Platform
Android
6,319 known vulnerabilities.
868 results · Clear filters · Feed
-
Medium 6.5
In BNEP_ConnectResp of bnep_api.cc, there is a possible out of bounds read due to an incorrect bounds check. This could…
-
Medium 5.5
In findAllDeAccounts of AccountsDb.java, there is a possible denial of service due to resource exhaustion. This could l…
-
Medium 6.7
In (TBD) of (TBD), there is a possible out of bounds write due to a missing bounds check. This could lead to local esca…
-
Medium 6.7
In (TBD) mprot_unmap? of (TBD), there is a possible way to corrupt the memory mapping due to improper input validation.…
-
Medium 6.7
In (TBD) of (TBD), there is a possible way to corrupt memory due to improper input validation. This could lead to local…
-
Medium 6.7
In (TBD) of (TBD), there is a possible way to redirect code execution due to improper input validation. This could lead…
-
Medium 4.4
Incorrect default permissions in the Intel(R) Support Android application before version v22.02.28 may allow a privileg…
-
Medium 5.9
Uncontrolled resource consumption in the Intel(R) Support Android application before version 22.02.28 may allow an auth…
-
Medium 5.5
In update of MmsProvider.java, there is a possible constriction of directory permissions due to a path traversal error.…
-
Medium 6.7
In fdt_next_tag of fdt.c, there is a possible out of bounds write due to an integer overflow. This could lead to local …
-
Medium 5.5
In setImpl of AlarmManagerService.java, there is a possible way to put a device into a boot loop due to an uncaught exc…
-
Medium 6.5
In PAN_WriteBuf of pan_api.cc, there is a possible out of bounds read due to a use after free. This could lead to remot…
-
Medium 5.5
In getMountModeInternal of StorageManagerService.java, there is a possible prevention of package installation due to im…
-
Medium 5.5
In buzzBeepBlinkLocked of NotificationManagerService.java, there is a possible way to share data across users due to a …
-
Medium 5.5
In multiple functions of many files, there is a possible obstruction of the user's ability to select a phone account du…
-
Medium 4.6
In dismiss and related functions of KeyguardHostViewController.java and related files, there is a possible lockscreen b…
-
Medium 5.9
HCL Verse for Android is susceptible to an APK signing key check vulnerability
The application was signed using a key length less than or equal to 1024 bits, making it potentially vulnerable to forged digital signatures. An attacker could forge the same digital signature of the app after maliciously modifying the app.
-
Medium 6.5
Improper authorization in handler for custom URL scheme vulnerability in Lemon8 App for Android versions prior to 3.3.5…
-
Medium 5.5
In various functions of ap_input_processor.c, there is a possible way to record audio during a phone call due to a logi…
-
Medium 6.6
Improper access control vulnerability in ContactsDumpActivity of?Contacts Provider prior to version 12.7.59 allows atta…
-
Medium 5.9
Improper restriction of broadcasting Intent in GalaxyStoreBridgePageLinker of?Waterplugin prior to version 2.2.11.22081…
-
Medium 6.6
Improper restriction of broadcasting Intent in SaWebViewRelayActivity of?Waterplugin prior to version 2.2.11.22081151 a…
-
Medium 6.5
Realtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow
Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for segmented packets’ link parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and …
-
Medium 6.5
Realtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow
Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the length of segmented packets’ shift parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffe…
-
Medium 6.5
Realtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow
Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for broadcast network packet length. An unauthenticated attacker in the adjacent network can exploit this vulnerability to disrupt service.
-
Medium 6.5
Realtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow
Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the size of segmented packets’ reference parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buf…
-
Medium 5.5
Incorrect default permissions for the Intel(R) Support Android application before 21.07.40 may allow an authenticated u…
-
Medium 5.5
Incorrect default permissions for the Intel(R) Connect M Android application before version 1.7.4 may allow an authenti…
-
Medium 6.7
In bdi_put and bdi_unregister of backing-dev.c, there is a possible memory corruption due to a use after free. This cou…
-
Medium 6.5CVE-2022-20361 Public exploit
In btif_dm_auth_cmpl_evt of btif_dm.cc, there is a possible vulnerability in Cross-Transport Key Derivation due to Weak…
-
Medium 6.2CVE-2022-20360 Public exploit
In setChecked of SecureNfcPreferenceController.java, there is a missing permission check. This could lead to local esca…
-
Medium 4.0
In shouldAllowFgsWhileInUsePermissionLocked of ActiveServices.java, there is a possible way to start foreground service…
-
Medium 6.2
In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to trick the victim to grant notifi…
-
Medium 6.5
In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds write due to a missing bounds check. This co…
-
Medium 4.2
remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area), and because the 'vma->v…
-
Medium 4.3
Jenkins Android Signing Plugin allows attackers to check whether attacker-specified file patterns match workspace contents
Jenkins Android Signing Plugin 2.2.5 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-speci…
-
Medium 5.9
Insufficient hostname validation during Clusterswitch message in Zoom Client for Meetings
The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.10.0 fails to properly validate the hostname during a server switch request. This issue could be used in a more sophisticated attack to trick an unsuspecting users cli…
-
Medium 5.9
Improperly constrained session cookies in Zoom Client for Meetings
The Zoom Client for Meetings (for Android, iOS, Linux, MacOS, and Windows) before version 5.10.0 failed to properly constrain client session cookies to Zoom domains. This issue could be used in a more sophisticated attack to send an unsuspecting users Zoom-sc…
-
Medium 6.3
An SSL certificate host verification vulnerability affects HCL Verse for Android
Using the ability to perform a Man-in-the-Middle (MITM) attack, which indicates a lack of hostname verification, sensitive account information was able to be intercepted. In this specific scenario, the application's network traffic was intercepted using a pro…
-
Medium 5.5
On F5 Access for Android 3.x versions prior to 3.0.8, a Task Hijacking vulnerability exists in the F5 Access for Androi…