Google

Improper access control vulnerability in IImsService prior to SMR Nov-2022 Release 1 allows local attacker to access to

Improper authorization vulnerability in StorageManagerService prior to SMR Nov-2022 Release 1 allows local attacker to c

Heap overflow vulnerability in sflacf_fal_bytes_peek function in libsmat.so library prior to SMR Nov-2022 Release 1 allo

Improper input validation vulnerability in DualOutFocusViewer prior to SMR Nov-2022 Release 1 allows local attacker to p

Improper authorization vulnerability in?CallBGProvider prior to SMR Nov-2022 Release 1 allows local attacker to grant pe

Use after free in Peer Connection in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially expl

Use after free in Safe Browsing in Google Chrome prior to 106.0.5249.119 allowed an attacker who convinced a user to ins

Use after free in Permissions API in Google Chrome prior to 106.0.5249.119 allowed a remote attacker who convinced a use

Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 106.0.5249.119 allowed a remote attacke

Heap buffer overflow in WebSQL in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit

Use after free in Skia in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap co

Heap buffer overflow in Crashpad in Google Chrome on Android prior to 107.0.5304.106 allowed a remote attacker who had c

Type confusion in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corr

Use after free in WebCodecs in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit he

Use after free in Web Workers in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit

Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially e

Use after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corr

In dismiss and related functions of KeyguardHostViewController.java and related files, there is a possible lockscreen by

In phNxpNciHal_write_unlocked of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check.

In getMountModeInternal of StorageManagerService.java, there is a possible prevention of package installation due to imp

In fdt_next_tag of fdt.c, there is a possible out of bounds write due to an integer overflow. This could lead to local e

In update of MmsProvider.java, there is a possible constriction of directory permissions due to a path traversal error.

In initializeFromParcelLocked of BaseBundle.java, there is a possible method arbitrary code execution due to a confused

In onCallRedirectionComplete of CallsManager.java, there is a possible permissions bypass due to a missing permission ch

In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way to bypass user consent due to a

In buzzBeepBlinkLocked of NotificationManagerService.java, there is a possible way to share data across users due to a p

In PAN_WriteBuf of pan_api.cc, there is a possible out of bounds read due to a use after free. This could lead to remote

In AlwaysOnHotwordDetector of AlwaysOnHotwordDetector.java, there is a possible way to access the microphone from the ba

In process_service_search_rsp of sdp_discovery.cc, there is a possible out of bounds read due to improper input validati

In navigateUpTo of Task.java, there is a possible way to launch an unexported intent handler due to a logic error in the

In multiple functions of many files, there is a possible obstruction of the user's ability to select a phone account due

In setImpl of AlarmManagerService.java, there is a possible way to put a device into a boot loop due to an uncaught exce

In _PMRLogicalOffsetToPhysicalOffset of the PowerVR kernel driver, there is a possible out of bounds write due to a miss

In MMU_UnmapPages of the PowerVR kernel driver, there is a possible out of bounds write due to a missing bounds check. T

In typec, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to loc

In typec, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to loc

In isp, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privil

In ccd, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privil

In audio, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege w

In vcu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege

In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wit

In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wit

In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wit

In jpeg, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wi

In aee, there is a possible use after free due to a missing bounds check. This could lead to local escalation of privile

In isp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of

In gpu drm, there is a possible out of bounds write due to improper input validation. This could lead to local escalatio

In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatio

In telephony, there is a possible permission bypass due to a parcel format mismatch. This could lead to local escalation