Platform
Android
6,319 known vulnerabilities.
6,319 results · Feed
-
Medium 4.4
In init of VendorGraphicBufferMeta, there is a possible out of bounds read due to a missing bounds check. This could le…
-
High 7.8
In maybeFinish of FallbackHome.java, there is a possible delay of lockdown screen due to logic error. This could lead t…
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-254114726References: N/A
-
Unscored —
In createTransmitFollowupRequest of nan.cpp, there is a possible out of bounds write due to a heap buffer overflow. Thi…
-
Medium 6.7
In (TBD) of (TBD), there is a possible way to corrupt memory due to a use after free. This could lead to local escalati…
-
Medium 4.7
In setPowerMode of HWC2.cpp, there is a possible out of bounds read due to a race condition. This could lead to local i…
-
Medium 5.5CVE-2023-21036 Public exploit
In BitmapExport.java, there is a possible failure to truncate images due to a logic error in the code.Product: AndroidV…
-
Medium 5.5
In updateInputChannel of WindowManagerService.java, there is a possible way to set a touchable region beyond its own Su…
-
High 7.8
In multiple functions of SensorService.cpp, there is a possible access of accurate sensor data due to a permissions byp…
-
Medium 5.5
In addNetwork of WifiManager.java, there is a possible way to trigger a persistent DoS due to resource exhaustion. This…
-
High 7.5
In multiple functions of PasspointXmlUtils.java, there is a possible authentication misconfiguration due to a logic err…
-
Medium 4.4
In handleEvent of nan.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to loc…
-
Unscored —
In get_svc_hash of nan.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to l…
-
Medium 4.4
In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This coul…
-
Medium 4.4
In dumpstateBoard of Dumpstate.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could…
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-229255400References: N/A
-
High 7.1
In read_paint of ttcolr.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to loc…
-
Unscored —
In btm_read_link_quality_complete of btm_acl.cc, there is a possible out of bounds read due to a missing bounds check. …
-
Critical 9.8
In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible out of bounds write due to a missing bounds check. Th…
-
Unscored —
In BTA_GATTS_HandleValueIndication of bta_gatts_api.cc, there is a possible out of bounds write due to improper input v…
-
Medium 5.5
In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. Th…
-
Critical 9.8
In SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect bounds check. This could …
-
High 7.8
In multiple functions of MediaSessionRecord.java, there is a possible Intent rebroadcast due to a confused deputy. This…
-
Medium 4.4
In btm_ble_write_adv_enable_complete of btm_ble_gap.cc, there is a possible out of bounds read due to a missing bounds …
-
High 7.8
In bta_av_rc_disc_done of bta_av_act.cc, there is a possible out of bounds write due to a missing bounds check. This co…
-
Unscored —
In ParseBqrLinkQualityEvt of btif_bqr.cc, there is a possible out of bounds read due to a missing bounds check. This co…
-
Medium 5.5
In btm_ble_add_resolving_list_entry_complete of btm_ble_privacy.cc, there is a possible out of bounds read due to a mis…
-
High 7.8
In multiple functions of SnoozeHelper.java, there is a possible failure to persist settings due to an uncaught exceptio…
-
Unscored —
In btm_ble_rand_enc_complete of btm_ble.cc, there is a possible out of bounds read due to a missing bounds check. This …
-
Unscored —
In _ufdt_output_property_to_fdt of ufdt_convert.c, there is a possible out of bounds write due to an incorrect bounds c…
-
High 7.8
In getAvailabilityStatus of EnableContentCapturePreferenceController.java, there is a possible way to bypass DISALLOW_C…
-
High 7.8CVE-2023-20955 Public exploit
In onPrepareOptionsMenu of AppInfoDashboardFragment.java, there is a possible way to bypass admin restrictions and unin…
-
High 7.8
In getGroupState of GrantPermissionsViewModel.kt, there is a possible way to keep a one-time permission granted due to …
-
Medium 6.8
In onParentVisible of HeaderPrivacyIconsController.kt, there is a possible way to bypass factory reset protections due …
-
High 7.8
In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to bypass factory reset protection due to in…
-
Unscored —
In btm_ble_process_periodic_adv_sync_lost_evt of ble_scanner_hci_interface.cc , there is a possible out of bounds read …
-
High 7.8
In onTargetSelected of ResolverActivity.java, there is a possible way to share a wrong file due to a logic error in the…
-
High 7.8
In launchDeepLinkIntentToRight of SettingsHomepageActivity.java, there is a possible way to launch arbitrary activities…
-
Medium 5.5
In sendHalfSheetCancelBroadcast of HalfSheetActivity.java, there is a possible way to learn nearby BT MAC addresses due…
-
Medium 4.4
In Import of C2SurfaceSyncObj.cpp, there is a possible out of bounds write due to a missing bounds check. This could le…