Google

In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due

In PackageManager, there is a possible way to update the last usage time of another package due to a missing permission

In Voicemail, there is a possible way to retrieve a trackable identifier due to a missing permission check. This could l

In Keymaster, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In Messaging, there is a possible way to bypass attachment restrictions due to improper input validation. This could lea

In ArrayMap, there is a possible leak of the content of SMS messages due to log information disclosure. This could lead

In createGeneralSlice of ConnectedDevicesSliceProvider.java.java, there is a possible permission bypass due to an unsafe

In createBluetoothDeviceSlice of ConnectedDevicesSliceProvider.java, there is a possible permission bypass due to an uns

A local attacker, as a different local user, may be able to send a HTTP request to 127.0.0.1:10000 after the user (typic

On unix-like systems, the system temporary directory is shared between all users on that system. The root cause is File.

In Firebase PHP-JWT before 6.0.0, an algorithm-confusion issue (e.g., RS256 / HS256) exists via the kid (aka Key ID) hea

A local attacker could read files from some other users' SA360 reports stored in the /tmp folder during staging process

In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the

In usb_gadget_giveback_request of core.c, there is a possible use after free out of bounds read due to a race condition.

Product: AndroidVersions: Android kernelAndroid ID: A-208229524References: N/A

In prepare_io_entry and prepare_response of lwis_ioctl.c and lwis_periodic_io.c, there is a possible out of bounds write

In gasket_alloc_coherent_memory of gasket_page_table.c, there is a possible memory corruption due to a race condition. T

In sendMessage of OneToOneChatImpl.java (? TBD), there is a possible way to send an RCS message without permissions due

In amcs_cdev_unlocked_ioctl of audiometrics.c, there is a possible out of bounds write due to improper input validation.

In copy_io_entries of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead

In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to an

In TBD of TBD, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatio

In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local esca

In eicPresentationRetrieveEntryValue of acropora/app/identity/libeic/EicPresentation.c, there is a possible information

In cd_ParseMsg of cd_codec.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead t

In gasket_free_coherent_memory_all of gasket_page_table.c, there is a possible memory corruption due to a double free. T

In TuningProviderBase::GetTuningTreeSet of tuning_provider_base.cc, there is a possible out of bounds read due to a miss

Product: AndroidVersions: Android kernelAndroid ID: A-209014813References: N/A

In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds read due to an

In TBD of TBD, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of

Product: AndroidVersions: Android kernelAndroid ID: A-207433926References: N/A

In lwis_top_register_io of lwis_device_top.c, there is a possible out of bounds write due to an integer overflow. This c

In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to an

In iaxxx_btp_write_words of iaxxx-btp.c, there is a possible out of bounds read due to an incorrect bounds check. This c

Product: AndroidVersions: Android kernelAndroid ID: A-206977562References: N/A

In __show_regs of process.c, there is a possible leak of kernel memory and addresses due to log information disclosure.

In ion_buffer_kmap_get of ion.c, there is a possible use-after-free due to an integer overflow. This could lead to local

Product: AndroidVersions: Android kernelAndroid ID: A-173788806References: Upstream kernel

In TBD of TBD, there is a possible user after free vulnerability due to a race condition. This could lead to local escal

In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to Incorrect Size Value. This could l

Product: AndroidVersions: Android kernelAndroid ID: A-202160245References: N/A

In sendSipAccountsRemovedNotification of SipAccountRegistry.java, there is a possible permission bypass due to an unsafe

In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to an incorrect bounds check. Th

In onReceive of AppRestrictionsFragment.java, there is a possible way to start a phone call without permissions due to a

In onResume of CredentialStorage.java, there is a possible way to cleanup content of credentials storage due to a missin

In deleteNotificationChannelGroup of NotificationManagerService.java, there is a possible way to run foreground service

In updateState of UsbDeviceManager.java, there is a possible unauthorized access of files due to a confused deputy. This

In onCreate of RequestManageCredentials.java, there is a possible way for a third party app to install certificates with

In serviceConnection of ControlsProviderLifecycleManager.kt, there is a possible way to keep service running in foregrou

In aio_poll_complete_work of aio.c, there is a possible memory corruption due to a use after free. This could lead to lo