CVE-2021-0374

In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

PT-2021-13052

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System executi...

CVE-2021-0462: Undefined Security Weakness

In the NXP NFC firmware, there is a possible insecure firmware update due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-168799695...

CVE-2021-0461: Out-of-bounds Write

In iaxxxcoresensorchangestate of iaxxx-module.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2021-0460: Integer Overflow or Wraparound

In the FingerTipS touch screen driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2021-0457: Out-of-bounds Write

In the FingerTipS touch screen driver, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid I...

CVE-2021-0455: Out-of-bounds Write

In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2021-0454: Out-of-bounds Write

In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2021-0452: Improper Initialization

In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2021-0387: Concurrent Execution using Shared Resource with Improper Synchronization

In FindQuotaDeviceForUuid of QuotaUtils.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

CVE-2021-0371: Out-of-bounds Read

In nciprocrfmanagementntf of ncihrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

CVE-2021-0370: Out-of-bounds Write

In Write of NxpMfcReader.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Andro...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. Google Android has a security vulnerability that can be exploited by an attacker to potentially cause the disclosure of local information with required system execution privileges...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. Google Android has a security vulnerability that can be exploited by an attacker to potentially cause the disclosure of local information with required system execution privileges...

PT-2021-2466

Name of the Vulnerable Software and Affected Versions Android kernel versions affected versions not specified Description The issue is related to a possible out of bounds write in the iaxxx core sensor change state function of iaxxx-module.c due to a missing bounds check. This could lead to local...

PT-2021-2459

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to an integer overflow in the FingerTipS touch screen driver, which could lead to a possible out of bounds read. This may result in local information disclosure, requiring System execution...

PT-2021-2472

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to the Titan M security module in Android operating systems and is caused by initialization errors. This could lead to local information disclosure with System execution privileges needed, allowi...

PT-2021-2480

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds write in the Citadel chip firmware due to a missing bounds check. This could lead to local escalation of privilege, with System execution privileges needed. User...

PT-2021-2500

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to the Titan M security module in Android operating systems and is caused by initialization errors. This could lead to local information disclosure with System execution privileges needed. No...

CVE-2021-0405

In performance driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID:...