Skip to content
OpenAdvisories

Product · Google

Android

2,760 known vulnerabilities.

2,760 results · Feed

  • Unscored —

    In computeFocusedWindow of RootWindowContainer.java, and related functions, there is possible interception of keypresse…

  • Unscored —

    In ih264d_video_decode of ih264d_api.c there is a possible resource exhaustion due to an infinite loop. This could lead…

  • Unscored —

    In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead…

  • Unscored —

    In sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This…

  • Unscored —

    In task_get_unused_fd_flags of binder.c, there is a possible memory corruption due to a use after free. This could lead…

  • Unscored —

    In BNEP_Write of bnep_api.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead…

  • Unscored —

    In Attachment of Attachment.java and getFilePath of EmlAttachmentProvider.java, there is a possible Elevation of Privil…

  • Unscored —

    In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead…

  • Unscored —

    In driver_override_store and driver_override_show of bus.c, there is a possible double free due to improper locking. Th…

  • Unscored —

    In sdp_copy_raw_data of sdp_discovery.cc, there is a possible out of bounds write due to an incorrect bounds check. Thi…

  • Unscored —

    In getOffsetForHorizontal of Layout.java, there is a possible application hang due to a slow width calculation. This co…

  • Unscored —

    In ihevcd_parse_sei_payload of ihevcd_parse_headers.c, there is a possible out-of-bounds write due to an integer overfl…

  • Unscored —

    In ipSecSetEncapSocketOwner of XfrmController.cpp, there is a possible failure to initialize a security feature due to …

  • Unscored —

    In CollectValuesOrEntriesImpl of elements.cc, there is possible remote code execution due to type confusion. This could…

  • Unscored —

    In smp_proc_master_id of smp_act.cc, there is a possible out of bounds read due to a missing bounds check. This could l…

  • Unscored —

    In sdcardfs_open of file.c, there is a possible Use After Free due to an unusual root cause. This could lead to local e…

  • Unscored —

    In mca_ccb_hdl_req of mca_cact.cc, there is a possible out of bounds read due to a missing bounds check. This could lea…

  • Unscored —

    In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible use-after-free due to improper locking. This could le…

  • Unscored —

    In AMediaCodecCryptoInfo_new of NdkMediaCodec.cpp, there is a possible out-of-bounds write due to an integer overflow. …

  • Unscored —

    In the SetupWizard, there is a possible Factory Reset Protection bypass due to a permissions bypass. This could lead to…

  • Unscored —
    CVE-2018-9493 Public exploit

    In the content provider of the download manager, there is a possible SQL injection due to improper input validation. Th…

  • Unscored —

    In bta_av_proc_meta_cmd of bta_av_act.cc, there is a possible out of bounds read due to an incorrect bounds check. This…

  • Unscored —

    In rfc_process_mx_message of rfc_ts_frames.cc, there is a possible out-of-bounds read due to a missing bounds check. Th…

  • Unscored —

    In impeg2_fmt_conv_yuv420p_to_yuv420sp_uv_av8 of impeg2_format_conv.s there is a possible out of bounds write due to mi…

  • Unscored —

    In readVector of iCrypto.cpp, there is a possible invalid read due to uninitialized data. This could lead to local info…

  • Unscored —

    In ixheaacd_real_synth_fft_p3 of ixheaacd_esbr_fft.c there is a possible out of bounds write due to a missing bounds ch…

  • Unscored —

    In smp_process_keypress_notification of smp_act.cc, there is a possible out of bounds read due to an incorrect bounds c…

  • Unscored —

    In smp_proc_enc_info of smp_act.cc, there is a possible out of bounds read due to a missing bounds check. This could le…

  • Unscored —

    In SkSampler::Fill of SkSampler.cpp, there is a possible out of bounds write due to an integer overflow. This could lea…

  • Unscored —

    In rfc_process_mx_message of rfc_ts_frames.cc, there is a possible out of bounds read due to a missing bounds check. Th…

  • Unscored —

    In copy_process of fork.c, there is possible memory corruption due to a double free. This could lead to local escalatio…

  • Unscored —

    In checkGrantUriPermissionLocked of ActivityManagerService.java, there is a possible permissions bypass. This could lea…

  • Unscored —
    CVE-2018-9515 Public exploit

    In sdcardfs_create and sdcardfs_mkdir of inode.c, there is a possible memory corruption due to improper locking. This c…

  • Unscored —

    In avrc_msg_cback of avrc_api.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead …

  • Unscored —

    In blk_mq_tag_to_rq in blk-mq.c in the upstream kernel, there is a possible use after free due to a race condition when…

  • Unscored —

    An elevation of privilege vulnerability in the NVIDIA GPU driver. Product: Android. Versions: Android kernel. Android I…

  • Unscored —

    An elevation of privilege vulnerability in the NVIDIA firmware processing code. Product: Android. Versions: Android ker…

  • Unscored —

    An elevation of privilege vulnerability in the Qualcomm QCE driver. Product: Android. Versions: Android kernel. Android…

  • Unscored —

    An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kerne…

  • Unscored —

    An information disclosure vulnerability in the Qualcomm audio driver. Product: Android. Versions: Android Kernel. Andro…