Platform
Android
6,319 known vulnerabilities.
868 results · Clear filters · Feed
-
Medium 6.5
In onCreate of LogAccessDialogActivity.java, there is a possible way to bypass a permission check due to a tapjacking/o…
-
Medium 5.3
In strings.xml, there is a possible permission bypass due to a misleading string. This could lead to remote information…
-
Medium 6.7
In updateStart of WirelessCharger.cpp, there is a possible out of bounds write due to a missing bounds check. This coul…
-
Medium 6.7
In openFile of CallLogProvider.java, there is a possible permission bypass due to a path traversal error. This could le…
-
Medium 4.4
In valid_va_secbuf_check of drm_access_control.c, there is a possible ID due to improper input validation. This could l…
-
Medium 6.7
In sendChunk of WirelessCharger.cpp, there is a possible out of bounds write due to a missing bounds check. This could …
-
Medium 5.5
In ppmpu_set of ppmpu.c, there is a possible information disclosure due to a logic error in the code. This could lead t…
-
Medium 4.4
In ufdt_get_node_by_path_len of ufdt_convert.c, there is a possible out of bounds read due to a missing bounds check. T…
-
Medium 5.5
In Pixel cellular firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to lo…
-
Medium 6.7
In removeEventHubDevice of InputDevice.cpp, there is a possible OOB read due to a use after free. This could lead to lo…
-
Medium 4.2
In phNxpNciHal_ioctl of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. This coul…
-
Medium 4.4
In getWpcAuthChallengeResponse of WirelessCharger.cpp, there is a possible out of bounds read due to a missing bounds c…
-
Medium 6.7
In _ufdt_output_strtab_to_fdt of ufdt_convert.c, there is a possible out of bounds write due to an incorrect bounds che…
-
Medium 6.7
In ufdt_do_one_fixup of ufdt_overlay.c, there is a possible out of bounds write due to an incorrect bounds check. This …
-
Medium 6.7
In acquireFabricatedOverlayIterator, nextFabricatedOverlayInfos, and releaseFabricatedOverlayIterator of Idmap2Service.…
-
Medium 6.7
In sysmmu_map of sysmmu.c, there is a possible EoP due to a precondition check failure. This could lead to local escala…
-
Medium 6.7
In mapGrantorDescr of MessageQueueBase.h, there is a possible out of bounds write due to a missing bounds check. This c…
-
Medium 4.9
In SAEMM_MiningCodecTableWithMsgIE of SAEMM_RadioMessageCodec.c, there is a possible out of bounds read due to a missin…
-
Medium 5.5
In valid_va_sec_mfc_check of drm_access_control.c, there is a possible information disclosure due to improper input val…
-
Medium 5.5
In getMessagesByPhoneNumber of MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injectio…
-
Medium 6.7
In externalOnRequest of rilapplication.cpp, there is a possible out of bounds write due to a missing bounds check. This…
-
Medium 5.5
In SAECOMM_SetDcnIdForPlmn of SAECOMM_DbManagement.c, there is a possible out of bounds read due to a missing bounds ch…
-
Medium 5.5
In onPreferenceClick of AccountTypePreferenceLoader.java, there is a possible way to retrieve protected files from the …
-
Medium 5.5
In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. This could le…
-
Medium 5.5
In HalCoreCallback of halcore.cc, there is a possible out of bounds read due to a missing bounds check. This could lead…
-
Medium 6.7
In Pixel firmware, there is a possible exposure of sensitive memory due to a missing bounds check. This could lead to l…
-
Medium 4.4
In pop_descriptor_string of BufferDescriptor.h, there is a possible out of bounds read due to a missing bounds check. T…
-
Medium 6.7
In RadioImpl::setCdmaBroadcastConfig of ril_service_legacy.cpp, there is a possible stack clash leading to memory corru…
-
Medium 4.4
In onOptionsItemSelected of ManageApplications.java, there is a possible bypass of profile owner restrictions due to a …
-
Medium 6.3
Outlook for Android Elevation of Privilege Vulnerability
Outlook for Android Elevation of Privilege Vulnerability
-
Medium 4.6
In updatePublicMode of NotificationLockscreenUserManagerImpl.java, there is a possible way to reveal sensitive notifica…
-
Medium 5.5
In GetResolvedMethod of entrypoint_utils-inl.h, there is a possible use after free due to a stale cache. This could lea…
-
Medium 4.4
In fdt_path_offset_namelen of fdt_ro.c, there is a possible out of bounds read due to an incorrect bounds check. This c…
-
Medium 5.5
In setDataSource of initMediaExtractor.cpp, there is a possibility of arbitrary code execution due to a use after free.…
-
Medium 5.5
In SendIncDecRestoreCmdPart2 of NxpMfcReader.cc, there is a possible out of bounds read due to a missing bounds check. …
-
Medium 5.5
In loadFromXml of ShortcutPackage.java, there is a possible crash on boot due to an uncaught exception. This could lead…
-
Medium 5.5
In applyKeyguardFlags of NotificationShadeWindowControllerImpl.java, there is a possible way to observe the user's pass…
-
Medium 5.5
In setEnabledSetting of PackageManager.java, there is a possible way to get the device into an infinite reboot loop due…
-
Medium 4.4
In writeApplicationRestrictionsLAr of UserManagerService.java, there is a possible overwrite of system files due to a p…
-
Medium 5.5
In createNotificationChannel of NotificationManager.java, there is a possible way to make the device unusable and requi…