Platform
Android
6,319 known vulnerabilities.
6,319 results · Feed
-
High 7.8
In declareDuplicatePermission of ParsedPermissionUtils.java, there is a possible way to obtain a dangerous permission w…
-
Unscored —
-
Unscored —
-
Critical 9.8
-
Critical 9.8
-
Unscored —
-
Unscored —
-
Unscored —
a function called 'nla_parse', do not check the len of para, it will check nla_type (which can be controlled by userspa…
-
Unscored —
In MMU_MapPages of TBD, there is a possible out of bounds write due to improper input validation. This could lead to lo…
-
Unscored —
The path in this case is a little bit convoluted. The end result is that via an ioctl an untrusted app can control the …
-
Unscored —
In PVRSRVBridgePMRPDumpSymbolicAddr of the PowerVR kernel driver, a missing size check means there is a possible intege…
-
Unscored —
In PVRSRVRGXSubmitTransferKM of rgxtransfer.c, there is a possible user after free due to a race condition. This could …
-
Medium 6.6
Improper access control vulnerability in ContactsDumpActivity of?Contacts Provider prior to version 12.7.59 allows atta…
-
Medium 5.9
Improper restriction of broadcasting Intent in GalaxyStoreBridgePageLinker of?Waterplugin prior to version 2.2.11.22081…
-
Medium 6.6
Improper restriction of broadcasting Intent in SaWebViewRelayActivity of?Waterplugin prior to version 2.2.11.22081151 a…
-
Medium 6.5
Realtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow
Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for segmented packets’ link parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and …
-
Medium 6.5
Realtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow
Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the length of segmented packets’ shift parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffe…
-
Medium 6.5
Realtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow
Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for broadcast network packet length. An unauthenticated attacker in the adjacent network can exploit this vulnerability to disrupt service.
-
Medium 6.5
Realtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow
Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the size of segmented packets’ reference parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buf…
-
Unscored —
The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be fr…
-
Unscored —
The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be fr…
-
Unscored —
The method PVRSRVBridgeTLDiscoverStreams allocates puiStreamsInt on the heap, fills the contents of the buffer via TLSe…
-
Unscored —
The method PVRSRVBridgePMRPDumpSymbolicAddr allocates puiMemspaceNameInt on the heap, fills the contents of the buffer …
-
Unscored —
An unprivileged app can trigger PowerVR driver to return an uninitialized heap memory causing information disclosure.Pr…
-
Unscored —
In PVRSRVBridgeHeapCfgHeapConfigName, there is a possible leak of kernel heap content due to uninitialized data. This c…
-
Unscored —
In PVRSRVBridgeHeapCfgHeapDetails, there is a possible leak of kernel heap content due to uninitialized data. This coul…
-
Medium 5.5
Incorrect default permissions for the Intel(R) Support Android application before 21.07.40 may allow an authenticated u…
-
Medium 5.5
Incorrect default permissions for the Intel(R) Connect M Android application before version 1.7.4 may allow an authenti…
-
Unscored —
'Hulu / フールー' App for Android from version 3.0.47 to the version prior to 3.1.2 uses a hard-coded API key for an extern…
-
Unscored —
In Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execut…
-
Unscored —
In WiFi, there is a possible disclosure of WiFi password to the end user due to an insecure default value. This could l…
-
Unscored —
In ConnectivityService, there is a possible bypass of network permissions due to a missing permission check. This could…
-
Unscored —
In SELinux policy, there is a possible way of inferring which websites are being opened in the browser due to a missing…
-
Unscored —
In Android, there is a possible access of network neighbor table information due to an insecure SEpolicy configuration.…
-
Unscored —
In Settings, there is a possible installed application disclosure due to a missing permission check. This could lead to…
-
Unscored —
In Wifi Slice, there is a possible way to adjust Wi-Fi settings even when the permission has been disabled due to a mis…
-
Unscored —
In Bluetooth, there are possible process crashes due to dereferencing a null pointer. This could lead to remote denial …
-
Unscored —
In Bluetooth, there is a possible crash due to a missing null check. This could lead to remote denial of service with n…
-
Unscored —
In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to …
-
Unscored —
In the Framework, there is a possible way to enable a work profile without user consent due to a tapjacking/overlay att…