Browse CVEs

HIGH 7.8 CVE-2021-39678 In <TBD> of <TBD>, there is a possible bypass of Factory Reset Protection due to <TBD>. This could lead to local escalation of privilege with no addi… Android No fix yet Fix from $1,9502022-01-14 HIGH 7.8 CVE-2021-39681 In delete_protocol of main.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege … Android Mitigation only Fix from $1,9502022-01-14 HIGH 7.8 CVE-2021-39682 In mgm_alloc_page of memory_group_manager.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escal… Android Mitigation only Fix from $1,9502022-01-14 HIGH 7.8 CVE-2021-39684 In target_init of gs101/abl/target/slider/target.c, there is a possible allocation of RWX memory due to a logic error in the code. This could lead to… Android Mitigation only Fix from $1,9502022-01-14 HIGH 7.0 CVE-2021-39629 In phTmlNfc_Init and phTmlNfc_CleanUp of phTmlNfc.cc, there is a possible use after free due to a race condition. This could lead to local escalation… Android Mitigation only Fix from $1,9502022-01-14 HIGH 7.0 CVE-2021-39679 In init of vendor_graphicbuffer_meta.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privileg… Android Mitigation only Fix from $1,9502022-01-14 MEDIUM 6.7 CVE-2021-39683 In copy_from_mbox of sss_ice_util.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr… Android Mitigation only Fix from $1,6002022-01-14 MEDIUM 5.5 CVE-2021-39633 In gre_handle_offloads of ip_gre.c, there is a possible page fault due to an invalid memory access. This could lead to local information disclosure w… Android Patch available Fix from $1,6002022-01-14 MEDIUM 5.5 CVE-2021-39659 In sortSimPhoneAccountsForEmergency of CreateConnectionProcessor.java, there is a possible prevention of access to emergency calling due to an unhand… Android Mitigation only Fix from $1,6002022-01-14 CRITICAL 9.8 CVE-2021-39623 In doRead of SimpleDecodingSource.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation… Android Mitigation only Fix from $2,3002022-01-14 HIGH 7.8 CVE-2021-39618 In multiple methods of EuiccNotificationManager.java, there is a possible way to install existing packages without user consent due to an unsafe Pend… Android Mitigation only Fix from $1,9502022-01-14 HIGH 7.8 CVE-2021-39620 In ipcSetDataReference of Parcel.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privi… Android Mitigation only Fix from $1,9502022-01-14 HIGH 7.8 CVE-2021-39621 In sendLegacyVoicemailNotification of LegacyModeSmsHandler.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could le… Android Mitigation only Fix from $1,9502022-01-14 HIGH 7.8 CVE-2021-39622 In GBoard, there is a possible way to bypass Factory Reset Protection due to a missing permission check. This could lead to local escalation of privi… Android Mitigation only Fix from $1,9502022-01-14 HIGH 7.8 CVE-2021-39626 In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. This could lead to local escala… Android Mitigation only Fix from $1,9502022-01-14 HIGH 7.8 CVE-2021-39627 In sendLegacyVoicemailNotification of LegacyModeSmsHandler.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could le… Android Mitigation only Fix from $1,9502022-01-14 HIGH 7.3 CVE-2021-39625 In showCarrierAppInstallationNotification of EuiccNotificationManager.java, there is a possible way to gain an access to MediaProvider content due to… Android Mitigation only Fix from $1,9502022-01-14 CRITICAL 9.8 CVE-2021-1049 Hacker one bug ID: 1343975Product: AndroidVersions: Android SoCAndroid ID: A-204256722 Android No fix yet Fix from $2,3002022-01-14 HIGH 7.8 CVE-2021-0959 In jit_memory_region.cc, there is a possible bypass of memory restrictions due to a logic error in the code. This could lead to local escalation of p… Android Mitigation only Fix from $1,9502022-01-14 HIGH 7.8 CVE-2021-1035 In setLaunchIntent of BluetoothDevicePickerPreferenceController.java, there is a possible way to invoke an arbitrary broadcast receiver due to a conf… Android Mitigation only Fix from $1,9502022-01-14 HIGH 7.8 CVE-2021-1036 In LocationSettingsActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking/overlay attack. This could lead to local escalation o… Android Mitigation only Fix from $1,9502022-01-14 MEDIUM 5.3 CVE-2021-1037 The broadcast that DevicePickerFragment sends when a new device is paired doesn't have any permission checks, so any app can register to listen for i… Android Mitigation only Fix from $1,6002022-01-14 MEDIUM 5.5 CVE-2022-22271 A missing input validation before memory copy in TIMA trustlet prior to SMR Jan-2022 Release 1 allows attackers to copy data from arbitrary memory. Android Mitigation only Fix from $1,6002022-01-10 MEDIUM 6.1 CVE-2022-22268 Incorrect implementation of Knox Guard prior to SMR Jan-2022 Release 1 allows physically proximate attackers to temporary unlock the Knox Guard via S… Android Mitigation only Fix from $1,6002022-01-10 HIGH 7.8 CVE-2022-22265 KEV An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code executio… Android Mitigation only Fix from $1,9502022-01-10 HIGH 7.1 CVE-2022-22264 Improper sanitization of incoming intent in Dressroom prior to SMR Jan-2022 Release 1 allows local attackers to read and write arbitrary files withou… Android Mitigation only Fix from $1,9502022-01-10 MEDIUM 5.5 CVE-2022-22263 Unprotected dynamic receiver in SecSettings prior to SMR Jan-2022 Release 1 allows untrusted applications to launch arbitrary activity. Android Mitigation only Fix from $1,6002022-01-10 MEDIUM 5.5 CVE-2021-22569 An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. … Google Protobuf 3.16.1 / 3.18.2+ Fix from $1,6002022-01-10 HIGH 7.8 CVE-2022-20012 In mdp driver, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with no additional … Android Mitigation only Fix from $1,9502022-01-04 MEDIUM 6.7 CVE-2022-20014 In vow driver, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System e… Android Mitigation only Fix from $1,6002022-01-04