859 results · Clear filters · Feed
-
High 8.4
In exitKeyguardAndFinishSurfaceBehindRemoteAnimation of KeyguardViewMediator.java, there is a possible lockscreen bypas…
-
High 8.4
In multiple locations, there is a possible way to delete media without the MANAGE_EXTERNAL_STORAGE permission due to an…
-
High 8.4
In multiple functions of MediaProvider.java, there is a possible external storage write permission bypass due to a conf…
-
High 7.8
In multiple functions of MediaProvider.java, there is a possible way to bypass the WRITE_EXTERNAL_STORAGE permission du…
-
High 7.4
In multiple functions of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a race condition. This…
-
High 8.4
In validateAddingWindowLw of DisplayPolicy.java, there is a possible way for an app to intercept drag-and-drop events d…
-
High 7.4
In multiple locations, there is a possible lockscreen bypass due to a race condition. This could lead to local escalati…
-
High 7.8
In multiple locations, there is a possible bypass of a file path filter designed to prevent access to sensitive directo…
-
High 8.4
In UsageEvents of UsageEvents.java, there is a possible out of bounds write due to an incorrect bounds check. This coul…
-
High 7.1CVE-2025-36911 Public exploit
In key-based pairing, there is a possible ID due to a logic error in the code. This could lead to remote (proximal/adja…
-
High 7.8
In GetTachyonCommand of tachyon_server_common.h, there is a possible out of bounds write due to an integer overflow. Th…
-
High 7.8
In trusty_ffa_mem_reclaim of shared-mem-smcall.c, there is a possible memory corruption due to uninitialized data. This…
-
High 7.4
In bigo_worker_thread of private/google-modules/video/gchips/bigo.c, there is a possible use after free due to a race c…
-
High 7.8
In tracepoint_msg_handler of cpm/google/lib/tracepoint/tracepoint_ipc.c, there is a possible memory overwrite due to im…
-
High 7.8
In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to a missing bounds check. This could le…
-
High 7.8
In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to a missing bounds check. This could le…
-
High 7.8
In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to an incorrect bounds check. This could…
-
High 7.8
In GetTachyonCommand of tachyon_server_common.h, there is a possible out of bounds write due to a missing bounds check.…
-
High 7.8
In WAVES_send_data_to_dsp of libaoc_waves.c, there is a possible out of bounds write due to a missing bounds check. Thi…
-
High 8.0
In ss_DecodeLcsAssistDataReqMsg(void) of ss_LcsManagement.c, there is a possible out of bounds write due to an incorrec…
-
High 8.0
In NrmmDecoder::DecodeSORTransparentContext of cn_NrmmDecoder.cpp, there is a possible out of bounds write due to a hea…
-
High 7.8
In aocc_read of aoc_channel_dev.c, there is a possible double free due to improper locking. This could lead to local es…
-
High 7.8
In aoc_service_read_message of aoc_ipc_core.c, there is a possible out of bounds read due to improper input validation.…
-
High 7.0
In PrepareWorkloadBuffers of gxp_main_actor.cc, there is a possible double fetch due to a race condition. This could le…
-
High 7.0
In multiple locations of UsbDataAdvancedProtectionHook.java, there is a possible way to access USB data when the screen…
-
High 7.8
In preparePackage of InstallPackageHelper.java, there is a possible way for an app to appear hidden upon installation w…
-
High 7.3
In DefaultTransitionHandler.java, there is a possible way to unknowingly grant permissions to an app due to a tapjackin…
-
High 7.8
In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to improper input validation. This could…
-
High 7.8
In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could …
-
High 7.8
In setDisplayName of AssociationRequest.java, there is a possible way to cause CDM associations to persist after the us…
-
High 7.8
In findAvailRecognizer of VoiceInteractionManagerService.java, there is a possible way to become the default speech rec…
-
High 7.8
In validateIconUserBoundary of PrintManagerService.java, there is a possible cross-user image leak due to a confused de…
-
High 7.8
In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to launch an activity from the…
-
High 8.8
In multiple locations, there is a possible way to launch an application from the background due to a precondition check…
-
High 7.8
In multiple functions of arm-smmu-v3.c, there is a possible out-of-bounds write due to improper input validation. This …
-
High 7.8
In init_pkvm_hyp_vcpu of pkvm.c, there is a possible out of bounds write due to improper input validation. This could l…
-
High 7.3
In DefaultTransitionHandler.java, there is a possible way to enable a tapjacking attack due to a insecure default. This…
-
High 7.8
In onSomePackagesChanged of VoiceInteractionManagerService.java, there is a possible way for a third party application'…
-
High 7.8
In getComponentName of MediaButtonReceiverHolder.java, there is a possible desync in persistence due to resource exhaus…
-
High 7.8
In setDefaultKey of DefaultPaymentSettings.java, there is a possible way for an application to set the main user's defa…