2,760 results · Feed
-
High 7.8
In multiple locations, there is a possible way to reveal images across users data due to a logic error in the code. Thi…
-
High 7.8
In newServiceInfoLocked of AutofillManagerServiceImpl.java, there is a possible way to hide an enabled Autofill service…
-
Medium 5.3
In multiple functions of ManagedServices.java, there is a possible way to hide an app with notification access in the D…
-
Medium 6.2
In multiple functions of ShortcutService.java, there is a possible persistent DOS due to resource exhaustion. This coul…
-
Medium 5.5
In multiple locations, there is a possible information leak due to a missing permission check. This could lead to local…
-
High 7.8
In onResult of AccountManagerService.java, there is a possible way to perform an arbitrary background activity launch d…
-
High 7.8
In availableToWriteBytes of MessageQueueBase.h, there is a possible out of bounds write due to an incorrect bounds chec…
-
Medium 6.3
In increment_annotation_count of stats_event.c, there is a possible out of bounds write due to a missing bounds check. …
-
High 7.8CVE-2024-31317 Public exploit
In multiple functions of ZygoteProcess.java, there is a possible way to achieve code execution as any app via WRITE_SEC…
-
High 7.8
In RGXFWChangeOSidPriority of rgxfwutils.c, there is a possible arbitrary code execution due to a missing bounds check.…
-
High 7.3
In RGXCreateHWRTData_aux of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could…
-
High 7.8
In DevmemXIntUnreserveRange of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in…
-
High 7.8
In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalat…
-
High 7.8
In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalat…
-
High 8.4
In RGXCreateZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could l…
-
High 8.4
In CacheOpPMRExec of cache_km.c, there is a possible out of bounds write due to an integer overflow. This could lead to…
-
Medium 5.5
there is a possible information disclosure due to side channel information disclosure. This could lead to local informa…
-
Medium 4.0
there is a possible cellular denial of service due to a logic error in the code. This could lead to remote denial of se…
-
High 8.8
In dhd_prot_txstatus_process of dhd_msgbuf.c, there is a possible out of bounds write due to a missing bounds check. Th…
-
Medium 5.5
In plugin_ipc_handler of slc_plugin.c, there is a possible information disclosure due to uninitialized data. This could…
-
High 7.5
In DeregAcceptProcINT of cn_NrmmStateDeregInit.cpp, there is a possible denial of service due to a logic error in the c…
-
High 7.4
In lwis_initialize_transaction_fences of lwis_fence.c, there is a possible out of bounds write due to a missing bounds …
-
High 7.4
In gpu_pm_power_on_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a logic e…
-
High 7.1
In set_secure_reg of sac_handler.c, there is a possible out of bounds read due to a missing bounds check. This could le…
-
Medium 6.1
Permission Bypass allowing attackers to disable HDCP 2.2 encryption by not completing the HDCP Key Exchange initializat…
-
High 7.1
In pl330_dma_from_peri_start() of fp_spi_dma.c, there is a possible out of bounds write due to a missing bounds check. …
-
High 7.8
In lwis_add_completion_fence of lwis_fence.c, there is a possible escalation of privilege due to type confusion. This c…
-
Medium 5.9
In fvp_freq_histogram_init of fvp.c, there is a possible Information Disclosure due to uninitialized data. This could l…
-
High 7.5
There is a possible escalation of privilege due to improperly used crypto. This could lead to remote escalation of priv…
-
Medium 4.3
In CellInfoListParserV2::FillCellInfo() of protocolnetadapter.cpp, there is a possible out of bounds read due to a miss…
-
Medium 5.5
In tpu_get_int_state of tpu.c, there is a possible information disclosure due to uninitialized data. This could lead to…
-
Critical 9.8
In wl_notify_rx_mgmt_frame of wl_cfg80211.c, there is a possible out of bounds write due to an integer overflow. This c…
-
Medium 5.5
there is a possible persistent Denial of Service due to test/debugging code left in a production build. This could lead…
-
High 7.8
In AcvpOnMessage of avcp.cpp, there is a possible EOP due to uninitialized data. This could lead to local escalation of…
-
Medium 5.5
In handle_msg_shm_map_req of trusty/user/base/lib/spi/srv/tipc/tipc.c, there is a possible stack data disclosure due to…
-
High 8.4
In sec_media_protect of media.c, there is a possible permission bypass due to a race condition. This could lead to loca…
-
High 8.1
In handle_msg of main.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to lo…
-
High 8.4
In memcall_add of memlog.c, there is a possible buffer overflow due to improper input validation. This could lead to lo…
-
Critical 9.8
In circ_read of link_device_memory_legacy.c, there is a possible out of bounds write due to an incorrect bounds check. …
-
Medium 4.7
In ProtocolVsimOperationAdapter() of protocolvsimadapter.cpp, there is a possible out of bounds read due to a missing b…