Platform
Android
6,319 known vulnerabilities.
868 results · Clear filters · Feed
-
Medium 6.7
In ProtocolEmbmsBuilder::BuildSetSession of protocolembmsbuilder.cpp, there is a possible out of bounds write due to a …
-
Medium 4.4
In VsimOperationDataExt::encode of vsimdata.cpp, there is a possible out of bounds read due to a missing bounds check. …
-
Medium 6.7
In CallDialReqData::encodeCallNumber of callreqdata.cpp, there is a possible out of bounds write due to an incorrect bo…
-
Medium 4.4
In ProtocolSimBuilderLegacy::BuildSimGetGbaAuth of protocolsimbuilderlegacy.cpp, there is a possible out of bounds read…
-
Medium 6.7
In HexString2Value of util.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead …
-
Medium 4.4
In Pixel firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to local infor…
-
Medium 6.7
In fillSetupDataCallInfo_V1_6 of ril_service_1_6.cpp, there is a possible out of bounds write due to an incorrect bound…
-
Medium 6.7
In SimUpdatePbEntry::encode of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This…
-
Medium 6.7
In StringsRequestData::encode of requestdata.cpp, there is a possible out of bounds read due to improper input validati…
-
Medium 6.7
In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds chec…
-
Medium 4.4
In MiscService::DoOemSetRtpPktlossThreshold of miscservice.cpp, there is a possible out of bounds read due to a missing…
-
Medium 4.4
In fdt_path_offset_namelen of fdt_ro.c, there is a possible out of bounds read due to an incorrect bounds check. This c…
-
Medium 6.7
In CdmaBroadcastSmsConfigsRequestData::encode of cdmasmsdata.cpp, there is a possible stack clash leading to memory cor…
-
Medium 6.7
In ConvertUtf8ToUcs2 of radio_hal_utils.cpp, there is a possible out of bounds write due to a missing bounds check. Thi…
-
Medium 6.7
In ppmp_unprotect_mfcfw_buf of drm_fw.c, there is a possible out of bounds write due to improper input validation. This…
-
Medium 6.7
In MessageQueueBase of MessageQueueBase.h, there is a possible out of bounds read due to a missing bounds check. This c…
-
Medium 6.7
In OemSimAuthRequest::encode of wlandata.cpp, there is a possible out of bounds write due to a missing bounds check. Th…
-
Medium 5.0
In sdpu_find_most_specific_service_uuid of sdp_utils.cc, there is a possible way to crash Bluetooth due to a missing nu…
-
Medium 6.7
In thermal_cooling_device_stats_update of thermal_sysfs.c, there is a possible out of bounds write due to improper inpu…
-
Medium 6.7
In RadioImpl::setGsmBroadcastConfig of ril_service_legacy.cpp, there is a possible stack clash leading to memory corrup…
-
Medium 6.7
In multiple locations of DreamManagerService.java, there is a missing permission check. This could lead to local escala…
-
Medium 5.5
Product: AndroidVersions: Android kernelAndroid ID: A-230660904References: N/A
-
Medium 5.5
In getNearbyAppStreamingPolicy of DevicePolicyManagerService.java, there is a missing permission check. This could lead…
-
Medium 5.5
In getSmsRoleHolder of RoleService.java, there is a possible way to determine whether an app is installed, without quer…
-
Medium 6.7
In getCurrentConfigImpl of Effect.cpp, there is a possible out of bounds write due to a missing bounds check. This coul…
-
Medium 5.5
In query of MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lead …
-
Medium 5.5
In multiple locations of NfcService.java, there is a possible disclosure of NFC tags due to a confused deputy. This cou…
-
Medium 6.7
In verity_target of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission c…
-
Medium 6.7
In authToken2AidlVec of KeyMintUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. Thi…
-
Medium 6.7
In TBD of ufdt_convert, there is a possible out of bounds read due to memory corruption. This could lead to local escal…
-
Medium 6.7
In the Pixel camera driver, there is a possible use after free due to a logic error in the code. This could lead to loc…
-
Medium 5.5
In getNearbyNotificationStreamingPolicy of DevicePolicyManagerService.java, there is a possible way to learn about the …
-
Medium 5.5
In sec_sysmmu_info of drm_fw.c, there is a possible out of bounds read due to improper input validation. This could lea…
-
Medium 6.1
In IncFs_GetFilledRangesStartingFrom of incfs.cpp, there is a possible out of bounds read due to a missing bounds check…
-
Medium 6.7
In extract_metadata of dm-android-verity.c, there is a possible way to corrupt kernel memory due to a use after free. T…
-
Medium 5.5
In read_ppmpu_info of drm_fw.c, there is a possible out of bounds read due to an incorrect bounds check. This could lea…
-
Medium 5.5
In Pixel cellular firmware, there is a possible out of bounds read due to an incorrect bounds check. This could lead to…
-
Medium 5.5
In btif_a2dp_sink_command_ready of btif_a2dp_sink.cc, there is a possible out of bounds read due to a use after free. T…
-
Medium 5.5
In ppmp_validate_secbuf of drm_fw.c, there is a possible information disclosure due to improper input validation. This …
-
Medium 6.7
In parameterToHal of Effect.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead…