830 results · Clear filters · Feed
-
High 8.4
In UsbDialogHelper of UsbDialogHelper.java, there is a possible UI confusion due to misleading or insufficient UI. This…
-
High 7.8
In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper input valid…
-
High 8.4
In onActivityResult in multiple locations, there is a possible contact leak from protected profile due to a confused de…
-
High 8.4
In onResult of AccountManagerService.java, there is a possible untrusted/misleading UI issue due to a logic error in th…
-
High 8.4
In queryRemoteConnectionServices of ConnectionServiceWrapper.java, there is a possible permission bypass due to a confu…
-
High 8.4
In multiple functions of SaveUi.java, there is a possible bypass of package installation requirements due to a logic er…
-
High 8.4
In onCreate of SettingsApplication.java, there is a possible cross-profile consent dialog label injection due to improp…
-
High 8.4
In writeGrantedUriPermissions of UriGrantsManagerService.java, there is a possible permission bypass due to improper in…
-
High 8.4
In shouldBlockDirectoryFromTree of ExternalStorageProvider.java, there is a possible way to access protected data due t…
-
High 8.4
In multiple locations, there is a possible method for a primary user to disable secure nfc on other full users due to i…
-
High 8.4
In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay …
-
High 8.4
In multiple locations, there is a possible way to trick a user into disclosing Autofill contents due to a tapjacking/ov…
-
High 7.0
In ep_free of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalat…
-
High 7.8
In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of pri…
-
High 7.8
In updateState of DeviceAdminAppsPreferenceController.java, there is a possible permission bypass due to a logic error …
-
High 7.8
In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.java, there is a possible permission by…
-
High 7.8
In checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java, there is a possible permission bypass d…
-
High 7.8
In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local…
-
High 7.0
In handle_app_val_response of btif_rc.cc, there is a possible way to achieve code execution due to a race condition. Th…
-
High 7.5
In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check…
-
High 7.8
In multiple places, there is a possible denial of service due to an uncaught exception. This could lead to local escala…
-
High 7.8
In multiple locations, there is a possible memory corruption due to type confusion. This could lead to local escalation…
-
High 7.8
In multiple functions of VirtualAudioControllerTest.java, there is a possible permission bypass due to a logic error in…
-
High 8.8
In cfg2prop of btif_storage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead …
-
High 7.8
In multiple locations, there is a possible out of bounds write due to an incorrect bounds check. This could lead to loc…
-
High 7.8
In stpropnci_process of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check. This co…
-
High 8.8
In multiple locations, there is a possible out-of-bounds write due to uninitialized data. This could lead to remote esc…
-
High 7.8
In dialInternal in multiple locations, there is a possible permission bypass due to a confused deputy. This could lead …
-
High 7.8
In FilterCapturedPacket of snoop_logger.cc, there is a possible memory safety issue due to improper input validation. T…
-
High 7.8
In qsort of libufdt_sysdeps_vendor.c, there is a possible out-of-bounds write due to resource exhaustion. This could le…
-
High 7.8
In multiple functions of MessageQueueBase.h, there is a possible out of bounds read due to an incorrect bounds check. T…
-
High 7.8
In handle_le_monitor_device_event of msft.cc, there is a possible control-flow hijack in the privileged bluetooth proce…
-
High 7.8
In rw_t4t_update_file of rw_t4t.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead…
-
High 7.8
In multiple functions of nfa_nfcee_act.cc, there is a possible out-of-bounds write due to a missing bounds check. This …
-
High 7.2
In wpas_handle_robust_av_scs_recv_action of robust_av.c, there is a possible out-of-bounds write due to a logic error i…
-
High 8.8
In isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due to a missing permission check. This cou…
-
High 7.8
In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. T…
-
High 7.8
In multiple locations, there is a possible escalation of privilege due to improper input validation. This could lead to…
-
High 7.0
In google_mba_recv_msg of google_mba_poll.c, there is a possible out-of-bounds write due to a race condition. This coul…
-
High 7.0
In ARM64_TLBI of mmu.h, there is a possible memory corruption due to a race condition. This could lead to local escalat…