2720 matches found
ASB-A-498916138
In onActivityResult of AppWidgetConfigActivityProxy.java, there is a possible unauthorized URI permission grant due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-332883816
In onCreate of SetupPassthroughActivity.java, there is a possible way to launch arbitrary activity due to Intent redirection . This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...
ASB-A-496245370
Bulletin has no description...
ASB-A-418776187
In queryInternal of MmsSmsProvider.java, there is a possible way to access MMS/SMS data across user profiles due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-471796999
In screenArgsForPermissionCheckIfAny of MediaQueryForPreSelection.java, there is a possible way to access the images of other users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...
ASB-A-518601919
Bulletin has no description...
ASB-A-522376080
In stpropnciprocessstd of stpropncistd.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-501541998
In LimitRealloc of malloclimit.cpp, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-490286986
In onAttach of BiometricsSettingsBase.java, there is a possible authentication bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-509305913
Bulletin has no description...
ASB-A-515478004
Bulletin has no description...
ASB-A-503557185
In rwmfchandlereadop of rwmfc.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-483126552
In multiple locations, there is a possible improper encryption key validation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-517360524
Bulletin has no description...
ASB-A-477278752
In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-463364901
In multiple places, there is a possible permission bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...
ASB-A-505488204
Bulletin has no description...
ASB-A-518601920
Bulletin has no description...
ASB-A-518566453
Bulletin has no description...
ASB-A-508389055
In multiple functions of rwt3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-484928416
In getQueryBuilderInternal of MediaProvider.java, there is a possible way to retrieve location metadata due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-529876547
In importWrappedKey of KMKeymasterApplet.java, there is a possible way access keys that should be restricted due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-467765081
In importWrappedKey of KMKeymasterApplet.java, there is a possible way access keys that should be restricted due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-435737668
Bulletin has no description...
ASB-A-464812755
Bulletin has no description...
ASB-A-457246938
Bulletin has no description...
ASB-A-449733129
Bulletin has no description...
ASB-A-395640609
Bulletin has no description...
ASB-A-448253913
Bulletin has no description...
ASB-A-445785195
Bulletin has no description...
ASB-A-432751421
In multiple functions of eventpoll.c, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-445775439
Bulletin has no description...
ASB-A-432804305
In multiple locations, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-396331793
In multiple functions of afvsock.c, there is a possible way to cause a use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-425282960
In runposixcputimers of posix-cpu-timers.c, there is a possible way to trigger a use-after-free on a sigqueue object due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-395843768
Bulletin has no description...
ASB-A-383191754
Bulletin has no description...
ASB-A-308188337
Bulletin has no description...
ASB-A-259695958
In kbasememflagschange of malikbasememlinux.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-190404328
Bulletin has no description...
ASB-A-177911151
Bulletin has no description...
ASB-A-193070343
Bulletin has no description...
ASB-A-175626671
Bulletin has no description...
ASB-A-184561776
Bulletin has no description...
ASB-A-185196177
In memory management driver, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-178810049
Bulletin has no description...
ASB-A-168918332
Bulletin has no description...
ASB-A-147103610
Bulletin has no description...