Platform
Android
6,319 known vulnerabilities.
6,319 results · Feed
-
Medium 6.7
In visitUris of Notification.java, there is a possible bypass of user profile boundaries due to a missing permission ch…
-
Medium 5.0
A race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could h…
-
Medium 5.6
A race condition in a network transport subsystem led to a heap use-after-free issue in established or unsilenced incom…
-
Medium 4.2CVE-2023-31014 Public exploit
NVIDIA GeForce Now for Android contains a vulnerability in the game launcher component, where a malicious application o…
-
Unscored —CVE-2023-35687 Public exploit
In MtpPropertyValue of MtpProperty.h, there is a possible memory corruption due to a use after free. This could lead to…
-
Unscored —
In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to an integer overflow. This could lead t…
-
Unscored —
In bindSelection of DatabaseUtils.java, there is a possible way to access files from other applications due to SQL inje…
-
Unscored —
In multiple locations, there is a possible way to import contacts belonging to other users due to a confused deputy. Th…
-
Unscored —
In onCreate of DeviceAdminAdd.java, there is a possible way to forcibly add a device admin due to a missing permission …
-
High 7.8
In hasPermissionForActivity of PackageManagerHelper.java, there is a possible way to start arbitrary components due to …
-
Unscored —
In eatt_l2cap_reconfig_completed of eatt_impl.h, there is a possible out of bounds write due to an integer overflow. Th…
-
Unscored —
In MtpPropertyValue of MtpProperty.h, there is a possible out of bounds read due to uninitialized data. This could lead…
-
Unscored —
In loadMediaResumptionControls of MediaResumeListener.kt, there is a possible way to play and listen to media files pla…
-
High 8.8
In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the co…
KEV Sep 13, 2023 -
Unscored —CVE-2023-35671 Public exploit
In onHostEmulationData of HostEmulationManager.java, there is a possible way for a general purpose NFC reader to read t…
-
Unscored —
In createQuickShareAction of SaveImageInBackgroundTask.java, there is a possible way to trigger a background activity l…
-
Unscored —
In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an integer overflow. This could l…
-
Unscored —
In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to control other running acti…
-
Unscored —
In bta_av_rc_msg of bta_av_act.cc, there is a possible use after free due to a logic error in the code. This could lead…
-
Unscored —
In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. T…
-
Unscored —
In updateList of NotificationAccessSettings.java, there is a possible way to hide approved notification listeners in th…
-
High 7.8
In computeValuesFromData of FileUtils.java, there is a possible way to insert files to other apps' external private dir…
-
Unscored —
In multiple files, there is a possible way to import a contact from another user due to a missing permission check. Thi…
-
Unscored —
In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible privilege escalation due to a use after free. This co…
-
Unscored —
Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skyl…
-
Unscored —
Improper authorization in the custom URL scheme handler in "Rikunabi NEXT" App for Android prior to ver. 11.5.0 allows …
-
Unscored —
In registerServiceLocked of ManagedServices.java, there is a possible bypass of background activity launch restrictions…
-
Unscored —
In onAccessPointChanged of AccessPointPreference.java, there is a possible way for unprivileged apps to receive a broad…
-
Unscored —
In getIntentForButton of ButtonManager.java, there is a possible way for an unprivileged application to start a non-exp…
-
Unscored —
In multiple locations, there is a possible way to retrieve sensor data without permissions due to a permissions bypass.…
-
Unscored —
In multiple locations of avrc, there is a possible leak of heap data due to uninitialized data. This could lead to remo…
-
Unscored —
In launchConfirmationActivity of ChooseLockSettingsHelper.java, there is a possible way to enable developer options wit…
-
Unscored —
In onCreate of LockSettingsActivity.java, there is a possible way set a new lockscreen PIN without entering the existin…
-
Unscored —
In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way to access adb before SUW completion …
-
Unscored —
In openContentUri of ActivityManagerService.java, there is a possible way for a third party app to obtain restricted fi…
-
Unscored —
In update of MmsProvider.java, there is a possible way to bypass file permission checks due to a race condition. This c…
-
Unscored —
In multiple locations, there is a possible bypass of a multi user security boundary due to a confused deputy. This coul…
-
Unscored —CVE-2023-21288 Public exploit
In visitUris of Notification.java, there is a possible way to reveal images across users due to a missing permission ch…
-
Unscored —
In multiple locations, there is a possible code execution due to type confusion. This could lead to remote code executi…
-
Unscored —CVE-2023-21286 Public exploit
In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission che…