Skip to content
OpenAdvisories

Platform

Android

6,319 known vulnerabilities.

6,319 results · Feed

  • Unscored —

    There is an unauthorized service in the system service. Since the component does not have permission check, resulting i…

  • Unscored —

    In Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product: AndroidVersions: Androi…

  • Unscored —

    In Messaging, There has unauthorized provider, this could cause Local Deny of Service.Product: AndroidVersions: Android…

  • Unscored —

    In Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product: AndroidVersions: Androi…

  • Unscored —

    In audioTransportsToHal of HidlUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. Thi…

  • Unscored —

    In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to an integer overflow. Thi…

  • Unscored —

    In CarSettings of app packages, there is a possible permission bypass due to a confused deputy. This could lead to loca…

  • Unscored —

    In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent degradation of performance due to resource …

  • Unscored —

    There is an missing authorization issue in the system service. Since the component does not have permission check , res…

  • Unscored —

    There is an missing authorization issue in the system service. Since the component does not have permission check and p…

  • Unscored —

    There is a Unauthorized service in the system service, may cause the system reboot. Since the component does not have p…

  • Unscored —

    In emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to a race condition. Thi…

  • Unscored —

    In pickStartSeq of AAVCAssembler.cpp, there is a possible out of bounds read due to a missing bounds check. This could …

  • Unscored —

    There is an missing authorization issue in the system service. Since the component does not have permission check , res…

  • Unscored —

    There is an missing authorization issue in the system service. Since the component does not have permission check , res…

  • Unscored —

    In fdt_next_tag of fdt.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to l…

  • Unscored —

    In handleFullScreenIntent of StatusBarNotificationActivityStarter.java, there is a possible bypass of the restriction o…

  • Unscored —

    In setOptions of ActivityRecord.java, there is a possible load any arbitrary Java code into launcher process due to a l…

  • Unscored —
    CVE-2022-20413 Public exploit

    In start of Threads.cpp, there is a possible way to record audio during a phone call due to a logic error in the code. …

  • Unscored —

    There is an missing authorization issue in the system service. Since the component does not have permission check , res…

  • Unscored —

    In getBackgroundRestrictionExemptionReason of AppRestrictionController.java, there is a possible way to bypass device p…

  • Unscored —
    CVE-2022-20421 Public exploit

    In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could l…

  • Unscored —

    In queryInternal of CallLogProvider.java, there is a possible access to voicemail information due to SQL injection. Thi…

  • Unscored —

    In getInputMethodWindowVisibleHeight of InputMethodManagerService.java, there is a possible way to determine when anoth…

  • Unscored —

    In audioTransportsToHal of HidlUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. Thi…

  • Unscored —
    CVE-2022-20409 Public exploit

    In io_identity_cow of io_uring.c, there is a possible way to corrupt memory due to a use after free. This could lead to…

  • Unscored —

    In Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product: AndroidVersions: Androi…

  • Unscored —

    In DevmemIntHeapAcquire of TBD, there is a possible arbitrary code execution due to an integer overflow. This could lea…

  • Unscored —

    In dllist_remove_node of TBD, there is a possible use after free bug due to a race condition. This could lead to local …

  • High 8.6

    matrix-android-sdk2 vulnerable to Olm/Megolm protocol confusion

    matrix-android-sdk2 is the Matrix SDK for Android. Prior to version 1.5.1, an attacker cooperating with a malicious homeserver can construct messages that legitimately appear to have come from another person, without any indication such as a grey shield. Addi…

  • High 7.5

    matrix-android-sdk2 vulnerable to impersonation via forwarded Megolm sessions

    matrix-android-sdk2 is the Matrix SDK for Android. Prior to version 1.5.1, an attacker cooperating with a malicious homeserver can construct messages appearing to have come from another person. Such messages will be marked with a grey shield on some platforms…

  • High 7.8

    An integer underflow in WhatsApp could have caused remote code execution when receiving a crafted video file.

  • Critical 9.8
    CVE-2022-36934 Public exploit

    An integer overflow in WhatsApp could result in remote code execution in an established video call.

  • Unscored —

    In smc_intc_request_fiq of arm_gic.c, there is a possible out of bounds write due to improper input validation. This co…

  • Unscored —

    In sysmmu_unmap of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to local…

  • Unscored —

    In the SEPolicy configuration of system apps, there is a possible access to the 'ip' utility due to an insecure default…

  • Unscored —

    In addOrUpdateNetwork of WifiServiceImpl.java, there is a possible way for a guest user to configure Wi-Fi due to a per…

  • Unscored —

    In SettingsActivity.java, there is a possible way to make a device discoverable over Bluetooth, without permission or u…

  • Unscored —

    In checkAccess of MediaProvider.java, there is a possible file deletion due to a path traversal error. This could lead …

  • Unscored —

    In extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read due to an integer over…