Skip to content
OpenAdvisories

Platform

Android

6,319 known vulnerabilities.

6,319 results · Feed

  • Unscored —

    In dump of RollbackManagerServiceImpl.java, there is a possible backup metadata exposure due to a missing permission ch…

  • Unscored —

    In load of ResourceTypes.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to loc…

  • Unscored —

    In avb_vbmeta_image_verify of avb_vbmeta_image.c, there is a possible out of bounds read due to a missing bounds check.…

  • Unscored —

    In AudioStream::decode of AudioGroup.cpp, there is a possible out of bounds read due to a missing bounds check. This co…

  • Unscored —

    In doSendObjectInfo of MtpServer.cpp, there is a possible path traversal attack due to insufficient input validation. T…

  • Unscored —

    In hevcd_fmt_conv_420sp_to_420sp_av8 of ihevcd_fmt_conv_420sp_to_420sp.s, there is a possible out of bounds write due t…

  • Unscored —

    In removeSharedAccountAsUser of AccountManager.java, there is a possible permissions bypass to a confused deputy. This …

  • Unscored —

    In BnAAudioService::onTransact of IAAudioService.cpp, there is a possible out of bounds read due to unsafe deserializat…

  • Unscored —

    In ihevcd_parse_slice_header of ihevcd_parse_slice_header.c, there is a possible out of bounds write due to an integer …

  • Unscored —

    In BnDrm::onTransact of IDrm.cpp, there is a possible information disclosure due to uninitialized data. This could lead…

  • Unscored —
    CVE-2020-0209 Public exploit

    In multiple functions of AccountManager.java, there is a possible permissions bypass. This could lead to local escalati…

  • Unscored —

    In impeg2_fmt_conv_yuv420p_to_yuv420sp_uv of impeg2_format_conv.c, there is a possible out of bounds write due to a mis…

  • Unscored —

    In GetOpusHeaderBuffers() of OpusHeader.cpp, there is a possible out of bounds read due to a missing bounds check. This…

  • Unscored —

    In addPacket of AMPEG4ElementaryAssembler, there is an out of bounds read due to an integer overflow. This could lead t…

  • Unscored —

    In parseChunk of MPEG4Extractor.cpp, there is a possible out of bounds write due to incompletely initialized data. This…

  • Unscored —

    In OutputBuffersArray::realloc of CCodecBuffers.cpp, there is a possible heap disclosure due to a race condition. This …

  • Unscored —
    CVE-2020-0192 Public exploit

    In ih264d_decode_slice_thread of ih264d_thread_parse_decode.c, there is a possible out of bounds read due to improper i…

  • Unscored —

    In multiple functions in DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to …

  • Unscored —

    In multiple functions of AccountManager.java, there is a possible permissions bypass. This could lead to local escalati…

  • Unscored —
    CVE-2020-0203 Public exploit

    In freeIsolatedUidLocked of ProcessList.java, there is a possible UID reuse due to improper cleanup. This could lead to…

  • Unscored —

    In markBootComplete of InstalldNativeService.cpp, there is a possible out of bounds write due to a missing bounds check…

  • Unscored —

    In engineSetMode of BaseBlockCipher.java, there is a possible incorrect cryptographic algorithm chosen due to an incomp…

  • Unscored —

    In multiple functions of URI.java, there is a possible escalation of privilege due to missing validation in the parceli…

  • Unscored —

    In checkSystemLocationAccess of LocationAccessPolicy.java, there is a possible bypass of user profile isolation due to …

  • Unscored —

    In aes_cmac of aes_cmac.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remo…

  • Unscored —
    CVE-2020-0113 Public exploit

    In sendCaptureResult of Camera3OutputUtils.cpp, there is a possible out of bounds read due to a use after free. This co…

  • Unscored —

    In addListener of RegionSamplingThread.cpp, there is a possible out of bounds write due to improper input validation. T…

  • Unscored —

    In addOrUpdateNetworkInternal and related functions of WifiConfigManager.java, there is a possible man in the middle at…

  • Unscored —

    In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to be…

  • Unscored —
    CVE-2020-0121 Public exploit

    In updateUidProcState of AppOpsService.java, there is a possible permission bypass due to a logic error. This could lea…

  • Unscored —
    CVE-2020-0114 Public exploit

    In onCreateSliceProvider of KeyguardSliceProvider.java, there is a possible confused deputy due to a PendingIntent erro…

  • Unscored —

    A spoofing vulnerability exists when Microsoft Bing Search for Android improperly handles specific HTML content, aka 'M…

  • Unscored —

    A remote code execution vulnerability exists when Microsoft Word for Android fails to properly handle certain files.To …

  • Unscored —

    Android App 'kintone mobile for Android' 1.0.0 to 2.5 allows an attacker to obtain credential information registered in…

  • Unscored —

    Android App 'Mailwise for Android' 1.0.0 to 1.0.1 allows an attacker to obtain credential information registered in the…

  • Unscored —

    Airbrush FW's scratch memory allocator is susceptible to numeric overflow. When the overflow occurs, the next allocatio…

  • Unscored —

    In crus_afe_callback of msm-cirrus-playback.c, there is a possible out of bounds write due to a missing bounds check. T…

  • Unscored —

    In onTransact of IHDCP.cpp, there is a possible out of bounds read due to incorrect error handling. This could lead to …

  • Unscored —

    An improper authorization while processing the provisioning data.Product: AndroidVersions: Android SoCAndroid ID: A-149…

  • Unscored —

    An improper authorization in the receiver component of the Android Suite Daemon.Product: AndroidVersions: Android SoCAn…