Skip to content
OpenAdvisories

Product · Google

Android

2,760 known vulnerabilities.

867 results · Clear filters · Feed

  • High 7.5

    In ProtocolNetAcBarringInfo::ProtocolNetAcBarringInfo() of protocolnetadapter.cpp, there is a possible out of bounds re…

  • High 8.8

    In callback_thread_event of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible memory corruption d…

  • High 7.3

    In Print Service, there is a possible background activity launch due to a logic error in the code. This could lead to l…

  • High 7.8

    In Sim, there is a possible way to evade mobile preference restrictions due to a permission bypass. This could lead to …

  • High 7.8

    In UWB Google, there is a possible way for a malicious app to masquerade as system app com.android.uwb.resources due to…

  • High 7.7

    In multiple locations, there is a possible background activity launch due to a logic error in the code. This could lead…

  • High 7.8

    In Permission Manager, there is a possible way to bypass required permissions due to a missing permission check. This c…

  • High 7.8

    In RemoteSpeechRecognitionService of RemoteSpeechRecognitionService.java, there is a possible way to launch an activity…

  • High 7.8

    In InputMethod, there is a possible way to determine whether an app is installed, without query permissions, due to sid…

  • High 7.5

    In Minikin, there is a possible way to trigger ANR by showing a malicious message due to resource exhaustion. This coul…

  • High 7.8

    In Package Installer, there is a possible way to determine whether an app is installed, without query permissions, due …

  • High 7.8

    In Slice, there is a possible disclosure of installed applications due to side channel information disclosure. This cou…

  • High 7.8

    In verifyDefaults of CardEmulationManager.java, there is a possible way to set a third party app as the default contact…

  • High 7.8

    In android_view_InputDevice_create of android_view_InputDevice.cpp, there is a possible way to execute arbitrary code d…

  • High 7.0

    In GpuService of GpuService.cpp, there is a possible use after free due to a race condition. This could lead to local e…

  • High 7.8

    In onCreate of ApnEditor.java, there is a possible way for a Guest user to change the APN due to a permission bypass. T…

  • High 7.8
    CVE-2023-40130 Public exploit

    In notifyTimeout of CallRedirectionProcessor, there is a possible permission bypass due to a logic error in the code. T…

  • High 7.8

    In resetSettingsLocked of SettingsProvider.java, there is a possible lockscreen bypass due to a permissions bypass. Thi…

  • High 7.8

    In onTaskAppeared of PipTaskOrganizer.java, there is a possible way to bypass background activity launch restrictions d…

  • High 7.8

    In multiple locations, there is a possible way to bypass user notification of foreground services due to improper input…

  • High 7.8

    In multiple functions of ActivityManagerService.java, there is a possible way to escape Google Play protection due to a…

  • High 7.8

    In hasPermissionForActivity of PackageManagerHelper.java, there is a possible way to start arbitrary components due to …

  • High 8.8
    CVE-2023-35674 Exploited Public exploit

    In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the co…

    KEV Sep 13, 2023
  • High 7.8

    In computeValuesFromData of FileUtils.java, there is a possible way to insert files to other apps' external private dir…

  • High 7.5

    In multiple locations, there are root CA certificates which need to be disabled. This could lead to remote information …

  • High 7.8

    In showNextSecurityScreenOrFinish of KeyguardSecurityContainerController.java, there is a possible way to access the lo…

  • High 7.8

    In removePermission of PermissionManagerServiceImpl.java, there is a possible way to obtain dangerous permissions witho…