Skip to content
OpenAdvisories

Platform

Android

6,319 known vulnerabilities.

6,319 results · Feed

  • Medium 5.5

    In getNearbyAppStreamingPolicy of DevicePolicyManagerService.java, there is a missing permission check. This could lead…

  • Medium 5.5

    In getSmsRoleHolder of RoleService.java, there is a possible way to determine whether an app is installed, without quer…

  • High 7.8

    In onCreate of various files, there is a possible tapjacking/overlay attack. This could lead to local escalation of pri…

  • Medium 6.7

    In getCurrentConfigImpl of Effect.cpp, there is a possible out of bounds write due to a missing bounds check. This coul…

  • High 7.5

    In SAECOMM_CopyBufferBytes of SAECOMM_Utility.c, there is a possible out of bounds read due to an incorrect bounds chec…

  • Medium 5.5

    In query of MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lead …

  • Medium 5.5

    In multiple locations of NfcService.java, there is a possible disclosure of NFC tags due to a confused deputy. This cou…

  • High 7.8

    In onMulticastListUpdateNotificationReceived of UwbEventManager.java, there is a possible arbitrary code execution due …

  • Medium 6.7

    In verity_target of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission c…

  • Medium 6.7

    In authToken2AidlVec of KeyMintUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. Thi…

  • High 7.4

    In pppol2tp_create of l2tp_ppp.c, there is a possible use after free due to a race condition. This could lead to local …

  • Medium 6.7

    In TBD of ufdt_convert, there is a possible out of bounds read due to memory corruption. This could lead to local escal…

  • High 7.2

    In SetDecompContextDb of RohcDeCompContextOfRbId.cpp, there is a possible out of bounds write due to a missing bounds c…

  • Medium 6.7

    In the Pixel camera driver, there is a possible use after free due to a logic error in the code. This could lead to loc…

  • High 7.8

    In navigateUpTo of Task.java, there is a possible way to launch an intent handler with a mismatched intent due to impro…

  • Medium 5.5

    In getNearbyNotificationStreamingPolicy of DevicePolicyManagerService.java, there is a possible way to learn about the …

  • Medium 5.5

    In sec_sysmmu_info of drm_fw.c, there is a possible out of bounds read due to improper input validation. This could lea…

  • High 7.8

    In setParameter of EqualizerEffect.cpp, there is a possible out of bounds write due to improper input validation. This …

  • Medium 6.1

    In IncFs_GetFilledRangesStartingFrom of incfs.cpp, there is a possible out of bounds read due to a missing bounds check…

  • High 7.8

    In multiple functions of AdapterService.java, there is a possible way to manipulate Bluetooth state due to a missing pe…

  • Medium 6.7

    In extract_metadata of dm-android-verity.c, there is a possible way to corrupt kernel memory due to a use after free. T…

  • High 7.8

    In TBD of aud_hal_tunnel.c, there is a possible memory corruption due to a use after free. This could lead to local esc…

  • Low 3.3

    In registerReceivers of DeviceCapabilityListener.java, there is a possible way to change preferred TTY mode due to a pe…

  • High 7.5

    Product: AndroidVersions: Android kernelAndroid ID: A-204541506References: N/A

  • Medium 5.5

    In read_ppmpu_info of drm_fw.c, there is a possible out of bounds read due to an incorrect bounds check. This could lea…

  • High 7.8

    In ppmp_validate_wsm of drm_fw.c, there is a possible EoP due to improper input validation. This could lead to local es…

  • Medium 5.5

    In Pixel cellular firmware, there is a possible out of bounds read due to an incorrect bounds check. This could lead to…

  • High 7.5

    In rw_t3t_act_handle_check_ndef_rsp of rw_t3t.cc, there is a possible out of bounds read due to an integer overflow. Th…

  • Low 3.3

    In onCreate of AddAppNetworksActivity.java, there is a possible way for a guest user to configure WiFi networks due to …

  • Medium 5.5

    In btif_a2dp_sink_command_ready of btif_a2dp_sink.cc, there is a possible out of bounds read due to a use after free. T…

  • Medium 5.5

    In ppmp_validate_secbuf of drm_fw.c, there is a possible information disclosure due to improper input validation. This …

  • High 7.8

    In onAttach of ConfigureWifiSettings.java, there is a possible way for a guest user to change WiFi settings due to a pe…

  • Low 3.3

    In launchConfigNewNetworkFragment of NetworkProviderSettings.java, there is a possible way for the guest user to add a …

  • Medium 6.7

    In parameterToHal of Effect.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead…

  • Medium 6.5

    In onCreate of LogAccessDialogActivity.java, there is a possible way to bypass a permission check due to a tapjacking/o…

  • High 7.8

    In page_number of shared_mem.c, there is a possible code execution in secure world due to improper input validation. Th…

  • High 8.8

    In cellular modem firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to re…

  • High 7.8

    In (TBD) of (TBD), there is a possible way to corrupt kernel memory due to a use after free. This could lead to local e…

  • Medium 5.3

    In strings.xml, there is a possible permission bypass due to a misleading string. This could lead to remote information…

  • Medium 6.7

    In updateStart of WirelessCharger.cpp, there is a possible out of bounds write due to a missing bounds check. This coul…