Platform
Android
6,319 known vulnerabilities.
6,319 results · Feed
-
Unscored —
In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local i…
-
High 8.0
Stored XSS vulnerability in android-lint Plugin
Jenkins Android Lint Plugin 2.6 and earlier does not escape the annotation message in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide report files to the plugin's post-build step.
-
Unscored —
Yodobashi App for Android versions 1.8.7 and earlier allows remote attackers to lead a user to access an arbitrary webs…
-
Unscored —
A stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android prior to v2.20.20, What…
-
Unscored —
A user controlled parameter used in video call in WhatsApp for Android prior to v2.20.17, WhatsApp Business for Android…
-
Unscored —
A URL validation issue in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 cou…
-
Unscored —
A buffer overflow in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could ha…
-
Unscored —
NITORI App for Android versions 6.0.4 and earlier and NITORI App for iOS versions 6.0.2 and earlier allow remote attack…
-
Unscored —
In C2 flame devices, there is a possible bypass of seccomp due to a missing configuration file. This could lead to loca…
-
High 8.8
Local arbitrary code execution in splitinstall in Android's Play Core
A local, arbitrary code execution vulnerability exists in the SplitCompat.install endpoint in Android's Play Core Library versions prior to 1.7.2. A malicious attacker could create an apk which targets a specific application, and if a victim were to install t…
-
Unscored —
There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID…
-
Unscored —
In android_verity_ctr of dm-android-verity.c, there is a possible way to modify a dm-verity protected filesystem due to…
-
Unscored —
In stopZygoteLocked of AppZygote.java, there is an insufficient cleanup. This could lead to local information disclosur…
-
Unscored —
In SpecializeCommon of com_android_internal_os_Zygote.cpp, there is a permissions bypass due to an incomplete cleanup. …
-
Unscored —
In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead…
-
Unscored —
There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID…
-
Unscored —
There is a possible memory corruption due to a use after free.Product: AndroidVersions: Android SoCAndroid ID: A-152647…
-
Unscored —
There is a possible memory corruption due to a use after free.Product: AndroidVersions: Android SoCAndroid ID: A-152236…
-
Unscored —
There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID…
-
Unscored —
In requestCellInfoUpdateInternal of PhoneInterfaceManager.java, there is a missing permission check. This could lead to…
-
Unscored —
In postInstantAppNotif of InstantAppNotifier.java, there is a possible permission bypass due to a PendingIntent error. …
-
Unscored —
In postInstantAppNotif of InstantAppNotifier.java, there is a possible permission bypass due to a PendingIntent error. …
-
Unscored —
In Threshold::getHistogram of ImageProcessHelper.java, there is a possible crash loop due to an uncaught exception. Thi…
-
Unscored —
In clearPropValue of MediaAnalyticsItem.cpp, there is a possible use-after-free due to improper locking. This could lea…
-
Unscored —CVE-2020-0242 Public exploit
In reset of NuPlayerDriver.cpp, there is a possible use-after-free due to improper locking. This could lead to local es…
-
Unscored —CVE-2020-0241 Public exploit
In NuPlayerStreamListener of NuPlayerStreamListener.cpp, there is possible memory corruption due to a double free. This…
-
Unscored —CVE-2020-0240 Public exploit
In NewFixedDoubleArray of factory.cc, there is a possible out of bounds write due to an integer overflow. This could le…
-
Unscored —
In getDocumentMetadata of DocumentsContract.java, there is a possible disclosure of location metadata from a file due t…
-
Unscored —
In updatePreferenceIntents of AccountTypePreferenceLoader, there is a possible confused deputy attack due to a race con…
-
Unscored —CVE-2020-0108 Public exploit
In postNotification of ServiceRecord.java, there is a possible bypass of foreground process restrictions due to an unca…
-
Unscored —
There is a possible out of bounds write due to an incorrect bounds check. Product: AndroidVersions: Android SoCAndroid …
-
Unscored —
There is a possible out of bounds write due to an incorrect bounds check. Product: AndroidVersions: Android SoCAndroid …
-
Unscored —
There is an improper configuration of recorder related service. Product: AndroidVersions: Android SoCAndroid ID: A-1563…
-
Unscored —CVE-2020-0226 Public exploit
In createWithSurfaceParent of Client.cpp, there is a possible out of bounds write due to type confusion. This could lea…
-
Unscored —
In FastKeyAccumulator::GetKeysSlow of keys.cc, there is a possible out of bounds write due to type confusion. This coul…
-
Unscored —
In the permission declaration for com.google.android.providers.gsf.permission.WRITE_GSERVICES in AndroidManifest.xml, t…
-
Unscored —
In getUiccCardsInfo of PhoneInterfaceManager.java, there is a possible permissions bypass due to improper input validat…
-
Unscored —CVE-2020-0225 Public exploit
In a2dp_vendor_ldac_decoder_decode_packet of a2dp_vendor_ldac_decoder.cc, there is a possible out of bounds write due t…
-
Unscored —CVE-2020-0227 Public exploit
In onCommand of CompanionDeviceManagerService.java, there is a possible permissions bypass due to a missing permission …
-
Unscored —
In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead to local escalat…