Google

Improper access control vulnerability in Reminder prior to versions 12.3.01.3000 in Android S(12), 12.2.05.6000 in Andro

An improper input validation in SMC_SRPMB_WSM handler of RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memo

An improper boundary check in RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution

An improper boundary check in audio hal service prior to SMR Feb-2022 Release 1 allows attackers to read invalid memory

An improper boundary check in eden_runtime hal service prior to SMR Feb-2022 Release 1 allows arbitrary memory write and

PendingIntent hijacking vulnerability in KnoxPrivacyNoticeReceiver prior to SMR Feb-2022 Release 1 allows local attacker

A vulnerability using PendingIntent in DeX Home and DeX for PC prior to SMR Feb-2022 Release 1 allows attackers to acces

Improper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attackers to send arbitrary NAS sign

Unprotected dynamic receiver in Telecom prior to SMR Feb-2022 Release 1 allows untrusted applications to launch arbitrar

Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get

In TBD of TBD, there is a possible out of bounds read due to TBD. This could lead to local information disclosure with n

In HandleTransactionIoEvent of actuator_driver.cc, there is a possible out of bounds read due to a heap buffer overflow.

In startVideoStream() there is a possibility of an OOB Read in the heap, when the camera buffer is ‘zero’ in size.Produc

In writeThrowable of AndroidFuture.java, there is a possible parcel serialization/deserialization mismatch due to improp

In GKI_getbuf of gki_buffer.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead t

In btm_sec_connected and btm_sec_disconnected of btm_sec.cc file , there is a possible use after free. This could lead t

In fastboot, there is a possible secure boot bypass due to a configuration error. This could lead to local escalation of

In code generated by aidl_const_expressions.cpp, there is a possible out of bounds read due to uninitialized data. This

In onCreate of InstallCaCertificateWarning.java, there is a possible way to mislead an user about CA installation circum

In onActivityViewReady of DetailDialog.kt, there is a possible Intent Redirect due to a confused deputy. This could lead

In extract of MediaMetricsItem.h, there is a possible out of bounds read due to improper input validation. This could le

In checkSpsUpdated of AAVCAssembler.cpp, there is a possible out of bounds read due to a heap buffer overflow. This coul

In LoadedPackage::Load of LoadedArsc.cpp, there is a possible out of bounds read due to a missing bounds check. This cou

In openFileAndEnforcePathPermissionsHelper of MediaProvider.java, there is a possible bypass of a permissions check due

In checkUriPermission of MediaProvider.java , there is a possible way to gain access to the content of media provider co

ismsEx service is a vendor service in unisoc equipment。ismsEx service is an extension of sms system service，but it does

ims_ex is a vendor system service used to manage VoLTE in unisoc devices，But it does not verify the caller's permissions

In clear_data_dlg_text of strings.xml, there is a possible situation when "Clear storage" functionality sets up the wron

In updatePackageMappingsData of UsageStatsService.java, there is a possible way to bypass security and privacy settings

Summary:Product: AndroidVersions: Android SoCAndroid ID: A-204686438

In isServiceDistractionOptimized of CarPackageManagerService.java, there is a possible disclosure of installed packages

In Bluetooth, there is a possible memory corruption due to a logic error. This could lead to local denial of service wit

In Bluetooth, there is a possible service crash due to a use after free. This could lead to local escalation of privileg

In Bluetooth, there is a possible service crash due to a use after free. This could lead to local escalation of privileg

In Bluetooth, there is a possible escalation of privilege due to a missing permission check. This could lead to local es

In Bluetooth, there is a possible information disclosure due to incorrect error handling. This could lead to local infor

In Bluetooth, there is a possible escalation of privilege due to a missing permission check. This could lead to local es

In power_hal_manager_service, there is a possible permission bypass due to a stack-based buffer overflow. This could lea

In ccu driver, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of

In ccu driver, there is a possible memory corruption due to an incorrect bounds check. This could lead to local escalati

In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local inf

In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local inf

In vcu driver, there is a possible information disclosure due to a use after free. This could lead to local escalation o

In Preloader XFLASH, there is a possible escalation of privilege due to an improper certificate validation. This could l

In camera driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local info

In vow driver, there is a possible memory corruption due to a race condition. This could lead to local information discl

In fb driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of priv

In vow driver, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local es

In cmdq driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local inform

In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation