440 results · Clear filters · Feed
-
Medium 5.9
In tmu_get_tr_stats of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to …
-
Medium 5.5
In wipe_ns_memory of nsmemwipe.c, there is a possible incorrect size calculation due to a logic error in the code. This…
-
Medium 5.5
In plugin_extern_func of , there is a possible out of bounds read due to a missing bounds check. This could lead to loc…
-
Medium 5.1
In ProtocolPsKeepAliveStatusAdapter::getCode() of protocolpsadapter.cpp, there is a possible out of bounds read due to …
-
Medium 5.9
In fvp_set_target of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to lo…
-
Medium 5.1
In EUTRAN_LCS_DecodeFacilityInformationElement of LPP_LcsManagement.c, there is a possible out of bounds read due to a …
-
Medium 4.4
In sendHciCommand of bluetooth_hci.cc, there is a possible out of bounds read due to a heap buffer overflow. This could…
-
Medium 6.2
In update_freq_data of , there is a possible out of bounds read due to a missing bounds check. This could lead to local…
-
Medium 5.9
In gpu_slc_liveness_update of pixel_gpu_slc.c, there is a possible out of bounds read due to a missing bounds check. Th…
-
Medium 6.7
In pt_sysctl_command of pt.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead…
-
Medium 6.4
In pktproc_perftest_gen_rx_packet_sktbuf_mode of link_rx_pktproc.c, there is a possible out of bounds write due to a ra…
-
Medium 6.2
In dumpBatteryDefend of dump_power.cpp, there is a possible out of bounds read due to a heap buffer overflow. This coul…
-
Medium 6.2
In constraint_check of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to …
-
Medium 5.5
In dvfs_plugin_caller of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead t…
-
Medium 5.3
OOB read in the TMU plugin that allows for memory disclosure in the power management subsystem of the device.
-
Medium 6.2
In multiple functions of healthconnect, there is a possible leakage of exercise route data due to a missing permission …
-
Medium 5.5
In writeUserLP of UserManagerService.java, device policies are serialized with an incorrect tag due to a logic error in…
-
Medium 6.5
In multiple locations, there is a possible out of bounds read due to a missing bounds check. This could lead to paired …
-
Medium 5.5
In onActivityResult of NotificationSoundPreference.java, there is a possible way to hear audio files belonging to a dif…
-
Medium 6.2
In setListening of AppOpsControllerImpl.java, there is a possible way to hide the microphone privacy indicator when res…
-
Medium 5.5
In shouldUseNoOpLocation of CameraActivity.java, there is a possible confused deputy due to a permissions bypass. This …
-
Medium 6.8
In multiple locations, there is a possible way to request access to directories that should be hidden due to improper i…
-
Medium 5.5CVE-2024-0030 Public exploit
In btif_to_bta_response of btif_gatt_util.cc, there is a possible out of bounds read due to an incorrect bounds check. …
-
Medium 5.3
In applyCustomDescription of SaveUi.java, there is a possible way to view other user's images due to a confused deputy.…
-
Medium 5.5
In multiple files, there is a possible way that trimmed content could be included in PDF output due to a logic error in…
-
Medium 5.5
In multiple locations, there is a possible cross-user read due to a confused deputy. This could lead to local informati…
-
Medium 5.1
In ippSetValueTag of ipp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to lo…
-
Medium 5.5
In multiple locations, there is a possible way for apps to access cross-user message data due to a missing permission c…
-
Medium 6.2
In multiple functions of MtpPacket.cpp, there is a possible out of bounds write due to a heap buffer overflow. This cou…
-
Medium 5.5
In backupAgentCreated of ActivityManagerService.java, there is a possible way to leak sensitive data due to a missing p…
-
Medium 5.5
In createPendingIntent of CredentialManagerUi.java, there is a possible way to access credentials from other users due …
-
Medium 5.5
In Telephony, there is a possible way to retrieve the ICCID due to a logic error in the code. This could lead to local …
-
Medium 5.5
In Usage Stats Service, there is a possible way to determine whether an app is installed, without query permissions due…
-
Medium 6.7
In visitUris of Notification.java, there is a possible bypass of user profile boundaries due to a missing permission ch…
-
Medium 6.8
In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a mis…
-
Medium 6.8
In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a mis…
-
Medium 6.8
In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a mis…
-
Medium 6.8
In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a mis…
-
Medium 5.5
In add of WifiNetworkSuggestionsManager.java, there is a possible way to trigger permanent DoS due to resource exhausti…
-
Medium 5.3
An elevation of privilege vulnerability in the kernel file system. Product: Android. Versions: Android kernel. Android …