Google

In lwis_dpm_update_clock of lwis_device_dpm.c, there is a possible out of bounds read due to an incorrect bounds check.

Product: AndroidVersions: Android kernelAndroid ID: A-195580473References: N/A

In eicOpsDecryptAes128Gcm of acropora/app/identity/identity_support.c, there is a possible out of bounds write due to a

In TBD of TBD, there is a possible downgrade attack due to under utilized anti-rollback protections. This could lead to

In dsi_panel_debugfs_read_cmdset of dsi_panel.c, there is a possible disclosure of freed kernel heap memory due to a use

In (TBD) of (TBD), there is a possible out of bounds read due to memory corruption. This could lead to local information

In onCreate of BluetoothPairingSelectionFragment.java, there is a possible EoP due to a tapjacking/overlay attack. This

In NotificationAccessActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking/overlay attack. This c

In UserDetailsActivity of AndroidManifest.xml, there is a possible DoS due to a tapjacking/overlay attack. This could le

In getLine1NumberForDisplay of PhoneInterfaceManager.java, there is apossible way to determine whether an app is install

In getMimeGroup of PackageManagerService.java, there is a possible way to determine whether an app is installed, without

In cancelNotificationsFromListener of NotificationManagerService.java, there is a possible way to determine whether an a

In setNotificationsShownFromListener of NotificationManagerService.java, there is a possible way to determine whether an

In setClientStateLocked of SurfaceFlinger.cpp, there is a possible out of bounds write due to a use after free. This cou

In setClientStateLocked of SurfaceFlinger.cpp, there is a possible out of bounds write due to a use after free. This cou

In setTransactionState of SurfaceFlinger, there is possible arbitrary code execution in a privileged process due to impr

In startRanging of RttServiceImpl.java, there is a possible way to determine whether an app is installed, without query

In hasNamedWallpaper of WallpaperManagerService.java, there is a possible way to determine whether an app is installed,

In onEventReceived of EventResultPersister.java, there is a possible intent redirection due to a confused deputy. This c

In onCreate of RequestIgnoreBatteryOptimizations.java, there is a possible way to determine whether an app is installed,

In btif_in_hf_client_generic_evt of btif_hf_client.cc, there is a possible Bluetooth service crash due to a missing null

In snoozeNotificationInt of NotificationManagerService.java, there is a possible way to disable notification for an arbi

In snoozeNotification of NotificationListenerService.java, there is a possible way to disable notification for an arbitr

In snoozeNotification of NotificationListenerService.java, there is a possible permission confusion due to a misleading

In adjustStreamVolume of AudioService.java, there is a possible way to determine whether an app is installed, without qu

In AdapterService and GattService definition of AndroidManifest.xml, there is a possible way to disable bluetooth connec

In onCreate of UsbPermissionActivity.java, there is a possible way to grant an app access to USB without informed user c

In getMeidForSlot of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, witho

In getNetworkTypeForSubscriber of PhoneInterfaceManager.java, there is a possible way to determine whether an app is ins

In checkExistsAndEnforceCannotModifyImmutablyRestrictedPermission of PermissionManagerService.java, there is a possible

In onResume of NotificationAccessDetails.java, there is a possible way to determine whether an app is installed, without

In setPackageStoppedState of PackageManagerService.java, there is a missing permission check. This could lead to local i

In getSigningKeySet of PackageManagerService.java, there is a missing permission check. This could lead to local informa

In setApplicationCategoryHint of PackageManagerService.java, there is a possible way to determine whether an app is inst

In addSubInfo of SubscriptionController.java, there is a possible way to force the user to make a factory reset due to a

In btu_hcif_process_event of btu_hcif.cc, there is a possible out of bounds read due to an incorrect bounds check. This

In several functions of DatabaseManager.java, there is a possible leak of Bluetooth MAC addresses due to log information

In getDeviceIdWithFeature of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installe

In getConfiguredNetworks of WifiServiceImpl.java, there is a possible way to determine whether an app is installed, with

In adjustStreamVolume of AudioService.java, there is a possible way for unprivileged app to change audio stream volume d

In WT_Interpolate of eas_wtengine.c, there is a possible out of bounds read due to a missing bounds check. This could le

In PVInitVideoEncoder of mp4enc_api.cpp, there is a possible out of bounds read due to a heap buffer overflow. This coul

In the broadcast definition in AndroidManifest.xml, there is a possible way to set the A2DP bluetooth device connection

In 'ih264e_find_bskip_params()' of ih264e_me.c, there is a possible out of bounds read due to a heap buffer overflow. Th

In handleUpdateNetworkState of GnssNetworkConnectivityHandler.java , there is a possible APN disclosure due to log infor

In nfaHciCallback of HciEventManager.cpp, there is a possible out of bounds read due to a missing bounds check. This cou

In registerSuggestionConnectionStatusListener of WifiServiceImpl.java, there is a possible way to determine whether an a

In requestRouteToHostAddress of ConnectivityService.java, there is a possible way to determine whether an app is install

In getOffsetBeforeAfter of TextLine.java, there is a possible denial of service due to resource exhaustion. This could l

In onCreate of PaymentDefaultDialog.java, there is a possible way to change a default payment app without user consent d