Skip to content
OpenAdvisories

Platform

Android

6,319 known vulnerabilities.

6,319 results · Feed

  • Unscored —

    In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead…

  • Unscored —

    In EUTRAN_LCS_DecodeFacilityInformationElement of LPP_LcsManagement.c, there is a possible out of bounds read due to a …

  • Medium 5.5

    In AccountTypePreference of AccountTypePreference.java, there is a possible way to mislead the user about accounts inst…

  • Medium 6.7

    In registerSignalHandlers of main.c, there is a possible local arbitrary code execution due to a use after free. This c…

  • Medium 4.4

    In ConvertToHalMetadata of aidl_utils.cc, there is a possible out of bounds read due to a missing bounds check. This co…

  • Critical 9.8

    In ProfSixDecomTcpSACKoption of RohcPacketCommon, there is a possible out of bounds write due to a missing bounds check…

  • Medium 5.5

    In ih264e_init_proc_ctxt of ih264e_process.c, there is a possible out of bounds read due to a heap buffer overflow. Thi…

  • Medium 6.7

    In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a heap buffer overflow. This could…

  • Unscored —

    In dhd_prot_ioctcmplt_process of dhd_msgbuf.c, there is a possible out of bounds write due to improper input validation…

  • Unscored —

    In DoSetPinControl of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could…

  • High 7.8

    In buildCommand of bluetooth_ccc.cc, there is a possible out of bounds write due to a logic error in the code. This cou…

  • Unscored —

    In lcsm_SendRrAcquiAssist of lcsm_bcm_assist.c, there is a possible out of bounds write due to a missing bounds check. …

  • High 7.8

    In onContextItemSelected of NetworkProviderSettings.java, there is a possible way for users to change the Wi-Fi setting…

  • Medium 4.4

    When cpif handles probe failures, there is a possible out of bounds read due to a use after free. This could lead to lo…

  • Medium 4.4

    In append_camera_metadata of camera_metadata.c, there is a possible out of bounds read due to a missing bounds check. T…

  • Medium 6.7

    In cs40l2x_cp_trigger_queue_show of cs40l2x.c, there is a possible out of bounds write due to a use after free. This co…

  • Unscored —

    In fdt_next_tag of fdt.c, there is a possible out of bounds write due to an integer overflow. This could lead to local …

  • Medium 5.5

    In register of UidObserverController.java, there is a missing permission check. This could lead to local information di…

  • Medium 4.4

    In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This coul…

  • Unscored —

    In sms_GetTpPiIe of sms_PduCodec.c, there is a possible out of bounds read due to a missing bounds check. This could le…

  • High 7.8

    In append_to_params of param_util.c, there is a possible out of bounds write due to an incorrect bounds check. This cou…

  • High 7.8

    In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a mi…

  • High 7.8

    In InstallStart of InstallStart.java, there is a possible way to change the installer package name due to an improper i…

  • Medium 4.4

    In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This coul…

  • High 7.8

    In isTargetSdkLessThanQOrPrivileged of WifiServiceImpl.java, there is a possible way for the guest user to change admin…

  • Unscored —

    In (TBD) of (TBD), there is a possible way to boot with a hidden debug policy due to a missing warning to the user. Thi…

  • Medium 4.4

    In ufdt_local_fixup_prop of ufdt_overlay.c, there is a possible out of bounds read due to an incorrect bounds check. Th…

  • High 7.8

    In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a mi…

  • Medium 5.1

    In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This coul…

  • High 7.8

    In multiple functions of BackupHelper.java, there is a possible way for an app to get permissions previously granted to…

  • High 7.5

    In parse_printerAttributes of ipphelper.c, there is a possible out of bounds read due to a string without a null-termin…

  • Medium 4.4

    In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This coul…

  • High 7.8

    In MediaCodec.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of p…

  • Unscored —

    In add_roam_cache_list of wl_roam.c, there is a possible out of bounds write due to a missing bounds check. This could …

  • High 7.8

    In Confirmation of keystore_cli_v2.cpp, there is a possible way to corrupt memory due to a double free. This could lead…

  • Unscored —

    In DoSetTempEcc of imsservice.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could …

  • High 7.8

    In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a mi…

  • Unscored —

    In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead…

  • Unscored —

    In ParseWithAuthType of simdata.cpp, there is a possible out of bounds read due to an incorrect bounds check. This coul…

  • Medium 4.4

    In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This coul…