Google Android.

Incorrect authorization in Google Android

• Google Android
• Broken access control

In onCreate of ConfirmDialog.java, there is a possible way to connect to VNP bypassing user's consent due to improper input validation.

• Google Android

In gatt_end_operation of gatt_utils.cc, there is a possible out of bounds write due to a missing bounds check.

• Google Android

In multiple functions of OneTimePermissionUserManager.java, there is a possible one-time permission retention due to a permissions bypass.

• Google Android

In getAvailabilityStatus of WifiScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device policy restriction due to a missing permission check.

• Google Android

In getAvailabilityStatus of BluetoothScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device policy restriction due to a missing permission check.

• Google Android

In ShortcutInfo of ShortcutInfo.java, there is a possible way for an app to retain notification listening access due to an uncaught exception.

• Google Android
• CWE-273

Incorrect authorization in Google Android

• Google Android
• Broken access control

In validateForCommonR1andR2 of PasspointConfiguration.java, there is a possible way to inflate the size of a config file with no limits due to a buffer overflow.

• Google Android

In rw_i93_send_to_upper of rw_i93.cc, there is a possible out of bounds write due to an integer overflow.

• Google Android

In Policy of Policy.java, there is a possible boot loop due to resource exhaustion.

• Google Android

Session fixation in Google Android

• Google Android
• Authentication bypass

Session fixation in Google Android

• Google Android
• Authentication bypass

Weak encryption in Google Android

• Google Android
• Weak cryptography or TLS

Weak encryption in Google Android

• Google Android
• Weak cryptography or TLS

XML external entity injection in Google Android

• Google Android
• XML external entities (XXE)

The PVRSRVBridgeGetMultiCoreInfo ioctl in the PowerVR kernel driver can return uninitialized kernel memory to user space.

• Google Android

Incorrect authorization in Google Android

• Google Android
• Broken access control

Uncontrolled resource consumption in Google Android

• Google Android
• Denial of service

Google Android: btif/src/btif_dm.c in Android before 5.1 does not properly enforce the temporary nature…

• Google Android

Android SQLite Journal before 4.0.1 has an information disclosure vulnerability.

• Google Android

Google Android: The Bluetooth stack in Android before 2.3.6 allows a physically proximate attacker to…

• Google Android

Google Android: A Denial of Service vulnerability exists in Google Android 4.4.4, 5.0.2, and 5.1.1…

• Google Android