Google

When a device connects only over WiFi VPN, the device may not receive security updates due to some incorrect checks. Thi

In getstring of ID3.cpp there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote

In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead

In CopyToOMX of OMXNodeInstance.cpp there is a possible out-of-bounds write due to an incorrect bounds check. This could

In get_futex_key of futex.c, there is a use-after-free due to improper locking. This could lead to local escalation of p

In driver_override_store and driver_override_show of bus.c, there is a possible double free due to improper locking. Thi

In driver_override_store of bus.c, there is a possible out of bounds write due to an incorrect bounds check. This could

In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no

In processMessagePart of InboundSmsHandler.java, there is a possible remote denial of service due to improper input vali

In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could le

In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could le

In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could le

In gatts_process_attribute_req of gatt_sc.cc, there is a possible read of uninitialized data due to a missing bounds che

In BNEP_Write of bnep_api.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead

In bnep_data_ind of bnep_main.c, there is a possible remote code execution due to a double free. This could lead to remo

In bta_dm_sdp_result of bta_dm_act.cc, there is a possible out of bounds stack write due to a missing bounds check. This

A bool variable in Video function, which gets typecasted to int before being read could result in an out of bound read a

The displayed addressbar URL can be spoofed on Firefox for Android using a javascript: URI in concert with JavaScript to

In sdcardfs_create and sdcardfs_mkdir of inode.c, there is a possible memory corruption due to improper locking. This co

In sdcardfs_open of file.c, there is a possible Use After Free due to an unusual root cause. This could lead to local es

In copy_process of fork.c, there is possible memory corruption due to a double free. This could lead to local escalation

In ipSecSetEncapSocketOwner of XfrmController.cpp, there is a possible failure to initialize a security feature due to u

In smp_proc_enc_info of smp_act.cc, there is a possible out of bounds read due to a missing bounds check. This could lea

In smp_proc_master_id of smp_act.cc, there is a possible out of bounds read due to a missing bounds check. This could le

In smp_process_keypress_notification of smp_act.cc, there is a possible out of bounds read due to an incorrect bounds ch

In bta_av_proc_meta_cmd of bta_av_act.cc, there is a possible out of bounds read due to an incorrect bounds check. This

In avrc_msg_cback of avrc_api.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead t

In mca_ccb_hdl_req of mca_cact.cc, there is a possible out of bounds read due to a missing bounds check. This could lead

In sdp_copy_raw_data of sdp_discovery.cc, there is a possible out of bounds write due to an incorrect bounds check. This

In rfc_process_mx_message of rfc_ts_frames.cc, there is a possible out of bounds read due to a missing bounds check. Thi

In rfc_process_mx_message of rfc_ts_frames.cc, there is a possible out-of-bounds read due to a missing bounds check. Thi

In the SetupWizard, there is a possible Factory Reset Protection bypass due to a permissions bypass. This could lead to

In readVector of iCrypto.cpp, there is a possible invalid read due to uninitialized data. This could lead to local infor

In SkSampler::Fill of SkSampler.cpp, there is a possible out of bounds write due to an integer overflow. This could lead

In impeg2_fmt_conv_yuv420p_to_yuv420sp_uv_av8 of impeg2_format_conv.s there is a possible out of bounds write due to mis

In ixheaacd_real_synth_fft_p3 of ixheaacd_esbr_fft.c there is a possible out of bounds write due to a missing bounds che

In the content provider of the download manager, there is a possible SQL injection due to improper input validation. Thi

In checkGrantUriPermissionLocked of ActivityManagerService.java, there is a possible permissions bypass. This could lead

In AMediaCodecCryptoInfo_new of NdkMediaCodec.cpp, there is a possible out-of-bounds write due to an integer overflow. T

In CollectValuesOrEntriesImpl of elements.cc, there is possible remote code execution due to type confusion. This could

In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible use-after-free due to improper locking. This could lea

In ihevcd_parse_sei_payload of ihevcd_parse_headers.c, there is a possible out-of-bounds write due to an integer overflo

In getOffsetForHorizontal of Layout.java, there is a possible application hang due to a slow width calculation. This cou

Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents

Insufficient policy enforcement in Catalog Service in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to

Use after free in WebUI in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap co

Inappropriate implementation in New Tab Page in Google Chrome prior to 64.0.3282.119 allowed a local attacker to view we

Lack of support for a non standard no-referrer policy value in Blink in Google Chrome prior to 64.0.3282.119 allowed a r

XSS Auditor in Google Chrome prior to 64.0.3282.119, did not ensure the reporting URL was in the same origin as the page

Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents