Platform
Android
6,319 known vulnerabilities.
1,170 results · Clear filters · Feed
-
High 7.8
In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local…
-
High 7.8
In VPU, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of priv…
-
High 8.0
In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check. This co…
-
High 8.8
In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead t…
-
High 7.8
In gf_base_update_finger_base of gf_base.c, there is a possible out-of-bounds write due to a heap buffer overflow. This…
-
High 8.8
In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote code execu…
-
High 7.5
In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote de…
-
High 8.4
In Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead …
-
High 8.8
In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote esc…
-
High 7.8
In gf_ta_test_set_config of gf_ta_test.c, there is a possible out-of-bounds write due to improper input validation. Thi…
-
High 8.4
In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escal…
-
High 8.4
In ac_init_policy of init.c, there is a possible permission bypass due to a logic error in the code. This could lead to…
-
High 8.8
In multiple locations, there is a possible out-of-bounds write due to a logic error in the code. This could lead to rem…
-
High 8.8
In Vp9DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This …
-
High 8.8
In Cellular Modem, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote cod…
-
High 8.5
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
-
High 8.0
Softish C6 Ear Camera and EarVision Android Application Missing authentication for critical function
After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel.
-
High 8.8
Softish C6 Ear Camera and EarVision Android Application Use of Hard-coded Credentials
An attacker could derive the camera's Wi-Fi password and connect to its wireless network. This weakens or eliminates the security value of the access-point password and may expose the live video stream, device services, status interfaces, and firmware-update …
-
High 7.6
Softish C6 Ear Camera and EarVision Android Application Authentication bypass by spoofing
An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position. This permits manipulation of device status responses, observation of application requests, and potential triggering of firmware-update behavior.
-
High 7.8
In multiple functions of iommu.c, there is a possible out of bounds read/write due to improper input validation. This c…
-
High 7.8
In multiple functions of SmsController.java, there is a possible escalation of privilege due to a missing permission ch…
-
High 7.0
In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition. This coul…
-
High 7.8
In kvm_iommu_map_sg of iommu.c, there is a possible use after free due to a missing permission check. This could lead t…
-
High 7.8
In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead t…
-
High 7.8
In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missing bounds check. Th…
-
High 7.8
In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escala…
-
High 7.8
In ihevcd_get_tu_data_size of ihevcd_utils.c, there is a possible out of bounds write due to a heap buffer overflow. Th…
-
High 7.8
In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check. This co…
-
High 8.0
In checkUiccListenConfigNeeded of RoutingManager.cpp, there is a possible out of bounds write due to a missing bounds c…
-
High 7.8
In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improper input validation…
-
High 7.8
In parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer overflow. This could lead …
-
High 7.8
In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local esc…
-
High 7.8
In tt_face_colr_blend_layer of ttcolr.c, there is a possible remote code execution due to an integer overflow. This cou…
-
High 7.8
In multiple functions, there is a possible out of bounds write due to an integer overflow. This could lead to local esc…
-
High 7.8
In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a…
-
High 7.8
In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to an incorrect bounds check. This c…
-
High 8.8
In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This coul…
-
High 7.8CVE-2026-49881 Public exploit
In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in th…
-
High 8.8
In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead…
-
High 7.8
In read_boot_region of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to…