Skip to content
OpenAdvisories

Platform

Android

6,319 known vulnerabilities.

6,319 results · Feed

  • Unscored —

    In getUpTo17bits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could…

  • Unscored —

    In getNbits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead…

  • Unscored —

    In DeltaPerformer::Write of delta_performer.cc, there is a possible use of untrusted input due to improper input valida…

  • Unscored —

    In checkUriPermission and related functions of MediaProvider.java, there is a possible way to access external files due…

  • Unscored —

    In onPackageModified of VoiceInteractionManagerService.java, there is a possible change of default applications due to …

  • Unscored —

    In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible out of bounds read due to a missing…

  • Unscored —

    In getMediaOutputSliceAction of RemoteMediaSlice.java, there is a possible permission bypass due to an unsafe PendingIn…

  • Unscored —

    In nci_proc_rf_management_ntf of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. Thi…

  • Unscored —

    In Write of NxpMfcReader.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to …

  • Unscored —

    In CrossProfileAppsServiceImpl.java, there is the possibility of an application's INTERACT_ACROSS_PROFILES grant state …

  • Unscored —

    In oggpack_look of bitwise.c, there is a possible out of bounds read due to a missing bounds check. This could lead to …

  • Unscored —

    In deletePackageVersionedInternal of PackageManagerService.java, there is a possible way to exit Screen Pinning due to …

  • Unscored —
    CVE-2021-0399 Public exploit

    In qtaguid_untag of xt_qtaguid.c, there is a possible memory corruption due to a use after free. This could lead to loc…

  • Unscored —
    CVE-2021-0392 Public exploit

    In main of main.cpp, there is a possible memory corruption due to a double free. This could lead to local escalation of…

  • Unscored —
    CVE-2021-0390 Public exploit

    In various methods of WifiNetworkSuggestionsManager.java, there is a possible modification of suggested networks due to…

  • Unscored —
    CVE-2021-0397 Public exploit

    In sdp_copy_raw_data of sdp_discovery.cc, there is a possible system compromise due to a double free. This could lead t…

  • Unscored —

    In bindServiceLocked of ActiveServices.java, there is a possible foreground service launch due to a confused deputy. Th…

  • Unscored —
    CVE-2021-0391 Public exploit

    In onCreate() of ChooseTypeAndAccountActivity.java, there is a possible way to learn the existence of an account, witho…

  • Unscored —
    CVE-2021-0394 Public exploit

    In android_os_Parcel_readString8 of android_os_Parcel.cpp, there is a possible out of bounds read due to a missing boun…

  • Unscored —

    In StopServicesAndLogViolations of reboot.cpp, there is possible memory corruption due to a use after free. This could …

  • Unscored —
    CVE-2021-0393 Public exploit

    In Scanner::LiteralBuffer::NewCapacity of scanner.cc, there is a possible out of bounds write due to an integer overflo…

  • Unscored —
    CVE-2021-0396 Public exploit

    In Builtins::Generate_ArgumentsAdaptorTrampoline of builtins-arm.cc and related files, there is a possible out of bound…

  • Unscored —

    In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege…

  • Unscored —

    In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege…

  • Unscored —

    In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege…

  • Unscored —

    In jpeg, there is a possible out of bounds write due to improper input validation. This could lead to local escalation …

  • Unscored —

    In netdiag, there is a possible information disclosure due to a missing permission check. This could lead to local info…

  • Unscored —

    In mobile_log_d, there is a possible information disclosure due to improper input validation. This could lead to local …

  • Unscored —

    In performance driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local …

  • Unscored —

    In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio…

  • Medium 5.0

    Microsoft Edge for Android Information Disclosure Vulnerability

    Microsoft Edge for Android Information Disclosure Vulnerability

  • Unscored —
    CVE-2021-0325 Public exploit

    In ih264d_parse_pslice of ih264d_parse_pslice.c, there is a possible out of bounds write due to a heap buffer overflow.…

  • Unscored —
    CVE-2021-0326 Public exploit

    In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lea…

  • Unscored —
    CVE-2021-0327 Public exploit

    In getContentProviderImpl of ActivityManagerService.java, there is a possible permission bypass due to non-restored bin…

  • Unscored —
    CVE-2021-0328 Public exploit

    In onBatchScanReports and deliverBatchScan of GattService.java, there is a possible way to retrieve Bluetooth scan resu…

  • High 7.5

    Square OkHttp can accept the wrong certificate

    In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction…

  • Unscored —
    CVE-2021-0329 Public exploit

    In several native functions called by AdvertiseManager.java, there is a possible out of bounds write due to a missing b…

  • Unscored —
    CVE-2021-0314 Public exploit

    In onCreate of UninstallerActivity, there is a possible way to uninstall an all without informed user consent due to a …

  • Unscored —
    CVE-2021-0330 Public exploit

    In add_user_ce and remove_user_ce of storaged.cpp, there is a possible use-after-free due to improper locking. This cou…

  • Unscored —
    CVE-2021-0331 Public exploit

    In onCreate of NotificationAccessConfirmationActivity.java, there is a possible overlay attack due to an insecure defau…