440 results · Clear filters · Feed
-
Medium 5.1
In BroadcastController.java of registerReceiverWithFeatureTraced, there is a possible way to receive broadcasts meant f…
-
Medium 4.0
In multiple functions of RoleService.java, there is a possible permission squatting vulnerability due to a logic error …
-
Medium 4.0
In multiple functions of VpnManager.java, there is a possible cross-user data leak due to a logic error in the code. Th…
-
Medium 6.2
In validateIpConfiguration of WifiConfigurationUtil.java, there is a possible way to trigger a permanent DoS due to a m…
-
Medium 4.0
In dump of WindowManagerService.java, there is a possible way of running dumpsys without the required permission due to…
-
Medium 4.0
In multiple locations, there is a possible lock screen bypass due to a logic error in the code. This could lead to loca…
-
Medium 4.4
In multiple functions of GrantPermissionsActivity.java , there is a possible way to trick the user into granting the in…
-
Medium 5.1
In onCreate of InstallStart.java, there is a possible permissions bypass due to improper input validation. This could l…
-
Medium 5.1CVE-2025-0087 Public exploit
In onCreate of UninstallerActivity.java, there is a possible way to uninstall a different user's app due to a missing p…
-
Medium 4.0
In multiple functions of UserController.java, there is a possible lock screen bypass due to a race condition. This coul…
-
Medium 4.0
In MMapVAccess of pmr_os.c, there is a possible out of bounds write due to improper input validation. This could lead t…
-
Medium 4.0
In bta_av_config_ind of bta_av_aact.cc, there is a possible out of bounds read due to type confusion. This could lead t…
-
Medium 6.5
In SAEMM_DiscloseMsId of SAEMM_RadioMessageCodec.c, there is a possible out of bounds read due to a missing bounds chec…
-
Medium 5.3
-
Medium 6.7
In lwis_top_register_io of lwis_device_top.c, there is a possible out of bounds write due to an incorrect bounds check.…
-
Medium 6.7
In syna_cdev_ioctl_store_pid() of syna_tcm2_sysfs.c, there is a possible out of bounds write due to a heap buffer overf…
-
Medium 6.7
In lwis_test_register_io of lwis_device_test.c, there is a possible OOB Write due to an integer overflow. This could le…
-
Medium 5.5
In ReadTachyonCommands of gxp_main_actor.cc, there is a possible information leak due to uninitialized data. This could…
-
Medium 5.5
In multiple locations, there is a possible method for a malicious app to prevent dialing emergency services under limit…
-
Medium 5.5
In isInSignificantPlace of multiple files, there is a possible way to access sensitive information due to a missing per…
-
Medium 5.5
In contentDescForNotification of NotificationContentDescription.kt, there is a possible notification content leak throu…
-
Medium 5.5
In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a confused…
-
Medium 5.5
In showAvatarPicker of EditUserPhotoController.java, there is a possible cross user image leak due to a confused deputy…
-
Medium 4.0CVE-2025-26417 Public exploit
In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening fi…
-
Medium 4.0
In multiple functions of hyp-main.c, there is a possible privilege escalation due to a logic error in the code. This co…
-
Medium 5.5
In hidd_check_config_done of hidd_conn.cc, there is a possible way to execute arbitrary code due to a use after free. T…
-
Medium 6.5
In handleBondStateChanged of AdapterService.java, there is a possible permission bypass due to misleading or insufficie…
-
Medium 6.2
In onResult of AccountManagerService.java, there is a possible way to overwrite auth token due to a missing permission …
-
Medium 4.0
In multiple locations, there is a possible way to access content across user profiles due to URI double encoding. This …
-
Medium 5.5
In multiple functions of StatusHint.java and TelecomServiceImpl.java, there is a possible way to reveal images across u…
-
Medium 5.5
In multiple locations, there is a possible crash loop due to resource exhaustion. This could lead to local denial of se…
-
Medium 5.5
In the function process_crypto_cmd, the values of ptrs[i] can be potentially equal to NULL which is valid value after c…
-
Medium 5.1
There is a possible disclosure of Bluetooth adapter details due to a permissions bypass. This could lead to local infor…
-
Medium 5.1
In closeChannel of secureelementimpl.cpp, there is a possible out of bounds read due to an incorrect bounds check. This…
-
Medium 6.6
In ppcfw_deny_sec_dram_access of ppcfw.c, there is a possible arbitrary read from TEE memory due to a logic error in th…
-
Medium 5.1
there is a possible way to crash the modem due to a missing null check. This could lead to remote denial of service wit…
-
Medium 5.1
In static long dev_send of tipc_dev_ql, there is a possible out of bounds read due to an incorrect bounds check. This c…
-
Medium 5.1
In ProtocolUnsolOnSSAdapter::GetServiceClass() of protocolcalladapter.cpp, there is a possible out-of-bounds read due t…
-
Medium 5.3
In validateSsid of WifiConfigurationUtil.java, there is a possible way to overflow a system configuration file due to a…
-
Medium 6.5
In Source of ZipFile.java, there is a possible way for an attacker to execute arbitrary code by manipulating Dynamic Co…