Skip to content
OpenAdvisories

Platform

Android

6,319 known vulnerabilities.

1,170 results · Clear filters · Feed

  • High 7.8

    In onAttach of ConfigureWifiSettings.java, there is a possible way for a guest user to change WiFi settings due to a pe…

  • High 7.8

    In page_number of shared_mem.c, there is a possible code execution in secure world due to improper input validation. Th…

  • High 8.8

    In cellular modem firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to re…

  • High 7.8

    In (TBD) of (TBD), there is a possible way to corrupt kernel memory due to a use after free. This could lead to local e…

  • High 7.8

    In valid_out_of_special_sec_dram_addr of drm_access_control.c, there is a possible EoP due to improper input validation…

  • High 7.8

    In ppmpu_set of ppmpu.c, there is a possible EoP due to an integer overflow. This could lead to local escalation of pri…

  • High 7.8

    In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This could lead to local e…

  • High 7.5

    Product: AndroidVersions: Android kernelAndroid ID: A-212623833References: N/A

  • High 7.8

    In valid_out_of_special_sec_dram_addr of drm_access_control.c, there is a possible EoP due to improper input validation…

  • High 7.8

    In ppmp_unprotect_mfcfw_buf of drm_fw.c, there is a possible out of bounds write due to improper input validation. This…

  • High 7.5

    Product: AndroidVersions: Android kernelAndroid ID: A-211081867References: N/A

  • High 7.8

    In sec_media_protect of media.c, there is a possible EoP due to an integer overflow. This could lead to local escalatio…

  • High 7.8

    In Multiple Locations, there is a possibility to launch arbitrary protected activities due to a confused deputy. This c…

  • High 8.8
    CVE-2022-20607 Public exploit

    In the Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead …

  • High 7.8

    In onCreate of WifiDppConfiguratorActivity.java, there is a possible way for a guest user to add a WiFi configuration d…

  • High 7.8

    In TBD of TBD, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of…

  • High 7.8

    In compose of Vibrator.cpp, there is a possible arbitrary code execution due to a use after free. This could lead to lo…

  • High 7.5

    In bindArtworkAndColors of MediaControlPanel.java, there is a possible way to crash the phone due to improper input val…

  • High 8.9

    Path Traversal in Android Google Search App

    There exists a path traversal vulnerability in the Android Google Search app. This is caused by the incorrect usage of uri.getLastPathSegment. A symbolic encoded string can bypass the path logic to get access to unintended directories. An attacker can manipul…

  • High 7.8

    In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to …

  • High 7.3

    In onCreate of ReviewPermissionsActivity.java, there is a possible way to grant permissions for a separate app with API…

  • High 7.8

    In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to …

  • High 7.8

    In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to …

  • High 7.5

    In several functions that parse avrc response in avrc_pars_ct.cc and related files, there are possible out of bounds re…

  • High 7.8

    In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to …

  • High 7.8

    In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to …

  • High 7.8

    In getEnabledAccessibilityServiceList of AccessibilityManager.java, there is a possible way to hide an accessibility se…

  • High 7.8

    In deletePackageVersionedInternal of DeletePackageHelper.java, there is a possible way to bypass carrier restrictions d…

  • High 7.8

    In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to …

  • High 7.8
    CVE-2022-20470 Public exploit

    In bindRemoteViewsService of AppWidgetServiceImpl.java, there is a possible way to bypass background activity launch du…

  • High 8.8

    In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to a missing bounds check. This could lea…

  • High 7.8

    In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to …

  • High 8.8

    In avct_lcb_msg_asmbl of avct_lcb_act.cc, there is a possible out of bounds write due to a missing bounds check. This c…

  • High 7.8

    In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to …

  • High 7.8

    In test of ResetTargetTaskHelper.java, there is a possible hijacking of any app which sets allowTaskReparenting="true" …

  • High 7.8

    In shouldHideNotification of KeyguardNotificationVisibilityProvider.kt, there is a possible way to show hidden notifica…

  • High 7.8
    CVE-2022-20474 Public exploit

    In readLazyValue of Parcel.java, there is a possible loading of arbitrary code into the System Settings app due to a co…

  • High 7.3

    In onCreate of EnableAccountPreferenceActivity.java, there is a possible way to mislead the user into enabling a malici…

  • High 7.8

    In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to …

  • High 7.0

    In TBD of TBD, there is a possible way to archive arbitrary code execution in kernel due to a race condition. This coul…