Android.

Android: In grantEmbeddedWindowFocus of WindowManagerService.java…

• Android

Product: AndroidVersions: Android kernelAndroid ID: A-209324757References: N/A

• Android

Product: AndroidVersions: Android kernelAndroid ID: A-208744915References: N/A

• Android

Product: AndroidVersions: Android kernelAndroid ID: A-207254598References: N/A

• Android

In TBD of TBD, there is a possible use after free bug.

• Android

Product: AndroidVersions: Android kernelAndroid ID: A-209153114References: N/A

• Android

Android: In hypx_create_blob_dmabuf of faceauth_hypx.c…

• Android

Android: In handle_ramdump of pixel_loader.c, there is a possible way to create a ramdump of…

• Android

Product: AndroidVersions: Android kernelAndroid ID: A-210936609References: N/A

• Android

Product: AndroidVersions: Android kernelAndroid ID: A-211683760References: N/A

• Android

Android: In ioctl_dpm_qos_update and ioctl_event_control_set of (TBD)…

• Android

Product: AndroidVersions: Android kernelAndroid ID: A-209906686References: N/A

• Android

Android: In auth_store of sjtag-driver.c, there is a possible read of uninitialized memory due to…

• Android

Product: AndroidVersions: Android kernelAndroid ID: A-209252491References: N/A

• Android

Android: In exynos_secEnv_init of mach-gs101.c…

• Android

Product: AndroidVersions: Android kernelAndroid ID: A-207116951References: N/A

• Android

Android: In onbind of ShannonRcsService.java, there is a possible access to protect data due to a…

• Android

Product: AndroidVersions: Android kernelAndroid ID: A-215565667References: N/A

• Android

Product: AndroidVersions: Android kernelAndroid ID: A-209421931References: N/A

• Android

Product: AndroidVersions: Android kernelAndroid ID: A-211162353References: N/A

• Android

Product: AndroidVersions: Android kernelAndroid ID: A-210594998References: N/A

• Android

Product: AndroidVersions: Android kernelAndroid ID: A-204956204References: N/A

• Android

Android: In various methods of kernel base drivers…

• Android

In asn1_parse of asn1.c, there is a possible out of bounds read due to an incorrect bounds check.

• Android

Product: AndroidVersions: Android kernelAndroid ID: A-204891956References: N/A

• Android

Android: In asn1_p256_int of crypto/asn1.c, there is a possible out of bounds read due to an…

• Android

Product: AndroidVersions: Android kernelAndroid ID: A-210083655References: N/A

• Android

Android: In asn1_ec_pkey_parse of acropora/crypto/asn1_common.c…

• Android

Android: In unflatten of GraphicBuffer.cpp, there is a possible arbitrary code execution due to…

• Android

Android: In ipu_core_jqs_msg_transport_kernel_write_sync of ipu-core-jqs-msg-transport.c…

• Android

In lock_sock_nested of sock.c, there is a possible use after free due to a race condition.

• Android

Android: In rcu_cblist_dequeue of rcu_segcblist.c…

• Android

In the TitanM chip, there is a possible out of bounds write due to a missing bounds check.

• Android

Product: AndroidVersions: Android kernelAndroid ID: A-210712565References: N/A

• Android

Product: AndroidVersions: Android kernelAndroid ID: A-211685939References: N/A

• Android

In TBD of TBD, there is a possible use-after-free due to a race condition.

• Android

Android: In uploadFile of FileUploadServiceImpl.java…

• Android

Android: In closef of label_backends_android.c…

• Android

The UE and the EMM communicate with each other using NAS messages.

• Android

Android: In nfa_dm_check_set_config of nfa_dm_main.cc…

• Android

Android: In startLegacyVpnPrivileged of Vpn.java…

• Android

Android: In addAutomaticZenRule of ZenModeHelper.java…

• Android

Android: In createFromParcel of GeofenceHardwareRequestParcelable.java…

• Android

In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking.

• Android

Android: In read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an…

• Android

Android: In ACTION_MANAGED_PROFILE_PROVISIONED of DevicePolicyManagerService.java…

• Android

Android: In onCreateContextMenu of NetworkProviderSettings.java…

• Android

In writeToParcel of GateKeeperResponse.java, there is a possible parcel format mismatch.

• Android

Android: In readArguments of CallSubjectDialog.java…

• Android

Android: In setDiscoverableTimeout of AdapterService.java…

• Android

Android: In lg_probe and related functions of hid-lg.c and other USB HID files…

• Android

Android: In nci_proc_rf_management_ntf of nci_hrcv.cc…

• Android

Android: In transportDec_OutOfBandConfig of tpdec_lib.cpp…

• Android

Android: In registerPhoneAccount of PhoneAccountRegistrar.java…

• Android

In ce_t4t_data_cback of ce_t4t.cc, there is a possible out of bounds write due to a double free.

• Android

Android: In setScanMode of AdapterService.java…

• Android

In GBoard, there is a possible way to bypass factory reset protections due to a sandbox escape.

• Android

Android: In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp…

• Android

Android: In WindowManager, there is a possible tapjacking attack due to an incorrect window flag…

• Android

Android: In kbase_mem_alias of mali_kbase_mem_linux.c…

• Android