440 results · Clear filters · Feed
-
Medium 6.3
In updateServicesLocked of AccessibilityManagerService.java, there is a possible way for an app to be hidden from the S…
-
Medium 5.3
In multiple functions of ManagedServices.java, there is a possible way to hide an app with notification access in the D…
-
Medium 6.2
In multiple functions of ShortcutService.java, there is a possible persistent DOS due to resource exhaustion. This coul…
-
Medium 5.5
In multiple locations, there is a possible information leak due to a missing permission check. This could lead to local…
-
Medium 6.3
In increment_annotation_count of stats_event.c, there is a possible out of bounds write due to a missing bounds check. …
-
Medium 5.5
there is a possible information disclosure due to side channel information disclosure. This could lead to local informa…
-
Medium 4.0
there is a possible cellular denial of service due to a logic error in the code. This could lead to remote denial of se…
-
Medium 5.5
In plugin_ipc_handler of slc_plugin.c, there is a possible information disclosure due to uninitialized data. This could…
-
Medium 6.1
Permission Bypass allowing attackers to disable HDCP 2.2 encryption by not completing the HDCP Key Exchange initializat…
-
Medium 5.9
In fvp_freq_histogram_init of fvp.c, there is a possible Information Disclosure due to uninitialized data. This could l…
-
Medium 4.3
In CellInfoListParserV2::FillCellInfo() of protocolnetadapter.cpp, there is a possible out of bounds read due to a miss…
-
Medium 5.5
In tpu_get_int_state of tpu.c, there is a possible information disclosure due to uninitialized data. This could lead to…
-
Medium 5.5
there is a possible persistent Denial of Service due to test/debugging code left in a production build. This could lead…
-
Medium 5.5
In handle_msg_shm_map_req of trusty/user/base/lib/spi/srv/tipc/tipc.c, there is a possible stack data disclosure due to…
-
Medium 4.7
In ProtocolVsimOperationAdapter() of protocolvsimadapter.cpp, there is a possible out of bounds read due to a missing b…
-
Medium 4.7
In ProtocolCellIdentityParserV4::Parse() of protocolnetadapter.cpp, there is a possible out of bounds read due to a mis…
-
Medium 5.9
In ProtocolCdmaCallWaitingIndAdapter::GetCwInfo() of protocolsmsadapter.cpp, there is a possible out of bounds read due…
-
Medium 5.5
In aur_get_state of aurora.c, there is a possible information disclosure due to uninitialized data. This could lead to …
-
Medium 6.4
In pktproc_fill_data_addr_without_bm of link_rx_pktproc.c, there is a possible out of bounds write due to a missing bou…
-
Medium 4.7
In ProtocolPsDedicatedBearInfoAdapter::processQosSession of protocolpsadapter.cpp, there is a possible out of bounds re…
-
Medium 5.5
In hwbcc_ns_deprivilege of trusty/user/base/lib/hwbcc/client/hwbcc.c, there is a possible uninitialized stack data disc…
-
Medium 6.5CVE-2024-23709 Public exploit
In multiple locations, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote…
-
Medium 5.6
In TBD of TBD, there is a possible confusion of OEM and DRM certificates due to improperly used crypto. This could lead…
-
Medium 5.5
In multiple functions of AppOpsService.java, there is a possible way to saturate the content of /data/system/appops_acc…
-
Medium 4.7
In multiple functions of SnoozeHelper.java, there is a possible persistent denial of service due to resource exhaustion…
-
Medium 5.9
In multiple functions of SnoozeHelper.java, there is a possible way to cause a boot loop due to resource exhaustion. Th…
-
Medium 5.5
In multiple functions of CompanionDeviceManagerService.java, there is a possible launch NotificationAccessConfirmationA…
-
Medium 4.4
In tmu_get_pi of tmu.c, there is a possible out of bounds read due to improper input validation. This could lead to loc…
-
Medium 5.5
In tmu_get_tr_num_thresholds of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could…
-
Medium 6.2
In TMU_IPC_GET_TABLE, there is a possible out of bounds read due to a missing bounds check. This could lead to local in…
-
Medium 6.7
In tmu_get_tr_thresholds, there is a possible out of bounds read due to a missing bounds check. This could lead to loca…
-
Medium 5.9
In _dvfs_get_lv of dvfs.c, there is a possible out of bounds read due to a missing null check. This could lead to local…
-
Medium 5.5
In km_exp_did_inner of kmv.c, there is a possible out of bounds read due to a missing bounds check. This could lead to …
-
Medium 5.5
In asn1_ec_pkey_parse_p384 of asn1_common.c, there is a possible OOB Read due to a missing null check. This could lead …
-
Medium 5.5
In apply_minlock_constraint of dvfs.c, there is a possible out of bounds read due to a missing bounds check. This could…
-
Medium 5.5
In tmu_get_temp_lut of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to …
-
Medium 5.5CVE-2024-29745 Exploited
there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure w…
KEV Apr 4, 2024 -
Medium 5.5
In tmu_get_gov_time_windows, there is a possible out of bounds read due to a missing bounds check. This could lead to l…
-
Medium 5.5
In gov_init, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…
-
Medium 5.5
In asn1_ec_pkey_parse of asn1_common.c, there is a possible OOB read due to a missing null check. This could lead to lo…