Platform
Android
6,319 known vulnerabilities.
6,319 results · Feed
-
Unscored —
In wlan_hdd_cfg80211_set_privacy_ibss() in Android releases from CAF using the linux kernel (Android for MSM, Firefox O…
-
Unscored —
While processing the USB StrSerialDescriptor array, an array index out of bounds can occur in Android releases from CAF…
-
Unscored —
While processing a compressed kernel image, a buffer overflow can occur in Android releases from CAF using the linux ke…
-
Unscored —
While processing the HTT_T2H_MSG_TYPE_MGMT_TX_COMPL_IND message, a buffer overflow can potentially occur in Android rel…
-
Unscored —
Due to a race condition in a camera driver ioctl handler in Android releases from CAF using the linux kernel (Android f…
-
Unscored —
If the fdt_totalsize is reported as 0 for the current device tree, it bypasses an error check for a valid device tree i…
-
Unscored —
Integer overflow can occur in msm_pcm_adsp_stream_cmd_put() function if the user supplied data "param_length" goes beyo…
-
Unscored —
Buffer over-read may happen in wma_process_utf_event() due to improper buffer length validation before writing into par…
-
Unscored —
In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security …
-
Unscored —
Possible buffer overflows and array out of bounds accesses in Android releases from CAF using the linux kernel (Android…
-
Unscored —
In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security …
-
Unscored —
Due to a race condition while processing the power stats debug file to read status, a double free condition can occur i…
-
Unscored —
In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security …
-
Unscored —
While flashing meta image, a buffer over-read may potentially occur when the image size is smaller than the image heade…
-
Unscored —
While flashing a meta image, a buffer over-read can potentially occur when the number of images are out of the maximum …
-
Unscored —
IIJ SmartKey App for Android version 2.1.0 and earlier allows remote attackers to bypass authentication [effect_of_bypa…
-
Unscored —
If userspace provides a too-large WPA RSN IE length in wlan_hdd_cfg80211_set_ie(), a buffer overflow occurs in all Andr…
-
Unscored —
In the MDSS driver in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux k…
-
Unscored —
User process can perform the kernel DOS in ashmem when doing cache maintenance operation in all Android releases(Androi…
-
Unscored —
A stack-based buffer overflow can occur in fastboot from all Android releases(Android for MSM, Firefox OS for MSM, QRD …
-
Unscored —
In the WCD CPE codec, a Use After Free condition can occur in all Android releases(Android for MSM, Firefox OS for MSM,…
-
Unscored —
In the KGSL driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux …
-
Unscored —
improper validation of array index in WiFi driver function sapInterferenceRssiCount() leads to array out-of-bounds acce…
-
Unscored —
In the WLAN driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux …
-
Unscored —
In the WLAN driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux …
-
Unscored —
While processing a DSP buffer in an audio driver's event handler, an index of a buffer is not checked before accessing …
-
Unscored —
Buffer overflow can occur due to improper input validation in multiple WMA event handler functions in all Android relea…
-
Unscored —
Early or late retirement of rotation requests can result in a Use After Free condition in all Android releases from CAF…
-
Unscored —
An arbitrary address write can occur if a compromised WLAN firmware sends incorrect data to WLAN driver in all Android …
-
Unscored —
In the function wmi_set_ie(), the length validation code does not handle unsigned integer overflow properly. As a resul…
-
Unscored —
In the video driver function set_output_buffers(), binfo can be accessed after being freed in a failure scenario in all…
-
Unscored —
In the function wma_pdev_div_info_evt_handler() in all Android releases from CAF (Android for MSM, Firefox OS for MSM, …
-
Unscored —
Buffer over flow can occur while processing a HTT_T2H_MSG_TYPE_TX_COMPL_IND message with an out-of-range num_msdus valu…
-
Unscored —
Due to a race condition in the QTEECOM driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QR…
-
Unscored —
In wma_ndp_end_response_event_handler(), the variable len_end_rsp is a uint32 which can be overflowed if the value of v…
-
Unscored —
Buffer might get used after it gets freed due to unlocking the mutex before freeing the buffer in all Android releases …
-
Unscored —
The value of fix_param->num_chans is received from firmware and if it is too large, an integer overflow can occur in wm…
-
Unscored —
Due to a race condition in a bus driver, a double free in msm_bus_floor_vote_context() can potentially occur in all And…
-
Unscored —
Stack-based buffer overflow can occur In the WLAN driver if the pmkid_count value is larger than the PMKIDCache size in…
-
Unscored —
While sending a probe request indication in lim_send_sme_probe_req_ind() in all Android releases from CAF (Android for …