Google

In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds write due to an integer overflow

In updateNotification of BeamTransferManager.java, there is a missing permission check. This could lead to local informa

In phNxpNciHal_ext_process_nfc_init_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds read due to a missing b

In halWrapperDataCallback of hal_wrapper.cc, there is a possible out of bounds write due to a missing bounds check. This

In archiveStoredConversation of MmsService.java, there is a possible way to archive message conversation without user co

In onCreate of EmergencyCallbackModeExitDialog.java, there is a possible exit of emergency callback mode due to a tapjac

In onCreate of WiFiInstaller.java, there is a possible way to install a malicious Hotspot 2.0 configuration due to a tap

In dropFile of WiFiInstaller, there is a way to delete files accessible to CertInstaller due to a confused deputy. This

In doNotification of AccountManagerService.java, there is a possible permission bypass due to an unsafe PendingIntent. T

In ActivityTaskManagerService.startActivity() and AppTaskImpl.startActivity() of ActivityTaskManagerService.java and App

In sendBugreportNotification of BugreportProgressService.java, there is a possible permission bypass due to an unsafe Pe

In onStart of ContactsDumpActivity.java, there is possible access to contacts due to a tapjacking/overlay attack. This c

In onReceive of DevicePolicyManagerService.java, there is a possible enabling of disabled profiles due to a missing perm

In isRestricted of RemoteViews.java, there is a possible way to inject font files due to a permissions bypass. This coul

In accessAudioHalPidscpp of TimeCheck.cpp, there is a possible out of bounds read due to a missing bounds check. This co

In wrapUserThread of AudioStream.cpp, there is a possible use after free due to a race condition. This could lead to loc

In decrypt of CryptoPlugin.cpp, there is a possible use-after-free due to a race condition. This could lead to local esc

In ih264e_fmt_conv_422i_to_420sp of ih264e_fmt_conv.c, there is a possible out of bounds read due to a heap buffer overf

In RasterIntraUpdate of motion_est.cpp, there is a possible out of bounds read due to an incorrect bounds check. This co

In append_to_verify_fifo_interleaved_ of stream_encoder.c, there is a possible out of bounds write due to a missing boun

In Lag_max of p_ol_wgh.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to rem

In fillMainDataBuf of pvmp3_framedecoder.cpp, there is a possible out of bounds read due to a heap buffer overflow. This

In setRange of ABuffer.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remot

In getBlockSum of fastcodemb.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead

In RenderStruct of protostream_objectsource.cc, there is a possible crash due to a missing null check. This could lead t

In isBackupServiceActive of BackupManagerService.java, there is a missing permission check. This could lead to local inf

In wpas_ctrl_msg_queue_timeout of ctrl_iface_unix.c, there is a possible memory corruption due to a use after free. This

In permission declarations of DeviceAdminReceiver.java, there is a possible lack of broadcast protection due to an insec

In memory management driver, there is a possible memory corruption due to a race condition. This could lead to local esc

In memory management driver, there is a possible memory corruption due to a race condition. This could lead to local esc

In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local esc

In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to local

In memory management driver, there is a possible memory corruption due to improper locking. This could lead to local esc

In memory management driver, there is a possible memory corruption due to a double free. This could lead to local escala

In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local esc

In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to local

In memory management driver, there is a possible out of bounds write due to a use after free. This could lead to local e

In onCreate of WifiScanModeActivity.java, there is a possible way to enable Wi-Fi scanning without user consent due to a

In ConnectionHandler::SdpCb of connection_handler.cc, there is a possible out of bounds read due to a use after free. Th

In getAllPackages of PackageManagerService, there is a possible information disclosure due to a missing permission check

In several functions of MemoryFileSystem.cpp and related files, there is a possible use after free due to a race conditi

In updateCapabilities of ConnectivityService.java, there is a possible incorrect network state determination due to a lo

In p2p_process_prov_disc_req of p2p_pd.c, there is a possible out of bounds read and write due to a use after free. This

In deleteNotificationChannel and related functions of NotificationManagerService.java, there is a possible permission by

In __hidinput_change_resolution_multipliers of hid-input.c, there is a possible out of bounds write due to a heap buffer

In Dex2oat of dex2oat.cc, there is a possible way to inject bytecode into an app due to improper input validation. This

In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds write due to an integer overflow. This could lead

In various functions of CryptoPlugin.cpp, there is a possible use after free due to a race condition. This could lead to

In various functions of DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to lo

In handle_rc_metamsg_cmd of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This coul