CVE-2022-20142

In createFromParcel of GeofenceHardwareRequestParcelable.java, there is a possible arbitrary code execution due to parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2017-13315

In writeToParcel and createFromParcel of DcParamObject.java, there is a permission bypass due to a write size mismatch. This could lead to an elevation of privileges where the user can start an activity with system privileges, with no additional execution privileges needed. User interaction is no...

CVE-2017-13315

In writeToParcel and createFromParcel of DcParamObject.java, there is a permission bypass due to a write size mismatch. This could lead to an elevation of privileges where the user can start an activity with system privileges, with no additional execution privileges needed. User interaction is no...

CVE-2017-13315: Incorrect Calculation of Buffer Size

In writeToParcel and createFromParcel of DcParamObject.java, there is a permission bypass due to a write size mismatch. This could lead to an elevation of privileges where the user can start an activity with system privileges, with no additional execution privileges needed. User interaction is no...

CVE-2017-13310

In createFromParcel of ViewPager.java, there is a possible read/write serialization issue leading to a permissions bypass. This could lead to local escalation of privilege where an app can start an activity with system privileges with no additional execution privileges needed. User interaction is...

CVE-2017-13310

In createFromParcel of ViewPager.java, there is a possible read/write serialization issue leading to a permissions bypass. This could lead to local escalation of privilege where an app can start an activity with system privileges with no additional execution privileges needed. User interaction is...

CVE-2017-13312: Incorrect Default Permissions

In createFromParcel of MediaCas.java, there is a possible parcel read/write mismatch due to improper input validation. This could lead to local escalation of privilege where an app can start an activity with system privileges with no additional execution privileges needed. User interaction is not...

CVE-2017-13310: Incorrect Default Permissions

In createFromParcel of ViewPager.java, there is a possible read/write serialization issue leading to a permissions bypass. This could lead to local escalation of privilege where an app can start an activity with system privileges with no additional execution privileges needed. User interaction is...

CVE-2023-40109

In createFromParcel of UsbConfiguration.java, there is a possible background activity launch BAL due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2022-20142

In createFromParcel of GeofenceHardwareRequestParcelable.java, there is a possible arbitrary code execution due to parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

PT-2022-11073

Name of the Vulnerable Software and Affected Versions Android versions Android-12 through Android-12L Description The issue is related to a missing bounds check in the Bitmap createFromParcel function of Bitmap.cpp, which could lead to arbitrary code execution. This might result in local escalati...

CVE-2021-0928

In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2021-0970: Deserialization of Untrusted Data

In createFromParcel of GpsNavigationMessage.java, there is a possible Parcel serialization/deserialization mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-1...

CVE-2017-13289

In writeToParcel and createFromParcel of RttManager.java, there is a permission bypass due to a write size mismatch. This could lead to a local escalation of privileges where the user can start an activity with system privileges, with no additional execution privileges needed. User interaction is...

CVE-2017-13289

CVE-2017-13289 affects Android (versions 6.0–8.1). The issue arises in RttManager.java during writeToParcel and createFromParcel, where a write size mismatch enables a permission bypass that can escalate privileges locally. A local attacker can start an activity with system privileges without add...

CVE-2017-13289: Incorrect Calculation of Buffer Size

In writeToParcel and createFromParcel of RttManager.java, there is a permission bypass due to a write size mismatch. This could lead to a local escalation of privileges where the user can start an activity with system privileges, with no additional execution privileges needed. User interaction is...

PT-2018-5565

Name of the Vulnerable Software and Affected Versions: Android versions 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 Description: The issue is related to improper input validation in the createFromParcel method of VerifyCredentialResponse.java. This could lead to local escalation of privilege if mPayload i...

PT-2018-5567

Name of the Vulnerable Software and Affected Versions: Android versions 6.0 through 8.1 Description: A permission bypass issue exists due to a write size mismatch in the writeToParcel and createFromParcel methods of RttManager.java. This could lead to a local escalation of privileges, allowing a...

PT-2015-2209

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48M Description The issue is related to the Region createFromParcel function in the Android operating system, which has inadequate access control to certain functions. This can be exploited by a remote attack...

PT-2015-2229

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48I Description The issue is related to an integer overflow in the Bitmap createFromParcel function, which can be exploited by attackers to cause a denial of service, resulting in a system server crash, or to...