Google

In visitUris of RemoteViews.java, there is a possible cross-user media read due to a confused deputy. This could lead to

In multiple locations, there is a possible way to obscure the microphone privacy indicator due to a logic error in the c

In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission chec

In writeToParcel of CursorWindow.cpp, there is a possible information disclosure due to uninitialized data. This could l

In decideCancelProvisioningDialog of AdminIntegratedFlowPrepareActivity.java, there is a possible way to bypass factory

In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. Th

In SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect bounds check. This could l

In readFrom of Uri.java, there is a possible bad URI permission grant due to improper input validation. This could lead

In parseInputs of ShimPreparedModel.cpp, there is a possible out of bounds read due to improper input validation. This c

In onCreate of LockSettingsActivity.java, there is a possible way set a new lockscreen PIN without entering the existing

In launchConfirmationActivity of ChooseLockSettingsHelper.java, there is a possible way to enable developer options with

In multiple locations of avrc, there is a possible leak of heap data due to uninitialized data. This could lead to remot

In multiple locations, there is a possible way to retrieve sensor data without permissions due to a permissions bypass.

In getIntentForButton of ButtonManager.java, there is a possible way for an unprivileged application to start a non-expo

In onAccessPointChanged of AccessPointPreference.java, there is a possible way for unprivileged apps to receive a broadc

In registerServiceLocked of ManagedServices.java, there is a possible bypass of background activity launch restrictions

In startActivityInner of ActivityStarter.java, there is a possible way to launch an activity into PiP mode from the back

In update of MmsProvider.java, there is a possible way to change directory permissions due to a path traversal error. Th

In multiple functions of KeyguardViewMediator.java, there is a possible way to bypass lockdown mode with screen pinning

In multiple locations, there are root CA certificates which need to be disabled. This could lead to remote information d

In multiple functions of mem_protect.c, there is a possible way to access hypervisor memory due to a memory access check

In isServerCertChainValid of InsecureEapNetworkHandler.java, there is a possible way to trust an imposter server due to

In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a miss

In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a miss

In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a miss

In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a miss

In processMessageImpl of ClientModeImpl.java, there is a possible credential disclosure in the TOFU flow due to a logic

In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local infor

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local esca

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local esca

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local esca

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local esca

In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local infor

In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local infor

In IOMMU, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In IOMMU, there is a possible information disclosure due to improper input validation. This could lead to local informat

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p

In OPTEE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In dpe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In hcp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In imgsys, there is a possible memory corruption due to improper input validation. This could lead to local escalation o

In imgsys, there is a possible memory corruption due to improper input validation. This could lead to local escalation o

In imgsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege

In imgsys, there is a possible system crash due to a mssing ptr check. This could lead to local escalation of privilege

In pda, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local

In camera middleware, there is a possible out of bounds write due to a missing bounds check. This could lead to local es

In power, there is a possible memory corruption due to an incorrect bounds check. This could lead to local denial of ser

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr