Android.

Android: In prepare_io_entry and prepare_response of lwis_ioctl.c and lwis_periodic_io.c…

• Android

Android: In gasket_alloc_coherent_memory of gasket_page_table.c…

• Android

In sendMessage of OneToOneChatImpl.java (?

• Android

Android: In amcs_cdev_unlocked_ioctl of audiometrics.c…

• Android

Android: In copy_io_entries of lwis_ioctl.c, there is a possible out of bounds write due to an…

• Android

Android: In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp…

• Android

In TBD of TBD, there is a possible out of bounds read due to a missing bounds check.

• Android

In the TitanM chip, there is a possible out of bounds write due to a missing bounds check.

• Android

Android: In eicPresentationRetrieveEntryValue of acropora/app/identity/libeic/EicPresentation.c…

• Android

Android: In cd_ParseMsg of cd_codec.c, there is a possible out of bounds read due to an incorrect…

• Android

Android: In gasket_free_coherent_memory_all of gasket_page_table.c…

• Android

Android: In TuningProviderBase::GetTuningTreeSet of tuning_provider_base.cc…

• Android

Product: AndroidVersions: Android kernelAndroid ID: A-209014813References: N/A

• Android

Android: In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp…

• Android

In TBD of TBD, there is a possible out of bounds write due to memory corruption.

• Android

Product: AndroidVersions: Android kernelAndroid ID: A-207433926References: N/A

• Android

Android: In lwis_top_register_io of lwis_device_top.c…

• Android

Android: In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp…

• Android

Android: In iaxxx_btp_write_words of iaxxx-btp.c…

• Android

Product: AndroidVersions: Android kernelAndroid ID: A-206977562References: N/A

• Android

Android: In __show_regs of process.c, there is a possible leak of kernel memory and addresses due…

• Android

In ion_buffer_kmap_get of ion.c, there is a possible use-after-free due to an integer overflow.

• Android

Product: AndroidVersions: Android kernelAndroid ID: A-173788806References: Upstream kernel

• Android

In TBD of TBD, there is a possible user after free vulnerability due to a race condition.

• Android

Android: In bpf_prog_test_run_skb of test_run.c…

• Android

Product: AndroidVersions: Android kernelAndroid ID: A-202160245References: N/A

• Android

In TBD of TBD, there is a possible out of bounds read due to TBD.

• Android

Android: In HandleTransactionIoEvent of actuator_driver.cc…

• Android

Android: In startVideoStream() there is a possibility of an OOB Read in the heap…

• Android

Android: In isServiceDistractionOptimized of CarPackageManagerService.java…

• Android

Android: In writeThrowable of AndroidFuture.java…

• Android

In fastboot, there is a possible secure boot bypass due to a configuration error.

• Android

Android: In GKI_getbuf of gki_buffer.cc, there is a possible out of bounds write due to a heap…

• Android

Android: In btm_sec_connected and btm_sec_disconnected of btm_sec.cc file…

• Android

Android: In code generated by aidl_const_expressions.cpp…

• Android

Android: In onCreate of InstallCaCertificateWarning.java…

• Android

Android: In onActivityViewReady of DetailDialog.kt…

• Android

Android: In extract of MediaMetricsItem.h, there is a possible out of bounds read due to improper…

• Android

Android: In checkSpsUpdated of AAVCAssembler.cpp…

• Android

Android: In LoadedPackage::Load of LoadedArsc.cpp…

• Android

Android: In openFileAndEnforcePathPermissionsHelper of MediaProvider.java…

• Android

Android: In checkUriPermission of MediaProvider.java…

• Android

Android: ismsEx service is a vendor service in unisoc equipment。ismsEx service is an extension of…

• Android

Android: ims_ex is a vendor system service used to manage VoLTE in unisoc devices，But it does not…

• Android

Android: In clear_data_dlg_text of strings.xml…

• Android

Android: In updatePackageMappingsData of UsageStatsService.java…

• Android

Summary:Product: AndroidVersions: Android SoCAndroid ID: A-204686438

• Android

Android: The broadcast that DevicePickerFragment sends when a new device is paired doesn't have…

• Android

Android: In LocationSettingsActivity of AndroidManifest.xml…

• Android

Android: In setLaunchIntent of BluetoothDevicePickerPreferenceController.java…

• Android

Android: In target_init of gs101/abl/target/slider/target.c…

• Android

Android: In copy_from_mbox of sss_ice_util.c, there is a possible out of bounds write due to a…

• Android

Android: In mgm_alloc_page of memory_group_manager.c…

• Android

In delete_protocol of main.c, there is a possible arbitrary code execution due to a use after free.

• Android

Android: In sec_SHA256_Transform of sha256_core.c…

• Android

Android: In init of vendor_graphicbuffer_meta.cpp…

• Android

In <TBD> of <TBD>, there is a possible bypass of Factory Reset Protection due to <TBD>.

• Android

Android: In sortSimPhoneAccountsForEmergency of CreateConnectionProcessor.java…

• Android

In fs/eventpoll.c, there is a possible use after free.

• Android

In gre_handle_offloads of ip_gre.c, there is a possible page fault due to an invalid memory access.

• Android