Skip to content
OpenAdvisories

Platform

Android

6,319 known vulnerabilities.

6,319 results · Feed

  • High 8.4

    In convertYUV420Planar16ToY410 of ColorConverter.cpp, there is a possible out of bounds write due to a heap buffer over…

  • Medium 6.5

    In multiple locations, there is a possible out of bounds read due to a missing bounds check. This could lead to paired …

  • Medium 5.5

    In onActivityResult of NotificationSoundPreference.java, there is a possible way to hear audio files belonging to a dif…

  • High 7.0

    In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way for an app in the work profile to e…

  • Medium 6.2

    In setListening of AppOpsControllerImpl.java, there is a possible way to hide the microphone privacy indicator when res…

  • Medium 5.5

    In shouldUseNoOpLocation of CameraActivity.java, there is a possible confused deputy due to a permissions bypass. This …

  • Low 3.3

    In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. T…

  • High 8.4

    In DevmemIntUnmapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This …

  • High 7.8
    CVE-2024-0015 Public exploit

    In convertToComponentName of DreamService.java, there is a possible way to launch arbitrary protected activities due to…

  • High 8.4

    In removePersistentDot of SystemStatusAnimationSchedulerImpl.kt, there is a possible race condition due to a logic erro…

  • High 7.5
    CVE-2024-0040 Public exploit

    In setParameter of MtpPacket.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead…

  • High 8.4

    In injectInputEventToInputFilter of AccessibilityManagerService.java, there is a possible arbitrary input event injecti…

  • Low 3.3

    In applyCustomDescription of SaveUi.java, there is a possible way to view images belonging to a different user due to a…

  • High 7.4

    In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to bypass the restrictions on …

  • High 7.4

    In onNullBinding of TileLifecycleManager.java, there is a possible way to launch an activity from the background due to…

  • High 8.4

    In multiple functions of ashmem-dev.cpp, there is a possible missing seal due to a heap buffer overflow. This could lea…

  • Medium 6.8

    In multiple locations, there is a possible way to request access to directories that should be hidden due to improper i…

  • High 7.8

    In BackgroundLaunchProcessController, there is a possible way to launch arbitrary activity from the background due to B…

  • Medium 5.5
    CVE-2024-0030 Public exploit

    In btif_to_bta_response of btif_gatt_util.cc, there is a possible out of bounds read due to an incorrect bounds check. …

  • High 7.1

    In multiple files, there is a possible way to capture the device screen when disallowed by device policy due to a logic…

  • Critical 9.8

    In attp_build_read_by_type_value_cmd of att_protocol.cc , there is a possible out of bounds write due to improper input…

  • Medium 5.3

    In applyCustomDescription of SaveUi.java, there is a possible way to view other user's images due to a confused deputy.…

  • Medium 5.5

    In multiple files, there is a possible way that trimmed content could be included in PDF output due to a logic error in…

  • High 8.4

    In startInstall of UpdateFetcher.java, there is a possible way to trigger a malicious config update due to a logic erro…

  • Critical 9.8

    In readLogs of StatsService.cpp, there is a possible memory corruption due to a use after free. This could lead to loca…

  • Medium 5.5

    In multiple locations, there is a possible cross-user read due to a confused deputy. This could lead to local informati…

  • High 7.4

    In ARTPWriter of ARTPWriter.cpp, there is a possible use after free due to uninitialized data. This could lead to local…

  • High 8.4

    In multiple functions of MtpFfsHandle.cpp , there is a possible out of bounds write due to a use after free. This could…

  • Medium 5.1

    In ippSetValueTag of ipp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to lo…

  • Medium 5.5

    In multiple locations, there is a possible way for apps to access cross-user message data due to a missing permission c…

  • Medium 6.2

    In multiple functions of MtpPacket.cpp, there is a possible out of bounds write due to a heap buffer overflow. This cou…

  • High 7.8

    In sanitizeSbn of NotificationManagerService.java, there is a possible way to launch an activity from the background du…

  • High 7.3
    CVE-2023-40109 Public exploit

    In createFromParcel of UsbConfiguration.java, there is a possible background activity launch (BAL) due to a permissions…

  • High 7.8

    In setMediaButtonReceiver of MediaSessionRecord.java, there is a possible way to send a pending intent on behalf of sys…

  • High 8.4

    In discovery_thread of Dns64Configuration.cpp, there is a possible memory corruption due to a use after free. This coul…

  • High 7.5

    In ca-certificates, there is a possible way to read encrypted TLS data due to untrusted cryptographic certificates. Thi…

  • Medium 5.5

    In backupAgentCreated of ActivityManagerService.java, there is a possible way to leak sensitive data due to a missing p…

  • Medium 5.0

    Microsoft Teams for Android Information Disclosure Vulnerability

    Microsoft Teams for Android Information Disclosure Vulnerability

  • High 7.8

    there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege…

  • High 7.5

    Cybozu KUNAI for Android 3.0.20 to 3.0.21 allows a remote unauthenticated attacker to cause a denial-of-service (DoS) c…