2720 matches found
ASB-A-193070595
Bulletin has no description...
ASB-A-193071117
Bulletin has no description...
ASB-A-184622099
In qrtrrecvmsg of qrtr.c, there is a possible leak of kernel memory due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-175451844
In several functions of ttyio.c and related files, there is a possible way to corrupt kernel memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-180401789
In GPRS encryption support, there is a possible leak of GPRS key material due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-177910719
Bulletin has no description...
ASB-A-193069567
Bulletin has no description...
ASB-A-190402581
Bulletin has no description...
ASB-A-185178568
In VectorDrawable::VectorDrawable of VectorDrawable.java, there is a possible way to introduce a memory corruption due to sharing of not thread-safe objects. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
ASB-A-193070323
Bulletin has no description...
ASB-A-153358911
In multiple methods of AAudioService, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...
ASB-A-190404330
Bulletin has no description...
ASB-A-184561562
Bulletin has no description...
ASB-A-67013844
In loadLabel of PackageItemInfo.java, there is a possible way to DoS a device by having a long label in an app due to incorrect input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation...
ASB-A-190404329
Bulletin has no description...
ASB-A-177910901
Bulletin has no description...
ASB-A-169505929
In ibprctlset of bugs.c, there is a possible way to re-enable indirect branch speculation due to a permissions bypass. This could lead to local information disclosure via a Spectre v2 attack with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-175626624
Bulletin has no description...
ASB-A-192472262
In RWSetActivatedTagType of rwmain.cc, there is possible memory corruption due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-184561794
Bulletin has no description...
ASB-A-181682512
Bulletin has no description...
ASB-A-176752048
Bulletin has no description...
ASB-A-190404324
Bulletin has no description...
ASB-A-179039984
Bulletin has no description...
ASB-A-176752047
Bulletin has no description...
ASB-A-181682277
Bulletin has no description...
ASB-A-176751522
Bulletin has no description...
ASB-A-177457096
In lockAllProfileTasks of RootWindowContainer.java, there is a possible way to access the work profile without the profile PIN, after logging in. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-181682745
Bulletin has no description...
ASB-A-179289753
In sendBroadcastToInstaller of FirstScreenBroadcast.java, there is a possible activity launch due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-185398942
In runTraceIpcStop of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-176751523
Bulletin has no description...
ASB-A-181682438
Bulletin has no description...
ASB-A-184561795
Bulletin has no description...
ASB-A-190403734
Bulletin has no description...
ASB-A-184561643
Bulletin has no description...
ASB-A-190403706
Bulletin has no description...
ASB-A-173421434
In getSimSerialNumber of TelephonyManager.java, there is a possible way to read a trackable identifier due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation...
ASB-A-180422108
In onCreate of ConfirmConnectActivity.java, there is a possible pairing of untrusted Bluetooth devices due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...
ASB-A-179839665
In TouchInputMapper::sync of TouchInputMapper.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-191055353
In ParsedIntentInfo of ParsedIntentInfo.java, there is a possible parcel serialization/deserialization mismatch due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-190188264
In RGBtoBGR1portable of SkSwizzleropts.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-188913943
In ellipsize of Layout.java, there is a possible ANR due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation...
ASB-A-189392423
1188785118878711887891188792...
ASB-A-192535337
In system properties, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-182501529
Bulletin has no description...
ASB-A-190404961
Bulletin has no description...
ASB-A-181682124
Bulletin has no description...