Google

In the MTK_FLP_MSG_HAL_DIAG_REPORT_DATA_NTF handler of flp2hal_- interface.c, there is a possible stack buffer overf

In multiple functions of gl_proc.c, there is a buffer overwrite due to a missing bounds check. This could lead to escala

In gt1x_debug_write_proc and gt1x_tool_write of drivers/input/touchscreen/mediatek/GT1151/gt1x_generic.c and gt1x_to

In /proc/driver/wmt_dbg driver, there are several possible out of bounds writes. These could lead to local escalatio

In fm_set_stat of mediatek FM radio driver, there is a possible OOB write due to improper input validation. This cou

In WMT_unlocked_ioctl of MTK WMT device driver, there is a possible OOB write due to a missing bounds check. This co

In rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a possible out of bounds wri

In mtk_cfg80211_vendor_packet_keep_alive_start and mtk_cfg80211_vendor_set_config of drivers/misc/mediatek/connectivity/

In mtk_p2p_wext_set_key of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_p2p.c, there is a possible OOB write

In procfile_write of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_proc.c, there is a possible OOB write due

In get_binary of vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/data_coder.c, there is a possible out

Type Confusion in V8 in Google Chrome prior to 131.0.6778.108 allowed a remote attacker to potentially exploit object co

Path traversal in Quick Share Agent prior to version 3.5.14.47 in Android 12, 3.5.19.41 in Android 13, and 3.5.19.42 in

In process_service_search_attr_rsp of sdp_discovery.cc, there is a possible out of bound read due to a missing bounds ch

In sdp_copy_raw_data of sdp_discovery.cc, there is a possible out of bounds read due to an incorrect bounds check. This

In gatt_process_error_rsp of gatt_cl.cc, there is a possible out of bound read due to a missing bounds check. This could

In OSUInfo of OSUInfo.java, there is a possible escalation of privilege due to improper input validation. This could lea

In prop2cfg of btif_storage.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lea

In buildImageItemsIfPossible of ItemTable.cpp there is a possible out of bound read due to uninitialized data. This coul

In  RsaKeyPairGenerator::getNumberOfIterations of RSAKeyPairGenerator.java, an incorrect implementation could cause weak

In ihevcd_parse_slice_header of ihevcd_parse_slice_header.c there is a possible out of bound read due to missing bounds

In handle_app_cur_val_response of dtif_rc.cc, there is a possible stack buffer overflow due to a missing bounds check. T

In gattServerSendResponseNative of com_android_bluetooth_gatt.cpp, there is a possible out of bounds stack write due to

In handle_notification_response of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. Th

In rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a possible out of bounds wri

In gatts_process_read_by_type_req of gatt_sr.c, there is a possible information disclosure due to uninitialized data. Th

In l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out of bounds write due to improper input validation. This could

In Bluetooth firmware, there is a possible firmware asssert due to improper handling of exceptional conditions. This cou

In wlan driver, there is a possible out of bound read due to improper input validation. This could lead to remote inform

In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclo

In soundtrigger, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of

In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of

In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p

In cmdq, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc

In getIntentForIntentSender of ActivityManagerService.java, there is a possible way to access user metadata due to a pen

In installPackageLI of PackageManagerService.java, there is a possible permissions bypass. This could lead to local esca

In VideoFrameScheduler.cpp of VideoFrameScheduler::PLL::fit, there is a possible remote denial of service due to divide

In ihevcd_parse_slice_data of ihevcd_parse_slice.c there is a possible heap buffer out of bound read due to a missing bo

In ihevcd_allocate_dynamic_bufs of ihevcd_api.c there is a possible resource exhaustion due to integer overflow. This co

In ih264e_fmt_conv_420p_to_420sp of ih264e_fmt_conv.c there is a possible out of bound read due to missing bounds check.

In ih264d_assign_pic_num of ih264d_utils.c there is a possible out of bound read due to missing bounds check. This could

In mv_err_cost of mcomp.c there is a possible out of bounds read due to missing bounds check. This could lead to denial

In String16 of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to loca

In SensorService::isDataInjectionEnabled of frameworks/native/services/sensorservice/SensorService.cpp, there is a possi

In impeg2d_bit_stream_flush() of libmpeg2dec there is a possible OOB read due to a missing bounds check. This could lead

In pvmp3_get_main_data_size of pvmp3_get_main_data_size.cpp, there is a possible buffer overread due to a missing bounds