Platform
Android
6,319 known vulnerabilities.
6,319 results · Feed
-
Unscored —
In Settings, there is a possible way to display an incorrect app name due to improper input validation. This could lead…
-
Unscored —
In Settings, there is a possible way to make the user enable WiFi due to improper input validation. This could lead to …
-
Unscored —
In tremolo, there is a possible out of bounds read due to an integer overflow. This could lead to remote information di…
-
Unscored —
In Media, there is a possible way to determine whether an app is installed, without query permissions, due to side chan…
-
Unscored —
In AudioService, there is a possible way to determine whether an app is installed, without query permissions, due to si…
-
Unscored —
In libstagefright, there is a possible out of bounds write due to an integer overflow. This could lead to local escalat…
-
Unscored —
In WindowManager, there is a possible way to start a foreground activity from the background due to a missing permissio…
-
Unscored —
In PermissionController, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local…
-
Unscored —
In Framework, there is a possible way to determine whether an app is installed, without query permissions, due to side …
-
Unscored —
In DevicePolicyManager, there is a possible way to reveal the existence of an installed package without proper query pe…
-
Unscored —
In DomainVerificationService, there is a possible way to access app domain verification information due to a missing pe…
-
Unscored —
In Bubbles, there is a possible way to interfere with Bubbles due to a permissions bypass. This could lead to local esc…
-
Unscored —
In Settings, there is a possible way to read Bluetooth device names without proper permissions due to a missing permiss…
-
Unscored —
In PackageManager, there is a possible way to change the splash screen theme of other apps due to a missing permission …
-
Unscored —CVE-2021-39749 Public exploit
In WindowManager, there is a possible way to start non-exported and protected activities due to a missing permission ch…
-
Unscored —
In InputMethodEditor, there is a possible way to access some files accessible to Settings due to an unsafe PendingInten…
-
Unscored —
In Settings Provider, there is a possible way to list values of non-readable global settings due to a permissions bypas…
-
Unscored —
In PermissionController, there is a possible way to delete some local files due to an unsafe PendingIntent. This could …
-
Unscored —
In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, du…
-
Unscored —
In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, du…
-
Unscored —
In PackageManager, there is a possible way to update the last usage time of another package due to a missing permission…
-
Unscored —
In Voicemail, there is a possible way to retrieve a trackable identifier due to a missing permission check. This could …
-
Unscored —
In Keymaster, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio…
-
Unscored —
In Messaging, there is a possible way to bypass attachment restrictions due to improper input validation. This could le…
-
Unscored —
In ArrayMap, there is a possible leak of the content of SMS messages due to log information disclosure. This could lead…
-
Unscored —
In createGeneralSlice of ConnectedDevicesSliceProvider.java.java, there is a possible permission bypass due to an unsaf…
-
Unscored —
In createBluetoothDeviceSlice of ConnectedDevicesSliceProvider.java, there is a possible permission bypass due to an un…
-
Medium 4.3
F-Secure SAFE Browser vulnerable to USSD attacks
A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website attached with USSD code in JavaScript or iFrame can trigger dialer application from F-Secure browser which can be exploited by an attacker to send unwanted USSD mess…
-
Unscored —
In sendSipAccountsRemovedNotification of SipAccountRegistry.java, there is a possible permission bypass due to an unsaf…
-
Unscored —
In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to an incorrect bounds check. T…
-
Unscored —
In onReceive of AppRestrictionsFragment.java, there is a possible way to start a phone call without permissions due to …
-
Unscored —CVE-2021-39706 Public exploit
In onResume of CredentialStorage.java, there is a possible way to cleanup content of credentials storage due to a missi…
-
Unscored —CVE-2021-39704 Public exploit
In deleteNotificationChannelGroup of NotificationManagerService.java, there is a possible way to run foreground service…
-
Unscored —
In updateState of UsbDeviceManager.java, there is a possible unauthorized access of files due to a confused deputy. Thi…
-
Unscored —
In serviceConnection of ControlsProviderLifecycleManager.kt, there is a possible way to keep service running in foregro…
-
Unscored —
In onCreate of RequestManageCredentials.java, there is a possible way for a third party app to install certificates wit…
-
Unscored —
In aio_poll_complete_work of aio.c, there is a possible memory corruption due to a use after free. This could lead to l…
-
Unscored —
In checkFileUriDestination of DownloadProvider.java, there is a possible way to bypass external storage private directo…
-
Unscored —
In createOrUpdate of BasePermission.java, there is a possible permission bypass due to a logic error in the code. This …
-
Unscored —
In parse of RoleParser.java, there is a possible way for default apps to get permissions explicitly denied by the user …