ASB-A-168041375

In Scanner::LiteralBuffer::NewCapacity of scanner.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if an attacker can supply a malicious PAC file, with no additional execution privileges needed. User interaction is not needed for...

ASB-A-168050859

Bulletin has no description...

ASB-A-174749461

In various methods of WifiNetworkSuggestionsManager.java, there is a possible modification of suggested networks due to a missing permission check. This could lead to local escalation of privilege by a background user on the same device with no additional execution privileges needed. User...

ASB-A-162750025

Bulletin has no description...

ASB-A-162756908

Bulletin has no description...

ASB-A-175038160

Bulletin has no description...

ASB-A-175038625

Bulletin has no description...

ASB-A-174052148

In sdpcopyrawdata of sdpdiscovery.cc, there is a possible system compromise due to a double free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-168051733

Bulletin has no description...

ASB-A-168050860

Bulletin has no description...

ASB-A-168049956

Bulletin has no description...

ASB-A-168050346

Bulletin has no description...

ASB-A-170315126

In StopServicesAndLogViolations of reboot.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-172349026

Bulletin has no description...

ASB-A-168051035

Bulletin has no description...

ASB-A-168049957

Bulletin has no description...

ASB-A-168050276

Bulletin has no description...

ASB-A-168050345

Bulletin has no description...

ASB-A-160605782

Bulletin has no description...

ASB-A-168050578

Bulletin has no description...

ASB-A-168050239

Bulletin has no description...

ASB-A-175038288

Bulletin has no description...

ASB-A-176919394

In qtaguiduntag of xtqtaguid.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-168051051

Bulletin has no description...

ASB-A-168050025

Bulletin has no description...

ASB-A-160605529

Bulletin has no description...

ASB-A-162756604

Bulletin has no description...

ASB-A-168050240

Bulletin has no description...

ASB-A-160610106

In Builtins::GenerateArgumentsAdaptorTrampoline of builtins-arm.cc and related files, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is n...

ASB-A-158221622

In dorfc1035name of util.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when processing a malicious DNS server response with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-168051033

Bulletin has no description...

ASB-A-168917883

Bulletin has no description...

ASB-A-172841550

In onCreate of ChooseTypeAndAccountActivity.java, there is a possible way to learn the existence of an account, without permissions, due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for...

ASB-A-154015447

In PackageInstaller, there is a possible tapjacking attack due to an insecure default value. This could lead to local escalation of privilege and permissions with no additional execution privileges needed. User interaction is needed for exploitation...

ASB-A-172935267

In getContentProviderImpl of ActivityManagerService.java, there is a possible permission bypass due to non-restored binder identities. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-171221302

In onCreate of UninstallerActivity, there is a possible way to uninstall an all without informed user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...

ASB-A-163358811

In onTargetSelected of ResolverActivity.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

ASB-A-158219161

In onReceive of BluetoothPermissionRequest.java, there is a possible permissions bypass due to a mutable PendingIntent. This could lead to local escalation of privilege that bypasses a permission check, with User execution privileges needed. User interaction is not needed for exploitation...

ASB-A-172349044

Bulletin has no description...

ASB-A-168050602

Bulletin has no description...

ASB-A-160346309

In process of C2SoftHevcDec.cpp, there is a possible out of bounds write due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

ASB-A-172348729

Bulletin has no description...

ASB-A-168722706

Bulletin has no description...

ASB-A-168504491

In onCreate of BluetoothPermissionActivity.java, there is a possible permissions bypass due to a tapjacking overlay that obscures the phonebook permissions dialog when a Bluetooth device is connecting. This could lead to local escalation of privilege with User execution privileges needed. User...

ASB-A-161714839

Bulletin has no description...

ASB-A-161374239

Bulletin has no description...

ASB-A-172348990

Bulletin has no description...

ASB-A-156260178

In SystemSettingsValidators, there is a possible permanent denial of service due to missing bounds checks on UI settings. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation...

ASB-A-172348987

Bulletin has no description...

ASB-A-155287782

In PackageInstaller, there is a possible tapjacking attack due to an insecure default value. This could lead to local escalation of privilege and permissions with no additional execution privileges needed. User interaction is needed for exploitation...