Browse CVEs

MEDIUM 5.7 CVE-2017-13317 In HeifDecoderImpl::getScanline of HeifDecoderImpl.cpp, there is a possible out of bounds read due to improper input validation. This could lead to r… Android Patch available Fix from $1,6002025-01-28 MEDIUM 5.7 CVE-2017-13318 In HeifDataSource::readAt of HeifDecoderImpl.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote inform… Android Patch available Fix from $1,6002025-01-28 HIGH 8.2 CVE-2025-0611 Object corruption in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 132.0.6834.110+ Fix from $1,9502025-01-22 HIGH 7.5 CVE-2025-0612 Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a cra… Chrome 132.0.6834.110+ Fix from $1,9502025-01-22 CRITICAL 9.8 CVE-2024-49747 In gatts_process_read_by_type_req of gatt_sr.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to remote … Android Mitigation only Fix from $2,3002025-01-21 CRITICAL 9.8 CVE-2024-49748 In gatts_process_primary_service_req of gatt_sr.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote … Android Mitigation only Fix from $2,3002025-01-21 HIGH 8.8 CVE-2024-49749 In DGifSlurp of dgif_lib.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no addi… Android Mitigation only Fix from $1,9502025-01-21 HIGH 7.8 CVE-2024-49732 In multiple functions of CompanionDeviceManagerService.java, there is a possible way to grant permissions without user consent due to a missing permi… Android Mitigation only Fix from $1,9502025-01-21 HIGH 7.8 CVE-2024-49735 In multiple locations, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of… Android No fix yet Fix from $1,9502025-01-21 HIGH 7.8 CVE-2024-49737 In applyTaskFragmentOperation of WindowOrganizerController.java, there is a possible way to launch arbitrary activities as the system UID due to a lo… Android Mitigation only Fix from $1,9502025-01-21 HIGH 7.8 CVE-2024-49738 In writeInplace of Parcel.cpp, there is a possible out of bounds write. This could lead to local escalation of privilege with no additional execution… Android Mitigation only Fix from $1,9502025-01-21 HIGH 7.8 CVE-2024-49742 In onCreate of NotificationAccessConfirmationActivity.java , there is a possible way to hide an app with notification access in Settings due to a mis… Android Mitigation only Fix from $1,9502025-01-21 HIGH 7.8 CVE-2024-49744 In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to bypass parcel mismatch mitigation due to unsafe deseri… Android Mitigation only Fix from $1,9502025-01-21 HIGH 7.8 CVE-2024-49745 In growData of Parcel.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege… Android Mitigation only Fix from $1,9502025-01-21 HIGH 7.5 CVE-2024-49734 In multiple functions of ConnectivityService.java, there is a possible way for a Wi-Fi AP to determine what site a device has connected to through a … Android Mitigation only Fix from $1,9502025-01-21 HIGH 7.0 CVE-2024-49724 In multiple functions of AccountManagerService.java, there is a possible way to bypass permissions and launch protected activities due to a race cond… Android Mitigation only Fix from $1,9502025-01-21 MEDIUM 5.5 CVE-2024-49733 In reload of ServiceListing.java , there is a possible way to allow a malicious app to hide an NLS from Settings due to a logic error in the code. Th… Android Mitigation only Fix from $1,6002025-01-21 MEDIUM 5.5 CVE-2024-49736 In onClick of MainClear.java, there is a possible way to trigger factory reset without explicit user consent due to a logic error in the code. This c… Android Mitigation only Fix from $1,6002025-01-21 HIGH 8.8 CVE-2024-43096 In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adj… Android Mitigation only Fix from $1,9502025-01-21 HIGH 8.8 CVE-2024-43770 In gatts_process_find_info of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/… Android Mitigation only Fix from $1,9502025-01-21 HIGH 8.8 CVE-2024-43771 In gatts_process_read_req of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/a… Android Mitigation only Fix from $1,9502025-01-21 HIGH 7.8 CVE-2024-34730 In multiple locations, there is a possible bypass of user consent to enabling new Bluetooth HIDs due to a logic error in the code. This could lead to… Android Mitigation only Fix from $1,9502025-01-21 HIGH 7.8 CVE-2024-43095 In multiple locations, there is a possible way to obtain any system permission due to a logic error in the code. This could lead to local escalation … Android Mitigation only Fix from $1,9502025-01-21 HIGH 7.8 CVE-2024-43765 In multiple locations, there is a possible way to obtain access to a folder due to a tapjacking/overlay attack. This could lead to local escalation o… Android Mitigation only Fix from $1,9502025-01-21 MEDIUM 6.5 CVE-2024-43763 In build_read_multi_rsp of gatt_sr.cc, there is a possible denial of service due to a logic error in the code. This could lead to remote (proximal/ad… Android Mitigation only Fix from $1,6002025-01-21 HIGH 7.8 CVE-2023-40132 In setActualDefaultRingtoneUri of RingtoneManager.java, there is a possible way to bypass content providers read permissions due to a missing permiss… Android Mitigation only Fix from $1,9502025-01-21 MEDIUM 5.5 CVE-2023-40108 In multiple locations, there is a possible way to access media content belonging to another user due to a missing permission check. This could lead t… Android Mitigation only Fix from $1,6002025-01-21 HIGH 7.8 CVE-2018-9464 In multiple locations, there is a possible way to read protected files due to a missing permission check. This could lead to local escalation of priv… Android Mitigation only Fix from $1,9502025-01-18 HIGH 7.0 CVE-2018-9461 In onAttachFragment of ShareIntentActivity.java, there is a possible way for an app to read files in the messages app due to a race condition. This c… Android Patch available Fix from $1,9502025-01-18 HIGH 7.8 CVE-2018-9389 In ip6_append_data of ip6_output.c, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to local escalat… Android Mitigation only Fix from $1,9502025-01-18