:unknown: vulnerabilities (Android)
1,730 vulnerabilities.
:unknown:AndroidIn cpm_mbox_power_ctrl_sswrp of cpm_mbox.c, there is a possible permission bypass due to a...6.7 Medium:unknown:AndroidIn get_secure_boot_mode of auth.rs, there is a possible way to bypass root signature verification...6.8 Medium:unknown:AndroidIn authenticate of verify_image, there is a possible Signature verification logic bypass due to a...6.7 Medium:unknown:AndroidIn __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out-of...9.8 Critical:unknown:AndroidIn tipc_dev_probe of tipc_virtio_dev.c, there is a possible way to corrupt memory via an off-by...6.7 Medium:unknown:AndroidIn getChppAppState of chpp_init.cc, there is a possible way to trigger an out of bounds read and...8.4 High:unknown:AndroidIn send_vdu_directive of gdmc/gsp/dev/bmsm/plat/lga/vdu.c, there is a possible Logic error due to...8.4 High:unknown:AndroidIn access_control_enable of multiple files, there is a possible way to release secure...6.7 Medium:unknown:AndroidIn EncodeLastScanBufferElement of data_manager.cc, there is a possible out-of-bounds write due to...9.8 Critical:unknown:AndroidIn GC2AvcDec of GC2AvcDec.cpp, there is a possible Logic error due to a logic error in the code....8.4 High:unknown:AndroidIn EuiccPort.buildUiccAccessRule of EuiccPort.java, there is a possible Confused Deputy due to a...8.8 High:unknown:AndroidIn PresenceDecoderV1::DecodeDataElements of presence_decoder_v1.cc, there is a possible out-of...8.4 High:unknown:AndroidIn multiple locations, there is a possible way to corrupt host allocator metadata in shared...6.7 Medium:unknown:AndroidIn createDataFlowAsync of data_flow_manager.cc, there is a possible way to trigger an out of...8.4 High:unknown:AndroidIn AudioSession::SendInternalEvent of AudioSession.cpp, there is a possible Double Free due to a...9.8 Critical:unknown:AndroidIn edgetpu_group_clear_responses of edgetpu_group.c, there is a possible Use After Free due to a...7.8 High:unknown:AndroidIn CommitToBuffer of hal_override_options.bundle.cc, there is a possible way to retain stale...8.4 High:unknown:AndroidIn arm_lpae_init_pte of io-pgtable-arm-common.c, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges neede…No score:unknown:AndroidIn EncodeT140 of TextRtpPayloadEncoderNode.cpp, there is a possible Heap Buffer Overflow due to a...5.3 Medium:unknown:AndroidIn on_vkUpdateDescriptorSetWithTemplateSized2GOOGLE of vk_decoder_global_state.cpp, there is a...8.4 High:unknown:AndroidIn multiple locations, there is a possible way to modify authenticated coprocessor firmware in...6.4 Medium:unknown:AndroidIn getCarrierRestrictionStatus of PhoneInterfaceManager.java, there is a possible permission...4.0 Medium:unknown:AndroidIn smmu_unmap_visit_leaf of arm-smmu-v3.c, there is a possible way to release active direct...6.7 Medium:unknown:AndroidIn smmu_detach_dev of private/google-modules/iommu/arm-smmu-v3/drivers/iommu/arm/arm-smmu-v3/pkvm...7.8 High:unknown:AndroidIn multiple locations, there is a possible way to trigger an out of bounds read via an...2.3 Low:unknown:AndroidIn port_shutdown of ipc.c, there is a possible Use After Free due to a race condition. This could...7.0 High:unknown:AndroidIn km_os_regen_salt of storage.c, there is a possible way to recover deleted keys due to a logic...4.0 Medium:unknown:AndroidIn arm_lpae_split_blk_unmap of drivers/iommu/io-pgtable-arm-common.c, there is a possible Logic...7.8 High:unknown:AndroidIn RecordApTx of efw_ap_transport.c, there is a possible Non-Heap Buffer Overflow due to a buffer...7.8 High:unknown:AndroidIn smmu_find_ste of smmu.c, there is a possible way to retain stale translation lookaside buffer...8.4 High:unknown:AndroidIn TrustyKeyMintManager::VerifyHat of trusty_keymint_manager.cc, there is a possible Security...7.8 High:unknown:AndroidIn multiple functions of PssSubscriptionManager.java, there is a possible way to spoof...8.4 High:unknown:AndroidIn PackageSignatureChecker of SystemUIGoogleModule.java, there is a possible background activity...8.8 High:unknown:AndroidIn _vqueue_get_avail_buf_locked of trusty/kernel/lib/trusty/vqueue.c, there is a possible Double...7.8 High:unknown:AndroidIn ac_remove_smmu_prot_internal of acfw_smmu.c, there is a possible Logic error due to a logic...7.8 High:unknown:AndroidIn handle_fips_hmac_req of hwcrypto_proxy.c, there is a possible heap buffer overflow due to...6.7 Medium:unknown:AndroidIn multiple locations, there is a possible way to trigger an out of bounds read and write in...8.4 High:unknown:AndroidIn multiple functions of sswrp_cpm.dtsi, there is a possible way to modify voltage control...6.7 Medium:unknown:AndroidIn multiple locations, there is a possible information disclosure due to a logic error in the...4.0 Medium:unknown:AndroidIn smmu_domain_config_s1 of arm-smmu-v3.c, there is a possible way to trigger an out of bounds write in hypervisor memory due to improper input validation. This could lead to local escalation of privi…No score:unknown:AndroidIn aes256_cmac_sw of aes.rs, there is a possible way to forge message authentication codes over...8.4 High:unknown:AndroidIn multiple functions of attestation_object.c, there is a possible way to disclose uninitialized...4.0 Medium:unknown:AndroidIn multiple locations, there is a possible way to bypass fingerprint lockout enforcement in the trusted application due to a logic error. This could lead to local escalation of privilege with no addit…No score:unknown:AndroidIn gf_validate_calibration_package of trusty/vendor/goodix/g7/goodix/main/gf_tee_internal_api.c, there is a possible Buffer Overflow due to a heap buffer overflow. This could lead to local escalation…No score:unknown:AndroidIn ac_set_ns_ipa_tbl of plat_trusty.c, there is a possible way to corrupt stream table entry...6.7 Medium:unknown:AndroidIn multiple functions of vaddr_list.c, there is a possible way to create overlapping memory mappings via an aligned size wraparound due to an integer overflow. This could lead to local escalation of p…No score:unknown:AndroidIn multiple files, there is a possible out-of-bounds write due to a missing bounds check. This...9.8 Critical:unknown:AndroidIn secure_transport_usecase_handshake of secure_transport.c, there is a possible way to bypass...8.4 High:unknown:AndroidIn dsim_read_data of secure_dsim_drv.c, there is a possible way to trigger an out of bounds write during short display reads due to an incorrect bounds check. This could lead to local escalation of pr…No score:unknown:AndroidIn GetSharedMemory of trusty_shared_memory_manager.cc, there is a possible way to trigger an out...2.3 Low- Show moreLoading…