Skip to content
OpenAdvisories

Platform

Android

6,319 known vulnerabilities.

6,319 results · Feed

  • High 7.8

    In the MTK_FLP_MSG_HAL_DIAG_REPORT_DATA_NTF handler of flp2hal_- interface.c, there is a possible stack buffer overflow…

  • High 8.8

    In multiple functions of gl_proc.c, there is a buffer overwrite due to a missing bounds check. This could lead to escal…

  • High 7.8

    In gt1x_debug_write_proc and gt1x_tool_write of drivers/input/touchscreen/mediatek/GT1151/gt1x_generic.c and gt1x_tools…

  • High 7.8

    In /proc/driver/wmt_dbg driver, there are several possible out of bounds writes. These could lead to local escalation o…

  • High 7.8

    In fm_set_stat of mediatek FM radio driver, there is a possible OOB write due to improper input validation. This could …

  • High 7.8

    In WMT_unlocked_ioctl of MTK WMT device driver, there is a possible OOB write due to a missing bounds check. This could…

  • High 7.8

    In rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a possible out of bounds wr…

  • High 7.8

    In mtk_cfg80211_vendor_packet_keep_alive_start and mtk_cfg80211_vendor_set_config of drivers/misc/mediatek/connectivity…

  • High 7.8

    In mtk_p2p_wext_set_key of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_p2p.c, there is a possible OOB writ…

  • High 7.8

    In procfile_write of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_proc.c, there is a possible OOB write due…

  • High 7.8

    In get_binary of vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/data_coder.c, there is a possible ou…

  • Medium 5.5

    In process_service_search_attr_rsp of sdp_discovery.cc, there is a possible out of bound read due to a missing bounds c…

  • Medium 5.5

    In sdp_copy_raw_data of sdp_discovery.cc, there is a possible out of bounds read due to an incorrect bounds check. This…

  • Medium 6.2

    In gatt_process_error_rsp of gatt_cl.cc, there is a possible out of bound read due to a missing bounds check. This coul…

  • High 7.8

    In OSUInfo of OSUInfo.java, there is a possible escalation of privilege due to improper input validation. This could le…

  • Critical 9.8

    In prop2cfg of btif_storage.cc, there is a possible out of bounds write due to an incorrect bounds check. This could le…

  • Medium 6.5

    In buildImageItemsIfPossible of ItemTable.cpp there is a possible out of bound read due to uninitialized data. This cou…

  • Medium 6.5

    In  RsaKeyPairGenerator::getNumberOfIterations of RSAKeyPairGenerator.java, an incorrect implementation could cause wea…

  • Medium 5.5

    In ihevcd_parse_slice_header of ihevcd_parse_slice_header.c there is a possible out of bound read due to missing bounds…

  • High 8.8

    In handle_app_cur_val_response of dtif_rc.cc, there is a possible stack buffer overflow due to a missing bounds check. …

  • High 7.8

    In gattServerSendResponseNative of com_android_bluetooth_gatt.cpp, there is a possible out of bounds stack write due to…

  • High 8.0

    In handle_notification_response of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. T…

  • High 7.8

    In rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a possible out of bounds wr…

  • High 7.5

    In gatts_process_read_by_type_req of gatt_sr.c, there is a possible information disclosure due to uninitialized data. T…

  • High 8.8

    In l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out of bounds write due to improper input validation. This could…

  • High 8.4

    In getIntentForIntentSender of ActivityManagerService.java, there is a possible way to access user metadata due to a pe…

  • High 7.8

    In installPackageLI of PackageManagerService.java, there is a possible permissions bypass. This could lead to local esc…

  • Medium 6.5

    In VideoFrameScheduler.cpp of VideoFrameScheduler::PLL::fit, there is a possible remote denial of service due to divide…

  • Medium 6.5

    In ihevcd_parse_slice_data of ihevcd_parse_slice.c there is a possible heap buffer out of bound read due to a missing b…

  • Medium 6.5

    In ihevcd_allocate_dynamic_bufs of ihevcd_api.c there is a possible resource exhaustion due to integer overflow. This c…

  • Medium 6.5

    In ih264e_fmt_conv_420p_to_420sp of ih264e_fmt_conv.c there is a possible out of bound read due to missing bounds check…

  • Medium 6.5

    In ih264d_assign_pic_num of ih264d_utils.c there is a possible out of bound read due to missing bounds check. This coul…

  • Medium 6.5

    In mv_err_cost of mcomp.c there is a possible out of bounds read due to missing bounds check. This could lead to denial…

  • High 8.4

    In String16 of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to loc…

  • Medium 6.2

    In SensorService::isDataInjectionEnabled of frameworks/native/services/sensorservice/SensorService.cpp, there is a poss…

  • Medium 6.5

    In impeg2d_bit_stream_flush() of libmpeg2dec there is a possible OOB read due to a missing bounds check. This could lea…

  • High 7.5

    In pvmp3_get_main_data_size of pvmp3_get_main_data_size.cpp, there is a possible buffer overread due to a missing bound…

  • High 8.4

    In checkPermissions of RecognitionService.java, there is a possible permissions bypass due to a missing permission chec…

  • High 7.6

    Microsoft Dynamics 365 Sales Spoofing Vulnerability

    Microsoft Dynamics 365 Sales Spoofing Vulnerability

  • Medium 6.5

    In setVpnForcedLocked of Vpn.java, there is a possible blocking of internet traffic through vpn due to a bad uid check.…