Skip to content
OpenAdvisories

Platform

Android

6,319 known vulnerabilities.

6,319 results · Feed

  • Medium 5.5

    In getSliceEndItem of MediaVolumePreferenceController.java, there is a possible way to start foreground activity from t…

  • Unscored —

    In captureImage of CustomizedSensor.cpp, there is a possible way to bypass the fingerprint unlock due to a logic error …

  • High 7.8

    In onPackageAddedInternal of PermissionManagerService.java, there is a possible way to silently grant a permission afte…

  • Unscored —

    In btm_ble_clear_resolving_list_completecomplete of btm_ble_privacy.cc, there is a possible out of bounds read due to a…

  • Medium 4.4

    In btm_ble_read_remote_features_complete of btm_ble_gap.cc, there is a possible out of bounds read due to improper inpu…

  • High 7.3

    In getConfirmationMessage of DefaultAutofillPicker.java, there is a possible way to mislead the user to select default …

  • Medium 4.5

    In btm_read_rssi_complete of btm_acl.cc, there is a possible out of bounds read due to a missing bounds check. This cou…

  • High 7.8

    In AddSupervisedUserActivity, guest users are not prevented from starting the activity due to missing permissions check…

  • Unscored —

    In btm_ble_rand_enc_complete of btm_ble.cc, there is a possible out of bounds read due to a missing bounds check. This …

  • High 7.8

    In removePermission of PermissionManagerServiceImpl.java, there is a possible way to obtain dangerous permissions witho…

  • Medium 4.4

    In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This coul…

  • Unscored —

    In btm_read_tx_power_complete of btm_acl.cc, there is a possible out of bounds read due to a missing bounds check. This…

  • Medium 4.4

    In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This coul…

  • Medium 5.5

    In btm_vendor_specific_evt of btm_devctl.cc, there is a possible out of bounds read due to a missing bounds check. This…

  • High 7.8

    In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to loca…

  • Medium 5.5

    In add of WifiNetworkSuggestionsManager.java, there is a possible way to trigger permanent DoS due to resource exhausti…

  • Unscored —

    In btu_ble_ll_conn_param_upd_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. …

  • Medium 4.4

    In multiple functions of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This coul…

  • Medium 5.5

    In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. Th…

  • Medium 5.5

    In btm_create_conn_cancel_complete of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check.…

  • High 7.8

    In onAttach of SettingsPreferenceFragment.java, there is a possible bypass of Factory Reset Protections due to a confus…

  • High 7.8

    In avdt_scb_hdl_write_req of avdt_scb_act.cc, there is a possible out of bounds write due to a heap buffer overflow. Th…

  • Medium 5.5

    In GetNextSourceDataPacket of bta_av_co.cc, there is a possible out of bounds read due to a missing bounds check. This …

  • Medium 5.5

    In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. Th…

  • Unscored —

    In btu_ble_rc_param_req_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This …

  • Medium 5.5

    In A2DP_BuildCodecHeaderSbc of a2dp_sbc.cc, there is a possible out of bounds write due to a missing bounds check. This…

  • High 7.8
    CVE-2023-20963 Exploited Public exploit

    In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional…

    KEV Apr 13, 2023
  • Medium 5.5

    In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. Th…

  • High 7.8
    CVE-2023-20911 Public exploit

    In addPermission of PermissionManagerServiceImpl.java , there is a possible failure to persist permission settings due …

  • Unscored —

    In on_iso_link_quality_read of btm_iso_impl.h, there is a possible out of bounds read due to a missing bounds check. Th…

  • Critical 9.8

    In Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to r…

  • Unscored —

    In OEM_OnRequest of sced.cpp, there is a possible shell command execution due to improper input validation. This could …

  • Unscored —

    In ffa_mrd_prot of shared_mem.c, there is a possible ID due to a logic error in the code. This could lead to local info…

  • Critical 9.8

    In sms_SendMmCpErrMsg of sms_MmConManagement.c, there is a possible out of bounds write due to a heap buffer overflow. …

  • High 7.8

    In parseParamsBlob of types.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead…

  • Medium 5.5

    In isBluetoothShareUri of BluetoothOppUtility.java, there is a possible incorrect file read due to a confused deputy. T…

  • Critical 9.8

    In parseTrackFragmentRun() of MPEG4Extractor.cpp, there is a possible out of bounds read due to an integer overflow. Th…

  • Medium 5.5

    In validateForCommonR1andR2 of PasspointConfiguration.java, uncaught errors in parsing stored configs could lead to loc…

  • Medium 6.5

    WordPress WPMobile.App — Android and iOS Mobile Application Plugin <= 11.13 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in WPMobile.App WPMobile.App — Android and iOS Mobile Application plugin <= 11.13 versions.

  • Medium 6.5

    Denial of Service in Zoom Clients

    Zoom clients before version 5.13.5 contain a STUN parsing vulnerability. A malicious actor could send specially crafted UDP traffic to a victim Zoom client to remotely cause the client to crash, causing a denial of service.