867 results · Clear filters · Feed
-
High 7.8
In gt1x_debug_write_proc and gt1x_tool_write of drivers/input/touchscreen/mediatek/GT1151/gt1x_generic.c and gt1x_tools…
-
High 7.8
In /proc/driver/wmt_dbg driver, there are several possible out of bounds writes. These could lead to local escalation o…
-
High 7.8
In fm_set_stat of mediatek FM radio driver, there is a possible OOB write due to improper input validation. This could …
-
High 7.8
In WMT_unlocked_ioctl of MTK WMT device driver, there is a possible OOB write due to a missing bounds check. This could…
-
High 7.8
In rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a possible out of bounds wr…
-
High 7.8
In mtk_cfg80211_vendor_packet_keep_alive_start and mtk_cfg80211_vendor_set_config of drivers/misc/mediatek/connectivity…
-
High 7.8
In mtk_p2p_wext_set_key of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_p2p.c, there is a possible OOB writ…
-
High 7.8
In procfile_write of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_proc.c, there is a possible OOB write due…
-
High 7.8
In get_binary of vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/data_coder.c, there is a possible ou…
-
High 7.8
In OSUInfo of OSUInfo.java, there is a possible escalation of privilege due to improper input validation. This could le…
-
High 8.8
In handle_app_cur_val_response of dtif_rc.cc, there is a possible stack buffer overflow due to a missing bounds check. …
-
High 7.8
In gattServerSendResponseNative of com_android_bluetooth_gatt.cpp, there is a possible out of bounds stack write due to…
-
High 8.0
In handle_notification_response of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. T…
-
High 7.8
In rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a possible out of bounds wr…
-
High 7.5
In gatts_process_read_by_type_req of gatt_sr.c, there is a possible information disclosure due to uninitialized data. T…
-
High 8.8
In l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out of bounds write due to improper input validation. This could…
-
High 8.4
In getIntentForIntentSender of ActivityManagerService.java, there is a possible way to access user metadata due to a pe…
-
High 7.8
In installPackageLI of PackageManagerService.java, there is a possible permissions bypass. This could lead to local esc…
-
High 8.4
In String16 of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to loc…
-
High 7.5
In pvmp3_get_main_data_size of pvmp3_get_main_data_size.cpp, there is a possible buffer overread due to a missing bound…
-
High 8.4
In checkPermissions of RecognitionService.java, there is a possible permissions bypass due to a missing permission chec…
-
High 7.5
In l2cu_send_peer_config_rej of l2c_utils.cc, there is a possible out of bounds read due to a missing bounds check. Thi…
-
High 7.8
In the development options section of the Settings app, there is a possible authentication bypass due to a missing perm…
-
High 7.5
In HeadsetInterface::ClccResponse of btif_hf.cc, there is a possible out of bounds stack write due to a missing bounds …
-
High 8.4
In writeToParcel of MediaPlayer.java, there is a possible serialization/deserialization mismatch due to improper input …
-
High 8.8
In xmlMemStrdupLoc of xmlmemory.c, there is a possible out-of-bounds write due to an integer overflow. This could lead …
-
High 8.8
In bff_Scanner_addOutPos of Scanner.c, there is a possible out-of-bounds write due to an incorrect bounds check. This c…
-
High 8.4
In multiple functions of ShortcutService.java, there is a possible creation of a spoofed shortcut due to a missing perm…
-
High 7.7CVE-2018-9468 Public exploit
In query of DownloadManager.java, there is a possible read/write of arbitrary files due to a permissions bypass. This c…
-
High 7.3
Arbitrary Code execution in Car App Android Jetpack Library
There exists a code execution vulnerability in the Car App Android Jetpack Library. CarAppService uses deserialization logic that allows construction of arbitrary java classes. This can lead to arbitrary code execution when combined with specific Java deseria…
-
High 8.8
In the xmlSnprintfElementContent function of valid.c, there is a possible out of bounds write. This could lead to remot…
-
High 7.5
In sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This…
-
High 7.8
In createPhonebookDialogView and createMapDialogView of BluetoothPermissionActivity.java, there is a possible permissio…
-
High 8.4
In startDevice of AAudioServiceStreamBase.cpp there is a possible out of bounds write due to a use after free. This cou…
-
High 7.8
In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. Th…
-
High 7.5
In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This cou…
-
High 7.8
In f_hidg_read and hidg_disable of f_hid.c, there is a possible use-after-free due to improper locking. This could lead…
-
High 8.8CVE-2018-9411 Public exploit
In decrypt of ClearKeyCasPlugin.cpp there is a possible out-of-bounds write due to a missing bounds check. This could l…
-
High 7.8
In HWCSession::SetColorModeById of hwc_session.cpp, there is a possible out of bounds write due to a missing bounds che…
-
High 7.8
In cmd_flash_mmc_sparse_img of dl_commands.c, there is a possible out of bounds write due to a missing bounds check. Th…