In visitUris of Notification.java, there is a possible bypass of user profile boundaries due to a missing permission check. This could lead to local …
In validatePassword of WifiConfigurationUtil.java, there is a possible way to get the device into a boot loop due to improper input validation. This …
In multiple locations, there is a possible way to crash multiple system services due to resource exhaustion. This could lead to local denial of servi…
In visitUris of Notification.java, there is a possible way to reveal image contents from another user due to a missing permission check. This could l…
Type confusion in V8 in Google Chrome prior to 117.0.5938.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag…
In rpmb , there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges …
In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege wit…
In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege wit…
In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System executi…
In video, there is a possible out of bounds write due to a permissions bypass. This could lead to local escalation of privilege with System execution…
In ftm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
In rpmb , there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution…
Use after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker who convinced a user to engage in specific UI interact…
Use after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who convinced a user to install a malicious extension to po…
he vulnerability is that the Call management ("com.android.server.telecom") app patched by LG launches implicit intents that disclose sensitive data …
The vulnerability is that the Call management ("com.android.server.telecom") app patched by LG sends a lot of LG-owned implicit broadcasts that discl…
The vulnerability is to theft of arbitrary files with system privilege in the LockScreenSettings ("com.lge.lockscreensettings") app in the "com/lge/l…
The vulnerability is the use of implicit PendingIntents with the PendingIntent.FLAG_MUTABLE set that leads to theft and/or (over-)write of arbitrary …
The vulnerability is the use of implicit PendingIntents without the PendingIntent.FLAG_IMMUTABLE set that leads to theft and/or (over-)write of arbit…
The vulnerability is an intent redirection in LG ThinQ Service ("com.lge.lms2") in the "com/lge/lms/things/ui/notification/NotificationManager.java" …
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memo…
In eatt_l2cap_reconfig_completed of eatt_impl.h, there is a possible out of bounds write due to an integer overflow. This could lead to remote code e…
In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote (proximal/adjace…
In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to an integer overflow. This could lead to paired device escalation of …
In computeValuesFromData of FileUtils.java, there is a possible way to insert files to other apps' external private directories due to a path travers…
In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local e…
In createQuickShareAction of SaveImageInBackgroundTask.java, there is a possible way to trigger a background activity launch due to an unsafe Pending…
In hasPermissionForActivity of PackageManagerHelper.java, there is a possible way to start arbitrary components due to a confused deputy. This could …
In MtpPropertyValue of MtpProperty.h, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege…
In onHostEmulationData of HostEmulationManager.java, there is a possible way for a general purpose NFC reader to read the full card number and expiry…