:unknown: vulnerabilities (Android)
1,730 vulnerabilities.
:unknown:AndroidGPU DDK - PhysmemWrapExtMem uiSize=0 corrupts kernel memory7.8 High:unknown:AndroidGPU DDK - ui64RobustnessAddress can overwrite Freelist / HWRT (and bypass PMMETA)7.1 High:unknown:AndroidIn n/a of n/a, there is a possible n/a due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed…No score:unknown:AndroidIn DA, there is a possible permission bypass due to a logic error. This could lead to local...6.0 Medium:unknown:AndroidIn vdec, there is a possible permission bypass due to improper input validation. This could lead...6.7 Medium:unknown:AndroidIn DA, there is a possible out of bounds write due to a missing bounds check. This could lead to...6.8 Medium:unknown:AndroidIn keymaster, there is a possible out of bounds read due to a missing bounds check. This could...5.3 Medium:unknown:AndroidMali GPU Userspace Driver allows an Out-of-Bounds access5.9 Medium:unknown:AndroidIn wl_update_hidden_ap_ie() of wl_cfgscan.c, there is a possible out of bounds write due to...7.8 High:unknown:AndroidIn SAEMM_DiscloseMsId of SAEMM_RadioMessageCodec.c, there is a possible out of bounds read due to...6.5 Medium:unknown:AndroidGPU DDK - _WrapExtMemReleasePages called twice if _FlushUMVirtualRange fails7.8 High:unknown:AndroidGPU DDK - PMMETA_PROTECT PMR can be exported as dma-buf file / GEM object7.8 High:unknown:AndroidGPU DDK - Exploitable kernel double free on apsFenceSyncCheckpoints allocated with arbitrary size7.8 High:unknown:AndroidGPU DDK - Untrusted app can crash firmware by forcing MCU access to non-aligned address5.5 Medium:unknown:AndroidAn issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980,...6.5 Medium:unknown:AndroidIn KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could...7.8 High:unknown:AndroidIn Modem, there is a possible memory corruption due to incorrect error handling. This could lead...6.5 Medium:unknown:Androidthere is a possible way to crash the modem due to a missing null check. This could lead to remote...5.1 Medium:unknown:AndroidIn ppcfw_deny_sec_dram_access of ppcfw.c, there is a possible arbitrary read from TEE memory due...6.6 Medium:unknown:AndroidIn closeChannel of secureelementimpl.cpp, there is a possible out of bounds read due to an...5.1 Medium:unknown:AndroidIn ProtocolUnsolOnSSAdapter::GetServiceClass() of protocolcalladapter.cpp, there is a possible...5.1 Medium:unknown:AndroidIn static long dev_send of tipc_dev_ql, there is a possible out of bounds read due to an...5.1 Medium:unknown:AndroidGPU DDK - rgxfw_pcset_ungrab OOB write via psFWMemContext->uiPageCatBaseRegSet7.3 High:unknown:AndroidGPU DDK - RGXFWIF_HWPERF_CTL_BLK.uiNumCounters OOB write7.8 High:unknown:AndroidGPU DDK - rgxfw_hwr_log_info OOB write via psHWRInfoBuf->ui32WriteIndex3.3 Low:unknown:AndroidGPU DDK - rgxfw_write_robustness_buffer allows arbitrary catreg set mapping7.9 High:unknown:AndroidIn secmem, there is a possible out of bounds write due to a missing bounds check. This could lead...6.7 Medium:unknown:AndroidIn V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead...6.6 Medium:unknown:AndroidIn Modem, there is a possible out of bounds write due to a missing bounds check. This could lead...9.8 Critical:unknown:AndroidIn registerCallback of BatteryMitigationAidl.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution pri…No score:unknown:AndroidMali GPU Kernel Driver allows improper GPU processing operations7.8 High:unknown:AndroidIn wifi display, there is a possible missing permission check. This could lead to local...7.1 High:unknown:AndroidIn V5 DA, there is a possible out of bounds write due to a missing bounds check. This could lead...6.6 Medium:unknown:AndroidIn V5 DA, there is a possible out of bounds write due to a missing bounds check. This could lead...6.6 Medium:unknown:AndroidGPU DDK - Multiple integer overflow in DmaTransfer PMR_DevPhysAddr functions leading to OOB writes7.8 High:unknown:AndroidGPU DDK - PVRSRVDeviceServicesOpen use-after-free condition7.8 High:unknown:AndroidGPU DDK - PVRSRVDeviceSyncOpen use-after-free condition7.8 High:unknown:AndroidGPU DDK - Exploitable double free on PTL_STREAM_DESC object in the kernel function TLServerCloseStreamKM due to a race condition7.8 High:unknown:AndroidGPU DDK - Arbitrary write of read-only dmabuf7.8 High:unknown:AndroidAn unprivileged context can trigger a data memory-dependent prefetch engine to fetch the contents...5.1 Medium:unknown:AndroidGPU DDK - rgxfw_pm_add_freelist_for_reconstruction OOB write7.8 High:unknown:AndroidGPU DDK - rgxfw_kernel_CMD_DISABLE_ZSSTORE OOB write via ui32WriteOffsetOfDisableZSStore6.7 Medium:unknown:AndroidGPU DDK - rgxfw_hwperf_config OOB read & write4.4 Medium:unknown:AndroidGPU DDK - psContext->eDM gives OOB write4.1 Medium:unknown:AndroidGPU DDK - OOB read into fwlog due to unchecked block count7.1 High:unknown:AndroidGPU DDK - Out of bounds read into fwlog due to unchecked loop bounds7.1 High:unknown:AndroidGPU DDK - PVRSRVRGXGetEnabledHWPerfBlocksKM off-by-one OOB write8.8 High:unknown:AndroidAn issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820,...4.3 Medium:unknown:AndroidIn cc_SendCcImsInfoIndMsg of cc_MmConManagement.c, there is a possible out of bounds write due to...9.8 Critical:unknown:AndroidIn Modem, there is a possible out of bounds write due to a missing bounds check. This could lead...8.8 High- Show moreLoading…