2,760 results · Feed
-
Unscored —
In isServerCertChainValid of InsecureEapNetworkHandler.java, there is a possible way to trust an imposter server due to…
-
Medium 6.8
In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a mis…
-
Medium 6.8
In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a mis…
-
Medium 6.8
In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a mis…
-
Medium 6.8
In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a mis…
-
Critical 9.8
In processMessageImpl of ClientModeImpl.java, there is a possible credential disclosure in the TOFU flow due to a logic…
-
Unscored —
In getLocationCache of GeoLocation.java, there is a possible way to send a mock location during an emergency call due t…
-
Unscored —
In notification access permission dialog box, malicious application can embedded a very long service label that overflo…
-
Unscored —
In DMPixelLogger_ProcessDmCommand of DMPixelLogger.cpp, there is a possible out of bounds read due to a missing bounds …
-
Unscored —
In incfs_kill_sb of fs/incfs/vfs.c, there is a possible memory corruption due to a use after free. This could lead to l…
-
Unscored —
there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with …
-
Unscored —
In multiple functions of io_uring.c, there is a possible kernel memory corruption due to improper locking. This could l…
-
Unscored —
there is a possible way to bypass cryptographic assurances due to a logic error in the code. This could lead to local e…
-
Unscored —
In startInput of AudioPolicyInterfaceImpl.cpp, there is a possible way of erroneously displaying the microphone privacy…
-
Unscored —
In updateSettingsInternalLI of InstallPackageHelper.java, there is a possible way to sideload an app in the work profil…
-
Unscored —
In SettingsHomepageActivity.java, there is a possible way to launch arbitrary activities via Settings due to a logic er…
-
Unscored —
In multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to lo…
-
Unscored —
In getCurrentState of OneTimePermissionUserManager.java, there is a possible way to hold one-time permissions after the…
-
Unscored —CVE-2023-21251 Public exploit
In onCreate of ConfirmDialog.java, there is a possible way to connect to VNP bypassing user's consent due to improper i…
-
Unscored —
In gatt_end_operation of gatt_utils.cc, there is a possible out of bounds write due to a missing bounds check. This cou…
-
Unscored —
In multiple functions of OneTimePermissionUserManager.java, there is a possible one-time permission retention due to a …
-
Unscored —
In getAvailabilityStatus of WifiScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device…
-
Unscored —
In getAvailabilityStatus of BluetoothScanningMainSwitchPreferenceController.java, there is a possible way to bypass a d…
-
Unscored —CVE-2023-21246 Public exploit
In ShortcutInfo of ShortcutInfo.java, there is a possible way for an app to retain notification listening access due to…
-
High 7.8
In showNextSecurityScreenOrFinish of KeyguardSecurityContainerController.java, there is a possible way to access the lo…
-
Unscored —
In validateForCommonR1andR2 of PasspointConfiguration.java, there is a possible way to inflate the size of a config fil…
-
Unscored —
In rw_i93_send_to_upper of rw_i93.cc, there is a possible out of bounds write due to an integer overflow. This could le…
-
Unscored —
In Policy of Policy.java, there is a possible boot loop due to resource exhaustion. This could lead to local denial of …
-
Unscored —
In visitUris of Notification.java, there is a possible way to leak image data across user boundaries due to a confused …
-
Unscored —CVE-2023-21238 Public exploit
In visitUris of RemoteViews.java, there is a possible leak of images between users due to a confused deputy. This could…
-
Unscored —
In updatePictureInPictureMode of ActivityRecord.java, there is a possible bypass of background launch restrictions due …
-
Unscored —
In openMmapStream of AudioFlinger.cpp, there is a possible way to record audio without displaying the microphone privac…
-
Unscored —CVE-2023-20918 Public exploit
In getPendingIntentLaunchFlags of ActivityOptions.java, there is a possible elevation of privilege due to a confused de…
-
Unscored —
The PVRSRVBridgeGetMultiCoreInfo ioctl in the PowerVR kernel driver can return uninitialized kernel memory to user spac…
-
High 7.8
In removePermission of PermissionManagerServiceImpl.java, there is a possible way to obtain dangerous permissions witho…
-
Medium 5.5
In add of WifiNetworkSuggestionsManager.java, there is a possible way to trigger permanent DoS due to resource exhausti…
-
Unscored —
btif/src/btif_dm.c in Android before 5.1 does not properly enforce the temporary nature of a Bluetooth pairing, which a…
-
Unscored —
Android SQLite Journal before 4.0.1 has an information disclosure vulnerability.
-
Unscored —
The Bluetooth stack in Android before 2.3.6 allows a physically proximate attacker to obtain contact information via an…
-
Unscored —
A Denial of Service vulnerability exists in Google Android 4.4.4, 5.0.2, and 5.1.1, which allows malicious users to blo…