867 results · Clear filters · Feed
-
High 7.8
In multiple functions of StatsService.cpp, there is a possible memory corruption due to a use after free. This could le…
-
High 7.8
In setMimeGroup of PackageManagerService.java, there is a possible way to hide the service from Settings due to a logic…
-
High 8.4
In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in t…
-
High 8.4
In multiple locations, there is a possible way to bypass a restriction on adding new Wi-Fi connections due to a missing…
-
High 8.4
In updateNotificationChannelFromPrivilegedListener of NotificationManagerService.java, there is a possible cross-user d…
-
High 7.8
In hide of WindowState.java, there is a possible way to bypass tapjacking/overlay protection by launching the activity …
-
High 7.8
In CompanionDeviceManagerService.java, there is a possible way to pair a companion device without user acceptance due t…
-
High 7.8
In onCreate of multiple files, there is a possible way to trick the user into granting health permissions due to tapjac…
-
High 7.8
In multiple locations, there is a possible way in which policy migration code will never be executed due to a logic err…
-
High 7.8
In multiple locations, there is a possible way to reveal images across users data due to a logic error in the code. Thi…
-
High 7.8
In newServiceInfoLocked of AutofillManagerServiceImpl.java, there is a possible way to hide an enabled Autofill service…
-
High 7.8
In onResult of AccountManagerService.java, there is a possible way to perform an arbitrary background activity launch d…
-
High 7.8
In availableToWriteBytes of MessageQueueBase.h, there is a possible out of bounds write due to an incorrect bounds chec…
-
High 7.8CVE-2024-31317 Public exploit
In multiple functions of ZygoteProcess.java, there is a possible way to achieve code execution as any app via WRITE_SEC…
-
High 7.8
In RGXFWChangeOSidPriority of rgxfwutils.c, there is a possible arbitrary code execution due to a missing bounds check.…
-
High 7.3
In RGXCreateHWRTData_aux of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could…
-
High 7.8
In DevmemXIntUnreserveRange of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in…
-
High 7.8
In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalat…
-
High 7.8
In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalat…
-
High 8.4
In RGXCreateZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could l…
-
High 8.4
In CacheOpPMRExec of cache_km.c, there is a possible out of bounds write due to an integer overflow. This could lead to…
-
High 8.8
In dhd_prot_txstatus_process of dhd_msgbuf.c, there is a possible out of bounds write due to a missing bounds check. Th…
-
High 7.5
In DeregAcceptProcINT of cn_NrmmStateDeregInit.cpp, there is a possible denial of service due to a logic error in the c…
-
High 7.4
In lwis_initialize_transaction_fences of lwis_fence.c, there is a possible out of bounds write due to a missing bounds …
-
High 7.4
In gpu_pm_power_on_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a logic e…
-
High 7.1
In set_secure_reg of sac_handler.c, there is a possible out of bounds read due to a missing bounds check. This could le…
-
High 7.1
In pl330_dma_from_peri_start() of fp_spi_dma.c, there is a possible out of bounds write due to a missing bounds check. …
-
High 7.8
In lwis_add_completion_fence of lwis_fence.c, there is a possible escalation of privilege due to type confusion. This c…
-
High 7.5
There is a possible escalation of privilege due to improperly used crypto. This could lead to remote escalation of priv…
-
High 7.8
In AcvpOnMessage of avcp.cpp, there is a possible EOP due to uninitialized data. This could lead to local escalation of…
-
High 8.4
In sec_media_protect of media.c, there is a possible permission bypass due to a race condition. This could lead to loca…
-
High 8.1
In handle_msg of main.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to lo…
-
High 8.4
In memcall_add of memlog.c, there is a possible buffer overflow due to improper input validation. This could lead to lo…
-
High 7.0
In gpu_pm_power_off_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a race c…
-
High 7.5
Remote prevention of access to cellular service with no user interaction (for example, crashing the cellular radio serv…
-
High 7.4
In prepare_response_locked of lwis_transaction.c, there is a possible out of bounds write due to improper input validat…
-
High 7.8
In v4l2_smfc_qbuf of smfc-v4l2-ioctls.c, there is a possible out of bounds write due to a missing bounds check. This co…
-
High 8.1CVE-2024-32896 Exploited
there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege wi…
KEV Jun 13, 2024 -
High 7.5
In bc_get_converted_received_bearer of bc_utilities.c, there is a possible out of bounds read due to a missing bounds c…
-
High 8.1
In _s5e9865_mif_set_rate of exynos_dvfs.c, there is a possible out of bounds read due to improper casting. This could l…