Platform
Android
6,319 known vulnerabilities.
1,170 results · Clear filters · Feed
-
High 7.8
In multiple functions of PackageInstallerService.java and related files, there is a possible way to bypass background a…
-
High 8.8
In nci_snd_set_routing_cmd of nci_hmsgs.cc, there is a possible out of bounds write due to a missing bounds check. This…
-
High 7.8
In multiple methods of PackageInstallerSession.java, there is a possible way to start foreground services from the back…
-
High 7.8CVE-2023-21097 Public exploit
In toUriInner of Intent.java, there is a possible way to launch an arbitrary activity due to a confused deputy. This co…
-
High 7.8
In retrieveServiceLocked of ActiveServices.java, there is a possible way to dynamically register a BroadcastReceiver us…
-
High 7.8
In deliverOnFlushComplete of LocationProviderManager.java, there is a possible way to bypass background activity launch…
-
High 7.8
In AlarmManagerActivity of AlarmManagerActivity.java, there is a possible way to bypass background activity launch rest…
-
High 7.8
In avdt_scb_hdl_pkt_no_frag of avdt_scb_act.cc, there is a possible out of bounds write due to an incorrect bounds chec…
-
High 7.8
In PVRSRVBridgePhysmemImportSparseDmaBuf of the PowerVR kernel driver, a missing size check means there is a possible i…
-
High 7.8
In PVRSRVBridgeDevicememHistorySparseChange of the PowerVR kernel driver, a missing size check means there is a possibl…
-
High 7.8
In PVRSRVBridgeRGXKickSync of the PowerVR kernel driver, a missing size check means there is a possible integer overflo…
-
High 7.8
In PVRSRVBridgeRGXKickVRDM of the PowerVR kernel driver, a missing size check means there is a possible integer overflo…
-
High 7.8
In PVRSRVBridgeRGXKickTA3D of the PowerVR kernel driver, a missing size check means there is a possible integer overflo…
-
High 7.8
In PVRSRVBridgePhysmemNewRamBackedLockedPMR of the PowerVR kernel driver, a missing size check means there is a possibl…
-
High 7.8
In PVRSRVBridgeRGXKickRS of the PowerVR kernel driver, a missing size check means there is a possible integer overflow …
-
High 7.8
In PVRSRVBridgeChangeSparseMem of the PowerVR kernel driver, a missing size check means there is a possible integer ove…
-
High 7.8
In PVRSRVBridgeServerSyncGetStatus of the PowerVR kernel driver, a missing size check means there is a possible integer…
-
High 7.8
In PVRSRVBridgeRGXKickCDM of the PowerVR kernel driver, a missing size check means there is a possible integer overflow…
-
High 7.8
In PVRSRVBridgeSyncPrimOpTake of the PowerVR kernel driver, a missing size check means there is a possible integer over…
-
High 7.8
In PVRSRVBridgeRGXTDMSubmitTransfer of the PowerVR kernel driver, a missing size check means there is a possible intege…
-
High 7.8
In PVRSRVBridgeCacheOpQueue of the PowerVR kernel driver, a missing size check means there is a possible integer overfl…
-
High 8.3
Improper trust boundary implementation for SMB in Zoom Clients
Zoom clients prior to 5.13.5 contain an improper trust boundary implementation vulnerability. If a victim saves a local recording to an SMB location and later opens it using a link from Zoom’s web portal, an attacker positioned on an adjacent network to the v…
-
High 7.8
In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a mi…
-
High 7.5
In sms_ExtractCbLanguage of sms_CellBroadcast.c, there is a possible out of bounds read due to a missing bounds check. …
-
High 7.2
In EUTRAN_LCS_ConvertLCS_MOLRReq of LPP_CommonUtil.c, there is a possible out of bounds write due to a logic error in t…
-
High 7.8
In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a mi…
-
High 7.8
In BufferBlock of Suballocation.cpp, there is a possible out of bounds write due to memory corruption. This could lead …
-
High 7.8
In buildCommand of bluetooth_ccc.cc, there is a possible out of bounds write due to a logic error in the code. This cou…
-
High 7.8
In onContextItemSelected of NetworkProviderSettings.java, there is a possible way for users to change the Wi-Fi setting…
-
High 7.8
In append_to_params of param_util.c, there is a possible out of bounds write due to an incorrect bounds check. This cou…
-
High 7.8
In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a mi…
-
High 7.8
In InstallStart of InstallStart.java, there is a possible way to change the installer package name due to an improper i…
-
High 7.8
In isTargetSdkLessThanQOrPrivileged of WifiServiceImpl.java, there is a possible way for the guest user to change admin…
-
High 7.8
In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a mi…
-
High 7.8
In multiple functions of BackupHelper.java, there is a possible way for an app to get permissions previously granted to…
-
High 7.5
In parse_printerAttributes of ipphelper.c, there is a possible out of bounds read due to a string without a null-termin…
-
High 7.8
In MediaCodec.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of p…
-
High 7.8
In Confirmation of keystore_cli_v2.cpp, there is a possible way to corrupt memory due to a double free. This could lead…
-
High 7.8
In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a mi…
-
High 7.8
In maybeFinish of FallbackHome.java, there is a possible delay of lockdown screen due to logic error. This could lead t…