CVE-2022-20213

In ApplicationsDetailsActivity of AndroidManifest.xml, there is a possible DoS due to a tapjacking/overlay attack. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11...

CVE-2023-20904

In getTrampolineIntent of SettingsActivity.java, there is a possible launch of arbitrary activity due to an Intent mismatch in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

PT-2023-17715 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions affected versions not specified Description: The issue is related to a Biometric Auth Failure, allowing a possible bypass of the lockscreen. This could lead to local escalation of privilege with physical access to the device,...

CVE-2023-20915

In addOrReplacePhoneAccount of PhoneAccountRegistrar.java, there is a possible way to enable a phone account without user interaction due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed f...

PT-2023-2177 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is related to a logic error in the code of BitmapExport.java, which may cause a failure to truncate images. This can potentially allow an attacker to recover cropped or edited...

Zebra Technologies Enterprise Home Screen 安全漏洞

Zebra Technologies Enterprise Home Screen is a free Android app from Zebra Technologies, Inc. provides administrators with an easy way to control access to applications and settings on Zebra devices. A security vulnerability exists in Zebra Technologies Enterprise Home Screen version 4.1.19, whic...

CVE-2023-0136

Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to execute incorrect security UI via a crafted HTML page. Chromium security severity: Medium...

Google Android 资源管理错误漏洞

Google Android is a Linux-based open-source operating system from the U.S. company Google. Google Android is vulnerable to resource management errors, which can be exploited by attackers to cause local privilege escalation without additional execution privileges...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain elevated privileges on the system...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain elevated privileges on the system...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android has a security vulnerability that stems from a problem with the Qualcomm component Bluetooth...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. Google Android OS has a security vulnerability that stems from the Binder driver component of its kernel that allows an attacker to achieve remote code execution without additional execution...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. Google Android suffers from a security vulnerability that can be exploited by an attacker to escalate privileges without additional execution privileges...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android suffers from a security vulnerability that stems from a problem with a Qualcomm closed-source component...

Google Android 安全漏洞

Google Android is a Linux-based open-source operating system from the U.S. company Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by attackers to cause a local privilege escalation without the need for additional execution privileges...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the American company Google. Google Android OS has a security vulnerability. An attacker achieves elevation of local privileges without additional execute privileges...

The vulnerability of the PowerVR GPU driver for the Android operating system, which allows a hacker to trigger memory corruption.

The vulnerability of the PowerVR GPU driver for the Android operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause memory corruption...

The vulnerability of the dxhdcp2 component in Android operating systems of LG devices allows a hacker to trigger a service failure.

The vulnerability of the dxhdcp2 component in Android operating systems on LG devices arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a hacker to cause a system failure...

The vulnerability of the PV_DecodePredictedIntraDC function (dec_pred_intra_dc.cpp) in the Android operating system allows a hacker to execute arbitrary code.

The vulnerability of the PVDecodePredictedIntraDC function decpredintradc.cpp in the Android operating system is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the WapService service in the Android operating system of LG devices allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the WapService service on LG devices’ Android operating systems is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...