Skip to content
OpenAdvisories

Platform

Android

6,319 known vulnerabilities.

868 results · Clear filters · Feed

  • Medium 6.7

    In procfile_write of gl_proc.c, there is a possible out of bounds read of a function pointer due to an incorrect bounds…

  • Medium 6.7

    In reboot_block_command of htc reboot_block driver, there is a possible stack buffer overflow due to a missing bounds c…

  • Medium 6.7

    In tscpu_write_GPIO_out and mtkts_Abts_write of mtk_ts_Abts.c, there is a possible buffer overflow in an sscanf due to …

  • Medium 5.4

    Information Disclosure Vulnerability in Tinxy

    This vulnerability exists in the Tinxy mobile app due to storage of logged-in user information in plaintext on the device database. An attacker with physical access to the rooted device could exploit this vulnerability by accessing its database leading to una…

  • Medium 5.5

    In m3326_gps_write and m3326_gps_read of gps.s, there is a possible Out Of Bounds Read due to a missing bounds check. T…

  • Medium 6.5

    In emmc_rpmb_ioctl of emmc_rpmb.c, there is an Information Disclosure due to a Missing Bounds Check. This could lead to…

  • Medium 5.5

    In process_service_search_attr_rsp of sdp_discovery.cc, there is a possible out of bound read due to a missing bounds c…

  • Medium 5.5

    In sdp_copy_raw_data of sdp_discovery.cc, there is a possible out of bounds read due to an incorrect bounds check. This…

  • Medium 6.2

    In gatt_process_error_rsp of gatt_cl.cc, there is a possible out of bound read due to a missing bounds check. This coul…

  • Medium 6.5

    In buildImageItemsIfPossible of ItemTable.cpp there is a possible out of bound read due to uninitialized data. This cou…

  • Medium 6.5

    In  RsaKeyPairGenerator::getNumberOfIterations of RSAKeyPairGenerator.java, an incorrect implementation could cause wea…

  • Medium 5.5

    In ihevcd_parse_slice_header of ihevcd_parse_slice_header.c there is a possible out of bound read due to missing bounds…

  • Medium 6.5

    In VideoFrameScheduler.cpp of VideoFrameScheduler::PLL::fit, there is a possible remote denial of service due to divide…

  • Medium 6.5

    In ihevcd_parse_slice_data of ihevcd_parse_slice.c there is a possible heap buffer out of bound read due to a missing b…

  • Medium 6.5

    In ihevcd_allocate_dynamic_bufs of ihevcd_api.c there is a possible resource exhaustion due to integer overflow. This c…

  • Medium 6.5

    In ih264e_fmt_conv_420p_to_420sp of ih264e_fmt_conv.c there is a possible out of bound read due to missing bounds check…

  • Medium 6.5

    In ih264d_assign_pic_num of ih264d_utils.c there is a possible out of bound read due to missing bounds check. This coul…

  • Medium 6.5

    In mv_err_cost of mcomp.c there is a possible out of bounds read due to missing bounds check. This could lead to denial…

  • Medium 6.2

    In SensorService::isDataInjectionEnabled of frameworks/native/services/sensorservice/SensorService.cpp, there is a poss…

  • Medium 6.5

    In impeg2d_bit_stream_flush() of libmpeg2dec there is a possible OOB read due to a missing bounds check. This could lea…

  • Medium 6.5

    In setVpnForcedLocked of Vpn.java, there is a possible blocking of internet traffic through vpn due to a bad uid check.…

  • Medium 6.5

    In hidh_l2cif_data_ind of hidh_conn.cc, there is a possible out of bounds read due to a missing bounds check. This coul…

  • Medium 6.5

    In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This cou…

  • Medium 6.5

    In bta_dm_remove_sec_dev_entry of bta_dm_act.cc, there is a possible out of bounds read due to a use after free. This c…

  • Medium 6.2

    In intr_data_copy_cb of btif_hd.cc, there is a possible out of bounds read due to an integer overflow. This could lead …

  • Medium 6.2

    In bta_hd_set_report_act of bta_hd_act.cc, there is a possible out-of-bounds read due to an integer overflow. This coul…

  • Medium 6.5

    In bta_hd_get_report_act of bta_hd_act.cc, there is a possible out-of-bounds read due to improper input validation. Thi…

  • Medium 6.5

    MStore API <= 4.15.7 - Authenticated (Subscriber+) SQL Injection

    The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to SQL Injection via the 'status_type' parameter in all versions up to, and including, 4.15.7 due to insufficient escaping on the user supplied parameter and lac…

  • Medium 6.5

    In parse of M3UParser.cpp there is a possible resource exhaustion due to improper input validation. This could lead to …

  • Medium 5.5

    In writeInplace of Parcel.cpp, there is a possible information leak across processes, using Binder, due to uninitialize…

  • Medium 5.5

    In BnCameraService::onTransact of CameraService.cpp, there is a possible information disclosure due to uninitialized da…

  • Medium 5.5

    In removeUnsynchronization of ID3.cpp there is a possible resource exhaustion due to improper input validation. This co…

  • Medium 5.5

    In analyzeAxes of FontUtils.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead …

  • Medium 6.7

    In mtkscoaudio debugfs there is a possible arbitrary kernel memory write due to missing bounds check and weakened SELin…

  • Medium 5.5

    In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninit…

  • Medium 5.5

    In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninit…

  • Medium 6.2

    In readEncryptedData of ConscryptEngine.java, there is a possible plaintext leak due to improperly used crypto. This co…

  • Medium 5.5

    In the autofill service, the package name that is provided by the app process is trusted inappropriately.  This could l…

  • Medium 6.2

    In visitUris of multiple files, there is a possible information disclosure due to a confused deputy. This could lead to…

  • Medium 5.5

    In validateAccountsInternal of AccountManagerService.java, there is a possible way to leak account credentials to a thi…