Code injection

In notifyScreenshotError of ScreenshotNotificationsController.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

Memory corruption

In BinderDiedCallback of MediaCodec.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

Design/Logic Flaw

In getMinimalSize of PipBoundsAlgorithm.java, there is a possible bypass of restrictions on background processes due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Out-of-bounds

In readVector of IMediaPlayer.cpp, there is a possible read of uninitialized heap data due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9...

Heap overflow

In avrcmsgcback of avrcapi.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9...

Design/Logic Flaw

In onActivityResult of EditUserPhotoController.java, there is a possible access of unauthorized files due to an unexpected URI handler. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

Design/Logic Flaw

In onCreate of CalendarDebugActivity.java, there is a possible way to export calendar data to the sdcard without user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for...

CVE-2021-0485

In getMinimalSize of PipBoundsAlgorithm.java, there is a possible bypass of restrictions on background processes due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2021-0473

CVE-2021-0473 affects Android via a double-free in rw_t3t_process_error in rw_t3t.cc, caused by uninitialized data, enabling remote code execution over NFC with no privileges and no user interaction required. Affected versions include Android-8.1, 9, 10, 11 per the description. The initial docume...

CVE-2021-0474

In avrcmsgcback of avrcapi.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9...

CVE-2021-0481

In onActivityResult of EditUserPhotoController.java, there is a possible access of unauthorized files due to an unexpected URI handler. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

CVE-2021-0482

In BinderDiedCallback of MediaCodec.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

CVE-2021-0482

CVE-2021-0482 concerns Android 11’s Media Framework. In BinderDiedCallback within MediaCodec.cpp there is memory corruption due to a use-after-free, enabling local elevation of privilege with no additional execution privileges required and no user interaction needed. The vulnerability is categori...

PT-2021-13154

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: There is a possible out of bounds read due to a missing bounds check in avrc pars browse rsp of avrc pars ct.cc. This could lead to remote information disclosure over Bluetooth with no additional...

PT-2021-3655

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a logic error in the updateCapabilities function of ConnectivityService.java, which can lead to incorrect network state determination. This could result in networking tasks being...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the Google Open Handheld Consortium Google. An elevation of privilege vulnerability exists in Google Android 11. The vulnerability arises because the permission declaration in DeviceAdminReceiver.java may lack broadcast protection...

Google Android 注入漏洞

Google Android is a Linux-based open source operating system from the Google Open Handheld Consortium Google. An elevation of privilege vulnerability exists in Google Android 11. The vulnerability arises due to a privilege bypass in isRestricted in RemoteViews.java. An attacker could exploit the...

Google Android 授权问题漏洞

Google Android is a Linux-based open source operating system from the Google Open Handheld Consortium Google. An elevation of privilege vulnerability exists in Google Android 11. The vulnerability arises due to a privilege bypass in sendBugreportNotification of BugreportProgressService.java. An...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from the Google Open Handheld Consortium Google. An information disclosure vulnerability exists in Google Android 11. The vulnerability arises due to an out-of-bounds read due to a lack of bounds checking in Lagmax of polwgh.cpp. An...

PT-2021-13140

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a permissions bypass in the getMinimalSize function of PipBoundsAlgorithm.java, which could allow for local escalation of privilege without needing additional execution...