Skip to content
OpenAdvisories

Platform

Android

6,319 known vulnerabilities.

6,319 results · Feed

  • Unscored —

    In MediaProvider, there is a possible way to access ContentResolver and MediaStore entries the app shouldn't have acces…

  • Unscored —

    In WindowManager, there is a possible launch of an unexpected app due to a confused deputy. This could lead to local es…

  • Unscored —

    In iorap, there is a possible memory corruption due to a use after free. This could lead to local escalation of privile…

  • Unscored —

    In Pixel's use of the Catpipe library, there is possible memory corruption due to a use after free. This could lead to …

  • Unscored —

    In blk_mq_queue_tag_busy_iter of blk-mq-tag.c, there is a possible use after free due to improper locking. This could l…

  • Unscored —

    In skb_to_mamac of networking.c, there is a possible out of bounds write due to an integer overflow. This could lead to…

  • Unscored —

    In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to…

  • Unscored —

    In skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory corruption. This could …

  • Unscored —

    In l2tp_session_delete and related functions of l2tp_core.c, there is possible memory corruption due to a use after fre…

  • Unscored —

    In CamX code, there is a possible use after free due to a race condition. This could lead to local escalation of privil…

  • Unscored —

    In the FPC TrustZone fingerprint App, there is a possible invalid command handler due to an exposed test feature. This …

  • Unscored —

    In manifest files of the SmartSpace package, there is a possible tapjacking vector due to a missing permission check. T…

  • Unscored —

    There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid I…

  • Unscored —

    There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid I…

  • Unscored —
    CVE-2020-0391 Public exploit

    In applyPolicy of PackageManagerService.java, there is possible arbitrary command execution as System due to an unenfor…

  • Unscored —

    In the app zygote SE Policy, there is a possible permissions bypass. This could lead to local information disclosure wi…

  • Unscored —

    In createSaveNotification of RecordingService.java, there is a possible permission bypass due to an unsafe PendingInten…

  • Unscored —

    There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid I…

  • Unscored —

    In createEmergencyLocationUserNotification of GnssVisibilityControl.java, there is a possible permissions bypass due to…

  • Unscored —

    In onCreate of RequestPermissionActivity.java, there is a possible tapjacking vector due to an insecure default value. …

  • Unscored —
    CVE-2020-0394 Public exploit

    In onCreate of BluetoothPairingDialog.java, there is a possible tapjacking vector due to an insecure default value. Thi…

  • Unscored —

    In various places in Telephony, there is a possible permission bypass due to an unsafe PendingIntent. This could lead t…

  • Unscored —

    In getNotificationBuilder of CarrierServiceStateTracker.java, there is a possible permission bypass due to an unsafe Pe…

  • Unscored —

    In showNotification of EmergencyCallbackModeService.java, there is a possible permission bypass due to an unsafe Pendin…

  • Unscored —

    In decrypt and decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. T…

  • Unscored —

    In showLimitedSimFunctionWarningNotification of NotificationMgr.java, there is a possible permission bypass due to an u…

  • Unscored —

    In various functions in fscrypt_ice.c and related files in some implementations of f2fs encryption that use encryption …

  • Unscored —

    In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception. This could lead …

  • Unscored —
    CVE-2020-0245 Public exploit

    In DecodeFrameCombinedMode of combined_decode.cpp, there is a possible out of bounds write due to a heap buffer overflo…

  • Unscored —
    CVE-2020-0401 Public exploit

    In setInstallerPackageName of PackageManagerService.java, there is a missing permission check. This could lead to local…

  • Unscored —
    CVE-2020-0392 Public exploit

    In getLayerDebugInfo of SurfaceFlinger.cpp, there is a possible code execution due to a double free. This could lead to…

  • Unscored —

    In Parse_ins of eas_mdls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to r…

  • Unscored —

    In Parse_insh of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead …

  • Unscored —

    In Parse_art of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead t…

  • Unscored —
    CVE-2020-0381 Public exploit

    In Parse_wave of eas_mdls.c, there is a possible out of bounds write due to an integer overflow. This could lead to rem…

  • Unscored —

    In the Bluetooth service, there is a possible spoofing attack due to a logic error. This could lead to remote informati…

  • Unscored —

    There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid I…

  • Unscored —
    CVE-2020-0380 Public exploit

    In allocExcessBits of bitalloc.c, there is a possible out of bounds write due to an incorrect bounds check. This could …

  • Unscored —

    In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to be…

  • Unscored —

    In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause. Thi…