1782 matches found
ASB-A-273754094
Bulletin has no description...
ASB-A-270400229
In PVRSRVBridgePhysmemNewRamBackedLockedPMR of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction i...
ASB-A-261367136
In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
ASB-A-250470696
In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
ASB-A-250470697
In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
ASB-A-253957344
A wlan driver function lacks parameter checks, resulting EOP issue...
ASB-A-253337348
The program copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow...
ASB-A-238108282
Bulletin has no description...
ASB-A-238227328
Summary:...
ASB-A-231281131
In Modem 2G RR, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding GPRS Packet Neighbour Cell Data PNCD improper neighbouring cell size with no additional execution privileges needed. User interaction is not needed for...
ASB-A-231911916
android exported is used to set third-party app access permissions, and the default value of intent-filter is true. com.sprd.firewall has set exported as true...
ASB-A-218242055
In A-GPS, there is a possible man in the middle attack due to improper certificate validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-204905738
Bulletin has no description...
ASB-A-203032261
Bulletin has no description...
ASB-A-202025735
Bulletin has no description...
ASB-A-184561643
Bulletin has no description...
ASB-A-175037520
Bulletin has no description...
ASB-A-168918351
Bulletin has no description...
ASB-A-185195268
In memory management driver, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-175038288
Bulletin has no description...
ASB-A-168264528
There is a possible out of bounds write due to a missing bounds check...
ASB-A-168251617
There is a possible out of bounds write due to a missing bounds check...
ASB-A-162980455
There is a possible out of bounds write due to a missing bounds check...
ASB-A-147104886
Bulletin has no description...
ASB-A-152236803
There is a possible memory corruption due to a use after free...
ASB-A-429417453
In setDefaultKey of DefaultPaymentSettings.java, there is a possible way for an application to set the main user's default NFC payment setting due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...
ASB-A-497585110
Bulletin has no description...
ASB-A-481967442
Bulletin has no description...
ASB-A-443742082
In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-418225717
In multiple functions of MediaProvider.java, there is a possible way to bypass the WRITEEXTERNALSTORAGE permission due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...
ASB-A-473385376
Bulletin has no description...
ASB-A-407562568
In exitKeyguardAndFinishSurfaceBehindRemoteAnimation of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitati...
ASB-A-436580278
In initpkvmhypvcpu of pkvm.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-417987184
In verifyAndGetBypass of AppOpsService.java, there is a possible method for a malicious app to prevent dialing emergency services under limited circumstances due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is...
ASB-A-337775777
In multiple locations, there is a possible way to leak audio files across user profiles due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-436270922
In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-391895151
In disassociate of DisassociationProcessor.java, there is a possible way for an app to continue reading notifications when not associated to a companion device due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User...
ASB-A-409047487
Bulletin has no description...
ASB-A-429908205
Bulletin has no description...
ASB-A-404252173
In showDismissibleKeyguard of KeyguardService.java, there is a possible way to bypass app pinning due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-388860393
Bulletin has no description...
ASB-A-381274694
Bulletin has no description...
ASB-A-384996147
Bulletin has no description...
ASB-A-380302155
Bulletin has no description...
ASB-A-343440463
In validateAccountsInternal of AccountManagerService.java, there is a possible way to leak account credentials to a third party app due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...
ASB-A-359692772
Bulletin has no description...
ASB-A-339866012
Bulletin has no description...
ASB-A-332001819
Bulletin has no description...