Platform
Android
6,319 known vulnerabilities.
6,319 results · Feed
-
Unscored —
In multiple locations, there is a possible way to corrupt memory due to a double free. This could lead to local escalat…
-
Unscored —
In hasPermissionForActivity of PackageManagerHelper.java, there is a possible URI grant due to improper input validatio…
-
Unscored —
In onTransact of IncidentService.cpp, there is a possible out of bounds write due to memory corruption. This could lead…
-
Unscored —
In createDontSendToRestrictedAppsBundle of PendingIntentUtils.java, there is a possible background activity launch due …
-
Unscored —
In BTM_BleVerifySignature of btm_ble.cc, there is a possible way to bypass signature validation due to side channel inf…
-
Unscored —
In verifyShortcutInfoPackage of ShortcutService.java, there is a possible way to see another user's image due to a conf…
-
Unscored —
In keyguardGoingAway of ActivityTaskManagerService.java, there is a possible lock screen bypass due to a missing permis…
-
High 8.8
In callback_thread_event of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible memory corruption d…
-
Unscored —
In transcodeQ*ToFloat of btif_avrcp_audio_track.cc, there is a possible out of bounds write due to a missing bounds che…
-
Unscored —CVE-2023-40084 Public exploit
In run of MDnsSdListener.cpp, there is a possible memory corruption due to a use after free. This could lead to local e…
-
Unscored —
In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to…
-
Unscored —
In getCredentialManagerPolicy of DevicePolicyManagerService.java, there is a possible method for users to select creden…
-
Unscored —
In modify_for_next_stage of fdt.rs, there is a possible way to render KASLR ineffective due to improperly used crypto. …
-
Unscored —
In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due t…
-
Unscored —
In loadMediaDataInBgForResumption of MediaDataManager.kt, there is a possible way to view another user's images due to …
-
Unscored —
In injectSendIntentSender of ShortcutService.java, there is a possible background activity launch due to a permissions …
-
Unscored —
In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a logic error in the code. This…
-
Unscored —
In visitUris of Notification.java, there is a possible cross-user media read due to Confused Deputy. This could lead to…
-
Medium 5.5
In createPendingIntent of CredentialManagerUi.java, there is a possible way to access credentials from other users due …
-
Critical 9.8
In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition. This could lead to re…
-
Unscored —
In saveToXml of PersistableBundle.java, invalid data could lead to local persistent denial of service with no additiona…
-
Unscored —
In forceReplaceShortcutInner of ShortcutPackage.java, there is a possible way to register unlimited packages due to a m…
-
Unscored —
In RGXDestroyHWRTData of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. This cou…
-
Unscored —
In visitUris of Notification.java, there is a possible way to display images from another user due to a confused deputy…
-
Unscored —
In RGXDestroyZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. This c…
-
Unscored —
In DevmemIntChangeSparse of devicemem_server.c, there is a possible out of bounds write due to an integer overflow. Thi…
-
Unscored —
In MMU_UnmapPages of mmu_common.c, there is a possible out of bounds read due to improper input validation. This could …
-
Unscored —
In OSMMapPMRGeneric of pmr_os.c, there is a possible out of bounds write due to an uncaught exception. This could lead …
-
Unscored —
In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds…
-
Unscored —
In HTBLogKM of htbserver.c, there is a possible information disclosure due to log information disclosure. This could le…
-
Critical 9.8
In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible arbitrary code execution due to a use after fr…
-
Unscored —
In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds…
-
Unscored —
In DevmemIntMapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This co…
-
Critical 9.8
In RGXBackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could le…
-
Unscored —
In DevmemIntAcquireRemoteCtx of devicemem_server.c, there is a possible arbitrary code execution due to a race conditio…
-
Unscored —
In PMRWritePMPageList of TBD, there is a possible out of bounds write due to an integer overflow. This could lead to lo…
-
Unscored —
In RGXUnbackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could …
-
Unscored —
In PMR_ReadBytes of pmr.c, there is a possible arbitrary code execution due to a use after free. This could lead to loc…
-
Critical 9.8
-
Unscored —