Skip to content
OpenAdvisories

Platform

Android

6,319 known vulnerabilities.

6,319 results · Feed

  • Unscored —

    In openFile of CallLogProvider.java, there is a possible permission bypass due to a path traversal error. This could le…

  • Unscored —

    In multiple functions of StorageManagerService.java and UserManagerService.java, there is a possible way to leave user'…

  • Unscored —

    In PermissionController, there is a possible way to get and retain permissions without user's consent due to a logic er…

  • Unscored —

    There is a unauthorized broadcast in the SprdContactsProvider. A third-party app could use this issue to delete Fdn con…

  • Unscored —

    android exported is used to set third-party app access permissions, and the default value of intent-filter is true. com…

  • Unscored —

    In multiple locations of the nanopb library, there is a possible way to corrupt memory when decoding untrusted protobuf…

  • Unscored —

    In param_find_digests_internal and related functions of the Titan-M source, there is a possible out of bounds write due…

  • Unscored —

    In hme_add_new_node_to_a_sorted_array of hme_utils.c, there is a possible out of bounds read due to a heap buffer overf…

  • Unscored —

    In parseRecursively of cppbor_parse.cpp, there is a possible out of bounds read due to an incorrect bounds check. This …

  • Unscored —

    In static definitions of GattServiceConfig.java, there is a possible permission bypass due to an insecure default value…

  • Unscored —

    In setPackageOrComponentEnabled of NotificationManagerService.java, there is a missing permission check. This could lea…

  • Unscored —

    In isFileUri of FileUtil.java, there is a possible way to bypass the check for a file:// scheme due to improper input v…

  • Unscored —

    In registerRemoteBugreportReceivers of DevicePolicyManagerService.java, there is a possible reporting of falsified bug …

  • Unscored —

    In ih264_resi_trans_quant_4x4_sse42 of ih264_resi_trans_quant_sse42.c, there is a possible out of bounds read due to a …

  • Unscored —

    In getAppSize of InstalldNativeService.cpp, there is a possible out of bounds read due to a missing bounds check. This …

  • Unscored —

    In updateApState of SoftApManager.java, there is a possible leak of hotspot state due to a missing permission check. Th…

  • Unscored —

    In llcp_dlc_proc_connect_pdu of llcp_dlc.cc, there is a possible out of bounds read due to a missing bounds check. This…

  • Unscored —

    In recycle of Parcel.java, there is a possible way to start foreground activity from background due to a permissions by…

  • Unscored —

    In gallery3d and photos, there is a possible permission bypass due to a confused deputy. This could lead to local infor…

  • Unscored —

    In the keystore library, there is a possible prevention of access to system Settings due to unsafe deserialization. Thi…

  • Unscored —

    In onCreate of ChooseLockGeneric.java, there is a possible permission bypass. This could lead to local escalation of pr…

  • Unscored —

    In getUniqueUsagesWithLabels of PermissionUsageHelper.java, there is a possible incorrect permission attribution due to…

  • Unscored —

    In grantEmbeddedWindowFocus of WindowManagerService.java, there is a possible way to change an input channel for embedd…

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-209324757References: N/A

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-208744915References: N/A

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-207254598References: N/A

  • Unscored —

    In TBD of TBD, there is a possible use after free bug. This could lead to local escalation of privilege with System exe…

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-209153114References: N/A

  • Unscored —

    In hypx_create_blob_dmabuf of faceauth_hypx.c, there is a possible out of bounds write due to a missing bounds check. T…

  • Unscored —

    In handle_ramdump of pixel_loader.c, there is a possible way to create a ramdump of non-secure memory due to a missing …

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-210936609References: N/A

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-211683760References: N/A

  • Unscored —

    In ioctl_dpm_qos_update and ioctl_event_control_set of (TBD), there is a possible out of bounds write due to an integer…

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-209906686References: N/A

  • Unscored —

    In auth_store of sjtag-driver.c, there is a possible read of uninitialized memory due to a missing bounds check. This c…

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-209252491References: N/A

  • Unscored —

    In exynos_secEnv_init of mach-gs101.c, there is a possible out of bounds read due to an incorrect bounds check. This co…

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-207116951References: N/A

  • Unscored —

    In onbind of ShannonRcsService.java, there is a possible access to protect data due to a missing permission check. This…

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-215565667References: N/A