Platform
Android
6,319 known vulnerabilities.
6,319 results · Feed
-
Unscored —CVE-2019-2196 Public exploit
In Download Provider, there is possible SQL injection. This could lead to local information disclosure with no addition…
-
Unscored —
In BTA_DmPinReply of bta_dm_api.cc, there is a possible out of bounds read due to an incorrect bounds check. This could…
-
Unscored —
In PromiseBuiltinsAssembler::NewPromiseCapability of builtins-promise.cc, there is a possible out of bounds read in v8 …
-
Unscored —
In poisson_distribution of random, there is an out of bounds read. This could lead to local information disclosure with…
-
Unscored —
In nfa_hci_handle_admin_gate_rsp of nfa_hci_act.cc, there is a possible out of bound write due to missing bounds checks…
-
Unscored —
In getUserCount and getCount of UserSwitcherController.java, there is possible new user creation due to a logic error. …
-
Unscored —
In rw_i93_sm_set_read_only of rw_i93.cc, there is a possible out of bounds write due to a missing bounds check. This co…
-
Unscored —CVE-2019-2205 Public exploit
In ProxyResolverV8::SetPacScript of proxy_resolver_v8.cc, there is a possible memory corruption due to a use after free…
-
Unscored —
In FindSharedFunctionInfo of objects.cc, there is a possible out of bounds read due to a mistake in AST traversal. This…
-
Unscored —
In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow. Th…
-
Unscored —
In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow. Th…
-
Unscored —
In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds write due to a missing …
-
Unscored —
In processPhonebookAccess of CachedBluetoothDevice.java, there is a possible permission bypass due to an insecure defau…
-
Unscored —
In createProjectionMapForQuery of TvProvider.java, there is possible SQL injection. This could lead to local informatio…
-
Unscored —
In createSessionInternal of PackageInstallerService.java, there is a possible permissions bypass. This could lead to lo…
-
Unscored —
In tokenize of sqlite3_android.cpp, there is a possible attacker controlled INSERT statement due to improper input vali…
-
Unscored —
In WelcomeActivity.java and related files, there is a possible permissions bypass due to a partially provisioned Device…
-
Unscored —
In call of SliceProvider.java, there is a possible permissions bypass due to improper input validation. This could lead…
-
Unscored —CVE-2019-11933 Public exploit
A heap buffer overflow bug in libpl_droidsonroids_gif before 1.2.19, as used in WhatsApp for Android before version 2.1…
-
Unscored —
In generateServicesMap of RegisteredServicesCache.java, there is a possible account protection bypass due to a caching …
-
High 7.8
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interact…
KEV Nov 3, 2021 -
Unscored —
In nfc_ncif_decode_rf_params of nfc_ncif.cc, there is a possible out of bounds read due to an integer underflow. This c…
-
Unscored —
In the default privileges of NFC, there is a possible local bypass of user interaction requirements on package installa…
-
Unscored —
In ScreenRotationAnimation of ScreenRotationAnimation.java, there is a possible capture of a secure screen due to a mis…
-
Unscored —
In GetMBheader of combined_decode.cpp, there is a possible out of bounds write due to a missing bounds check. This coul…
-
Unscored —
In VlcDequantH263IntraBlock_SH of vlc_dequant.cpp, there is a possible out of bounds write due to a missing bounds chec…
-
Unscored —
In PV_DecodePredictedIntraDC of dec_pred_intra_dc.cpp, there is a possible out of bounds write due to a missing bounds …
-
Unscored —
In startActivityMayWait of ActivityStarter.java, there is a possible incorrect Activity launch due to an incorrect perm…
-
High 8.8
android-gif-drawable Double Free vulnerability
A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications, allows remote attackers to execute arb…
-
Unscored —
An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an out-of-bounds write on t…
-
Unscored —
In the Easel driver, there is possible memory corruption due to race conditions. This could lead to local escalation of…
-
Unscored —
In LG's LAF component, there is a possible leak of information in a protected disk partition due to a missing bounds ch…
-
Unscored —
In the Easel driver, there is possible memory corruption due to race conditions. This could lead to local escalation of…
-
Unscored —
In LG's LAF component, there is a possible leak of information in a protected disk partition due to a missing bounds ch…
-
Unscored —
In Platform, there is a possible bypass of user interaction requirements due to missing permission checks. This could l…
-
Unscored —
In WiFi, the RSSI value and SSID information is broadcast as part of android.net.wifi.RSSI_CHANGE and android.net.wifi.…
-
Unscored —
In the Package Manager service, there is a possible information disclosure due to a confused deputy. This could lead to…
-
Unscored —
In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial…
-
Unscored —
In Platform, there is a possible bypass of user interaction requirements due to background app interception. This could…
-
Unscored —
In libttspico, there is a possible OOB write due to a heap buffer overflow. This could lead to remote escalation of pri…
