Skip to content
OpenAdvisories

Platform

Android

6,319 known vulnerabilities.

6,319 results · Feed

  • Unscored —

    In getNetworkTypeForSubscriber of PhoneInterfaceManager.java, there is a possible way to determine whether an app is in…

  • Unscored —

    In getDeviceIdWithFeature of PhoneInterfaceManager.java, there is a possible way to determine whether an app is install…

  • Unscored —

    In getMeidForSlot of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, with…

  • Unscored —

    In getDeviceId of PhoneSubInfoController.java, there is a possible way to determine whether an app is installed, withou…

  • Unscored —

    In checkExistsAndEnforceCannotModifyImmutablyRestrictedPermission of PermissionManagerService.java, there is a possible…

  • Unscored —

    In getMimeGroup of PackageManagerService.java, there is a possible way to determine whether an app is installed, withou…

  • Unscored —

    In onCreate of AllowBindAppWidgetActivity.java, there is a possible bypass of user interaction requirements due to uncl…

  • Unscored —

    In onCreate of UsbPermissionActivity.java, there is a possible way to grant an app access to USB without informed user …

  • Unscored —

    In several functions of DatabaseManager.java, there is a possible leak of Bluetooth MAC addresses due to log informatio…

  • Unscored —

    In phNxpNHal_DtaUpdate of phNxpNciHal_dta.cc, there is a possible out of bounds write due to an incorrect bounds check.…

  • Unscored —

    In AdapterService and GattService definition of AndroidManifest.xml, there is a possible way to disable bluetooth conne…

  • Unscored —

    In OnMetadataChangedListener of AdvancedBluetoothDetailsHeaderController.java, there is a possible leak of Bluetooth MA…

  • Unscored —

    In nfaHciCallback of HciEventManager.cpp, there is a possible out of bounds read due to a missing bounds check. This co…

  • Unscored —

    In btif_in_hf_client_generic_evt of btif_hf_client.cc, there is a possible Bluetooth service crash due to a missing nul…

  • Unscored —

    In onCreate of PaymentDefaultDialog.java, there is a possible way to change a default payment app without user consent …

  • Unscored —

    In __configfs_open_file of file.c, there is a possible use-after-free due to improper locking. This could lead to local…

  • Unscored —

    In (TBD) of (TBD), there is a possible out of bounds write due to a missing bounds check. This could lead to local esca…

  • Unscored —

    In regmap_exit of regmap.c, there is a possible use-after-free due to improper locking. This could lead to local escala…

  • Unscored —

    In btu_hcif_process_event of btu_hcif.cc, there is a possible out of bounds read due to an incorrect bounds check. This…

  • Unscored —

    In gadget_dev_desc_UDC_show of configfs.c, there is a possible disclosure of kernel heap memory due to a race condition…

  • Unscored —

    In __dwc3_gadget_ep0_queue of ep0.c, there is a possible out of bounds write due to improper locking. This could lead t…

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-126949257References: N/A

  • Unscored —

    In do_ipt_get_ctl and do_ipt_set_ctl of ip_tables.c, there is a possible way to leak kernel information due to uninitia…

  • Unscored —

    In update of km_compat.cpp, there is a possible loss of potentially sensitive data due to a logic error in the code. Th…

  • Unscored —

    In getTitle of AccessPoint.java, there is a possible unhandled exception due to a missing null check. This could lead t…

  • Unscored —

    In vorbis_book_decodev_set of codebook.c, there is a possible out of bounds write due to a missing bounds check. This c…

  • Unscored —
    CVE-2021-0963 Public exploit

    In onCreate of KeyChainActivity.java, there is a possible way to use an app certificate stored in keychain due to a tap…

  • Unscored —

    In code generated by BuildParcelFields of generate_cpp.cpp, there is a possible way for a crafted parcelable to reveal …

  • Unscored —

    In osi_malloc and osi_calloc of allocator.cc, there is a possible out of bounds write due to an integer overflow. This …

  • Unscored —

    In quota_proc_write of xt_quota2.c, there is a possible way to read kernel memory due to uninitialized data. This could…

  • Unscored —

    In createFromParcel of GpsNavigationMessage.java, there is a possible Parcel serialization/deserialization mismatch. Th…

  • Unscored —

    In doCropPhoto of PhotoSelectionHandler.java, there is a possible permission bypass due to a confused deputy. This coul…

  • Unscored —

    In AndroidManifest.xml of Settings, there is a possible pairing of a Bluetooth device without user's consent due to a m…

  • Unscored —

    In C2SoftMP3::process() of C2SoftMp3Dec.cpp, there is a possible out of bounds write due to a heap buffer overflow. Thi…

  • Unscored —

    In pf_write_buf of FuseDaemon.cpp, there is possible memory corruption due to a race condition. This could lead to loca…

  • Unscored —

    In NfcTag::discoverTechnologies (activation) of NfcTag.cpp, there is a possible out of bounds write due to an incorrect…

  • Unscored —

    In MPEG4Source::read of MPEG4Extractor.cpp, there is a possible out of bounds write due to a missing bounds check. This…

  • Unscored —

    In setOnClickActivityIntent of SearchWidgetProvider.java, there is a possible way to access contacts and history bookma…

  • Unscored —

    In createNoCredentialsPermissionNotification and related functions of AccountManagerService.java, there is a possible w…

  • Unscored —
    CVE-2021-0954 Public exploit

    In ResolverActivity, there is a possible user interaction bypass due to a tapjacking/overlay attack. This could lead to…