Platform
Android
6,319 known vulnerabilities.
6,319 results · Feed
-
Medium 5.5
Universal Cross-Site Scripting Vulnerability in F-Secure SAFE Browser for Android
A vulnerability affecting F-Secure SAFE browser was discovered whereby browsers loads images automatically this vulnerability can be exploited remotely by an attacker to execute the JavaScript can be used to trigger universal cross-site scripting through the …
-
Unscored —
In TBD of TBD, there is a possible out of bounds read due to TBD. This could lead to local information disclosure with …
-
Unscored —
In HandleTransactionIoEvent of actuator_driver.cc, there is a possible out of bounds read due to a heap buffer overflow…
-
Unscored —
In startVideoStream() there is a possibility of an OOB Read in the heap, when the camera buffer is ‘zero’ in size.Produ…
-
Unscored —
In isServiceDistractionOptimized of CarPackageManagerService.java, there is a possible disclosure of installed packages…
-
Unscored —
In fastboot, there is a possible secure boot bypass due to a configuration error. This could lead to local escalation o…
-
Unscored —
In writeThrowable of AndroidFuture.java, there is a possible parcel serialization/deserialization mismatch due to impro…
-
Unscored —
In GKI_getbuf of gki_buffer.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead …
-
Unscored —
In btm_sec_connected and btm_sec_disconnected of btm_sec.cc file , there is a possible use after free. This could lead …
-
Unscored —
In code generated by aidl_const_expressions.cpp, there is a possible out of bounds read due to uninitialized data. This…
-
Unscored —
In onCreate of InstallCaCertificateWarning.java, there is a possible way to mislead an user about CA installation circu…
-
Unscored —
In onActivityViewReady of DetailDialog.kt, there is a possible Intent Redirect due to a confused deputy. This could lea…
-
Unscored —
In extract of MediaMetricsItem.h, there is a possible out of bounds read due to improper input validation. This could l…
-
Unscored —
In checkSpsUpdated of AAVCAssembler.cpp, there is a possible out of bounds read due to a heap buffer overflow. This cou…
-
Unscored —
In openFileAndEnforcePathPermissionsHelper of MediaProvider.java, there is a possible bypass of a permissions check due…
-
Unscored —
In LoadedPackage::Load of LoadedArsc.cpp, there is a possible out of bounds read due to a missing bounds check. This co…
-
Unscored —
In checkUriPermission of MediaProvider.java , there is a possible way to gain access to the content of media provider c…
-
Unscored —
ismsEx service is a vendor service in unisoc equipment。ismsEx service is an extension of sms system service，but it does…
-
Unscored —
ims_ex is a vendor system service used to manage VoLTE in unisoc devices，But it does not verify the caller's permission…
-
Unscored —
In clear_data_dlg_text of strings.xml, there is a possible situation when "Clear storage" functionality sets up the wro…
-
Unscored —
In updatePackageMappingsData of UsageStatsService.java, there is a possible way to bypass security and privacy settings…
-
Unscored —
-
Medium 4.7
Zoom Chat Susceptible to Zip Bombing
The Zoom Client for Meetings chat functionality was susceptible to Zip bombing attacks in the following product versions: Android before version 5.8.6, iOS before version 5.9.0, Linux before version 5.8.6, macOS before version 5.7.3, and Windows before versio…
-
Medium 5.5
Improper access control in the Intel(R) Smart Campus Android application before version 6.1 may allow authenticated use…
-
Medium 5.5
Improper access control in the Intel(R) Capital Global Summit Android application may allow an authenticated user to po…
-
Medium 5.9
Microsoft OneDrive for Android Security Feature Bypass Vulnerability
Microsoft OneDrive for Android Security Feature Bypass Vulnerability
-
High 7.5
Microsoft Teams Denial of Service Vulnerability
Microsoft Teams Denial of Service Vulnerability
-
Medium 4.3
Microsoft Edge for Android Spoofing Vulnerability
Microsoft Edge for Android Spoofing Vulnerability
-
High 7.5
SQL Injection in FileContentProvider (GHSL-2021-1007)
The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. The Nextcloud Android app uses content providers to manage its data. Prior to version 3.18.1, the providers `FileContentProvider` and `DiskLruImageCacheFilePro…
-
Unscored —
Jimoty App for Android versions prior to 3.7.42 uses a hard-coded API key for an external service. By exploiting this v…
-
Unscored —
The broadcast that DevicePickerFragment sends when a new device is paired doesn't have any permission checks, so any ap…
-
Unscored —
In LocationSettingsActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking/overlay attack. This co…
-
Unscored —
In setLaunchIntent of BluetoothDevicePickerPreferenceController.java, there is a possible way to invoke an arbitrary br…
-
Unscored —
In target_init of gs101/abl/target/slider/target.c, there is a possible allocation of RWX memory due to a logic error i…
-
Unscored —
In copy_from_mbox of sss_ice_util.c, there is a possible out of bounds write due to a missing bounds check. This could …
-
Unscored —
In mgm_alloc_page of memory_group_manager.c, there is a possible out of bounds write due to an incorrect bounds check. …
-
Unscored —
In delete_protocol of main.c, there is a possible arbitrary code execution due to a use after free. This could lead to …
-
Unscored —
In sec_SHA256_Transform of sha256_core.c, there is a possible way to read heap data due to uninitialized data. This cou…
-
Unscored —
In init of vendor_graphicbuffer_meta.cpp, there is a possible use after free due to a race condition. This could lead t…
-
Unscored —
In <TBD> of <TBD>, there is a possible bypass of Factory Reset Protection due to <TBD>. This could lead to local escala…