867 results · Clear filters · Feed
-
High 7.4
there is a possible man-in-the-middle attack due to a logic error in the code. This could lead to remote escalation of …
-
High 7.8
In pmucal_rae_handle_seq_int of flexpmu_cal_rae.c, there is a possible arbitrary write due to uninitialized data. This …
-
High 8.8
Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-330537292.
-
High 7.8
In ufshc_scsi_cmd of ufs.c, there is a possible stack variable use after free due to a use after free. This could lead …
-
High 7.8
there is a possible privilege escalation due to an insecure default value. This could lead to local escalation of privi…
-
High 7.5
Android before 2024-10-05 on Google Pixel devices allows information disclosure in the modem component, A-299774545.
-
High 7.5
there is a possible Null Pointer Dereference (modem crash) due to improper input validation. This could lead to remote …
-
High 7.8
In mm_GetMobileIdIndexForNsUpdate of mm_GmmPduCodec.c, there is a possible out of bounds write due to an incorrect boun…
-
High 7.4
In lwis_device_event_states_clear_locked of lwis_event.c, there is a possible privilege escalation due to a double free…
-
High 7.8
There is a possible LCS signing enforcement missing due to test/debugging code left in a production build. This could l…
-
High 7.4
In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible memory corruption due to improper input validation. Thi…
-
High 7.4
In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible corrupt memory due to a logic error in the code. This c…
-
High 7.4
In ppmp_unprotect_buf of drm/code/drm_fw.c, there is a possible memory corruption due to a logic error in the code. Thi…
-
High 7.4
there is a possible escalation of privilege due to an unusual root cause. This could lead to local escalation of privil…
-
High 7.8
In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a heap buffer overflow…
-
High 7.8
In scheme of Uri.java, there is a possible way to craft a malformed Uri object due to improper input validation. This c…
-
High 7.8
In addPreferencesForType of AccountTypePreferenceLoader.java, there is a possible way to disable apps for other users d…
-
High 7.8
In bindAndGetCallIdentification of CallScreeningServiceHelper.java, there is a possible way to maintain a while-in-use …
-
High 7.8
In wifi_item_edit_content of styles.xml , there is a possible FRP bypass due to Missing check for FRP state. This could…
-
High 7.3
In onCreate of SettingsHomepageActivity.java, there is a possible way to access the Settings app while the device is pr…
-
High 7.8
In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalat…
-
High 8.4
In PVRSRVBridgeRGXKickTA3D2 of server_rgxta3d_bridge.c, there is a possible arbitrary code execution due to improper in…
-
High 7.4
In DevmemIntPFNotify of devicemem_server.c, there is a possible use-after-free due to a race condition. This could lead…
-
High 7.8
In sendDeviceState_1_6 of RadioExt.cpp, there is a possible use after free due to improper locking. This could lead to …
-
High 7.8
In setTransactionState of SurfaceFlinger.cpp, there is a possible way to perform tapjacking due to a logic error in the…
-
High 7.7CVE-2024-34740 Public exploit
In attributeBytesBase64 and attributeBytesHex of BinaryXmlSerializer.java, there is a possible arbitrary XML injection …
-
High 7.8CVE-2024-34741 Public exploit
In setForceHideNonSystemOverlayWindowIfNeeded of WindowState.java, there is a possible way for message content to be vi…
-
High 7.7
In ensureSetPipAspectRatioQuotaTracker of ActivityClientController.java, there is a possible way to generate unmovable …
-
High 7.8CVE-2024-34739 Public exploit
In shouldRestrictOverlayActivities of UsbProfileGroupSettingsManager.java, there is a possible escape from SUW due to a…
-
High 7.7
In multiple functions of AppOpsService.java, there is a possible way for unprivileged apps to read their own restrictRe…
-
High 7.7
In multiple functions of TranscodingResourcePolicy.cpp, there is a possible memory corruption due to a race condition. …
-
High 7.7
In onForegroundServiceButtonClicked of FooterActionsViewModel.kt, there is a possible way to disable the active VPN app…
-
High 7.5
In sdpu_compare_uuid_with_attr of sdp_utils.cc, there is a possible out of bounds read due to a heap buffer overflow. T…
-
High 7.8
In _MMU_AllocLevel of mmu_common.c, there is a possible arbitrary code execution due to an integer overflow. This could…
-
High 7.8
In PVRSRV_MMap of pvr_bridge_k.c, there is a possible arbitrary code execution due to a logic error in the code. This c…
-
High 7.4
In smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect im…
-
High 7.4
In DevmemIntUnexportCtx of devicemem_server.c, there is a possible arbitrary code execution due to a race condition. Th…
-
High 7.0
In _UnrefAndMaybeDestroy of pmr.c, there is a possible arbitrary code execution due to a race condition. This could lea…
-
High 7.4
In com_android_internal_os_ZygoteCommandBuffer_nativeForkRepeatedly of com_android_internal_os_ZygoteCommandBuffer.cpp,…
-
High 7.4CVE-2024-31320 Public exploit
In setSkipPrompt of AssociationRequest.java , there is a possible way to establish a companion device association witho…