:unknown: vulnerabilities (Android)
1,730 vulnerabilities.
:unknown:AndroidIn km_read_data_response of keymaster.c, there is a possible way to trigger an out of bounds...6.7 Medium:unknown:AndroidIn TOS_SecureBuffer_CheckSize of secure_buffer.c, there is a possible way to bypass secure buffer size validation via an unknown handle due to an incorrect bounds check. This could lead to local escal…No score:unknown:AndroidIn TzSharedMemory of TzSharedMemory.c, there is a possible Heap buffer overflow due to a logic...7.8 High:unknown:AndroidIn multiple locations, there is a possible use-after-free due to a logic error in the code. This...9.8 Critical:unknown:AndroidIn multiple functions of smmu.c, there is a possible way to flush stream table cache lines at an incorrect offset due to a confused deputy. This could lead to local escalation of privilege with no add…No score:unknown:AndroidIn parse_prime256v1 of keymint_asn1.c, there is a possible Heap Buffer Overflow due to a logic...7.8 High:unknown:AndroidIn thread_free of thread.c, there is a possible way to corrupt kernel heap metadata on thread...8.4 High:unknown:AndroidIn handle_dpm_image of seclib.rs, there is a possible Logic error due to a logic error in the...6.8 Medium:unknown:AndroidIn insert_node of remap.c, there is a possible way to trigger an out of bounds write in the...7.8 High:unknown:AndroidIn N/A of gdmc/gsp/project/gdmc.mk, there is a possible Logic error due to a logic error in the...8.4 High:unknown:AndroidIn multiple functions of verifier.rs, there is a possible way to bypass secure boot signature...8.4 High:unknown:AndroidIn handle_chan_msg of tipc_virtio_dev.c, there is a possible way to bypass memory tag access...6.4 Medium:unknown:AndroidIn Modem, there is a possible out of bounds write due to an incorrect bounds check. This could...8.4 High:unknown:AndroidIn Modem, there is a possible out of bounds write due to an incorrect bounds check. This could...6.2 Medium:unknown:AndroidIn Modem, there is a possible out of bounds write due to an incorrect bounds check. This could...5.3 Medium:unknown:AndroidIn Modem, there is a possible out of bounds write due to a missing bounds check. This could lead...5.3 Medium:unknown:AndroidIn Modem, there is a possible out of bounds write due to a missing bounds check. This could lead...5.3 Medium:unknown:AndroidIn Modem, there is a possible system crash due to improper input validation. This could lead to...5.3 Medium:unknown:AndroidIn GPU pdma, there is a possible memory corruption due to use after free. This could lead to...7.8 High:unknown:AndroidIn GPU pdma, there is a possible escalation of privilege due to use after free. This could lead...8.4 High:unknown:AndroidIn Modem, there is a possible out of bounds write due to a missing bounds check. This could lead...7.5 High:unknown:AndroidIn Modem, there is a possible out of bounds write due to a missing bounds check. This could lead...7.5 High:unknown:AndroidIn Modem, there is a possible out of bounds read due to a missing bounds check. This could lead...5.3 Medium:unknown:AndroidIn Modem, there is a possible system crash due to a missing bounds check. This could lead to...7.1 High:unknown:AndroidIn DA, there is a possible out of bounds write due to a missing bounds check. This could lead to...6.8 Medium:unknown:AndroidIn Modem, there is a possible out of bounds write due to improper input validation. This could...7.5 High:unknown:AndroidIn Modem, there is a possible out of bounds write due to an integer overflow. This could lead to...7.5 High:unknown:AndroidIn Modem, there is a possible out of bounds write due to a missing bounds check. This could lead...7.5 High:unknown:AndroidIn Modem, there is a possible out of bounds write due to an incorrect bounds check. This could...7.5 High:unknown:AndroidIn Modem, there is a possible out of bounds write due to a missing bounds check. This could lead...7.5 High:unknown:AndroidIn Modem, there is a possible out of bounds write due to a missing bounds check. This could lead...7.5 High:unknown:AndroidIn ext_mem_obj_get_page of memss-mfw.c, there is a possible way to return an out of bounds...2.3 Low:unknown:AndroidIn fill of dma.rs, there is a possible way to trigger an out of bounds stack read during direct...4.0 Medium:unknown:AndroidIn handle_rx_msg of tipc_virtio_dev, there is a possible Double Fetch TOCTOU due to Double Fetch....3.3 Low:unknown:AndroidIn event_set_sub of acropora_event.c, there is a possible Logic error due to a logic error in the...7.8 High:unknown:AndroidIn multiple functions of arm-smmu-v3.c, there is a possible way to bypass direct memory access...6.7 Medium:unknown:AndroidIn multiple locations, there is a possible way to bypass key authorization policies during...8.4 High:unknown:AndroidIn multiple functions of Android.bp, there is a possible way to bind to a privileged debug...8.4 High:unknown:AndroidGPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphics buffers > 4GB9.8 Critical:unknown:AndroidGPU DDK - OOB write due to freelist size integer overflow in RGXCreateHWRTDataSet7.1 High:unknown:AndroidGPU DDK - libusc.so NPD due to integer overflow at ConvertSwitchToArrayLookup during WebGPU shader compilation7.5 High:unknown:AndroidGPU DDK - OOB write in CalculateNPOTTwiddleSparsePageMap via TEXTURE_BASE_LEVEL change5.5 Medium:unknown:AndroidGPU DDK - Write UAF due to missing cleanup reference for abort command submitted via PVRSRVRGXKickTA3DKM7.1 High:unknown:AndroidGPU DDK - Write UAF due to a race condition caused by insufficient locking in PVRSRVRGXCloseHWPerfClientStreamKM()7.0 High:unknown:AndroidStack-based Buffer Overflow in Modem8.3 High:unknown:AndroidIn Modem, there is a possible system crash due to a missing bounds check. This could lead to...5.3 Medium:unknown:AndroidIn Modem, there is a possible out of bounds write due to a missing bounds check. This could lead...7.1 High:unknown:AndroidIn Modem, there is a possible system crash due to improper input validation. This could lead to...5.3 Medium:unknown:AndroidIn apu, there is a possible memory corruption due to improper input validation. This could lead...8.4 High:unknown:AndroidIn neuropilot, there is a possible out of bounds write due to a missing bounds check. This could...8.4 High- Show moreLoading…