Platform
Android
6,158 known vulnerabilities.
6,158 results · Feed
-
High 8.4
In enable_segment of remap.c, there is a possible permission bypass due to a logic error in the code. This could lead t…
-
Medium 6.7
In gmc_mb_msg_handler of gmc_mba.c, there is a possible memory corruption due to a confused deputy. This could lead to …
-
Critical 9.8
In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code. This could lead…
-
Medium 6.7
In multiple functions of remap.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could …
-
High 7.8
In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local…
-
High 7.8
In VPU, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of priv…
-
High 8.0
In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check. This co…
-
Medium 6.7
In multiple locations, there is a possible out-of-bounds write due to improper input validation. This could lead to loc…
-
High 8.8
In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead t…
-
High 7.8
In gf_base_update_finger_base of gf_base.c, there is a possible out-of-bounds write due to a heap buffer overflow. This…
-
High 8.8
In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote code execu…
-
Medium 6.7
In printf of printf.c, there is a possible out-of-bounds write due to improper input validation. This could lead to loc…
-
High 7.5
In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote de…
-
Medium 6.7
In addr_remap_address_map of remap.c, there is a possible escalation of privilege due to a logic error in the code. Thi…
-
Medium 6.7
In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local…
-
High 8.4
In Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead …
-
High 8.8
In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote esc…
-
High 7.8
In gf_ta_test_set_config of gf_ta_test.c, there is a possible out-of-bounds write due to improper input validation. Thi…
-
Medium 4.4
In VPU, there is a possible information dislclosure due to a logic error in the code. This could lead to local informat…
-
High 8.4
In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escal…
-
Medium 6.7
In Bootloader, there is a possible escalation of privilege due to a missing permission check. This could lead to local …
-
High 8.4
In ac_init_policy of init.c, there is a possible permission bypass due to a logic error in the code. This could lead to…
-
Medium 6.7
In gsa_sw_pk_hash_compare of image-auth-srv.c, there is a possible escalation of privilege due to a logic error in the …
-
Medium 6.7
In ac_init_one_sswrp of init.c, there is a possible escalation of privilege due to a logic error in the code. This coul…
-
Medium 4.4
In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information discl…
-
Medium 6.7
In Bootloader, there is a possible permission bypass due to a missing permission check. This could lead to local escala…
-
Medium 4.4
In do_sss_aes_gcm_256_op of crypto-aes.c, there is a possible out-of-bounds read due to a missing bounds check. This co…
-
High 8.8
In multiple locations, there is a possible out-of-bounds write due to a logic error in the code. This could lead to rem…
-
High 8.8
In Vp9DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This …
-
High 8.8
In Cellular Modem, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote cod…
-
High 8.5
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
-
High 8.0
Softish C6 Ear Camera and EarVision Android Application Missing authentication for critical function
After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel.
-
High 8.8
Softish C6 Ear Camera and EarVision Android Application Use of Hard-coded Credentials
An attacker could derive the camera's Wi-Fi password and connect to its wireless network. This weakens or eliminates the security value of the access-point password and may expose the live video stream, device services, status interfaces, and firmware-update …
-
High 7.6
Softish C6 Ear Camera and EarVision Android Application Authentication bypass by spoofing
An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position. This permits manipulation of device status responses, observation of application requests, and potential triggering of firmware-update behavior.
-
Medium 6.5
Softish C6 Ear Camera and EarVision Android Application Cleartext transmission of sensitive information
The C6 ear camera transmits live video to the EarVision Android application over unencrypted UDP streams. The application manifest permits cleartext traffic, and captured network traffic contains reconstructable JPEG or WEBP video frames transmitted over UDP.…
-
Critical 10.0
In MicroXR Blobstore, there is a possible way to access other app's files due to a missing permission check. This could…
-
Critical 10.0
In checkReadPermission of PermissionsManager.java, there is a possible way to monitor sensitive device state data due t…
-
High 7.8
In multiple functions of iommu.c, there is a possible out of bounds read/write due to improper input validation. This c…
-
High 7.8
In multiple functions of SmsController.java, there is a possible escalation of privilege due to a missing permission ch…
-
High 7.0
In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition. This coul…