Platform
Android
6,319 known vulnerabilities.
6,319 results · Feed
-
Unscored —
In eicOpsDecryptAes128Gcm of acropora/app/identity/identity_support.c, there is a possible out of bounds write due to a…
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-195580473References: N/A
-
Unscored —
In TBD of TBD, there is a possible downgrade attack due to under utilized anti-rollback protections. This could lead to…
-
Unscored —
In dsi_panel_debugfs_read_cmdset of dsi_panel.c, there is a possible disclosure of freed kernel heap memory due to a us…
-
High 7.8CVE-2021-1048 Exploited
In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lea…
KEV May 23, 2022 -
Unscored —
In (TBD) of (TBD), there is a possible out of bounds read due to memory corruption. This could lead to local informatio…
-
Unscored —
In ActivityThread.java, there is a possible way to collide the content provider's authorities. This could lead to local…
-
Unscored —
In getService of IServiceManager.cpp, there is a possible unhandled exception due to an integer overflow. This could le…
-
Unscored —
In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to a missing bounds check. This…
-
Medium 6.4CVE-2021-0920 Exploited
In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to loc…
KEV May 23, 2022 -
Unscored —
In ParsingPackageImpl of ParsingPackageImpl.java, there is a possible parcel serialization/deserialization mismatch due…
-
Unscored —
In enforceCrossUserOrProfilePermission of PackageManagerService.java, there is a possible bypass of INTERACT_ACROSS_PRO…
-
Unscored —
In xhci_vendor_get_ops of xhci.c, there is a possible out of bounds read due to a missing bounds check. This could lead…
-
Unscored —
In createOrUpdate of Permission.java, there is a possible way to gain internal permissions due to a missing permission …
-
Unscored —
In rw_t4t_sm_detect_ndef of rw_t4t.cc, there is a possible out of bounds read due to an incorrect bounds check. This co…
-
Unscored —
In stopVpnProfile of Vpn.java, there is a possible VPN profile reset due to a permissions bypass. This could lead to lo…
-
Unscored —
In WT_InterpolateNoLoop of eas_wtengine.c, there is a possible out of bounds read due to an incorrect bounds check. Thi…
-
Unscored —
In onCreate of NfcImportVCardActivity.java, there is a possible way to add a contact without user's consent due to a mi…
-
Unscored —
In requestChannelBrowsable of TvInputManagerService.java, there is a possible permission bypass due to a logic error in…
-
Unscored —CVE-2021-0928 Public exploit
In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due …
-
Unscored —
In ion_dma_buf_end_cpu_access and related functions of ion.c, there is a possible way to corrupt memory due to a use af…
-
Unscored —
In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds c…
-
Unscored —
In getAlias of BluetoothDevice.java, there is a possible way to create misleading permission dialogs due to missing dat…
-
Unscored —
In Android TV , there is a possible silent pairing due to lack of rate limiting in the pairing flow. This could lead to…
-
Unscored —
In showNotification of NavigationModeController.java, there is a possible confused deputy due to an unsafe PendingInten…
-
Unscored —
In enqueueNotification of NetworkPolicyManagerService.java, there is a possible way to retrieve a trackable identifier …
-
Unscored —
In onCreate of CompanionDeviceActivity.java or DeviceChooserActivity.java, there is a possible way for HTML tags to int…
-
Unscored —
In onReceive of BluetoothPermissionRequest.java, there is a possible phishing attack allowing a malicious Bluetooth dev…
-
Medium 4.7
Server Side Request Forgery in Zoom Client for Meetings chat
The Zoom Client for Meetings before version 5.7.3 (for Android, iOS, Linux, macOS, and Windows) contain a server side request forgery vulnerability in the chat\'s "link preview" functionality. In versions prior to 5.7.3, if a user were to enable the chat\'s "…
-
Unscored —
A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Androi…
-
Medium 5.8
Intent URI permissions manipulation in nextcloud news-android
nextcloud news-android is an Android client for the Nextcloud news/feed reader app. In affected versions the Nextcloud News for Android app has a security issue by which a malicious application installed on the same device can send it an arbitrary Intent that…
-
Medium 5.3
Process memory exposure in Zoom Client and other products
A vulnerability was discovered in the Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and iOS) before version 5.8.1, Zoom Client for Meetings for intune (for And…
-
High 7.3
Buffer overflow in Zoom client and other products
A buffer overflow vulnerability was discovered in Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and iOS) before version 5.8.1, Zoom Client for Meetings for int…
-
Unscored —
Improper authorization in handler for custom URL scheme vulnerability in Android App 'Mercari (Merpay) - Marketplace an…
-
High 7.7
Improper validation of the cloud certificate chain in Mobile Connect allows man-in-the-middle attack to impersonate the…
-
Critical 9.0
Improper validation of the cloud certificate chain in Mobile Client allows man-in-the-middle attack to impersonate the …
-
Unscored —
In Browser app, there is a possible information disclosure due to a missing permission check. This could lead to local …
-
Low 3.7
Retained exploded messages in Keybase Clients for Android and iOS
The Keybase Client for Android before version 5.8.0 and the Keybase Client for iOS before version 5.8.0 fails to properly remove exploded messages initiated by a user if the receiving user places the chat session in the background while the sending user explo…
-
Medium 5.9CVE-2021-36808 Public exploit
A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before ver…
-
Unscored —
In set_default_passthru_cfg of passthru.c, there is a possible out of bounds read due to a missing bounds check. This c…