Platform
Android
6,319 known vulnerabilities.
6,319 results · Feed
-
Unscored —
In several functions of mali_gralloc_reference.cpp, there is a possible arbitrary code execution due to a missing bound…
-
Medium 6.7
In bdi_put and bdi_unregister of backing-dev.c, there is a possible memory corruption due to a use after free. This cou…
-
Critical 9.6
Improper URL parsing in Zoom Clients
The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.11.0 are susceptible to a URL parsing vulnerability. If a malicious Zoom meeting URL is opened, the malicious link may direct the user to connect to an arbitrary netwo…
-
Unscored —
In v4l2_m2m_querybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper input validation. This …
-
Low 3.3CVE-2022-20338 Public exploit
In HierarchicalUri.readFrom of Uri.java, there is a possible way to craft a malformed Uri object due to improper input …
-
Medium 6.5CVE-2022-20361 Public exploit
In btif_dm_auth_cmpl_evt of btif_dm.cc, there is a possible vulnerability in Cross-Transport Key Derivation due to Weak…
-
Medium 6.2CVE-2022-20360 Public exploit
In setChecked of SecureNfcPreferenceController.java, there is a missing permission check. This could lead to local esca…
-
High 7.1
In startSync of AbstractThreadedSyncAdapter.java, there is a possible way to access protected content of content provid…
-
Unscored —
In writeToParcel of SurfaceControl.cpp, there is a possible information disclosure due to uninitialized data. This coul…
-
Medium 4.0
In shouldAllowFgsWhileInUsePermissionLocked of ActiveServices.java, there is a possible way to start foreground service…
-
Unscored —
In get of PacProxyService.java, there is a possible system service crash due to improper input validation. This could l…
-
Unscored —
In onDefaultNetworkChanged of Vpn.java, there is a possible way to disable VPN due to a logic error in the code. This c…
-
Unscored —
In onSaveRingtone of DefaultRingtonePreference.java, there is a possible inappropriate file read due to improper input …
-
Unscored —
In addProviderRequestListener of LocationManagerService.java, there is a possible way to learn which packages request l…
-
Medium 6.2
In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to trick the victim to grant notifi…
-
Unscored —
In WifiScanningPreferenceController and BluetoothScanningPreferenceController, there is a possible admin restriction by…
-
Unscored —
In updateState of LocationServicesWifiScanningPreferenceController.java, there is a possible admin restriction bypass d…
-
High 7.5
In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. T…
-
High 7.5
In updateAudioTrackInfoFromESDS_MPEG4Audio of MPEG4Extractor.cpp, there is a possible out of bounds read due to an inco…
-
Medium 6.5
In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds write due to a missing bounds check. This co…
-
Unscored —
In stealReceiveChannel of EventThread.cpp, there is a possible way to interfere with process communication due to a rac…
-
Medium 4.2
remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area), and because the 'vma->v…
-
Unscored —CVE-2021-39696 Public exploit
In Task.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation…
-
High 7.5
Under certain conditions SAP Authenticator for Android allows an attacker to access information which would otherwise b…
-
Medium 4.3
Jenkins Android Signing Plugin allows attackers to check whether attacker-specified file patterns match workspace contents
Jenkins Android Signing Plugin 2.2.5 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-speci…
-
High 8.1
Privilege escalation vulnerability in SAP SuccessFactors attachment API for Mobile Application(Android & iOS)
Due to misconfigured application endpoints, SAP SuccessFactors attachment APIs allow attackers with user privileges to perform activities with admin privileges over the network. These APIs were consumed in the SF Mobile application for Time Off, Time Sheet, E…
-
Unscored —
In Car Settings app, the NotificationAccessConfirmationActivity is exported. In NotificationAccessConfirmationActivity,…
-
Unscored —
In wifi.RequestToggleWifiActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking/overlay attack. T…
-
Unscored —
'remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area), and because the 'vma->…
-
Unscored —
A drm driver have oob problem, could cause the system crash or EOPProduct: AndroidVersions: Android SoCAndroid ID: A-23…
-
Unscored —
In choosePrivateKeyAlias of KeyChain.java, there is a possible access to the user's certificate due to improper input v…
-
Unscored —CVE-2022-20229 Public exploit
In bta_hf_client_handle_cind_list_item of bta_hf_client_at.cc, there is a possible out of bounds write due to a missing…
-
Unscored —
In various functions of C2DmaBufAllocator.cpp, there is a possible memory corruption due to a use after free. This coul…
-
Unscored —
In USB driver, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local informati…
-
Unscored —
In finishDrawingWindow of WindowManagerService.java, there is a possible tapjacking due to improper input validation. T…
-
Unscored —
In getSubscriptionProperty of SubscriptionController.java, there is a possible read of a sensitive identifier due to a …
-
Unscored —CVE-2022-20224 Public exploit
In AT_SKIP_REST of bta_hf_client_at.cc, there is a possible out of bounds read due to an incorrect bounds check. This c…
-
Unscored —CVE-2022-20223 Public exploit
In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible way to start a phone call witho…
-
Unscored —
In read_attr_value of gatt_db.cc, there is a possible out of bounds write due to a missing bounds check. This could lea…
-
Unscored —
In avrc_ctrl_pars_vendor_cmd of avrc_pars_ct.cc, there is a possible out of bounds read due to improper input validatio…