:unknown: vulnerabilities (Android)
1,730 vulnerabilities.
:unknown:AndroidIn ReadTachyonCommands of gxp_main_actor.cc, there is a possible information leak due to...5.5 Medium:unknown:AndroidDenial of service7.5 High:unknown:AndroidElevation of privilege8.8 High:unknown:AndroidElevation of Privilege9.8 Critical:unknown:AndroidIn SimUpdatePbEntry::encode of simdata.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privile…No score:unknown:AndroidIn CopyDataFromFmq of common_utils.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges nee…No score:unknown:AndroidIn CopyDataFromFmq of common_utils.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileg…No score:unknown:AndroidIn multiple locations, there is a possible memory corruption due to a use after free. This could...7.8 High:unknown:AndroidMali GPU Kernel Driver allows access to already freed memory5.3 Medium:unknown:AndroidIn Modem, there is a possible out of bounds write due to an incorrect bounds check. This could...8.8 High:unknown:AndroidIn Modem, there is a possible out of bounds write due to a missing bounds check. This could lead...8.0 High:unknown:AndroidIn Modem, there is a possible out of bounds read due to an incorrect bounds check. This could...6.5 Medium:unknown:AndroidGPU DDK - RGXFW_CTL.pui8FWScratchBuf Leak/Overwrite9.8 Critical:unknown:AndroidGPU DDK - GPU shader shared memory corrupted using ptrace to disrupt GPU operation8.8 High:unknown:AndroidIn DA, there is a possible out of bounds write due to a missing bounds check. This could lead to...6.8 Medium:unknown:AndroidMali GPU Userspace Driver allows access to already freed memory4.3 Medium:unknown:AndroidGPU DDK - Insufficient validation in RGXCREATEFREELIST creates corrupt freelist7.8 High:unknown:AndroidGPU DDK - Guest VM can delay the FW and GPU from processing workloads from other VMs4.3 Medium:unknown:AndroidGPU DDK - Guest VM can override its own FW VZ connection state after the FW has close it5.2 Medium:unknown:AndroidPossible kernel exceptions caused by reading and writing kernel heap data after free.5.7 Medium:unknown:AndroidUse After Free in Graphics7.5 High:unknown:AndroidMali GPU Userspace Driver allows an Out-of-Bounds access7.8 High:unknown:AndroidGPU DDK - Freelist GPU VA can be remapped to another reservation/PMR to trigger GPU arbitrary write to physical memory7.8 High:unknown:AndroidIn wl_cfgscan_update_v3_schedscan_results() of wl_cfgscan.c, there is a possible out of bounds...7.8 High:unknown:AndroidIn ProtocolMiscCurrentLinkCapacityEstimate() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no a…No score:unknown:AndroidIn TBD of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction…No score:unknown:AndroidIn nvt_flash_read of nt36xxx.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed.…No score:unknown:AndroidIn sms_SetTpUdIe() of sms_PduCodec.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges…No score:unknown:AndroidIn wl_escan_handler of TBD, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User…No score:unknown:AndroidAnalysis: Access Vector: Local Layer: Userland Root Causes: Heap Buffer Overflow SRS Categories: - Android Security SRS Category: Memory Safety Writeup: A stack trace alone with PoC app is insufficien…No score:unknown:AndroidIn tbd of tbd, there is a possible lockscreen bypass due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is…No score:unknown:AndroidIn ppmp_protect_buf of drm_fw.c, there is a possible memory protection issue due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges…No score:unknown:AndroidIn CopyDataFromFmq of common_utils.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges…No score:unknown:AndroidIn SetLogicalToPhysicalSlotPortMapping::onRequest of commands.cpp, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with no additional…No score:unknown:AndroidNo score:unknown:AndroidMali GPU Kernel Driver allows access to already freed memory7.8 High:unknown:AndroidMali GPU Kernel Driver allows improper GPU memory processing operations7.8 High:unknown:AndroidGPU DDK - OOB read and write of the shared KMD/FW memory heap (VZ/TEE setups)6.5 Medium:unknown:AndroidGPU DDK - Improper locking when accessing the pvr_exp_fence object7.5 High:unknown:AndroidAn issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos...7.5 High:unknown:AndroidAn issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos...6.5 Medium:unknown:AndroidAn issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980...6.5 Medium:unknown:AndroidIn the function process_crypto_cmd, the values of ptrs[i] can be potentially equal to NULL which...5.5 Medium:unknown:AndroidThere is a possible bypass of carrier restrictions due to an unusual root cause. This could lead...8.4 High:unknown:AndroidIn Modem, there is a possible system crash due to an uncaught exception. This could lead to...7.5 High:unknown:AndroidMali GPU Kernel Driver allows access to already freed memory7.8 High:unknown:AndroidMali GPU Kernel Driver allows improper GPU memory processing operations7.8 High:unknown:AndroidThere is a possible disclosure of Bluetooth adapter details due to a permissions bypass. This...5.1 Medium:unknown:AndroidIn MMapVAccess of pmr_os.c, there is a possible out of bounds write due to improper input...4.0 Medium:unknown:AndroidGPU DDK - rgxfw_hwperf_get_packet_buffer OOB write8.2 High- Show moreLoading…