Platform
Android
6,319 known vulnerabilities.
6,319 results · Feed
-
Unscored —
In startWpsPinDisplayInternal of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. T…
-
Unscored —
In multiple functions of WifiCallingSettings.java, there is a possible way to change calling preferences for the admin …
-
Unscored —
In on_create_record_event of btif_sdp_server.cc, there is a possible out of bounds read due to a missing null check. Th…
-
Unscored —
In registerGsmaServiceIntentReceiver of ShannonRcsService.java, there is a possible way to activate/deactivate RCS serv…
-
Unscored —
In initiateHs20IconQueryInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validat…
-
Unscored —
there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could le…
-
Unscored —
In setProfileName of DevicePolicyManagerService.java, there is a possible way to crash the SystemUI menu due to a missi…
-
Unscored —
In load_dt_data of storage.c, there is a possible out of bounds write due to a missing bounds check. This could lead to…
-
Unscored —
In encode of miscdata.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to loc…
-
Unscored —
In setCountryCodeInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. Th…
-
Unscored —
In requestAppKeyboardShortcuts of WindowManagerService.java, there is a possible way to infer the app a user is interac…
-
Unscored —
In cd_CodeMsg of cd_codec.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to …
-
Unscored —
In list_key_entries of utils.rs, there is a possible way to disable user credentials due to resource exhaustion. This c…
-
Unscored —
In addGroupWithConfigInternal of p2p_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. T…
-
Unscored —CVE-2023-21173 Public exploit
In multiple methods of DataUsageList.java, there is a possible way to learn about admin user's network activities due t…
-
Medium 6.2CVE-2023-21237 Exploited
In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification…
KEV Mar 5, 2024 -
Unscored —
In encode of wlandata.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to lo…
-
Unscored —
In initiateVenueUrlAnqpQueryInternal of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserializa…
-
Unscored —
In btm_ble_update_inq_result of btm_ble_gap.cc, there is a possible out of bounds read due to a heap buffer overflow. T…
-
Unscored —
In aoc_service_set_read_blocked of aoc.c, there is a possible out of bounds write due to a missing bounds check. This c…
-
Unscored —
In hasInputInfo of Layer.cpp, there is a possible bypass of user interaction requirements due to a tapjacking/overlay a…
-
Critical 9.8
MStore API <= 4.0.1 - Unauthenticated SQL Injection
The MStore API plugin for WordPress is vulnerable to Unauthenticated Blind SQL Injection via the 'id' parameter in versions up to, and including, 4.0.1 due to insufficient escaping on the user supplied parameters and lack of sufficient preparation on the exis…
-
Medium 6.5
When recording the screen while in Private Browsing on Firefox for Android the address bar and keyboard were not hidden…
-
Critical 9.1
Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android. These could have …
-
High 7.5
A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below vers…
-
Unscored —
In multiple files, there is a possible way to access traces in the dev mode due to a permissions bypass. This could lea…
-
Unscored —
In multiple functions of JobStore.java, there is a possible way to cause a crash on startup due to improper input valid…
-
Unscored —
In onNullBinding of CallRedirectionProcessor.java, there is a possible long lived connection due to improper input vali…
-
Unscored —
In onCreate of NotificationAccessSettings.java, there is a possible failure to persist notifications settings due to im…
-
Unscored —
In multiple functions of multiple files, there is a possible way to make the device unusable due to improper input vali…
-
Unscored —
In multiple functions of ChooserActivity.java, there is a possible cross-user media read due to a confused deputy. This…
-
Unscored —
In several methods of JobStore.java, uncaught exceptions in job map parsing could lead to local persistent denial of se…
-
Unscored —
In bindPlayer of MediaControlPanel.java, there is a possible launch arbitrary activity in SysUI due to Unsafe Intent. T…
-
Unscored —
In bindOutputSwitcherAndBroadcastButton of MediaControlPanel.java, there is a possible launch arbitrary activity under …
-
Unscored —
In doInBackground of NotificationContentInflater.java, there is a possible temporary denial or service due to long runn…
-
Unscored —
In canStartSystemGesture of RecentsAnimationDeviceState.java, there is a possible partial lockscreen bypass due to a ra…
-
Unscored —
In checkKeyIntentParceledCorrectly() of ActivityManagerService.java, there is a possible bypass of Parcel Mismatch miti…
-
Unscored —
In btm_ble_periodic_adv_sync_lost of btm_ble_gap.cc, there is a possible remote code execution due to a buffer overflow…
-
Unscored —
In btm_sec_encrypt_change of btm_sec.cc, there is a possible way to downgrade the link key type due to improperly used …
-
Unscored —
In run of multiple files, there is a possible escalation of privilege due to unsafe deserialization. This could lead to…