Google

In multiple methods of PackageInstallerSession.java, there is a possible way to start foreground services from the backg

In multiple functions of AccountManagerService.java, there is a possible loading of arbitrary code into the System Setti

In toUriInner of Intent.java, there is a possible way to launch an arbitrary activity due to a confused deputy. This cou

In OnWakelockReleased of attribution_processor.cc, there is a use after free that could lead to remote code execution wi

In sanitize of LayerState.cpp, there is a possible way to take over the screen display and swap the display content due

In extractRelativePath of FileUtils.java, there is a possible way to access files in a directory belonging to other appl

In retrieveServiceLocked of ActiveServices.java, there is a possible way to dynamically register a BroadcastReceiver usi

In canDisplayLocalUi of AppLocalePickerActivity.java, there is a possible way to change system app locales due to a miss

In parseUsesPermission of ParsingPackageUtils.java, there is a possible boot loop due to resource exhaustion. This could

In startInstrumentation of ActivityManagerService.java, there is a possible way to keep the foreground service alive whi

In deliverOnFlushComplete of LocationProviderManager.java, there is a possible way to bypass background activity launch

In PreferencesHelper.java, an uncaught exception may cause the device to get stuck in a boot loop. This could lead to lo

In isToggleable of SecureNfcEnabler.java and SecureNfcPreferenceController.java, there is a possible way to enable NFC f

In nci_snd_set_routing_cmd of nci_hmsgs.cc, there is a possible out of bounds write due to a missing bounds check. This

In buildPropFile of filesystem.go, there is a possible insecure hash due to an improperly used crypto. This could lead t

In onNullBinding of CallScreeningServiceHelper.java, there is a possible way to record audio without showing a privacy i

In getNumberFromCallIntent of NewOutgoingCallIntentBroadcaster.java, there is a possible way to enumerate other user's c

In multiple functions of PackageInstallerService.java and related files, there is a possible way to bypass background ac

In register_notification_rsp of btif_rc.cc, there is a possible out of bounds read due to a missing bounds check. This c

In avdt_scb_hdl_pkt_no_frag of avdt_scb_act.cc, there is a possible out of bounds write due to an incorrect bounds check

In AlarmManagerActivity of AlarmManagerActivity.java, there is a possible way to bypass background activity launch restr

In acc_ctrlrequest_composite of f_accessory.c, there is a possible out of bounds write due to a missing bounds check. Th

In deserialize of multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead

In multiple functions of RunningTasks.java, there is a possible privilege escalation due to a missing privilege check. T

In PVRSRVBridgeSyncPrimOpTake of the PowerVR kernel driver, a missing size check means there is a possible integer overf

In PVRSRVBridgePhysmemImportSparseDmaBuf of the PowerVR kernel driver, a missing size check means there is a possible in

In PVRSRVBridgeCacheOpQueue of the PowerVR kernel driver, a missing size check means there is a possible integer overflo

In PVRSRVBridgeRGXKickSync of the PowerVR kernel driver, a missing size check means there is a possible integer overflow

In PVRSRVBridgeRGXKickCDM of the PowerVR kernel driver, a missing size check means there is a possible integer overflow

In PVRSRVBridgeRGXKickTA3D of the PowerVR kernel driver, a missing size check means there is a possible integer overflow

In PVRSRVBridgeRGXTDMSubmitTransfer of the PowerVR kernel driver, a missing size check means there is a possible integer

In PVRSRVBridgeServerSyncGetStatus of the PowerVR kernel driver, a missing size check means there is a possible integer

In PVRSRVBridgePhysmemNewRamBackedLockedPMR of the PowerVR kernel driver, a missing size check means there is a possible

In PVRSRVBridgeChangeSparseMem of the PowerVR kernel driver, a missing size check means there is a possible integer over

In PVRSRVBridgeDevicememHistorySparseChange of the PowerVR kernel driver, a missing size check means there is a possible

In PVRSRVBridgeRGXKickRS of the PowerVR kernel driver, a missing size check means there is a possible integer overflow t

In PVRSRVBridgeRGXKickVRDM of the PowerVR kernel driver, a missing size check means there is a possible integer overflow

Heap buffer overflow in sqlite in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit

Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the rend

Use after free in DevTools in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who convinced a user to en

Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to

Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to

Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corr

On affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine (Sfe) can lead to a potential d

In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.

In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.

In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.

In vdsp service, there is a missing permission check. This could lead to local denial of service in vdsp service.

In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.

In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.