Advisories · Technology
Android.
Every CVE that names Android among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
There is a Unauthorized service in the system service, may cause the system reboot.
- Android
-
There is an missing authorization issue in the system service.
- Android
-
There is an missing authorization issue in the system service.
- Android
-
There is an missing authorization issue in the system service.
- Android
-
There is an missing authorization issue in the system service.
- Android
-
There is an missing authorization issue in the system service.
- Android
-
In CarSettings of app packages, there is a possible permission bypass due to a confused deputy.
- Android
-
Android: In addAutomaticZenRule of ZenModeHelper.java…
- Android
-
Android: In rndis_set_response of rndis.c, there is a possible out of bounds write due to an…
- Android
-
Android: In emulation_proc_handler of armv8_deprecated.c…
- Android
-
Android: In binder_inc_ref_for_node of binder.c…
- Android
-
Android: In getBackgroundRestrictionExemptionReason of AppRestrictionController.java…
- Android
-
Android: In setOptions of ActivityRecord.java…
- Android
-
Android: In pickStartSeq of AAVCAssembler.cpp…
- Android
-
Android: In audioTransportsToHal of HidlUtils.cpp…
- Android
-
Android: In audioTransportsToHal of HidlUtils.cpp…
- Android
-
Android: In handleFullScreenIntent of StatusBarNotificationActivityStarter.java…
- Android
-
Android: In start of Threads.cpp, there is a possible way to record audio during a phone call due…
- Android
-
In fdt_next_tag of fdt.c, there is a possible out of bounds read due to an incorrect bounds check.
- Android
-
Android: In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc…
- Android
-
In io_identity_cow of io_uring.c, there is a possible way to corrupt memory due to a use after free.
- Android
-
Android: In getInputMethodWindowVisibleHeight of InputMethodManagerService.java…
- Android
-
Android: In queryInternal of CallLogProvider.java…
- Android
-
Android: In DevmemIntHeapAcquire of TBD, there is a possible arbitrary code execution due to an…
- Android
-
In dllist_remove_node of TBD, there is a possible use after free bug due to a race condition.
- Android
-
In sysmmu_unmap of TBD, there is a possible out of bounds write due to a missing bounds check.
- Android
-
Android: In smc_intc_request_fiq of arm_gic.c…
- Android
-
Android: In the SEPolicy configuration of system apps…
- Android
-
Android: In addOrUpdateNetwork of WifiServiceImpl.java…
- Android
-
Android: In SettingsActivity.java, there is a possible way to make a device discoverable over…
- Android
-
Android: In checkAccess of MediaProvider.java…
- Android
-
Android: In extract3GPPGlobalDescriptions of TextDescriptions.cpp…
- Android
- CVSS 7.8 High
Improper input validation in Android
- Android
- CWE-20
-
Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257000
- Android
-
Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257002
- Android
- CVSS 9.8 CriticalCritical · CVSS 9+
Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257004
- Android
- CVSS 9.8 CriticalCritical · CVSS 9+
Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227323
- Android
-
Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227324
- Android
-
Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227328
- Android
-
Android: a function called 'nla_parse', do not check the len of para…
- Android
-
In MMU_MapPages of TBD, there is a possible out of bounds write due to improper input validation.
- Android
-
The path in this case is a little bit convoluted.
- Android
-
Android: In PVRSRVBridgePMRPDumpSymbolicAddr of the PowerVR kernel driver…
- Android
-
Android: In PVRSRVRGXSubmitTransferKM of rgxtransfer.c…
- Android
-
Android: The PowerVR GPU driver allows unprivileged apps to allocated pinned memory…
- Android
-
Android: The PowerVR GPU driver allows unprivileged apps to allocated pinned memory…
- Android
-
Android: The method PVRSRVBridgeTLDiscoverStreams allocates puiStreamsInt on the heap…
- Android
-
Android: The method PVRSRVBridgePMRPDumpSymbolicAddr allocates puiMemspaceNameInt on the heap…
- Android
-
Android: An unprivileged app can trigger PowerVR driver to return an uninitialized heap memory…
- Android
-
Android: In PVRSRVBridgeHeapCfgHeapConfigName…
- Android
-
Android: In PVRSRVBridgeHeapCfgHeapDetails, there is a possible leak of kernel heap content due to…
- Android
-
In Bluetooth, there is a possible out of bounds write due to an integer overflow.
- Android
-
Android: In WiFi, there is a possible disclosure of WiFi password to the end user due to an…
- Android
-
Android: In ConnectivityService, there is a possible bypass of network permissions due to a…
- Android
-
Android: In SELinux policy, there is a possible way of inferring which websites are being opened…
- Android
-
Android: In Android, there is a possible access of network neighbor table information due to an…
- Android
-
In Settings, there is a possible installed application disclosure due to a missing permission check.
- Android
-
Android: In Wifi Slice, there is a possible way to adjust Wi-Fi settings even when the permission…
- Android
-
In Bluetooth, there are possible process crashes due to dereferencing a null pointer.
- Android
-
In Bluetooth, there is a possible crash due to a missing null check.
- Android