In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no addition…
In overlay notifications, there is a possible hidden notification due to improper input validation. This could lead to a local escalation of privileg…
In libAACdec, there is a possible out of bounds read. This could lead to remote information disclosure, with no additional execution privileges neede…
In StatsService, there is a possible out of bounds read. This could lead to local information disclosure if UBSAN were not enabled, with no additiona…
In several functions of NotificationManagerService.java, there are missing permission checks. This could lead to local escalation of privilege by cre…
In setBluetoothTethering of PanService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escala…
In Euicc, there is a possible information disclosure due to an included test Certificate. This could lead to remote information disclosure with no ad…
In SurfaceFlinger, it is possible to override UI confirmation screen protected by the TEE. This could lead to local escalation of privilege with no a…
In the netlink driver, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System …
In getProcessPss of ActivityManagerService.java, there is a possible side channel information disclosure. This could lead to local information disclo…
In onReadBuffer() of StreamingSource.cpp, there is a possible information disclosure due to uninitialized data. This could lead to remote information…
In onTransact of IAudioFlinger.cpp, there is a possible stack information leak due to uninitialized data. This could lead to local information disclo…
In l2c_link_process_num_completed_pkts of l2c_link.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local…
In btu_hcif_connection_comp_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local inform…
In btm_process_inq_results of btm_inq.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information …
In DrmPlugin::releaseSecureStops of DrmPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local es…
In StatsService::command of StatsService.cpp, there is possible memory corruption due to a race condition. This could lead to local escalation of pri…
In setRequirePmfInternal of sta_network.cpp, there is a possible default value being improperly applied due to a logic error. This could lead to remo…
In hasPermissions of PermissionMonitor.java, there is a possible access to restricted permissions due to a permissions bypass. This could lead to loc…
In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of p…
In rw_i93_sm_set_read_only of rw_i93.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information …
In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote inform…
In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote inform…
In query of TelephonyProvider.java, there is a possible access to SIM card info due to a missing permission check. This could lead to local informati…
In btm_ble_batchscan_filter_track_adv_vse_cback of btm_ble_batchscan.cc, there is a possible out of bounds read due to a missing bounds check. This c…
In Pixel Recorder, there is a possible permissions bypass allowing arbitrary apps to record audio. This could lead to local information disclosure wi…
In ih264d_release_display_bufs of ih264d_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote co…
In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to stale pointer. This could lead to local escalation of pr…
In fpc_ta_get_build_info of fpc_ta_kpi.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation …
In get_auth_result of fpc_ta_hw_auth.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…