Google

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In Autoboot, there is a possible permission bypass due to a missing permission check. This could lead to local escalatio

In MDP, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wit

In sched driver, there is a possible use after free due to improper locking. This could lead to local escalation of priv

In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privi

In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privi

In TEEI driver, there is a possible type confusion due to a race condition. This could lead to local escalation of privi

In GED driver, there is a possible use after free due to a race condition. This could lead to local escalation of privil

In sound driver, there is a possible information disclosure due to symlink following. This could lead to local informati

In CCCI, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc

In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p

In CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p

In telecom service, there is a possible information disclosure due to a missing permission check. This could lead to loc

In telecom service, there is a possible information disclosure due to a missing permission check. This could lead to loc

In GPU, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wit

In multiple locations of the nanopb library, there is a possible way to corrupt memory when decoding untrusted protobuf

In param_find_digests_internal and related functions of the Titan-M source, there is a possible out of bounds write due

The UE and the EMM communicate with each other using NAS messages. When a new NAS message arrives from the EMM, the mode

In hme_add_new_node_to_a_sorted_array of hme_utils.c, there is a possible out of bounds read due to a heap buffer overfl

In parseRecursively of cppbor_parse.cpp, there is a possible out of bounds read due to an incorrect bounds check. This c

In static definitions of GattServiceConfig.java, there is a possible permission bypass due to an insecure default value.

In setPackageOrComponentEnabled of NotificationManagerService.java, there is a missing permission check. This could lead

In isFileUri of FileUtil.java, there is a possible way to bypass the check for a file:// scheme due to improper input va

In registerRemoteBugreportReceivers of DevicePolicyManagerService.java, there is a possible reporting of falsified bug r

In ih264_resi_trans_quant_4x4_sse42 of ih264_resi_trans_quant_sse42.c, there is a possible out of bounds read due to a h

In getAppSize of InstalldNativeService.cpp, there is a possible out of bounds read due to a missing bounds check. This c

In updateApState of SoftApManager.java, there is a possible leak of hotspot state due to a missing permission check. Thi

In llcp_dlc_proc_connect_pdu of llcp_dlc.cc, there is a possible out of bounds read due to a missing bounds check. This

In recycle of Parcel.java, there is a possible way to start foreground activity from background due to a permissions byp

In gallery3d and photos, there is a possible permission bypass due to a confused deputy. This could lead to local inform

In the keystore library, there is a possible prevention of access to system Settings due to unsafe deserialization. This

In onCreate of ChooseLockGeneric.java, there is a possible permission bypass. This could lead to local escalation of pri

In getUniqueUsagesWithLabels of PermissionUsageHelper.java, there is a possible incorrect permission attribution due to

In grantEmbeddedWindowFocus of WindowManagerService.java, there is a possible way to change an input channel for embedde

Product: AndroidVersions: Android kernelAndroid ID: A-209324757References: N/A

Product: AndroidVersions: Android kernelAndroid ID: A-208744915References: N/A

Product: AndroidVersions: Android kernelAndroid ID: A-207254598References: N/A

In kbase_mem_alias of mali_kbase_mem_linux.c, there is a possible arbitrary code execution due to improper input validat

In TBD of TBD, there is a possible use after free bug. This could lead to local escalation of privilege with System exec

Product: AndroidVersions: Android kernelAndroid ID: A-209153114References: N/A

In hypx_create_blob_dmabuf of faceauth_hypx.c, there is a possible out of bounds write due to a missing bounds check. Th

In handle_ramdump of pixel_loader.c, there is a possible way to create a ramdump of non-secure memory due to a missing p

Product: AndroidVersions: Android kernelAndroid ID: A-210936609References: N/A

Product: AndroidVersions: Android kernelAndroid ID: A-211683760References: N/A