Browse CVEs

MEDIUM 5.5 CVE-2021-0597 In notifyProfileAdded and notifyProfileRemoved of SipService.java, there is a possible way to retrieve SIP account names due to a missing permission … Android Mitigation only Fix from $1,6002021-07-14 MEDIUM 5.5 CVE-2021-0599 In scheduleTimeoutLocked of NotificationRecord.java, there is a possible disclosure of a sensitive identifier via broadcasted intent due to a confuse… Android Mitigation only Fix from $1,6002021-07-14 MEDIUM 5.5 CVE-2021-0601 In encodeFrames of avc_enc_fuzzer.cpp, there is a possible out of bounds write due to a double free. This could lead to local information disclosure … Android Mitigation only Fix from $1,6002021-07-14 MEDIUM 5.5 CVE-2021-0654 In isRealSnapshot of TaskThumbnailView.java, there is possible data exposure due to a missing permission check. This could lead to local information … Android Mitigation only Fix from $1,6002021-07-14 HIGH 7.8 CVE-2021-25428 Improper validation check vulnerability in PackageManager prior to SMR July-2021 Release 1 allows untrusted applications to get dangerous level permi… Android Mitigation only Fix from $1,9502021-07-08 HIGH 7.5 CVE-2021-25426 Improper component protection vulnerability in SmsViewerActivity of Samsung Message prior to SMR July-2021 Release 1 allows untrusted applications to… Android No fix yet Fix from $1,9502021-07-08 MEDIUM 6.5 CVE-2021-25427 SQL injection vulnerability in Bluetooth prior to SMR July-2021 Release 1 allows unauthorized access to paired device information Android Mitigation only Fix from $1,6002021-07-08 HIGH 7.8 CVE-2021-0536 In dropFile of WiFiInstaller, there is a way to delete files accessible to CertInstaller due to a confused deputy. This could lead to local escalatio… Android Mitigation only Fix from $1,9502021-06-22 HIGH 7.8 CVE-2021-0539 In archiveStoredConversation of MmsService.java, there is a possible way to archive message conversation without user consent due to a missing permis… Android Mitigation only Fix from $1,9502021-06-22 HIGH 7.8 CVE-2021-0547 In onReceive of NetInitiatedActivity.java, there is a possible way to supply an attacker-controlled value to a GPS HAL handler due to a missing permi… Android Mitigation only Fix from $1,9502021-06-22 HIGH 7.8 CVE-2021-0548 In rw_i93_send_to_lower of rw_i93.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p… Android Mitigation only Fix from $1,9502021-06-22 HIGH 7.8 CVE-2021-0550 In onLoadFailed of AnnotateActivity.java, there is a possible way to gain WRITE_EXTERNAL_STORAGE permissions without user consent due to a confused d… Android Mitigation only Fix from $1,9502021-06-22 HIGH 7.8 CVE-2021-0607 In iaxxx_calc_i2s_div of iaxxx-codec.c, there is a possible hardware port write with user controlled data due to a missing bounds check. This could l… Android Mitigation only Fix from $1,9502021-06-22 HIGH 7.8 CVE-2021-0608 In handleAppLaunch of AppLaunchActivity.java, there is a possible arbitrary activity launch due to a confused deputy. This could lead to local escala… Android Mitigation only Fix from $1,9502021-06-22 HIGH 7.3 CVE-2021-0538 In onCreate of EmergencyCallbackModeExitDialog.java, there is a possible exit of emergency callback mode due to a tapjacking/overlay attack. This cou… Android Mitigation only Fix from $1,9502021-06-22 HIGH 7.3 CVE-2021-0553 In onBindViewHolder of AppSwitchPreference.java, there is a possible bypass of device admin setttings due to unclear UI. This could lead to local esc… Android Mitigation only Fix from $1,9502021-06-22 MEDIUM 6.7 CVE-2021-0540 In halWrapperDataCallback of hal_wrapper.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati… Android Mitigation only Fix from $1,6002021-06-22 MEDIUM 6.7 CVE-2021-0543 In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local es… Android Mitigation only Fix from $1,6002021-06-22 MEDIUM 6.7 CVE-2021-0544 In phNxpNciHal_print_res_status of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local es… Android Mitigation only Fix from $1,6002021-06-22 MEDIUM 6.7 CVE-2021-0545 In phNxpNciHal_print_res_status of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local es… Android Mitigation only Fix from $1,6002021-06-22 MEDIUM 6.7 CVE-2021-0546 In phNxpNciHal_print_res_status of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local es… Android Mitigation only Fix from $1,6002021-06-22 MEDIUM 6.7 CVE-2021-0606 In drm_syncobj_handle_to_fd of drm_syncobj.c, there is a possible use after free due to incorrect refcounting. This could lead to local escalation of… Android Mitigation only Fix from $1,6002021-06-22 MEDIUM 6.5 CVE-2021-0551 In bind of MediaControlPanel.java, there is a possible way to lock up the system UI using a malicious media file due to improper input validation. Th… Android Mitigation only Fix from $1,6002021-06-22 MEDIUM 5.5 CVE-2021-0542 In updateNotification of BeamTransferManager.java, there is a missing permission check. This could lead to local information disclosure of paired Blu… Android Mitigation only Fix from $1,6002021-06-22 MEDIUM 5.5 CVE-2021-0552 In getEndItemSliceAction of MediaOutputSlice.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local inf… Android Mitigation only Fix from $1,6002021-06-22 HIGH 8.8 CVE-2021-0557 In setRange of ABuffer.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no addi… Android Mitigation only Fix from $1,9502021-06-22 HIGH 7.8 CVE-2021-0534 In permission declarations of DeviceAdminReceiver.java, there is a possible lack of broadcast protection due to an insecure default value. This could… Android Mitigation only Fix from $1,9502021-06-22 HIGH 7.8 CVE-2021-0567 In isRestricted of RemoteViews.java, there is a possible way to inject font files due to a permissions bypass. This could lead to local escalation of… Android Mitigation only Fix from $1,9502021-06-22 HIGH 7.8 CVE-2021-0568 In onReceive of DevicePolicyManagerService.java, there is a possible enabling of disabled profiles due to a missing permission check. This could lead… Android Mitigation only Fix from $1,9502021-06-22 HIGH 7.8 CVE-2021-0570 In sendBugreportNotification of BugreportProgressService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead … Android Mitigation only Fix from $1,9502021-06-22