Skip to content
OpenAdvisories

Platform

Android

6,319 known vulnerabilities.

6,319 results · Feed

  • Unscored —

    In onUidStateChanged of AppOpsService.java, there is a possible way to access location without a visible indicator due …

  • Unscored —
    CVE-2021-39692 Public exploit

    In onCreate of SetupLayoutActivity.java, there is a possible way to setup a work profile bypassing user consent due to …

  • Unscored —

    In multiple functions of odsign_main.cpp, there is a possible way to persist system attack due to a logic error in the …

  • Unscored —

    In setDisplayPadding of WallpaperManagerService.java, there is a possible way to cause a persistent DoS due to improper…

  • Unscored —

    In several functions of binder.c, there is a possible way to represent the wrong domain to SELinux due to a race condit…

  • Unscored —
    CVE-2021-39685 Public exploit

    In various setup methods of the USB gadget subsystem, there is a possible out of bounds write due to an incorrect flag …

  • Unscored —

    In ih264d_parse_decode_slice of ih264d_parse_slice.c, there is a possible out of bounds write due to a heap buffer over…

  • Unscored —

    In NotificationStackScrollLayout of NotificationStackScrollLayout.java, there is a possible way to bypass Factory Reset…

  • Unscored —

    In PackageManager, there is a possible permanent denial of service due to resource exhaustion. This could lead to local…

  • High 7.8
    CVE-2021-39793 Exploited

    In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the…

    KEV Apr 11, 2022
  • Unscored —

    In usb_gadget_giveback_request of core.c, there is a possible use after free out of bounds read due to a race condition…

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-208229524References: N/A

  • Unscored —

    In prepare_io_entry and prepare_response of lwis_ioctl.c and lwis_periodic_io.c, there is a possible out of bounds writ…

  • Unscored —

    In gasket_alloc_coherent_memory of gasket_page_table.c, there is a possible memory corruption due to a race condition. …

  • Unscored —

    In sendMessage of OneToOneChatImpl.java (? TBD), there is a possible way to send an RCS message without permissions due…

  • Unscored —

    In amcs_cdev_unlocked_ioctl of audiometrics.c, there is a possible out of bounds write due to improper input validation…

  • Unscored —

    In copy_io_entries of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead…

  • Unscored —

    In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to a…

  • Unscored —

    In TBD of TBD, there is a possible out of bounds read due to a missing bounds check. This could lead to local informati…

  • Unscored —

    In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local esc…

  • Unscored —

    In eicPresentationRetrieveEntryValue of acropora/app/identity/libeic/EicPresentation.c, there is a possible information…

  • Unscored —

    In cd_ParseMsg of cd_codec.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead …

  • Unscored —

    In gasket_free_coherent_memory_all of gasket_page_table.c, there is a possible memory corruption due to a double free. …

  • Unscored —

    In TuningProviderBase::GetTuningTreeSet of tuning_provider_base.cc, there is a possible out of bounds read due to a mis…

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-209014813References: N/A

  • Unscored —

    In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds read due to an…

  • Unscored —

    In TBD of TBD, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of…

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-207433926References: N/A

  • Unscored —

    In lwis_top_register_io of lwis_device_top.c, there is a possible out of bounds write due to an integer overflow. This …

  • Unscored —

    In iaxxx_btp_write_words of iaxxx-btp.c, there is a possible out of bounds read due to an incorrect bounds check. This …

  • Unscored —

    In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to a…

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-206977562References: N/A

  • Unscored —

    In __show_regs of process.c, there is a possible leak of kernel memory and addresses due to log information disclosure.…

  • Unscored —

    In ion_buffer_kmap_get of ion.c, there is a possible use-after-free due to an integer overflow. This could lead to loca…

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-173788806References: Upstream kernel

  • Unscored —

    In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to Incorrect Size Value. This could …

  • Unscored —

    In TBD of TBD, there is a possible user after free vulnerability due to a race condition. This could lead to local esca…

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-202160245References: N/A

  • Medium 5.9

    Microsoft Defender for Endpoint Spoofing Vulnerability

    Microsoft Defender for Endpoint Spoofing Vulnerability

  • Medium 5.5

    Universal Cross-Site Scripting Vulnerability in F-Secure SAFE Browser Protection for Android

    A vulnerability affecting F-Secure SAFE browser protection was discovered improper URL handling can be triggered to cause universal cross-site scripting through browsing protection in a SAFE web browser. User interaction is required prior to exploitation. A s…