Skip to content
OpenAdvisories

Platform

Android

6,319 known vulnerabilities.

6,319 results · Feed

  • Unscored —

    In notifyErrorForPendingRequests of QCamera3HWI.cpp, there is a possible out of bounds write due to a heap buffer overf…

  • Unscored —

    "HCL Verse for Android was found to employ dynamic code loading. This mechanism allows a developer to specify which com…

  • Unscored —

    Android App 'Mercari' (Japan version) prior to version 3.52.0 allows arbitrary method execution of a Java object by a r…

  • Unscored —

    MX Player Android App versions prior to v1.24.5, are vulnerable to a directory traversal vulnerability when user is usi…

  • Unscored —

    This is an unbounded write into kernel global memory, via a user-controlled buffer size.Product: AndroidVersions: Andro…

  • Unscored —

    In crus_sp_shared_ioctl we first copy 4 bytes from userdata into "size" variable, and then use that variable as the siz…

  • Unscored —

    Function abc_pcie_issue_dma_xfer_sync creates a transfer object, adds it to the session object then continues to work w…

  • Unscored —

    In crus_afe_get_param of msm-cirrus-playback.c, there is a possible out of bounds write due to a missing bounds check. …

  • Unscored —

    In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible out of bounds read due to a missing bounds check. Thi…

  • Unscored —

    In ce_t4t_process_select_file_cmd of ce_t4t.cc, there is a possible out of bounds read due to an incorrect bounds check…

  • Unscored —

    In avdt_msg_prs_rej of avdt_msg.cc, there is a possible out-of-bounds read due to improper input validation. This could…

  • Unscored —

    In RegisterNotificationResponse::GetEvent of register_notification_packet.cc, there is a possible abort due to improper…

  • Unscored —

    In getAllConfigFlags of SettingsProvider.cpp, there is a possible illegal read due to a missing permission check. This …

  • Unscored —

    In the settings app, there is a possible app crash due to improper input validation. This could lead to local denial of…

  • Unscored —

    In main of main.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation o…

  • Unscored —

    In phNxpNciHal_write_ext of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. …

  • Unscored —

    In btu_hcif_pin_code_request_evt, btu_hcif_link_key_request_evt, and btu_hcif_link_key_notification_evt of btu_hcif.cc,…

  • Unscored —

    In hal_fd_init of hal_fd.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead …

  • Unscored —

    In connect() of PanService.java, there is a possible permissions bypass. This could lead to local escalation of privile…

  • Unscored —

    In InstallPackage of package.cpp, there is a possible bypass of a signature check due to a Time of Check/Time of Use co…

  • Unscored —
    CVE-2020-0201 Public exploit

    In showSecurityFields of WifiConfigController.java there is a possible credential leak due to a confused deputy. This c…

  • Unscored —

    In rw_mfc_writeBlock of rw_mfc.cc, there is a possible out of bounds read due to an incorrect bounds check. This could …

  • Unscored —

    In phNxpNciHal_NfcDep_cmd_ext of phNxpNciHal_NfcDepSWPrio.cc, there is a possible out of bounds read due to a missing b…

  • Unscored —

    In btm_simple_pair_complete of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check. This c…

  • Unscored —
    CVE-2020-0219 Public exploit

    In onCreate of SliceDeepLinkSpringBoard.java there is a possible insecure Intent. This could lead to local elevation of…

  • Unscored —

    In NxpNfc::ioctl of NxpNfc.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead t…

  • Unscored —

    In phNxpNciHal_NfcDep_cmd_ext of phNxpNciHal_NfcDepSWPrio.cc, there is a possible out of bounds write due to a missing …

  • Unscored —

    In btu_hcif_hardware_error_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. Th…

  • Unscored —
    CVE-2020-0215 Public exploit

    In onCreate of ConfirmConnectActivity.java, there is a possible leak of Bluetooth information due to a permissions bypa…

  • Unscored —

    In NDEF_MsgValidate of ndef_utils.c, there is a possible out of bounds read due to an integer overflow. This could lead…

  • Unscored —

    In nfa_dm_ndef_find_next_handler of nfa_dm_ndef.c, there is a possible out of bounds read due to a missing bounds check…

  • Unscored —

    In btu_hcif_mode_change_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This …

  • Unscored —

    In btm_proc_sp_req_evt of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check. This could …

  • Unscored —

    In rw_t3t_message_set_block_list of rw_t3t.cc, there is a possible out of bounds write due to a missing bounds check. T…

  • Unscored —
    CVE-2020-0188 Public exploit

    In onCreatePermissionRequest of SettingsSliceProvider.java, there is a possible permissions bypass due to a PendingInte…

  • Unscored —

    In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to an integer overflow.…

  • Unscored —
    CVE-2020-0183 Public exploit

    In handleMessage of BluetoothManagerService, there is an incomplete reset. This could lead to local escalation of privi…

  • Unscored —

    In btu_hcif_esco_connection_chg_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds chec…

  • Unscored —
    CVE-2020-0155 Public exploit

    In phNxpNciHal_send_ese_hal_cmd of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds …

  • Unscored —

    In nfc_ncif_proc_t3t_polling_ntf of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. …