2,760 results · Feed
-
High 7.0
In gpu_pm_power_off_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a race c…
-
High 7.5
Remote prevention of access to cellular service with no user interaction (for example, crashing the cellular radio serv…
-
High 7.4
In prepare_response_locked of lwis_transaction.c, there is a possible out of bounds write due to improper input validat…
-
Critical 9.8
In lwis_fence_signal of lwis_debug.c, there is a possible Use after Free due to improper locking. This could lead to lo…
-
High 7.8
In v4l2_smfc_qbuf of smfc-v4l2-ioctls.c, there is a possible out of bounds write due to a missing bounds check. This co…
-
High 8.1CVE-2024-32896 Exploited
there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege wi…
KEV Jun 13, 2024 -
Medium 4.7
In ProtocolCellIdentityParserV4::Parse() of protocolnetadapter.cpp, there is a possible out of bounds read due to a mis…
-
Medium 5.9
In ProtocolCdmaCallWaitingIndAdapter::GetCwInfo() of protocolsmsadapter.cpp, there is a possible out of bounds read due…
-
Critical 9.8
In BCMFASTPATH of dhd_msgbuf.c, there is a possible out of bounds write due to a missing bounds check. This could lead …
-
High 7.5
In bc_get_converted_received_bearer of bc_utilities.c, there is a possible out of bounds read due to a missing bounds c…
-
High 8.1
In _s5e9865_mif_set_rate of exynos_dvfs.c, there is a possible out of bounds read due to improper casting. This could l…
-
High 7.0
In sec_media_unprotect of media.c, there is a possible memory corruption due to a race condition. This could lead to lo…
-
High 7.8
In handle_init of goodix/main/main.c, there is a possible memory corruption due to type confusion. This could lead to l…
-
Medium 5.5
In aur_get_state of aurora.c, there is a possible information disclosure due to uninitialized data. This could lead to …
-
Medium 6.4
In pktproc_fill_data_addr_without_bm of link_rx_pktproc.c, there is a possible out of bounds write due to a missing bou…
-
High 7.7
In prepare_response of lwis_periodic_io.c, there is a possible out of bounds write due to an integer overflow. This cou…
-
High 7.4
In lwis_process_transactions_in_queue of lwis_transaction.c, there is a possible use after free due to a use after free…
-
High 7.5
In ss_AnalyzeOssReturnResUssdArgIe of ss_OssAsnManagement.c, there is a possible out of bounds read due to improper inp…
-
Medium 4.7
In ProtocolPsDedicatedBearInfoAdapter::processQosSession of protocolpsadapter.cpp, there is a possible out of bounds re…
-
Medium 5.5
In hwbcc_ns_deprivilege of trusty/user/base/lib/hwbcc/client/hwbcc.c, there is a possible uninitialized stack data disc…
-
High 8.1
In gpu_slc_get_region of pixel_gpu_slc.c, there is a possible EoP due to a use after free. This could lead to local esc…
-
Critical 9.8CVE-2024-23708 Public exploit
In multiple functions of NotificationManagerService.java, there is a possible way to not show a toast message when a cl…
-
Medium 6.5CVE-2024-23709 Public exploit
In multiple locations, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote…
-
High 7.8
In multiple locations, there is a possible permissions bypass due to improper input validation. This could lead to loca…
-
High 7.8
In sendIntentSender of ActivityManagerService.java, there is a possible background activity launch due to a logic error…
-
High 7.8
In multiple methods of UserManagerService.java, there is a possible failure to persist or enforce user restrictions due…
-
High 7.8
In multiple locations, there is a possible notification listener grant to an app running in the work profile due to a l…
-
Critical 9.8
In multiple locations, there is a possible failure to persist or enforce user restrictions due to improper input valida…
-
High 7.4
In multiple locations, there is a possible bypass of health data permissions due to an improper input validation. This …
-
Medium 5.6
In TBD of TBD, there is a possible confusion of OEM and DRM certificates due to improperly used crypto. This could lead…
-
Medium 5.5
In multiple functions of AppOpsService.java, there is a possible way to saturate the content of /data/system/appops_acc…
-
High 7.8
In assertPackageWithSharedUserIdIsPrivileged of InstallPackageHelper.java, there is a possible execution of arbitrary a…
-
High 7.8
In migrateNotificationFilter of NotificationManagerService.java, there is a possible failure to persist notifications s…
-
High 7.0
In onCreate of WifiDialogActivity.java, there is a possible way to bypass the DISALLOW_ADD_WIFI_CONFIG restriction due …
-
Medium 4.7
In multiple functions of SnoozeHelper.java, there is a possible persistent denial of service due to resource exhaustion…
-
Medium 5.9
In multiple functions of SnoozeHelper.java, there is a possible way to cause a boot loop due to resource exhaustion. Th…
-
Medium 5.5
In multiple functions of CompanionDeviceManagerService.java, there is a possible launch NotificationAccessConfirmationA…
-
Medium 4.4
In tmu_get_pi of tmu.c, there is a possible out of bounds read due to improper input validation. This could lead to loc…
-
High 7.8
In tmu_set_tr_num_thresholds of tmu.c, there is a possible out of bounds write due to a missing bounds check. This coul…
-
Medium 5.5
In tmu_get_tr_num_thresholds of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could…