Google

In ConvertToHalMetadata of aidl_utils.cc, there is a possible out of bounds read due to a missing bounds check. This cou

In ConvertToHalMetadata of aidl_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This

When cpif handles probe failures, there is a possible out of bounds read due to a use after free. This could lead to loc

In init of VendorGraphicBufferMeta, there is a possible out of bounds read due to a missing bounds check. This could lea

In (TBD) of (TBD), there is a possible way to corrupt memory due to a use after free. This could lead to local escalatio

In (TBD) of (TBD), there is a possible way to corrupt memory due to a use after free. This could lead to local escalatio

In append_to_params of param_util.c, there is a possible out of bounds write due to an incorrect bounds check. This coul

In buildCommand of bluetooth_ccc.cc, there is a possible out of bounds write due to a logic error in the code. This coul

In dumpstateBoard of Dumpstate.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could

In cs40l2x_cp_trigger_queue_show of cs40l2x.c, there is a possible out of bounds write due to a use after free. This cou

In BitmapExport.java, there is a possible failure to truncate images due to a logic error in the code.Product: AndroidVe

In multiple functions of BackupHelper.java, there is a possible way for an app to get permissions previously granted to

In multiple functions of SensorService.cpp, there is a possible access of accurate sensor data due to a permissions bypa

In addNetwork of WifiManager.java, there is a possible way to trigger a persistent DoS due to resource exhaustion. This

In _ufdt_output_node_to_fdt of ufdt_convert.c, there is a possible out of bounds read due to a heap buffer overflow. Thi

In setPowerMode of HWC2.cpp, there is a possible out of bounds read due to a race condition. This could lead to local in

In Confirmation of keystore_cli_v2.cpp, there is a possible way to corrupt memory due to a double free. This could lead

In register of UidObserverController.java, there is a missing permission check. This could lead to local information dis

In parse_printerAttributes of ipphelper.c, there is a possible out of bounds read due to a string without a null-termina

In multiple functions of PasspointXmlUtils.java, there is a possible authentication misconfiguration due to a logic erro

In updateInputChannel of WindowManagerService.java, there is a possible way to set a touchable region beyond its own Sur

In ufdt_local_fixup_prop of ufdt_overlay.c, there is a possible out of bounds read due to an incorrect bounds check. Thi

In maybeFinish of FallbackHome.java, there is a possible delay of lockdown screen due to logic error. This could lead to

In BufferBlock of Suballocation.cpp, there is a possible out of bounds write due to memory corruption. This could lead t

In isTargetSdkLessThanQOrPrivileged of WifiServiceImpl.java, there is a possible way for the guest user to change admin

In registerSignalHandlers of main.c, there is a possible local arbitrary code execution due to a use after free. This co

In ih264e_init_proc_ctxt of ih264e_process.c, there is a possible out of bounds read due to a heap buffer overflow. This

In UnwindingWorker of unwinding.cc, there is a possible out of bounds write due to a use after free. This could lead to

In InstallStart of InstallStart.java, there is a possible way to change the installer package name due to an improper in

In AccountTypePreference of AccountTypePreference.java, there is a possible way to mislead the user about accounts insta

In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a mis

In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could

In forceStaDisconnection of hostapd.cpp, there is a possible out of bounds read due to a missing bounds check. This coul

In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could

In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could

In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could

In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could

In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could

In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could

In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could

In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a mis

In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a mis

In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a mis

In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a mis

In onContextItemSelected of NetworkProviderSettings.java, there is a possible way for users to change the Wi-Fi settings

In MediaCodec.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of pr

In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. Thi

In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. Thi

In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. Thi

In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. Thi