2,760 results · Feed
-
Unscored —
In Content, there is a possible way to determine whether an app is installed, without query permissions, due to side ch…
-
Unscored —
In Core, there is a possible way to forward calls without user knowledge due to a missing permission check. This could …
-
Unscored —
In Bluetooth, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalatio…
-
Unscored —
In libcore, there is a possible out of bounds read due to a missing bounds check. This could lead to local information …
-
Unscored —
In IntentResolver, there is a possible cross-user media read due to a confused deputy. This could lead to local informa…
-
Unscored —
In Settings, there is a possible way to control private DNS settings from a secondary user due to a permissions bypass.…
-
Unscored —
In Content, there is a possible way to determine whether an app is installed, without query permissions, due to side ch…
-
Unscored —
In ContentService, there is a possible way to read installed sync content providers due to side channel information dis…
-
Unscored —
In Composer, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation …
-
Unscored —
In Bluetooth, there is a possible way for a paired Bluetooth device to access a long term identifier for an Android dev…
-
Unscored —
In Content Service, there is a possible way to determine whether an app is installed, without query permissions, due to…
-
Unscored —
In ActivityManagerService, there is a possible way to determine whether an app is installed, without query permissions,…
-
Unscored —
In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to …
-
Unscored —
In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to…
-
Unscored —
In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to…
-
Unscored —
In Content, here is a possible way to determine whether an app is installed, without query permissions, due to side cha…
-
Unscored —
In SEPolicy, there is a possible way to access the factory MAC address due to a permissions bypass. This could lead to …
-
High 7.8
In Slice, there is a possible disclosure of installed applications due to side channel information disclosure. This cou…
-
Unscored —
In Slice, there is a possible disclosure of installed packages due to a missing permission check. This could lead to lo…
-
Unscored —
In SliceManagerService, there is a possible way to check if a content provider is installed due to a missing null check…
-
Unscored —
In Permission, there is a possible way to determine whether an app is installed, without query permissions, due to side…
-
Unscored —
In PackageManagerNative, there is a possible way to determine whether an app is installed, without query permissions, d…
-
Unscored —
In Telecom, there is a possible way to determine whether an app is installed, without query permissions, due to side ch…
-
Medium 5.5
In Usage Stats Service, there is a possible way to determine whether an app is installed, without query permissions due…
-
High 7.8
In verifyDefaults of CardEmulationManager.java, there is a possible way to set a third party app as the default contact…
-
Unscored —
In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could le…
-
Unscored —
In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could le…
-
High 7.8
In android_view_InputDevice_create of android_view_InputDevice.cpp, there is a possible way to execute arbitrary code d…
-
Unscored —
In multiple functions of DialogFillUi.java, there is a possible way to view another user's images due to a confused dep…
-
Unscored —CVE-2023-40133 Public exploit
In multiple locations of DialogFillUi.java, there is a possible way to view another user's images due to a confused dep…
-
High 7.0
In GpuService of GpuService.cpp, there is a possible use after free due to a race condition. This could lead to local e…
-
Unscored —
In applyCustomDescription of SaveUi.java, there is a possible way to view another user's images due to a confused deput…
-
Unscored —
In isFullScreen of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This co…
-
Unscored —
In setHeader of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. This…
-
High 7.8
In onCreate of ApnEditor.java, there is a possible way for a Guest user to change the APN due to a permission bypass. T…
-
Unscored —
In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a heap buffer overflow. This coul…
-
Unscored —CVE-2023-40127 Public exploit
In multiple locations, there is a possible way to access screenshots due to a confused deputy. This could lead to local…
-
Unscored —
In several functions of xmlregexp.c, there is a possible out of bounds write due to a heap buffer overflow. This could …
-
High 7.8CVE-2023-40130 Public exploit
In notifyTimeout of CallRedirectionProcessor, there is a possible permission bypass due to a logic error in the code. T…
-
High 7.8
In resetSettingsLocked of SettingsProvider.java, there is a possible lockscreen bypass due to a permissions bypass. Thi…