Skip to content
OpenAdvisories

Platform

Android

6,319 known vulnerabilities.

6,319 results · Feed

  • Unscored —

    In acc_read of f_accessory.c, there is a possible memory corruption due to a use after free. This could lead to local e…

  • Unscored —

    In memzero_explicit of compiler-clang.h, there is a possible bypass of defense in depth due to uninitialized data. This…

  • Unscored —

    In TBD of TBD, there is a possible out of bounds write due to improper locking. This could lead to local escalation of …

  • Unscored —

    In ip6_xmit of ip6_output.c, there is a possible out of bounds write due to a use after free. This could lead to local …

  • Unscored —

    In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to …

  • Unscored —

    In RevertActiveSessions of apexd.cpp, there is a possible way to share the wrong file due to an unintentional MediaStor…

  • Unscored —

    In startListening of PluginManagerImpl.java, there is a possible way to disable arbitrary app components due to a missi…

  • Unscored —

    In RW_SetActivatedTagType of rw_main.cc, there is possible memory corruption due to a race condition. This could lead t…

  • Unscored —
    CVE-2021-0705 Public exploit

    In sanitizeSbn of NotificationManagerService.java, there is a possible way to keep service running in foreground and ke…

  • Unscored —
    CVE-2021-0652 Public exploit

    In VectorDrawable::VectorDrawable of VectorDrawable.java, there is a possible way to introduce a memory corruption due …

  • Unscored —

    In SecondStageMain of init.cpp, there is a possible use after free due to incorrect shared_ptr usage. This could lead t…

  • Unscored —

    In getAllSubInfoList of SubscriptionController.java, there is a possible way to retrieve a long term identifier without…

  • Unscored —

    In runDumpHeap of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused depu…

  • Unscored —

    In multiple methods of AAudioService, there is a possible use-after-free due to a race condition. This could lead to lo…

  • Unscored —

    In loadLabel of PackageItemInfo.java, there is a possible way to DoS a device by having a long label in an app due to i…

  • Unscored —

    Improper authorization in handler for custom URL scheme vulnerability in Nike App for Android versions prior to 2.177 a…

  • Unscored —

    InBody App for iOS versions prior to 2.3.30 and InBody App for Android versions prior to 2.2.90(510) contain a vulnerab…

  • Unscored —

    A vulnerability has been identified in SAP SuccessFactors Mobile Application for Android - versions older than 2108, wh…

  • Unscored —

    In onCreate of BluetoothPairingDialog, there is a possible way to enable Bluetooth without user consent due to a tapjac…

  • Unscored —

    In system properties, there is a possible information disclosure due to a missing permission check. This could lead to …

  • Unscored —

    In system properties, there is a possible information disclosure due to a missing permission check. This could lead to …

  • Unscored —

    In ParsedIntentInfo of ParsedIntentInfo.java, there is a possible parcel serialization/deserialization mismatch due to …

  • Unscored —

    In RGB_to_BGR1_portable of SkSwizzler_opts.h, there is a possible out of bounds read due to a missing bounds check. Thi…

  • Unscored —

    When extracting the incorrectly formatted flv file, the memory is damaged, the playback interface shows that the video …

  • Unscored —

    When extracting the incorrectly formatted avi file, the memory is damaged, the playback interface shows that the video …

  • Unscored —

    In ellipsize of Layout.java, there is a possible ANR due to improper input validation. This could lead to local denial …

  • Unscored —

    In the SELinux policy configured in system_app.te, there is a possible way for system_app to gain code execution in oth…

  • Unscored —
    CVE-2021-0683 Public exploit

    In runTraceIpcStop of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused …

  • Unscored —

    In openFile of HeapDumpProvider.java, there is a possible way to retrieve generated heap dumps from debuggable apps due…

  • Unscored —

    In get_sock_stat of xt_qtaguid.c, there is a possible out of bounds read due to a use after free. This could lead to lo…

  • Unscored —

    In ih264d_mark_err_slice_skip of ih264d_parse_pslice.c, there is a possible out of bounds write due to a heap buffer ov…

  • Unscored —

    In conditionallyRemoveIdentifiers of SubscriptionController.java, there is a possible way to retrieve a trackable ident…

  • Unscored —

    In onCreate of ConfirmConnectActivity.java, there is a possible pairing of untrusted Bluetooth devices due to a tapjack…

  • Unscored —

    In TouchInputMapper::sync of TouchInputMapper.cpp, there is a possible out of bounds write due to a use after free. Thi…

  • Unscored —

    In sendBroadcastToInstaller of FirstScreenBroadcast.java, there is a possible activity launch due to an unsafe PendingI…

  • Unscored —

    In getDefaultSmsPackage of RoleManagerService.java, there is a possible way to get information about the default sms ap…

  • Unscored —
    CVE-2021-0595 Public exploit

    In lockAllProfileTasks of RootWindowContainer.java, there is a possible way to access the work profile without the prof…

  • Unscored —
    CVE-2021-0688 Public exploit

    In lockNow of PhoneWindowManager.java, there is a possible lock screen bypass due to a race condition. This could lead …

  • Unscored —

    In sendAccessibilityEvent of NotificationManagerService.java, there is a possible disclosure of notification data due t…

  • Unscored —

    In Oppo's battery application, the third-party SDK provides the function of loading a third-party Provider, which can b…