Browse CVEs

HIGH 7.8 CVE-2021-39807 In handleNfcStateChanged of SecureNfcEnabler.java, there is a possible way to enable NFC from the Guest account due to a missing permission check. Th… Android Patch available Fix from $1,9502022-04-12 HIGH 7.8 CVE-2021-39808 In createNotificationChannelGroup of PreferencesHelper.java, there is a possible way for a service to run in foreground without user notification due… Android Patch available Fix from $1,9502022-04-12 HIGH 7.8 CVE-2021-39812 In TBD of TBD, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with no additional ex… Android Patch available Fix from $1,9502022-04-12 HIGH 7.5 CVE-2021-39809 In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote info… Android Patch available Fix from $1,9502022-04-12 HIGH 7.3 CVE-2021-39796 In HarmfulAppWarningActivity of HarmfulAppWarningActivity.java, there is a possible way to trick victim to install harmful app due to a tapjacking/ov… Android Mitigation only Fix from $1,9502022-04-12 MEDIUM 6.7 CVE-2021-39814 In ppmp_validate_wsm of drm_fw.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of pr… Android Mitigation only Fix from $1,6002022-04-12 MEDIUM 6.5 CVE-2021-39803 In ~Impl of C2AllocatorIon.cpp, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with… Android Patch available Fix from $1,6002022-04-12 MEDIUM 6.5 CVE-2021-39804 In reinit of HeifDecoderImpl.cpp, there is a possible crash due to a missing null check. This could lead to remote persistent denial of service in th… Android Patch available Fix from $1,6002022-04-12 MEDIUM 6.5 CVE-2021-39805 In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information … Android Mitigation only Fix from $1,6002022-04-12 MEDIUM 5.5 CVE-2021-39800 In ion_ioctl of ion-ioctl.c, there is a possible way to leak kernel head data due to a use after free. This could lead to local information disclosur… Android Patch available Fix from $1,6002022-04-12 HIGH 7.8 CVE-2021-0694 In setServiceForegroundInnerLocked of ActiveServices.java, there is a possible way for a background application to regain foreground permissions due … Android Mitigation only Fix from $1,9502022-04-12 HIGH 7.8 CVE-2021-0707 In dma_buf_release of dma-buf.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with… Android Patch available Fix from $1,9502022-04-12 HIGH 7.8 CVE-2022-27826 Improper validation vulnerability in SemSuspendDialogInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities. Android No fix yet Fix from $1,9502022-04-11 HIGH 7.8 CVE-2022-27827 Improper validation vulnerability in MediaMonitorDimension prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities. Android No fix yet Fix from $1,9502022-04-11 HIGH 7.8 CVE-2022-27828 Improper validation vulnerability in MediaMonitorEvent prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities. Android Mitigation only Fix from $1,9502022-04-11 HIGH 7.8 CVE-2022-27829 Improper validation vulnerability in VerifyCredentialResponse prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities. Android Mitigation only Fix from $1,9502022-04-11 HIGH 7.8 CVE-2022-27830 Improper validation vulnerability in SemBlurInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities. Android No fix yet Fix from $1,9502022-04-11 HIGH 7.8 CVE-2022-27833 Improper input validation in DSP driver prior to SMR Apr-2022 Release 1 allows out-of-bounds write by integer overflow. Android Mitigation only Fix from $1,9502022-04-11 HIGH 7.8 CVE-2022-27835 Improper boundary check in UWB firmware prior to SMR Apr-2022 Release 1 allows arbitrary memory write. Android Mitigation only Fix from $1,9502022-04-11 HIGH 7.8 CVE-2022-27836 Improper access control and path traversal vulnerability in Storage Manager and Storage Manager Service prior to SMR Apr-2022 Release 1 allow local a… Android Mitigation only Fix from $1,9502022-04-11 HIGH 7.1 CVE-2022-27823 Improper size check in sapefd_parse_meta_HEADER_old function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read vi… Android Mitigation only Fix from $1,9502022-04-11 HIGH 7.1 CVE-2022-27824 Improper size check of in sapefd_parse_meta_DESCRIPTION function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds rea… Android Mitigation only Fix from $1,9502022-04-11 HIGH 7.1 CVE-2022-27825 Improper size check in sapefd_parse_meta_HEADER function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a … Android Mitigation only Fix from $1,9502022-04-11 HIGH 7.0 CVE-2022-27834 Use after free vulnerability in dsp_context_unload_graph function of DSP driver prior to SMR Apr-2022 Release 1 allows attackers to perform malicious… Android Mitigation only Fix from $1,9502022-04-11 MEDIUM 5.5 CVE-2022-27821 Improper boundary check in Quram Agif library prior to SMR Apr-2022 Release 1 allows attackers to cause denial of service via crafted image file. Android Mitigation only Fix from $1,6002022-04-11 MEDIUM 5.5 CVE-2022-27822 Information exposure vulnerability in ril property setting prior to SMR April-2022 Release 1 allows access to EF_RUIMID value without permission. Android Mitigation only Fix from $1,6002022-04-11 CRITICAL 9.8 CVE-2022-26093 Null pointer dereference vulnerability in parser_irot function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remo… Android Mitigation only Fix from $2,3002022-04-11 CRITICAL 9.8 CVE-2022-26094 Null pointer dereference vulnerability in parser_auxC function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remo… Android Mitigation only Fix from $2,3002022-04-11 CRITICAL 9.8 CVE-2022-26095 Null pointer dereference vulnerability in parser_colr function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remo… Android Mitigation only Fix from $2,3002022-04-11 CRITICAL 9.8 CVE-2022-26096 Null pointer dereference vulnerability in parser_ispe function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remo… Android Mitigation only Fix from $2,3002022-04-11