Platform
Android
6,319 known vulnerabilities.
6,319 results · Feed
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-209421931References: N/A
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-211162353References: N/A
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-210594998References: N/A
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-204956204References: N/A
-
Unscored —
In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This …
-
Unscored —
In asn1_parse of asn1.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to lo…
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-204891956References: N/A
-
Unscored —
In asn1_p256_int of crypto/asn1.c, there is a possible out of bounds read due to an incorrect bounds check. This could …
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-210083655References: N/A
-
Unscored —
In asn1_ec_pkey_parse of acropora/crypto/asn1_common.c, there is a possible out of bounds read due to an incorrect boun…
-
Unscored —
In unflatten of GraphicBuffer.cpp, there is a possible arbitrary code execution due to improper input validation. This …
-
Unscored —
In ipu_core_jqs_msg_transport_kernel_write_sync of ipu-core-jqs-msg-transport.c, there is a possible use-after-free due…
-
Unscored —
In lock_sock_nested of sock.c, there is a possible use after free due to a race condition. This could lead to local esc…
-
Unscored —
In rcu_cblist_dequeue of rcu_segcblist.c, there is a possible use-after-free due to improper locking. This could lead t…
-
Unscored —
In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local esc…
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-210712565References: N/A
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-211685939References: N/A
-
Unscored —
In TBD of TBD, there is a possible use-after-free due to a race condition. This could lead to local escalation of privi…
-
Unscored —
In uploadFile of FileUploadServiceImpl.java, there is a possible incorrect file access due to a confused deputy. This c…
-
Unscored —
In closef of label_backends_android.c, there is a possible way to corrupt memory due to a double free. This could lead …
-
Unscored —
The UE and the EMM communicate with each other using NAS messages. When a new NAS message arrives from the EMM, the mod…
-
Unscored —
In nfa_dm_check_set_config of nfa_dm_main.cc, there is a possible out of bounds write due to a missing bounds check. Th…
-
Unscored —
In startLegacyVpnPrivileged of Vpn.java, there is a possible way to retrieve VPN credentials due to a protocol downgrad…
-
Unscored —
In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent denial of service due to resource exhaustio…
-
Unscored —CVE-2022-20142 Public exploit
In createFromParcel of GeofenceHardwareRequestParcelable.java, there is a possible arbitrary code execution due to parc…
-
Unscored —
In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local esca…
-
Unscored —CVE-2022-20140 Public exploit
In read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an incorrect bounds check. This could l…
-
Unscored —CVE-2022-20138 Public exploit
In ACTION_MANAGED_PROFILE_PROVISIONED of DevicePolicyManagerService.java, there is a possible way for unprivileged app …
-
Unscored —
In onCreateContextMenu of NetworkProviderSettings.java, there is a possible way for non-owner users to change WiFi sett…
-
Unscored —
In writeToParcel of GateKeeperResponse.java, there is a possible parcel format mismatch. This could lead to local escal…
-
Unscored —
In readArguments of CallSubjectDialog.java, there is a possible way to trick the user to call the wrong phone number du…
-
Unscored —
In setDiscoverableTimeout of AdapterService.java, there is a possible bypass of user interaction due to a missing permi…
-
Unscored —
In lg_probe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to im…
-
Unscored —
In nci_proc_rf_management_ntf of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. Thi…
-
Unscored —CVE-2022-20130 Public exploit
In transportDec_OutOfBandConfig of tpdec_lib.cpp, there is a possible out of bounds write due to a heap buffer overflow…
-
Unscored —
In registerPhoneAccount of PhoneAccountRegistrar.java, there is a possible way to prevent the user from selecting a pho…
-
Unscored —
In ce_t4t_data_cback of ce_t4t.cc, there is a possible out of bounds write due to a double free. This could lead to rem…
-
Unscored —CVE-2022-20126 Public exploit
In setScanMode of AdapterService.java, there is a possible way to enable Bluetooth discovery mode without user interact…
-
Unscored —
In GBoard, there is a possible way to bypass factory reset protections due to a sandbox escape. This could lead to loca…
-
Unscored —
In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds chec…