Skip to content
OpenAdvisories

Product · Google

Android

2,760 known vulnerabilities.

2,760 results · Feed

  • High 7.8

    In onTaskAppeared of PipTaskOrganizer.java, there is a possible way to bypass background activity launch restrictions d…

  • High 7.8

    In multiple locations, there is a possible way to bypass user notification of foreground services due to improper input…

  • Unscored —

    In appendEscapedSQLString of DatabaseUtils.java, there is a possible SQL injection due to unsafe deserialization. This …

  • Unscored —

    In updateActionViews of PipMenuView.java, there is a possible bypass of a multi user security boundary due to a confuse…

  • Unscored —

    In multiple functions of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check…

  • Unscored —

    In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lea…

  • Unscored —

    there is a possible use-after-free write due to improper locking. This could lead to local escalation of privilege with…

  • Unscored —

    In TBD of TBD, there is a possible way to bypass carrier restrictions due to a logic error in the code. This could lead…

  • Unscored —

    In temp_residency_name_store of thermal_metrics.c, there is a possible out of bounds write due to a missing bounds chec…

  • Unscored —

    there is a possible out of bounds write due to buffer overflow. This could lead to remote code execution with no additi…

  • Unscored —

    In ProfSixDecomTcpSACKoption of RohcPacketCommon.cpp, there is a possible out of bounds read due to a missing bounds ch…

  • Unscored —

    In lwis_transaction_client_cleanup of lwis_transaction.c, there is a possible way to corrupt memory due to a use after …

  • Unscored —

    In CanConvertPadV2Op of darwinn_mlir_converter_aidl.cc, there is a possible out of bounds read due to a heap buffer ove…

  • Unscored —

    In ctrl_roi of stmvl53l1_module.c, there is a possible out of bounds read due to an incorrect bounds check. This could …

  • Unscored —

    In TBD of TBD, there is a possible way to access location information due to a permissions bypass. This could lead to l…

  • Unscored —

    In ProtocolEmergencyCallListIndAdapter::Init of protocolcalladapter.cpp, there is a possible out of bounds read due to …

  • Unscored —

    In several functions of Exynos modem files, there is a possible out of bounds write due to a missing bounds check. This…

  • Unscored —

    In ProtocolMiscLceIndAdapter::GetConfLevel() of protocolmiscadapter.cpp, there is a possible out of bounds read due to …

  • Unscored —

    In ProtocolEmbmsGlobalCellIdAdapter::Init() of protocolembmsadapter.cpp, there is a possible out of bounds read due to …

  • Unscored —

    In TBD of TBD, there is a possible stack buffer overflow due to a missing bounds check. This could lead to remote code …

  • Unscored —

    In tbd of tbd, there is a possible memory corruption due to a race condition. This could lead to local escalation of pr…

  • Unscored —

    In visitUris of Notification.java, there is a possible way to reveal image contents from another user due to a missing …

  • Unscored —

    In validatePassword of WifiConfigurationUtil.java, there is a possible way to get the device into a boot loop due to im…

  • Unscored —

    In multiple locations, there is a possible way to crash multiple system services due to resource exhaustion. This could…

  • High 7.8

    In multiple functions of ActivityManagerService.java, there is a possible way to escape Google Play protection due to a…

  • Medium 6.7

    In visitUris of Notification.java, there is a possible bypass of user profile boundaries due to a missing permission ch…

  • Unscored —
    CVE-2023-35687 Public exploit

    In MtpPropertyValue of MtpProperty.h, there is a possible memory corruption due to a use after free. This could lead to…

  • Unscored —

    In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to an integer overflow. This could lead t…

  • Unscored —

    In bindSelection of DatabaseUtils.java, there is a possible way to access files from other applications due to SQL inje…

  • Unscored —

    In multiple locations, there is a possible way to import contacts belonging to other users due to a confused deputy. Th…

  • Unscored —

    In onCreate of DeviceAdminAdd.java, there is a possible way to forcibly add a device admin due to a missing permission …

  • High 7.8

    In hasPermissionForActivity of PackageManagerHelper.java, there is a possible way to start arbitrary components due to …

  • Unscored —

    In eatt_l2cap_reconfig_completed of eatt_impl.h, there is a possible out of bounds write due to an integer overflow. Th…

  • Unscored —

    In MtpPropertyValue of MtpProperty.h, there is a possible out of bounds read due to uninitialized data. This could lead…

  • Unscored —

    In loadMediaResumptionControls of MediaResumeListener.kt, there is a possible way to play and listen to media files pla…

  • High 8.8
    CVE-2023-35674 Exploited Public exploit

    In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the co…

    KEV Sep 13, 2023
  • Unscored —
    CVE-2023-35671 Public exploit

    In onHostEmulationData of HostEmulationManager.java, there is a possible way for a general purpose NFC reader to read t…

  • Unscored —

    In createQuickShareAction of SaveImageInBackgroundTask.java, there is a possible way to trigger a background activity l…

  • Unscored —

    In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an integer overflow. This could l…

  • Unscored —

    In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to control other running acti…