2,760 results · Feed
-
Unscored —
In bta_av_rc_msg of bta_av_act.cc, there is a possible use after free due to a logic error in the code. This could lead…
-
Unscored —
In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. T…
-
Unscored —
In updateList of NotificationAccessSettings.java, there is a possible way to hide approved notification listeners in th…
-
High 7.8
In computeValuesFromData of FileUtils.java, there is a possible way to insert files to other apps' external private dir…
-
Unscored —
In multiple files, there is a possible way to import a contact from another user due to a missing permission check. Thi…
-
Unscored —
In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible privilege escalation due to a use after free. This co…
-
Unscored —
In registerServiceLocked of ManagedServices.java, there is a possible bypass of background activity launch restrictions…
-
Unscored —
In onAccessPointChanged of AccessPointPreference.java, there is a possible way for unprivileged apps to receive a broad…
-
Unscored —
In getIntentForButton of ButtonManager.java, there is a possible way for an unprivileged application to start a non-exp…
-
Unscored —
In multiple locations, there is a possible way to retrieve sensor data without permissions due to a permissions bypass.…
-
Unscored —
In multiple locations of avrc, there is a possible leak of heap data due to uninitialized data. This could lead to remo…
-
Unscored —
In launchConfirmationActivity of ChooseLockSettingsHelper.java, there is a possible way to enable developer options wit…
-
Unscored —
In onCreate of LockSettingsActivity.java, there is a possible way set a new lockscreen PIN without entering the existin…
-
Unscored —
In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way to access adb before SUW completion …
-
Unscored —
In openContentUri of ActivityManagerService.java, there is a possible way for a third party app to obtain restricted fi…
-
Unscored —
In update of MmsProvider.java, there is a possible way to bypass file permission checks due to a race condition. This c…
-
Unscored —
In multiple locations, there is a possible bypass of a multi user security boundary due to a confused deputy. This coul…
-
Unscored —CVE-2023-21288 Public exploit
In visitUris of Notification.java, there is a possible way to reveal images across users due to a missing permission ch…
-
Unscored —
In multiple locations, there is a possible code execution due to type confusion. This could lead to remote code executi…
-
Unscored —CVE-2023-21286 Public exploit
In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission che…
-
Unscored —CVE-2023-21285 Public exploit
In setMetadata of MediaSessionRecord.java, there is a possible way to view another user's images due to a confused depu…
-
Unscored —CVE-2023-21284 Public exploit
In multiple functions of DevicePolicyManager.java, there is a possible way to prevent enabling the Find my Device featu…
-
Unscored —
In multiple functions of StatusHints.java, there is a possible way to reveal images across users due to a confused depu…
-
Unscored —CVE-2023-21282 Public exploit
In TRANSPOSER_SETTINGS of lpp_tran.h, there is a possible out of bounds write due to an incorrect bounds check. This co…
-
Unscored —CVE-2023-21281 Public exploit
In multiple functions of KeyguardViewMediator.java, there is a possible failure to lock after screen timeout due to a l…
-
Unscored —
In setMediaButtonBroadcastReceiver of MediaSessionRecord.java, there is a possible permanent DoS due to resource exhaus…
-
Unscored —
In visitUris of RemoteViews.java, there is a possible cross-user media read due to a confused deputy. This could lead t…
-
Unscored —
In multiple locations, there is a possible way to obscure the microphone privacy indicator due to a logic error in the …
-
Unscored —
In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission che…
-
Unscored —
In writeToParcel of CursorWindow.cpp, there is a possible information disclosure due to uninitialized data. This could …
-
Unscored —CVE-2023-21275 Public exploit
In decideCancelProvisioningDialog of AdminIntegratedFlowPrepareActivity.java, there is a possible way to bypass factory…
-
Unscored —
In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. T…
-
Unscored —
In SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect bounds check. This could …
-
Unscored —CVE-2023-21272 Public exploit
In readFrom of Uri.java, there is a possible bad URI permission grant due to improper input validation. This could lead…
-
Unscored —
In parseInputs of ShimPreparedModel.cpp, there is a possible out of bounds read due to improper input validation. This …
-
Unscored —
In startActivityInner of ActivityStarter.java, there is a possible way to launch an activity into PiP mode from the bac…
-
Unscored —
In update of MmsProvider.java, there is a possible way to change directory permissions due to a path traversal error. T…
-
Unscored —
In multiple functions of KeyguardViewMediator.java, there is a possible way to bypass lockdown mode with screen pinning…
-
High 7.5
In multiple locations, there are root CA certificates which need to be disabled. This could lead to remote information …
-
Unscored —
In multiple functions of mem_protect.c, there is a possible way to access hypervisor memory due to a memory access chec…