ASB-A-324321147

In rebootRecoveryWithCommand of RecoverySystemService.java, there is a possible way to bypass a factory reset due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

ASB-A-349916584

Bulletin has no description...

ASB-A-337949672

In PVRSRVBridgeRGXKickTA3D2 of serverrgxta3dbridge.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-350500584

Bulletin has no description...

ASB-A-350500940

Bulletin has no description...

ASB-A-344620215

Bulletin has no description...

ASB-A-344620733

Bulletin has no description...

ASB-A-344620673

Bulletin has no description...

ASB-A-342490466

In multiple functions of afunix.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-344620630

Bulletin has no description...

ASB-A-327749022

In onCreate of SettingsHomepageActivity.java, there is a possible way to access the Settings app while the device is provisioning due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for...

ASB-A-344620292

Bulletin has no description...

ASB-A-344620238

Bulletin has no description...

ASB-A-261721900

In scheme of Uri.java, there is a possible way to craft a malformed Uri object due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-344620773

Bulletin has no description...

ASB-A-350535746

In DevmemIntPFNotify of devicememserver.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-329058967

In handleCreateConferenceComplete of ConnectionServiceWrapper.java, there is a possible way to reveal images across users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

ASB-A-344620519

Bulletin has no description...

ASB-A-346629290

Bulletin has no description...

ASB-A-349917018

Bulletin has no description...

ASB-A-300904123

In bindAndGetCallIdentification of CallScreeningServiceHelper.java, there is a possible way to maintain a while-in-use permission in the background due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is...

ASB-A-344620433

Bulletin has no description...

ASB-A-339866012

Bulletin has no description...

ASB-A-316373168

Bulletin has no description...

ASB-A-339042492

Bulletin has no description...

ASB-A-339043270

Bulletin has no description...

ASB-A-339043323

Bulletin has no description...

ASB-A-323926460

Bulletin has no description...

ASB-A-318683640

In setForceHideNonSystemOverlayWindowIfNeeded of WindowState.java, there is a possible way for message content to be visible on the screensaver while lock screen visibility settings are restricted by the user due to a logic error in the code. This could lead to local escalation of privilege with ...

ASB-A-339043500

Bulletin has no description...

ASB-A-339043053

Bulletin has no description...

ASB-A-336323279

In multiple functions of AppOpsService.java, there is a possible way for unprivileged apps to read their own restrictRead app-op states due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed...

ASB-A-335232744

In shouldWrite of OwnersData.java, there is a possible edge case that prevents MDM policies from being persisted due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-339043107

Bulletin has no description...

ASB-A-339043463

Bulletin has no description...

ASB-A-307288067

In attributeBytesBase64 and attributeBytesHex of BinaryXmlSerializer.java, there is a possible arbitrary XML injection due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-339869945

Bulletin has no description...

ASB-A-339043382

Bulletin has no description...

ASB-A-339043781

Bulletin has no description...

ASB-A-339043783

Bulletin has no description...

ASB-A-344434139

Bulletin has no description...

ASB-A-339043880

Bulletin has no description...

ASB-A-339043480

Bulletin has no description...

ASB-A-225880325

In removePermission of PermissionManagerServiceImpl.java, there is a possible way to obtain dangerous permissions without user consent due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed...

ASB-A-304772709

In onForegroundServiceButtonClicked of FooterActionsViewModel.kt, there is a possible way to disable the active VPN app from the lockscreen due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

ASB-A-339043727

Bulletin has no description...

ASB-A-283103220

In ensureSetPipAspectRatioQuotaTracker of ActivityClientController.java, there is a possible way to generate unmovable and undeletable pip windows due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is...

ASB-A-287184435

In sdpucompareuuidwithattr of sdputils.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-339043278

Bulletin has no description...

ASB-A-336490997

In multiple locations, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...