Skip to content
OpenAdvisories

Platform

Android

6,319 known vulnerabilities.

6,319 results · Feed

  • Unscored —

    In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.c, there is a possible out of bounds read due to a missing bounds check. T…

  • Unscored —

    In ixheaacd_individual_ch_stream of ixheaacd_channel.c there is a possible out of bounds write due to a missing bounds …

  • Unscored —
    CVE-2018-9539 Public exploit

    In the ClearKey CAS descrambler, there is a possible use after free due to a race condition. This could lead to local e…

  • Unscored —

    In the AndroidManifest.xml file defining the SliceBroadcastReceiver handler for com.android.settings.slice.action.WIFI_…

  • Unscored —

    In numerous functions of libFDK, there are possible out of bounds writes due to incorrect bounds checks. This could lea…

  • Unscored —

    In parseMPEGCCData of NuPlayer2CCDecoder.cpp, there is a possible out of bounds write due to an incorrect bounds check.…

  • Unscored —

    In Parcel.writeMapInternal of Parcel.java, there is a possible parcel serialization/deserialization mismatch due to imp…

  • Unscored —

    In vorbis_book_decodev_set of codebook.c there is a possible out of bounds write due to missing bounds check. This coul…

  • Unscored —

    In function SMF_ParseMetaEvent of file eas_smf.c there is incorrect input validation causing an infinite loop. This cou…

  • Unscored —

    In ixheaacd_over_lap_add1_armv8 of ixheaacd_overlap_add1.s there is a possible out of bounds write due to a missing bou…

  • Unscored —

    In ixheaacd_reset_acelp_data_fix of ixheaacd_lpc.c there is a possible out of bounds write due to a missing bounds chec…

  • Unscored —

    In ixheaacd_tns_ar_filter_dec of ixheaacd_aac_tns.c there is a possible out of bounds write due to a missing bounds che…

  • Unscored —

    A Elevation of privilege vulnerability in the HTC bootloader. Product: Android. Versions: Android kernel. Android ID: A…

  • Unscored —

    In CAacDecoder_DecodeFrame of aacdecode.cpp, there is a possible out-of-bounds write due to a missing bounds check. Thi…

  • Unscored —

    In functionality implemented in System UI, there are insufficient protections implemented around overlay windows. This …

  • Unscored —

    SAP Mobile Secure Android Application, Mobile-secure.apk Android client, before version 6.60.19942.0, allows an attacke…

  • Unscored —

    In smp_br_state_machine_event of smp_br_main.cc, there is a possible out of bounds write due to memory corruption. This…

  • Unscored —

    In gatts_process_attribute_req of gatt_sc.cc, there is a possible read of uninitialized data due to a missing bounds ch…

  • Unscored —

    In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could l…

  • Unscored —
    CVE-2018-9445 Public exploit

    In readMetadata of Utils.cpp, there is a possible path traversal bug due to a confused deputy. This could lead to local…

  • Unscored —

    In avrc_proc_vendor_command of avrc_api.cc, there is a possible out of bounds write due to a missing bounds check. This…

  • Unscored —

    In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could l…

  • Unscored —

    In avct_bcb_msg_ind of avct_bcb_act.cc, there is a possible out of bounds read due to a missing bounds check. This coul…

  • Unscored —

    In getstring of ID3.cpp there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote…

  • Unscored —
    CVE-2018-9488 Public exploit

    In the SELinux permissions of crash_dump.te, there is a permissions bypass due to a missing restriction. This could lea…

  • Unscored —

    In DynamicRefTable::load of ResourceTypes.cpp, there is a possible out of bounds read due to a missing bounds check. Th…

  • Unscored —

    In bnep_data_ind of bnep_main.c, there is a possible remote code execution due to a double free. This could lead to rem…

  • Unscored —

    In get_futex_key of futex.c, there is a use-after-free due to improper locking. This could lead to local escalation of …

  • Unscored —

    In driver_override_store of bus.c, there is a possible out of bounds write due to an incorrect bounds check. This could…

  • Unscored —

    In avdt_msg_prs_cfg of avdt_msg.cc, there is a possible out of bounds read due to a missing bounds check. This could le…

  • Unscored —

    When wifi is switched, function sendNetworkStateChangeBroadcast of WifiStateMachine.java broadcasts an intent including…

  • Unscored —

    In hid_debug_events_read of drivers/hid/hid-debug.c, there is a possible out of bounds write due to a missing bounds ch…

  • Unscored —

    In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with n…

  • Unscored —

    In CopyToOMX of OMXNodeInstance.cpp there is a possible out-of-bounds write due to an incorrect bounds check. This coul…

  • Unscored —

    In bta_dm_sdp_result of bta_dm_act.cc, there is a possible out of bounds stack write due to a missing bounds check. Thi…

  • Unscored —

    In processMessagePart of InboundSmsHandler.java, there is a possible remote denial of service due to improper input val…

  • Unscored —

    When a device connects only over WiFi VPN, the device may not receive security updates due to some incorrect checks. Th…

  • Unscored —

    In computeFocusedWindow of RootWindowContainer.java, and related functions, there is possible interception of keypresse…

  • Unscored —

    In ih264d_video_decode of ih264d_api.c there is a possible resource exhaustion due to an infinite loop. This could lead…

  • Unscored —

    In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead…