Skip to content
OpenAdvisories

Platform

Android

6,319 known vulnerabilities.

6,319 results · Feed

  • High 7.8

    In FT_ACDK_CCT_V2_OP_ISP_SET_TUNING_PARAS of Meta_CCAP_Para.cpp, there is a possible out of bounds write due to imprope…

  • High 7.8

    In IMSA_Recv_Thread and VT_IMCB_Thread of ImsaClient.cpp and VideoTelephony.c, there is a possible out of bounds write …

  • High 7.5

    In the LG LAF component, there is a special command that allowed modification of certain partitions. This could lead to…

  • High 7.5

    In SMF_ParseMetaEvent of eas_smf.c, there is a possible integer overflow. This could lead to remote denial of service d…

  • Medium 5.5

    In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninit…

  • Medium 5.5

    In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninit…

  • High 7.8

    In several functions of DescramblerImpl.cpp, there is a possible use after free due to improper locking. This could lea…

  • Critical 9.8

    In impeg2d_mc_fullx_fully of impeg2d_mc.c there is a possible out of bound write due to missing bounds check. This coul…

  • High 7.5

    In ResStringPool::setTo of ResourceTypes.cpp, it's possible for an attacker to control the value of mStringPoolSize to …

  • High 7.8

    In writeTypedArrayList and readTypedArrayList of Parcel.java, there is a possible escalation of privilege due to type c…

  • High 7.8
    CVE-2018-9338 Public exploit

    In ResStringPool::setTo of ResourceTypes.cpp, there is a possible out of bounds write due to a missing bounds check. Th…

  • High 7.8

    In writeToParcel and createFromParcel of DcParamObject.java, there is a permission bypass due to a write size mismatch.…

  • High 7.5

    In ElementaryStreamQueue::dequeueAccessUnitMPEG4Video of ESQueue.cpp, there is a possible infinite loop leading to reso…

  • High 7.8

    In setAllowOnlyVpnForUids of NetworkManagementService.java, there is a possible security settings bypass due to a missi…

  • High 7.8

    In createFromParcel of MediaCas.java, there is a possible parcel read/write mismatch due to improper input validation. …

  • High 7.8

    In the read() function of ProcessStats.java, there is a possible read/write serialization issue leading to a permission…

  • High 7.8

    In createFromParcel of ViewPager.java, there is a possible read/write serialization issue leading to a permissions bypa…

  • Medium 6.2

    In readEncryptedData of ConscryptEngine.java, there is a possible plaintext leak due to improperly used crypto. This co…

  • Medium 5.5

    In the autofill service, the package name that is provided by the app process is trusted inappropriately.  This could l…

  • High 7.3
    CVE-2024-43093 Exploited Public exploit

    In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to pre…

    KEV Nov 7, 2024
  • Medium 6.2

    In visitUris of multiple files, there is a possible information disclosure due to a confused deputy. This could lead to…

  • High 8.4

    In multiple functions in AppInfoBase.java, there is a possible way to manipulate app permission settings belonging to a…

  • Medium 5.5

    In validateAccountsInternal of AccountManagerService.java, there is a possible way to leak account credentials to a thi…

  • High 7.8

    In updateInternal of MediaProvider.java , there is a possible access of another app's files due to a missing permission…

  • High 7.8

    In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents over USB without unlock…

  • Critical 9.8

    In filterMask of SkEmbossMaskFilter.cpp, there is a possible out of bounds write due to an integer overflow. This could…

  • High 8.4

    In getInstalledAccessibilityPreferences of AccessibilitySettings.java, there is a possible way to hide an enabled acces…

  • Medium 5.0

    In multiple locations, there is a possible cross-user image read due to a missing permission check. This could lead to …

  • High 7.8

    In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible way to achieve arbitrary code execution due to a m…

  • High 7.8

    In setTransactionState of SurfaceFlinger.cpp, there is a possible way to change protected display attributes due to a l…

  • High 7.8

    In mayAdminGrantPermission of AdminRestrictedPermissionsUtils.java, there is a possible way to access the microphone du…

  • High 7.8

    In onReceive of AppRestrictionsFragment.java, there is a possible escalation of privilege due to unsafe deserialization…

  • High 7.8

    In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a l…

  • Medium 5.5

    In onActivityResult of EditUserPhotoController.java, there is a possible cross-user media read due to a confused deputy…

  • Medium 6.2

    In validate of WifiConfigurationUtil.java , there is a possible persistent denial of service due to resource exhaustion…

  • High 7.8

    In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. Thi…

  • High 7.8

    In DevmemIntChangeSparse of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in th…

  • High 8.4

    In multiple locations, there is a possible permissions bypass due to a missing null check. This could lead to local esc…

  • High 8.4

    In multiple locations, there is a possible arbitrary code execution due to a logic error in the code. This could lead t…

  • High 8.4

    In DevmemXIntMapPages of devicemem_server.c, there is a possible use-after-free due to a logic error in the code. This …