Platform
Android
6,158 known vulnerabilities.
6,158 results · Feed
-
Medium 5.5
Microsoft Office Graphics Component Information Disclosure Vulnerability
Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally.
-
High 7.5
DigiDoc improper signature verification
Improper verification of cryptographic signature vulnerability in DigiDoc libdigidocpp, DigiDoc DigiDoc4, DigiDoc DigiDoc Android, and DigiDoc DigiDoc iOS. The vulnerability allows an attacker to create forged digital signatures that are displayed a valid by …
-
Medium 4.0
Cisco Jabber for Android Path Traversal via Shared Content URI
Cisco Jabber for Android (com.cisco.im) before 15.3.1.311364 contains a path traversal vulnerability that allows a malicious app with no permissions to write attacker-controlled files into Jabber's private data directory by exploiting the exported crosslaunch…
-
Medium 6.7
In platform_msg_handler_init of default_msg_handlers.c, there is a possible permission bypass due to a missing permissi…
-
Medium 6.8
In wacom_hid_set_device_mode of wacom_sys.c, there is a possible out-of-bounds write due to a missing bounds check. Thi…
-
High 7.0
In ep_free of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalat…
-
Critical 9.8
In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the …
-
Medium 4.4
In kdn_set_sysregs_prot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code.…
-
Medium 4.4
In is_pd_allowed of gem_msg.c, there is a possible permission bypass due to a missing permission check. This could lead…
-
High 7.8
In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of pri…
-
High 7.8
In updateState of DeviceAdminAppsPreferenceController.java, there is a possible permission bypass due to a logic error …
-
High 7.8
In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.java, there is a possible permission by…
-
High 7.8
In checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java, there is a possible permission bypass d…
-
High 7.8
In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local…
-
High 7.0
In handle_app_val_response of btif_rc.cc, there is a possible way to achieve code execution due to a race condition. Th…
-
High 7.5
In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check…
-
High 7.8
In multiple places, there is a possible denial of service due to an uncaught exception. This could lead to local escala…
-
Low 3.3
In returnOutputBufferLocked of DeprecatedCamera3StreamSplitter.cpp, there is a possible out-of-bounds read due to a mis…
-
High 7.8
In multiple locations, there is a possible memory corruption due to type confusion. This could lead to local escalation…
-
High 7.8
In multiple functions of VirtualAudioControllerTest.java, there is a possible permission bypass due to a logic error in…
-
High 8.8
In cfg2prop of btif_storage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead …
-
Medium 5.5
In setPermissionGrantState of DevicePolicyManagerService.java, there is a possible persistent denial of service due to …
-
High 7.8
In multiple locations, there is a possible out of bounds write due to an incorrect bounds check. This could lead to loc…
-
High 7.8
In stpropnci_process of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check. This co…
-
High 8.8
In multiple locations, there is a possible out-of-bounds write due to uninitialized data. This could lead to remote esc…
-
High 7.8
In dialInternal in multiple locations, there is a possible permission bypass due to a confused deputy. This could lead …
-
High 7.8
In FilterCapturedPacket of snoop_logger.cc, there is a possible memory safety issue due to improper input validation. T…
-
High 7.8
In qsort of libufdt_sysdeps_vendor.c, there is a possible out-of-bounds write due to resource exhaustion. This could le…
-
Medium 6.5
In multiple functions of PduParser.java, there is a possible out of bounds read due to a missing bounds check. This cou…
-
High 7.8
In multiple functions of MessageQueueBase.h, there is a possible out of bounds read due to an incorrect bounds check. T…
-
High 7.8
In handle_le_monitor_device_event of msft.cc, there is a possible control-flow hijack in the privileged bluetooth proce…
-
High 7.8
In rw_t4t_update_file of rw_t4t.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead…
-
High 7.8
In multiple functions of nfa_nfcee_act.cc, there is a possible out-of-bounds write due to a missing bounds check. This …
-
High 7.2
In wpas_handle_robust_av_scs_recv_action of robust_av.c, there is a possible out-of-bounds write due to a logic error i…
-
High 8.8
In isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due to a missing permission check. This cou…
-
Medium 5.5
In multiple functions of rw_t5t.cc, there is a possible out-of-bounds read due to a missing bounds check. This could le…
-
Medium 5.4
WPMobile.App <= 11.84 - Unauthenticated Stored Cross-Site Scripting via '/android_json/search/<value>/0' Path Segment
The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'REQUEST_URI (path segment after /android_json/search/)' parameter in all versions up to, and including, 11.84 due to insufficient input s…
-
Critical 9.8CVE-2026-94541 Public exploit
WPMobile.App <= 11.82 - Unauthenticated Admin Account Takeover via 'wpapp_category[]' Parameter
The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 11.82 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes i…
-
Critical 9.3CVE-2026-103922 Public exploit
Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path
Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates …
-
Critical 10.0
Use of Hard-coded Credentials in Viidure Dashcam Android Application
The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These credentials provide full access to critical platform storage, including the ability to read, modify, or delete operational files such as firm…