files, there is a possible way to capture the device screen when disallowed by device policy due to a logic…
-
High 8.4
In startInstall of UpdateFetcher.java, there is a possible way to trigger a malicious config update due to a logic erro…
-
High 7.4
In ARTPWriter of ARTPWriter.cpp, there is a possible use after free due to uninitialized data. This could lead to local…
-
High 8.4
In multiple functions of MtpFfsHandle.cpp , there is a possible out of bounds write due to a use after free. This could…
-
High 7.8
In sanitizeSbn of NotificationManagerService.java, there is a possible way to launch an activity from the background du…
-
High 7.3CVE-2023-40109 Public exploit
In createFromParcel of UsbConfiguration.java, there is a possible background activity launch (BAL) due to a permissions…
-
High 7.8
In setMediaButtonReceiver of MediaSessionRecord.java, there is a possible way to send a pending intent on behalf of sys…
-
High 8.4
In discovery_thread of Dns64Configuration.cpp, there is a possible memory corruption due to a use after free. This coul…
-
High 7.5
In ca-certificates, there is a possible way to read encrypted TLS data due to untrusted cryptographic certificates. Thi…
-
High 7.8
there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege…
-
High 7.5
Cybozu KUNAI for Android 3.0.20 to 3.0.21 allows a remote unauthenticated attacker to cause a denial-of-service (DoS) c…
-
High 7.1
Improper Export of Android Application Components in SAP EMARSYS SDK ANDROID
Due to lack of proper authorization checks in Emarsys SDK for Android, an attacker can call a particular activity and can forward himself web pages and/or deep links without any validation directly from the host application. On successful attack, an attacker …
-
High 7.8
In gpu_pixel_handle_buffer_liveness_update_ioctl of private/google-modules/gpu/mali_kbase/platform/pixel/pixel_gpu_slc.…
-
High 7.5
In ProtocolNetAcBarringInfo::ProtocolNetAcBarringInfo() of protocolnetadapter.cpp, there is a possible out of bounds re…
-
High 8.8
In callback_thread_event of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible memory corruption d…
-
High 7.3
In Print Service, there is a possible background activity launch due to a logic error in the code. This could lead to l…
-
High 7.8
In Sim, there is a possible way to evade mobile preference restrictions due to a permission bypass. This could lead to …
-
High 7.8
In UWB Google, there is a possible way for a malicious app to masquerade as system app com.android.uwb.resources due to…
-
High 7.7
In multiple locations, there is a possible background activity launch due to a logic error in the code. This could lead…
-
High 7.8
In Permission Manager, there is a possible way to bypass required permissions due to a missing permission check. This c…