Platform
Android
6,319 known vulnerabilities.
6,319 results · Feed
-
Medium 5.5
In deserialize of multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead…
-
Medium 5.5CVE-2023-20909 Public exploit
In multiple functions of RunningTasks.java, there is a possible privilege escalation due to a missing privilege check. …
-
High 7.8
In AlarmManagerActivity of AlarmManagerActivity.java, there is a possible way to bypass background activity launch rest…
-
High 7.8
In avdt_scb_hdl_pkt_no_frag of avdt_scb_act.cc, there is a possible out of bounds write due to an incorrect bounds chec…
-
Medium 6.6
In acc_ctrlrequest_composite of f_accessory.c, there is a possible out of bounds write due to a missing bounds check. T…
-
High 7.8
In PVRSRVBridgePhysmemImportSparseDmaBuf of the PowerVR kernel driver, a missing size check means there is a possible i…
-
High 7.8
In PVRSRVBridgeDevicememHistorySparseChange of the PowerVR kernel driver, a missing size check means there is a possibl…
-
High 7.8
In PVRSRVBridgeRGXKickSync of the PowerVR kernel driver, a missing size check means there is a possible integer overflo…
-
High 7.8
In PVRSRVBridgeRGXKickVRDM of the PowerVR kernel driver, a missing size check means there is a possible integer overflo…
-
High 7.8
In PVRSRVBridgeRGXKickTA3D of the PowerVR kernel driver, a missing size check means there is a possible integer overflo…
-
High 7.8
In PVRSRVBridgePhysmemNewRamBackedLockedPMR of the PowerVR kernel driver, a missing size check means there is a possibl…
-
High 7.8
In PVRSRVBridgeRGXKickRS of the PowerVR kernel driver, a missing size check means there is a possible integer overflow …
-
High 7.8
In PVRSRVBridgeChangeSparseMem of the PowerVR kernel driver, a missing size check means there is a possible integer ove…
-
High 7.8
In PVRSRVBridgeServerSyncGetStatus of the PowerVR kernel driver, a missing size check means there is a possible integer…
-
High 7.8
In PVRSRVBridgeRGXKickCDM of the PowerVR kernel driver, a missing size check means there is a possible integer overflow…
-
High 7.8
In PVRSRVBridgeSyncPrimOpTake of the PowerVR kernel driver, a missing size check means there is a possible integer over…
-
High 7.8
In PVRSRVBridgeRGXTDMSubmitTransfer of the PowerVR kernel driver, a missing size check means there is a possible intege…
-
High 7.8
In PVRSRVBridgeCacheOpQueue of the PowerVR kernel driver, a missing size check means there is a possible integer overfl…
-
Low 3.7
Microsoft Edge (Chromium-based) Tampering Vulnerability
Microsoft Edge (Chromium-based) Tampering Vulnerability
-
High 8.3
Improper trust boundary implementation for SMB in Zoom Clients
Zoom clients prior to 5.13.5 contain an improper trust boundary implementation vulnerability. If a victim saves a local recording to an SMB location and later opens it using a link from Zoom’s web portal, an attacker positioned on an adjacent network to the v…
-
Medium 4.4
In _ufdt_output_node_to_fdt of ufdt_convert.c, there is a possible out of bounds read due to a heap buffer overflow. Th…
-
Medium 6.7
In lwis_slc_buffer_free of lwis_device_slc.c, there is a possible memory corruption due to type confusion. This could l…
-
Unscored —
In wl_update_hidden_ap_ie of wl_cfgscan.c, there is a possible out of bounds write due to a missing bounds check. This …
-
High 7.8
In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a mi…
-
Unscored —
In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead…
-
Medium 4.4
In ConvertToHalMetadata of aidl_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This…
-
High 7.5
In sms_ExtractCbLanguage of sms_CellBroadcast.c, there is a possible out of bounds read due to a missing bounds check. …
-
Medium 6.7
In (TBD) of (TBD), there is a possible way to corrupt memory due to a use after free. This could lead to local escalati…
-
Medium 6.7
In load_png_image of ExynosHWCHelper.cpp, there is a possible out of bounds write due to improper input validation. Thi…
-
High 7.2
In EUTRAN_LCS_ConvertLCS_MOLRReq of LPP_CommonUtil.c, there is a possible out of bounds write due to a logic error in t…
-
Low 3.7
In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This coul…
-
Medium 4.4
In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This coul…
-
High 7.8
In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a mi…
-
Medium 6.7
In UnwindingWorker of unwinding.cc, there is a possible out of bounds write due to a use after free. This could lead to…
-
High 7.8
In BufferBlock of Suballocation.cpp, there is a possible out of bounds write due to memory corruption. This could lead …
-
Medium 6.7
In setToExternal of ril_external_client.cpp, there is a possible out of bounds write due to a missing bounds check. Thi…
-
Medium 6.4
In dit_hal_ioctl of dit.c, there is a possible use after free due to a race condition. This could lead to local escalat…
-
Medium 6.7
In dwc3_exynos_clk_get of dwc3-exynos.c, there is a possible out of bounds write due to an incorrect bounds check. This…
-
Unscored —
In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead…
-
Medium 4.4
In forceStaDisconnection of hostapd.cpp, there is a possible out of bounds read due to a missing bounds check. This cou…