Platform
Android
6,319 known vulnerabilities.
6,319 results · Feed
-
Medium 5.5
In HalCoreCallback of halcore.cc, there is a possible out of bounds read due to a missing bounds check. This could lead…
-
High 7.8
In onCreate of WifiDppConfiguratorActivity.java, there is a possible way for a guest user to add a WiFi configuration d…
-
High 7.8
In TBD of TBD, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of…
-
Medium 6.7
In Pixel firmware, there is a possible exposure of sensitive memory due to a missing bounds check. This could lead to l…
-
Medium 4.4
In pop_descriptor_string of BufferDescriptor.h, there is a possible out of bounds read due to a missing bounds check. T…
-
Medium 6.7
In RadioImpl::setCdmaBroadcastConfig of ril_service_legacy.cpp, there is a possible stack clash leading to memory corru…
-
High 7.8
In compose of Vibrator.cpp, there is a possible arbitrary code execution due to a use after free. This could lead to lo…
-
High 7.5
In bindArtworkAndColors of MediaControlPanel.java, there is a possible way to crash the phone due to improper input val…
-
Medium 4.4
In onOptionsItemSelected of ManageApplications.java, there is a possible bypass of profile owner restrictions due to a …
-
High 8.9
Path Traversal in Android Google Search App
There exists a path traversal vulnerability in the Android Google Search app. This is caused by the incorrect usage of uri.getLastPathSegment. A symbolic encoded string can bypass the path logic to get access to unintended directories. An attacker can manipul…
-
Medium 6.3
Outlook for Android Elevation of Privilege Vulnerability
Outlook for Android Elevation of Privilege Vulnerability
-
Medium 4.6
In updatePublicMode of NotificationLockscreenUserManagerImpl.java, there is a possible way to reveal sensitive notifica…
-
High 7.8
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to …
-
High 7.3
In onCreate of ReviewPermissionsActivity.java, there is a possible way to grant permissions for a separate app with API…
-
High 7.8
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to …
-
High 7.8
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to …
-
Medium 5.5
In GetResolvedMethod of entrypoint_utils-inl.h, there is a possible use after free due to a stale cache. This could lea…
-
Medium 4.4
In fdt_path_offset_namelen of fdt_ro.c, there is a possible out of bounds read due to an incorrect bounds check. This c…
-
Medium 5.5
In setDataSource of initMediaExtractor.cpp, there is a possibility of arbitrary code execution due to a use after free.…
-
High 7.5
In several functions that parse avrc response in avrc_pars_ct.cc and related files, there are possible out of bounds re…
-
Medium 5.5
In SendIncDecRestoreCmdPart2 of NxpMfcReader.cc, there is a possible out of bounds read due to a missing bounds check. …
-
High 7.8
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to …
-
High 7.8
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to …
-
Medium 5.5
In loadFromXml of ShortcutPackage.java, there is a possible crash on boot due to an uncaught exception. This could lead…
-
High 7.8
In getEnabledAccessibilityServiceList of AccessibilityManager.java, there is a possible way to hide an accessibility se…
-
Critical 9.8
In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This …
-
Medium 5.5
In applyKeyguardFlags of NotificationShadeWindowControllerImpl.java, there is a possible way to observe the user's pass…
-
High 7.8
In deletePackageVersionedInternal of DeletePackageHelper.java, there is a possible way to bypass carrier restrictions d…
-
High 7.8
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to …
-
High 7.8CVE-2022-20470 Public exploit
In bindRemoteViewsService of AppWidgetServiceImpl.java, there is a possible way to bypass background activity launch du…
-
High 8.8
In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to a missing bounds check. This could lea…
-
High 7.8
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to …
-
Low 2.3
In sOpAllowSystemRestrictionBypass of AppOpsManager.java, there is a possible leak of location information due to a mis…
-
High 8.8
In avct_lcb_msg_asmbl of avct_lcb_act.cc, there is a possible out of bounds write due to a missing bounds check. This c…
-
Medium 5.5
In setEnabledSetting of PackageManager.java, there is a possible way to get the device into an infinite reboot loop due…
-
High 7.8
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to …
-
High 7.8
In test of ResetTargetTaskHelper.java, there is a possible hijacking of any app which sets allowTaskReparenting="true" …
-
High 7.8
In shouldHideNotification of KeyguardNotificationVisibilityProvider.kt, there is a possible way to show hidden notifica…
-
High 7.8CVE-2022-20474 Public exploit
In readLazyValue of Parcel.java, there is a possible loading of arbitrary code into the System Settings app due to a co…
-
High 7.3
In onCreate of EnableAccountPreferenceActivity.java, there is a possible way to mislead the user into enabling a malici…