Skip to content
OpenAdvisories

Vendor

Google

9,109 known vulnerabilities.

9,109 results · Feed

  • Unscored —

    In bta_dm_sdp_result of bta_dm_act.cc, there is a possible out of bounds stack write due to a missing bounds check. Thi…

  • Unscored —

    In processMessagePart of InboundSmsHandler.java, there is a possible remote denial of service due to improper input val…

  • Unscored —

    When a device connects only over WiFi VPN, the device may not receive security updates due to some incorrect checks. Th…

  • Unscored —

    In computeFocusedWindow of RootWindowContainer.java, and related functions, there is possible interception of keypresse…

  • Unscored —

    In ih264d_video_decode of ih264d_api.c there is a possible resource exhaustion due to an infinite loop. This could lead…

  • Unscored —

    In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead…

  • Unscored —

    In sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This…

  • Unscored —

    In task_get_unused_fd_flags of binder.c, there is a possible memory corruption due to a use after free. This could lead…

  • Unscored —

    In BNEP_Write of bnep_api.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead…

  • Unscored —

    In Attachment of Attachment.java and getFilePath of EmlAttachmentProvider.java, there is a possible Elevation of Privil…

  • Unscored —

    In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead…

  • Unscored —

    In driver_override_store and driver_override_show of bus.c, there is a possible double free due to improper locking. Th…

  • Unscored —

    In sdp_copy_raw_data of sdp_discovery.cc, there is a possible out of bounds write due to an incorrect bounds check. Thi…

  • Unscored —

    In getOffsetForHorizontal of Layout.java, there is a possible application hang due to a slow width calculation. This co…

  • Unscored —

    In ihevcd_parse_sei_payload of ihevcd_parse_headers.c, there is a possible out-of-bounds write due to an integer overfl…

  • Unscored —

    In ipSecSetEncapSocketOwner of XfrmController.cpp, there is a possible failure to initialize a security feature due to …

  • Unscored —

    In CollectValuesOrEntriesImpl of elements.cc, there is possible remote code execution due to type confusion. This could…

  • Unscored —

    In smp_proc_master_id of smp_act.cc, there is a possible out of bounds read due to a missing bounds check. This could l…

  • Unscored —

    In sdcardfs_open of file.c, there is a possible Use After Free due to an unusual root cause. This could lead to local e…

  • Unscored —

    In mca_ccb_hdl_req of mca_cact.cc, there is a possible out of bounds read due to a missing bounds check. This could lea…

  • Unscored —

    In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible use-after-free due to improper locking. This could le…

  • Unscored —

    In AMediaCodecCryptoInfo_new of NdkMediaCodec.cpp, there is a possible out-of-bounds write due to an integer overflow. …

  • Unscored —

    In the SetupWizard, there is a possible Factory Reset Protection bypass due to a permissions bypass. This could lead to…

  • Unscored —
    CVE-2018-9493 Public exploit

    In the content provider of the download manager, there is a possible SQL injection due to improper input validation. Th…

  • Unscored —

    In bta_av_proc_meta_cmd of bta_av_act.cc, there is a possible out of bounds read due to an incorrect bounds check. This…

  • Unscored —

    In rfc_process_mx_message of rfc_ts_frames.cc, there is a possible out-of-bounds read due to a missing bounds check. Th…

  • Unscored —

    In impeg2_fmt_conv_yuv420p_to_yuv420sp_uv_av8 of impeg2_format_conv.s there is a possible out of bounds write due to mi…

  • Unscored —

    In readVector of iCrypto.cpp, there is a possible invalid read due to uninitialized data. This could lead to local info…

  • Unscored —

    In ixheaacd_real_synth_fft_p3 of ixheaacd_esbr_fft.c there is a possible out of bounds write due to a missing bounds ch…

  • Unscored —

    In smp_process_keypress_notification of smp_act.cc, there is a possible out of bounds read due to an incorrect bounds c…

  • Unscored —

    In smp_proc_enc_info of smp_act.cc, there is a possible out of bounds read due to a missing bounds check. This could le…

  • Unscored —

    In SkSampler::Fill of SkSampler.cpp, there is a possible out of bounds write due to an integer overflow. This could lea…

  • Unscored —

    In rfc_process_mx_message of rfc_ts_frames.cc, there is a possible out of bounds read due to a missing bounds check. Th…

  • Unscored —

    In copy_process of fork.c, there is possible memory corruption due to a double free. This could lead to local escalatio…

  • Unscored —

    In checkGrantUriPermissionLocked of ActivityManagerService.java, there is a possible permissions bypass. This could lea…

  • Unscored —
    CVE-2018-9515 Public exploit

    In sdcardfs_create and sdcardfs_mkdir of inode.c, there is a possible memory corruption due to improper locking. This c…

  • Unscored —

    In avrc_msg_cback of avrc_api.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead …

  • Unscored —

    Heap buffer overflow in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of bo…

  • Unscored —

    Incorrect security UI in permissions prompt in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof …

  • Unscored —

    Use after free in WebUI in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap c…