Google

Use after free in Digital Credentials in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to potentially

Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker wh

Use after free in WebShare in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker who had comprom

In Package Manager, there is a possible device lock controller bypass due to a missing permission check. This could lead

In Nfc::eventCallback() of Nfc.h, there is a possible use after free due to a race condition. This could lead to local e

In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access permission assignment due to

In NFC, there is a possible way to spoof an NFC event due to a missing permission check. This could lead to local escala

In SettingsLib, there is a possible missing permission check due to a logic error in the code. This could lead to local

In createSessionInternal of PackageInstallerService.java, there is a possible method to remove a DPC app from a managed

In multiple places, there is a possible persistent denial of service due to resource exhaustion. This could lead to loca

In setAllowedCarriers of PhoneInterfaceManager.java, there is a possible way to disable carrier restrictions due to a lo

In Contacts Provider, there is a possible way to access an incoming call's phone number and associated metadata due to a

In SettingsLib, there is a possible way to disable system components due to a logic error in the code. This could lead t

In multiple locations there is a possible provisioning bypass due to improper input validation. This could lead to local

In multiple locations, there is a possible 3rd party passkey entry pairing approval due to a missing permission check. T

In overrideConfig of CarrierConfigLoader.java, there is a possible way to bypass UID check due to a permissions bypass.

In multiple functions of btm_sec.cc, there is a possible way for an attacker to intercept SMS messages due to a logic er

In several functions of the RTCP packet decoder, there is a possible out-of-bounds read due to a missing bounds check. T

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code executio

In ParsePayloads of AudioSdpParser.cpp, there is a possible memory corruption due to type confusion. This could lead to

In numberOfReportBlocks of RtpSession.cpp, there is a possible out of bounds write due to an integer overflow. This coul

In TextRtpPayloadDecoderNode::DecodeT140 of TextRtpPayloadDecoderNode.cpp, there is a possible out of bounds write due t

In Camera, there is a possible unauthorized way to access photos due to a missing permission check. This could lead to l

In RtcpHeader::decodeRtcpHeader, there is a possible OOB read due to a missing bounds check. This could lead to remote i

In checkSsrcCollisionOnRcv of RtpSession.cpp, there is a possible memory safety issue due to a missing null check. This

In ImsMediaBitReader::ReadByteBuffer, there is a possible OOB read due to a missing bounds check. This could lead to rem

In Modem, there is a possible way to trigger a modem crash during a SIP REFER request due to memory corruption. This cou

In Write of msg_to_host_buffer.cc, there is a possible out of bounds write due to an incorrect bounds check. This could

In OSMMapPMRGeneric of pmr_os.c, there is a possible way to leverage a system call to system call to maliciously expand

In IntfGraphCreate of intfgraph.c, there is a possible out of bounds write due to an integer overflow. This could lead t

In ExecuteGraph command handler of EdgeTPU firmware, there is a possible out of bounds write due to an integer overflow.

In RtpSession::rtpSendRtcpPacket, there is a possible OOB write due to a heap buffer overflow. This could lead to remote

In multiple functions of VideoRtpPayloadDecoderNode.cpp, there is a possible out of bounds write due to an integer overf

In __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out of bounds write due to a missi

In mfc_core_get_dec_metadata_sei_nal of mfc_core_reg_api.c, there is a possible out of bounds write due to a missing bou

In keymint, there is a possible Permission Bypass due to a logic error in the code. This could lead to local information

In writeAocCommand of AocAudioCodec.cpp, there is a possible memory safety issue due to a missing bounds check. This cou

In lwis_device_external_event_emit of lwis_event.c, there is a possible memory corruption due to a use after free. This

In iavb_parse_key_data of avb_rsa.c, there is a possible out of bounds read due to improper input validation. This could

In decodeAppPacket of RtcpAppPacket.cpp, there is a possible OOB read due to a missing bounds check. This could lead to

In RtpPacket::decodePacket, there is a possible out-of-bounds read due to an integer overflow. This could lead to remote

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code executio

In lwis_io_buffer_write of lwis_io_buffer.c, there is a possible out of bounds write due to memory corruption. This coul

In edgetpu_sync_fence_group_shutdown() of edgetpu-dmabuf.c, there is a possible elevation of privilege due to a use afte

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of serv

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote code execution

In PostWipeData of recovery_ui.cpp, there is a possible data persistence issue after a factory reset due to a logic erro

In smmu_attach_dev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootclass artifacts due t

In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code executio

In RtpPacket::decodePacket, there is a possible out of bounds access due to an integer overflow. This could lead to loca