Skip to content
OpenAdvisories

Vendor

Google

9,109 known vulnerabilities.

9,109 results · Feed

  • Critical 9.8

    In ArrayConcatVisitor of builtins-array.cc, there is a possible type confusion due to improper input validation. This c…

  • High 7.8

    In createPhonebookDialogView and createMapDialogView of BluetoothPermissionActivity.java, there is a possible permissio…

  • High 8.4

    In startDevice of AAudioServiceStreamBase.cpp there is a possible out of bounds write due to a use after free. This cou…

  • High 7.8

    In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. Th…

  • Medium 5.5

    In writeInplace of Parcel.cpp, there is a possible information leak across processes, using Binder, due to uninitialize…

  • Medium 5.5

    In BnCameraService::onTransact of CameraService.cpp, there is a possible information disclosure due to uninitialized da…

  • High 7.5

    In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This cou…

  • High 7.8

    In f_hidg_read and hidg_disable of f_hid.c, there is a possible use-after-free due to improper locking. This could lead…

  • Medium 5.5

    In removeUnsynchronization of ID3.cpp there is a possible resource exhaustion due to improper input validation. This co…

  • High 8.8
    CVE-2018-9411 Public exploit

    In decrypt of ClearKeyCasPlugin.cpp there is a possible out-of-bounds write due to a missing bounds check. This could l…

  • Medium 5.5

    In analyzeAxes of FontUtils.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead …

  • Critical 9.8

    In smp_data_received of smp_l2c.cc, there is a possible out of bounds read followed by code execution due to a missing …

  • High 7.8

    In HWCSession::SetColorModeById of hwc_session.cpp, there is a possible out of bounds write due to a missing bounds che…

  • High 7.8

    In cmd_flash_mmc_sparse_img of dl_commands.c, there is a possible out of bounds write due to a missing bounds check. Th…

  • High 7.8

    In the Mediatek Preloader, there are out of bounds reads and writes due to an exposed interface that allows arbitrary p…

  • High 7.8

    In download.c there is a special mode allowing user to download data into memory and causing possible memory corruption…

  • High 7.8

    In bootloader there is fastboot command allowing user specified kernel command line arguments. This could lead to local…

  • Medium 6.7

    In mtkscoaudio debugfs there is a possible arbitrary kernel memory write due to missing bounds check and weakened SELin…

  • High 7.8

    In FT_ACDK_CCT_V2_OP_ISP_SET_TUNING_PARAS of Meta_CCAP_Para.cpp, there is a possible out of bounds write due to imprope…

  • High 7.8

    In IMSA_Recv_Thread and VT_IMCB_Thread of ImsaClient.cpp and VideoTelephony.c, there is a possible out of bounds write …

  • High 8.8

    Type Confusion in V8 in Google Chrome prior to 131.0.6778.85 allowed a remote attacker to potentially exploit heap corr…

  • High 7.5

    In the LG LAF component, there is a special command that allowed modification of certain partitions. This could lead to…

  • High 7.5

    In SMF_ParseMetaEvent of eas_smf.c, there is a possible integer overflow. This could lead to remote denial of service d…

  • Medium 5.5

    In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninit…

  • Medium 5.5

    In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninit…

  • High 7.8

    In several functions of DescramblerImpl.cpp, there is a possible use after free due to improper locking. This could lea…

  • Critical 9.8

    In impeg2d_mc_fullx_fully of impeg2d_mc.c there is a possible out of bound write due to missing bounds check. This coul…

  • High 7.5

    In ResStringPool::setTo of ResourceTypes.cpp, it's possible for an attacker to control the value of mStringPoolSize to …

  • High 7.8

    In writeTypedArrayList and readTypedArrayList of Parcel.java, there is a possible escalation of privilege due to type c…

  • High 7.8
    CVE-2018-9338 Public exploit

    In ResStringPool::setTo of ResourceTypes.cpp, there is a possible out of bounds write due to a missing bounds check. Th…

  • High 7.8

    In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way for an app to keep permissions …

  • High 7.8

    In writeToParcel and createFromParcel of DcParamObject.java, there is a permission bypass due to a write size mismatch.…

  • High 7.5

    In ElementaryStreamQueue::dequeueAccessUnitMPEG4Video of ESQueue.cpp, there is a possible infinite loop leading to reso…

  • High 7.8

    In setAllowOnlyVpnForUids of NetworkManagementService.java, there is a possible security settings bypass due to a missi…

  • High 7.8

    In createFromParcel of MediaCas.java, there is a possible parcel read/write mismatch due to improper input validation. …

  • High 7.8

    In the read() function of ProcessStats.java, there is a possible read/write serialization issue leading to a permission…

  • High 7.8

    In createFromParcel of ViewPager.java, there is a possible read/write serialization issue leading to a permissions bypa…

  • Medium 6.2

    In readEncryptedData of ConscryptEngine.java, there is a possible plaintext leak due to improperly used crypto. This co…

  • Medium 5.5

    In the autofill service, the package name that is provided by the app process is trusted inappropriately.  This could l…

  • High 7.3
    CVE-2024-43093 Exploited Public exploit

    In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to pre…

    KEV Nov 7, 2024