Platform
Android
6,319 known vulnerabilities.
868 results · Clear filters · Feed
-
Medium 6.1
Information Disclosure vulnerability in SAP Authenticator for Android
SAP Authenticator for Android - version 1.3.0, allows the screen to be captured, if an authorized attacker installs a malicious app on the mobile device. The attacker could extract the currently views of the OTP and the secret OTP alphanumeric token during th…
-
Medium 5.1
Remote code execution in YouTube Android Player API SDK
The YouTube Embedded 1.2 SDK binds to a service within the YouTube Main App. After binding, a remote context is created with the flags Context.CONTEXT_INCLUDE_CODE | Context.CONTEXT_IGNORE_SECURITY. This allows the client app to remotely load code from YouTub…
-
Medium 5.5
In multiple files, there is a possible way to preserve WiFi settings due to residual data after a reset. This could lea…
-
Medium 6.7
In createTrack of AudioFlinger.cpp, there is a possible way to record audio without a privacy indicator due to a logic …
-
Medium 5.5
In addAutomaticZenRule of ZenModeHelper.java, there is a possible persistent denial of service due to resource exhausti…
-
Medium 5.3
This issue was addressed with using HTTPS when sending information over the network. This issue is fixed in Apple Music…
-
Medium 5.5
Insufficiently protected credentials in the Intel(R) ON Event Series Android application before version 2.0 may allow a…
-
Medium 5.5
In s2mpg11_pmic_probe of s2mpg11-regulator.c, there is a possible out of bounds read due to a heap buffer overflow. Thi…
-
Medium 6.5
Microsoft OneNote Elevation of Privilege Vulnerability
Microsoft OneNote Elevation of Privilege Vulnerability
-
Medium 6.2
ownCloud Android app vulnerable to SQL Injection
The ownCloud Android app allows ownCloud users to access, share, and edit files and folders. Version 2.21.1 of the ownCloud Android app is vulnerable to SQL injection in `FileContentProvider.kt`. This issue can lead to information disclosure. Two databases, `…
-
Medium 5.0
ownCloud Android app vulnerable to Path Traversal
The ownCloud Android app allows ownCloud users to access, share, and edit files and folders. Prior to version 3.0, the app has an incomplete fix for a path traversal issue and is vulnerable to two bypass methods. The bypasses may lead to information disclosur…
-
Medium 5.9
Ichiran App for iOS versions prior to 3.1.0 and Ichiran App for Android versions prior to 3.1.0 improperly verify serve…
-
Medium 5.5
In exported content providers of ShannonRcs, there is a possible way to get access to protected content providers due t…
-
Medium 6.8
In (TBD) of (TBD), there is a possible way to bypass the lockscreen due to Biometric Auth Failure. This could lead to l…
-
Medium 5.5
In setMimeGroup of PackageManagerService.java, there is a possible crash loop due to resource exhaustion. This could le…
-
Medium 5.5
In several functions of SettingsState.java, there is a possible system crash loop due to resource exhaustion. This coul…
-
Medium 5.5
In onCreate of MasterClearConfirmFragment.java, there is a possible factory reset due to a tapjacking/overlay attack. T…
-
Medium 5.5
The PowerVR GPU kernel driver maintains an "Information Page" used by its cache subsystem. This page can only be writte…
-
Medium 5.5
The logs of sensitive information (PII) or hardware identifier should only be printed in Android "userdebug" or "eng" b…
-
Medium 5.5
In ApplicationsDetailsActivity of AndroidManifest.xml, there is a possible DoS due to a tapjacking/overlay attack. This…
-
Medium 4.7
In Car Settings app, the toggle button in Modify system settings is vulnerable to tapjacking attack. Attackers can over…
-
Medium 5.5CVE-2022-20494 Public exploit
In AutomaticZenRule of AutomaticZenRule.java, there is a possible persistent DoS due to resource exhaustion. This could…
-
Medium 6.1
Path Traversal in Zoom for Android Clients
Zoom for Android clients before version 5.13.0 contain a path traversal vulnerability. A third party app could exploit this vulnerability to read and write to the Zoom application data directory.
-
Medium 5.4
KDDI +Message App, NTT DOCOMO +Message App, and SoftBank +Message App contain a vulnerability caused by improper handli…
-
Medium 6.7
In encode of wlandata.cpp, there is a possible out of bounds write due to improper input validation. This could lead to…
-
Medium 5.5
In a query in MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lea…
-
Medium 4.4
In ProtocolImsBuilder::BuildSetConfig of protocolimsbuilder.cpp, there is a possible out of bounds read due to a missin…
-
Medium 6.7
In ProtocolCallBuilder::BuildSendUssd of protocolcallbuilder.cpp, there is a possible out of bounds write due to a miss…
-
Medium 6.7
In ServiceInterface::HandleRequest of serviceinterface.cpp, there is a possible use after free. This could lead to loca…
-
Medium 6.7
In BroadcastSmsConfigsRequestData::encode of smsdata.cpp, there is a possible out of bounds write due to a missing boun…
-
Medium 4.4
In DoSetCarrierConfig of miscservice.cpp, there is a possible out of bounds read due to an incorrect bounds check. This…
-
Medium 6.7
In ProtocolSimBuilder::BuildSimUpdatePb3gEntry of protocolsimbuilder.cpp, there is a possible out of bounds write due t…
-
Medium 6.7
In ProtocolMiscBuilder::BuildSetLinkCapaReportCriteria of protocolmiscbuilder.cpp, there is a possible out of bounds wr…
-
Medium 6.7
In FacilityLock::Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This coul…
-
Medium 6.7
In CallDialReqData::encode of callreqdata.cpp, there is a possible out of bounds write due to a missing bounds check. T…
-
Medium 4.4
In Pixel firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to local infor…
-
Medium 6.7
In EmbmsSessionData::encode of embmsdata.cpp, there is a possible out of bounds write due to a missing bounds check. Th…
-
Medium 6.7
In fillSetupDataCallInfo_V1_6 of ril_service_1_6.cpp, there is a possible out of bounds write due to an incorrect bound…
-
Medium 6.7
In ProtocolMiscBuilder::BuildSetSignalReportCriteria of protocolmiscbuilder.cpp, there is a possible out of bounds writ…
-
Medium 4.4
In MiscService::DoOemSetTcsFci of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check…