Skip to content
OpenAdvisories

Platform

Android

6,319 known vulnerabilities.

6,319 results · Feed

  • Unscored —
    CVE-2021-0313 Public exploit

    In isWordBreakAfter of LayoutUtils.cpp, there is a possible way to slow or crash a TextView due to improper input valid…

  • Unscored —

    In WAVSource::read of WAVExtractor.cpp, there is a possible out of bounds write due to an integer overflow. This could …

  • Unscored —

    In dispatchGraphTerminationMessage() of packages/services/Car/computepipe/runner/graph/StreamSetObserver.cpp, there is …

  • Unscored —

    In ElementaryStreamQueue::dequeueAccessUnitH264() of ESQueue.cpp, there is a possible out of bounds write due to a miss…

  • Unscored —

    In LazyServiceRegistrar of LazyServiceRegistrar.cpp, there is a possible memory corruption due to a use after free. Thi…

  • Unscored —

    In is_device_locked and set_device_locked of keystore_keymaster_enforcement.h, there is a possible bypass of lockscreen…

  • Unscored —
    CVE-2021-0315 Public exploit

    In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to convince the user to grant an app ac…

  • Unscored —
    CVE-2020-0471 Public exploit

    In reassemble_and_dispatch of packet_fragmenter.cc, there is a possible way to inject packets into an encrypted Bluetoo…

  • Unscored —
    CVE-2021-0316 Public exploit

    In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds write due to a missing bounds check. This…

  • Unscored —

    In createOrUpdate of Permission.java and related code, there is possible permission escalation due to a logic error. Th…

  • Unscored —
    CVE-2021-0318 Public exploit

    In appendEventsToCacheLocked of SensorEventConnection.cpp, there is a possible out of bounds write due to a use-after-f…

  • Unscored —
    CVE-2021-0319 Public exploit

    In checkCallerIsSystemOr of CompanionDeviceManagerService.java, there is a possible way to get a nearby Bluetooth devic…

  • Unscored —

    In enforceDumpPermissionForPackage of ActivityManagerService.java, there is a possible way to determine if a package is…

  • Unscored —

    In several functions of GlobalScreenshot.java, there is a possible permission bypass due to an unsafe PendingIntent. Th…

  • Unscored —

    In onCreate of SlicePermissionActivity.java, there is a possible misleading string displayed due to improper input vali…

  • Unscored —

    In onCreate of grantCredentialsPermissionActivity, there is a confused deputy. This could lead to local information dis…

  • Unscored —
    CVE-2021-0308 Public exploit

    In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check. This could l…

  • Unscored —

    In updatePermissionSourcePackage of PermissionManagerService.java, there is a possible automatic runtime permission gra…

  • Unscored —
    CVE-2021-0306 Public exploit

    In addAllPermissions of PermissionManagerService.java, there is a possible permissions bypass when upgrading major Andr…

  • Unscored —

    In onAuthenticated of AuthenticationClient.java, there is a possible tapjacking attack when requesting the user's finge…

  • Unscored —

    In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalat…

  • Unscored —

    Opera Mini for Android below 53.1 displays URL left-aligned in the address field. This allows a malicious attacker to c…

  • Unscored —

    Citrix Secure Mail for Android before 20.11.0 suffers from Improper Control of Generation of Code ('Code Injection') by…

  • Unscored —

    Citrix Secure Mail for Android before 20.11.0 suffers from improper access control allowing unauthenticated access to r…

  • Unscored —

    URLs using “javascript:” have the protocol removed when pasted into the address bar to protect users from cross-site sc…

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-127973231References: Upstream kernel

  • Unscored —

    In the l2tp subsystem, there is a possible use after free due to a race condition. This could lead to local escalation …

  • Unscored —

    In xfrm6_tunnel_free_spi of net/ipv6/xfrm6_tunnel.c, there is a possible use after free due to improper locking. This c…

  • Unscored —

    In getGpuStatsGlobalInfo and getGpuStatsAppInfo of GpuService.cpp, there is a possible permission bypass due to a missi…

  • Unscored —

    In SELinux policies of mls, there is a missing permission check. This could lead to local information disclosure of pac…

  • Unscored —

    In isSubmittable and showWarningMessagesIfAppropriate of WifiConfigController.java and WifiConfigController2.java, ther…

  • Unscored —

    In onFactoryReset of BluetoothManagerService.java, there is a missing permission check. This could lead to local escala…

  • Unscored —

    In broadcastWifiCredentialChanged of ClientModeImpl.java, there is a possible location permission bypass due to a missi…

  • Unscored —

    In getLockTaskLaunchMode of ActivityRecord.java, there is a possible way for any app to start in Lock Task Mode due to …

  • Unscored —

    In NFA_RwI93WriteMultipleBlocks of nfa_rw_api.cc, there is a possible out of bounds write due to an integer overflow. T…

  • Unscored —

    In rw_i93_send_cmd_write_multi_blocks of rw_i93.cc, there is a possible out of bounds write due to a heap buffer overfl…

  • Unscored —

    In rw_t3t_send_raw_frame of rw_t3t.cc, there is a possible out of bounds write due to a missing bounds check. This coul…

  • Unscored —

    In RW_SendRawFrame of rw_main.cc, there is a possible out of bounds write due to a missing bounds check. This could lea…

  • Unscored —

    In ce_t4t_update_binary of ce_t4t.cc, there is a possible out of bounds read due to a missing bounds check. This could …

  • Unscored —

    In nfc_ncif_proc_ee_action of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This c…