Android.

Product: AndroidVersions: Android kernelAndroid ID: A-229632566References: N/A

• Android

Android: In BuildDevIDResponse of miscdatabuilder.cpp…

• Android

Android: In several functions of mali_gralloc_reference.cpp…

• Android

Use after free in Android

• Android
• Memory corruption

Android: In v4l2_m2m_querybuf of v4l2-mem2mem.c…

• Android

Improper input validation in Android

• Android
• CWE-20

Improper privilege management in Android

• Android
• Privilege escalation

Improper privilege management in Android

• Android
• Privilege escalation

Improper access control in Android

• Android
• Broken access control

Android: In writeToParcel of SurfaceControl.cpp…

• Android

Improper privilege management in Android

• Android
• Privilege escalation

Android: In get of PacProxyService.java, there is a possible system service crash due to improper…

• Android

Android: In onDefaultNetworkChanged of Vpn.java…

• Android

Android: In onSaveRingtone of DefaultRingtonePreference.java…

• Android

Android: In addProviderRequestListener of LocationManagerService.java…

• Android

Out-of-bounds read in Android

• Android
• Memory corruption

Android: In WifiScanningPreferenceController and BluetoothScanningPreferenceController…

• Android

Android: In updateState of LocationServicesWifiScanningPreferenceController.java…

• Android

Improper privilege management in Android

• Android
• Privilege escalation

Out-of-bounds read in Android

• Android
• Memory corruption

Command injection in Android

• Android
• Command injection

Android: In stealReceiveChannel of EventThread.cpp…

• Android

Improper privilege management in Android

• Android
• Privilege escalation

In Task.java, there is a possible escalation of privilege due to a confused deputy.

• Android

In Car Settings app, the NotificationAccessConfirmationActivity is exported.

• Android

Android: In wifi.RequestToggleWifiActivity of AndroidManifest.xml…

• Android

Android: 'remap_pfn_range' here may map out of size kernel memory (for example…

• Android

Android: A drm driver have oob problem, could cause the system crash or EOPProduct…

• Android

Android: In choosePrivateKeyAlias of KeyChain.java…

• Android

Android: In bta_hf_client_handle_cind_list_item of bta_hf_client_at.cc…

• Android

Android: In various functions of C2DmaBufAllocator.cpp…

• Android

In USB driver, there is a possible out of bounds read due to a heap buffer overflow.

• Android

Android: In finishDrawingWindow of WindowManagerService.java…

• Android

Android: In getSubscriptionProperty of SubscriptionController.java…

• Android

Android: In AT_SKIP_REST of bta_hf_client_at.cc…

• Android

Android: In assertSafeToStartCustomActivity of AppRestrictionsFragment.java…

• Android

Android: In read_attr_value of gatt_db.cc, there is a possible out of bounds write due to a…

• Android

Android: In avrc_ctrl_pars_vendor_cmd of avrc_pars_ct.cc…

• Android

Android: In openFile of CallLogProvider.java, there is a possible permission bypass due to a path…

• Android

Android: In multiple functions of StorageManagerService.java and UserManagerService.java…

• Android

Android: In PermissionController, there is a possible way to get and retain permissions without…

• Android

There is a unauthorized broadcast in the SprdContactsProvider.

• Android

Android: android exported is used to set third-party app access permissions…

• Android

In multiple locations of the nanopb library, there is a possible way to corrupt memory when decoding untrusted protobuf files.

• Android

Android: In param_find_digests_internal and related functions of the Titan-M source…

• Android

Android: In hme_add_new_node_to_a_sorted_array of hme_utils.c…

• Android

Android: In parseRecursively of cppbor_parse.cpp…

• Android

Android: In static definitions of GattServiceConfig.java…

• Android

Android: In setPackageOrComponentEnabled of NotificationManagerService.java…

• Android

Android: In isFileUri of FileUtil.java, there is a possible way to bypass the check for a file://…

• Android

Android: In registerRemoteBugreportReceivers of DevicePolicyManagerService.java…

• Android

Android: In ih264_resi_trans_quant_4x4_sse42 of ih264_resi_trans_quant_sse42.c…

• Android

Android: In getAppSize of InstalldNativeService.cpp…

• Android

Android: In updateApState of SoftApManager.java…

• Android

Android: In llcp_dlc_proc_connect_pdu of llcp_dlc.cc…

• Android

Android: In recycle of Parcel.java, there is a possible way to start foreground activity from…

• Android

In gallery3d and photos, there is a possible permission bypass due to a confused deputy.

• Android

Android: In the keystore library, there is a possible prevention of access to system Settings due…

• Android

In onCreate of ChooseLockGeneric.java, there is a possible permission bypass.

• Android

Android: In getUniqueUsagesWithLabels of PermissionUsageHelper.java…

• Android