Skip to content
OpenAdvisories

Platform

Android

6,319 known vulnerabilities.

6,319 results · Feed

  • Medium 6.7

    In openFile of CallLogProvider.java, there is a possible permission bypass due to a path traversal error. This could le…

  • Low 3.3

    In enforceVisualVoicemailPackage of PhoneInterfaceManager.java, there is a possible leak of visual voicemail package na…

  • High 7.8

    In valid_out_of_special_sec_dram_addr of drm_access_control.c, there is a possible EoP due to improper input validation…

  • Medium 4.4

    In valid_va_secbuf_check of drm_access_control.c, there is a possible ID due to improper input validation. This could l…

  • High 7.8

    In ppmpu_set of ppmpu.c, there is a possible EoP due to an integer overflow. This could lead to local escalation of pri…

  • Medium 6.7

    In sendChunk of WirelessCharger.cpp, there is a possible out of bounds write due to a missing bounds check. This could …

  • Low 3.3

    In registerLocalOnlyHotspotSoftApCallback of WifiManager.java, there is a possible way to determine whether an app is i…

  • Medium 5.5

    In ppmpu_set of ppmpu.c, there is a possible information disclosure due to a logic error in the code. This could lead t…

  • Medium 4.4

    In ufdt_get_node_by_path_len of ufdt_convert.c, there is a possible out of bounds read due to a missing bounds check. T…

  • High 7.8

    In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This could lead to local e…

  • Low 3.3

    In various functions of ap_input_processor.c, there is a possible way to record audio during a phone call due to a logi…

  • Medium 5.5

    In Pixel cellular firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to lo…

  • High 7.5

    Product: AndroidVersions: Android kernelAndroid ID: A-212623833References: N/A

  • Medium 6.7

    In removeEventHubDevice of InputDevice.cpp, there is a possible OOB read due to a use after free. This could lead to lo…

  • Medium 4.2

    In phNxpNciHal_ioctl of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. This coul…

  • Medium 4.4

    In getWpcAuthChallengeResponse of WirelessCharger.cpp, there is a possible out of bounds read due to a missing bounds c…

  • Medium 6.7

    In _ufdt_output_strtab_to_fdt of ufdt_convert.c, there is a possible out of bounds write due to an incorrect bounds che…

  • Medium 6.7

    In ufdt_do_one_fixup of ufdt_overlay.c, there is a possible out of bounds write due to an incorrect bounds check. This …

  • Medium 6.7

    In acquireFabricatedOverlayIterator, nextFabricatedOverlayInfos, and releaseFabricatedOverlayIterator of Idmap2Service.…

  • Medium 6.7

    In sysmmu_map of sysmmu.c, there is a possible EoP due to a precondition check failure. This could lead to local escala…

  • Low 3.3

    In revokeOwnPermissionsOnKill of PermissionManager.java, there is a possible way to determine whether an app is install…

  • Medium 6.7

    In mapGrantorDescr of MessageQueueBase.h, there is a possible out of bounds write due to a missing bounds check. This c…

  • Medium 4.9

    In SAEMM_MiningCodecTableWithMsgIE of SAEMM_RadioMessageCodec.c, there is a possible out of bounds read due to a missin…

  • Low 3.3

    In registerBroadcastReceiver of RcsService.java, there is a possible way to change preferred TTY mode due to a missing …

  • Low 3.3

    In findParam of HevcUtils.cpp there is a possible out of bounds read due to a missing bounds check. This could lead to …

  • Medium 5.5

    In valid_va_sec_mfc_check of drm_access_control.c, there is a possible information disclosure due to improper input val…

  • Medium 5.5

    In getMessagesByPhoneNumber of MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injectio…

  • Medium 6.7

    In externalOnRequest of rilapplication.cpp, there is a possible out of bounds write due to a missing bounds check. This…

  • High 7.8

    In valid_out_of_special_sec_dram_addr of drm_access_control.c, there is a possible EoP due to improper input validation…

  • Medium 5.5

    In SAECOMM_SetDcnIdForPlmn of SAECOMM_DbManagement.c, there is a possible out of bounds read due to a missing bounds ch…

  • High 7.8

    In ppmp_unprotect_mfcfw_buf of drm_fw.c, there is a possible out of bounds write due to improper input validation. This…

  • High 7.5

    Product: AndroidVersions: Android kernelAndroid ID: A-211081867References: N/A

  • Medium 5.5

    In onPreferenceClick of AccountTypePreferenceLoader.java, there is a possible way to retrieve protected files from the …

  • Low 2.4

    In multiple locations of WifiDialogActivity.java, there is a possible limited lockscreen bypass due to a logic error in…

  • Low 3.3

    In getSlice of WifiSlice.java, there is a possible way to connect a new WiFi network from the guest mode due to a missi…

  • High 7.8

    In sec_media_protect of media.c, there is a possible EoP due to an integer overflow. This could lead to local escalatio…

  • High 7.8

    In Multiple Locations, there is a possibility to launch arbitrary protected activities due to a confused deputy. This c…

  • Low 3.3

    In CanvasContext::draw of CanvasContext.cpp, there is a possible out of bounds write due to a missing bounds check. Thi…

  • Medium 5.5

    In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. This could le…

  • High 8.8
    CVE-2022-20607 Public exploit

    In the Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead …