Platform
Android
6,319 known vulnerabilities.
6,319 results · Feed
-
Unscored —
In acc_read of f_accessory.c, there is a possible memory corruption due to a use after free. This could lead to local e…
-
Unscored —
In memzero_explicit of compiler-clang.h, there is a possible bypass of defense in depth due to uninitialized data. This…
-
Unscored —
In TBD of TBD, there is a possible out of bounds write due to improper locking. This could lead to local escalation of …
-
Unscored —
In ip6_xmit of ip6_output.c, there is a possible out of bounds write due to a use after free. This could lead to local …
-
Unscored —
In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to …
-
Unscored —
In RevertActiveSessions of apexd.cpp, there is a possible way to share the wrong file due to an unintentional MediaStor…
-
Unscored —
In startListening of PluginManagerImpl.java, there is a possible way to disable arbitrary app components due to a missi…
-
Unscored —
In RW_SetActivatedTagType of rw_main.cc, there is possible memory corruption due to a race condition. This could lead t…
-
Unscored —CVE-2021-0705 Public exploit
In sanitizeSbn of NotificationManagerService.java, there is a possible way to keep service running in foreground and ke…
-
Unscored —CVE-2021-0652 Public exploit
In VectorDrawable::VectorDrawable of VectorDrawable.java, there is a possible way to introduce a memory corruption due …
-
Unscored —
In SecondStageMain of init.cpp, there is a possible use after free due to incorrect shared_ptr usage. This could lead t…
-
Unscored —
In getAllSubInfoList of SubscriptionController.java, there is a possible way to retrieve a long term identifier without…
-
Unscored —
In runDumpHeap of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused depu…
-
Unscored —
In multiple methods of AAudioService, there is a possible use-after-free due to a race condition. This could lead to lo…
-
Unscored —
In loadLabel of PackageItemInfo.java, there is a possible way to DoS a device by having a long label in an app due to i…
-
Unscored —
Improper authorization in handler for custom URL scheme vulnerability in Nike App for Android versions prior to 2.177 a…
-
Unscored —
InBody App for iOS versions prior to 2.3.30 and InBody App for Android versions prior to 2.2.90(510) contain a vulnerab…
-
Unscored —
A vulnerability has been identified in SAP SuccessFactors Mobile Application for Android - versions older than 2108, wh…
-
Unscored —
In onCreate of BluetoothPairingDialog, there is a possible way to enable Bluetooth without user consent due to a tapjac…
-
Unscored —
In system properties, there is a possible information disclosure due to a missing permission check. This could lead to …
-
Unscored —
In system properties, there is a possible information disclosure due to a missing permission check. This could lead to …
-
Unscored —
In ParsedIntentInfo of ParsedIntentInfo.java, there is a possible parcel serialization/deserialization mismatch due to …
-
Unscored —
In RGB_to_BGR1_portable of SkSwizzler_opts.h, there is a possible out of bounds read due to a missing bounds check. Thi…
-
Unscored —
When extracting the incorrectly formatted flv file, the memory is damaged, the playback interface shows that the video …
-
Unscored —
When extracting the incorrectly formatted avi file, the memory is damaged, the playback interface shows that the video …
-
Unscored —
In ellipsize of Layout.java, there is a possible ANR due to improper input validation. This could lead to local denial …
-
Unscored —
In the SELinux policy configured in system_app.te, there is a possible way for system_app to gain code execution in oth…
-
Unscored —CVE-2021-0683 Public exploit
In runTraceIpcStop of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused …
-
Unscored —
In openFile of HeapDumpProvider.java, there is a possible way to retrieve generated heap dumps from debuggable apps due…
-
Unscored —
In get_sock_stat of xt_qtaguid.c, there is a possible out of bounds read due to a use after free. This could lead to lo…
-
Unscored —
In ih264d_mark_err_slice_skip of ih264d_parse_pslice.c, there is a possible out of bounds write due to a heap buffer ov…
-
Unscored —
In conditionallyRemoveIdentifiers of SubscriptionController.java, there is a possible way to retrieve a trackable ident…
-
Unscored —
In onCreate of ConfirmConnectActivity.java, there is a possible pairing of untrusted Bluetooth devices due to a tapjack…
-
Unscored —
In TouchInputMapper::sync of TouchInputMapper.cpp, there is a possible out of bounds write due to a use after free. Thi…
-
Unscored —
In sendBroadcastToInstaller of FirstScreenBroadcast.java, there is a possible activity launch due to an unsafe PendingI…
-
Unscored —
In getDefaultSmsPackage of RoleManagerService.java, there is a possible way to get information about the default sms ap…
-
Unscored —CVE-2021-0595 Public exploit
In lockAllProfileTasks of RootWindowContainer.java, there is a possible way to access the work profile without the prof…
-
Unscored —CVE-2021-0688 Public exploit
In lockNow of PhoneWindowManager.java, there is a possible lock screen bypass due to a race condition. This could lead …
-
Unscored —
In sendAccessibilityEvent of NotificationManagerService.java, there is a possible disclosure of notification data due t…
-
Unscored —
In Oppo's battery application, the third-party SDK provides the function of loading a third-party Provider, which can b…