{"items":[{"id":"CVE-2026-58873","published":"2026-11-02T20:31:02.552Z","updated":"2026-11-02T21:15:26.209Z","title":"In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission check. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android XR","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2026-58977","published":"2026-11-02T20:26:00.147Z","updated":"2026-11-04T04:56:06.961Z","title":"In is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2026-58930","published":"2026-11-02T20:21:14.949Z","updated":"2026-11-02T20:21:14.949Z","title":"An unprivileged application can exploit a lack of package/signature validation in SystemUI's `RemoteQCController` when resolving a hardcoded `content://` URI.…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":0.00134,"kevAdded":null},{"id":"CVE-2026-58927","published":"2026-11-02T20:21:13.927Z","updated":"2026-11-02T20:21:13.927Z","title":"The vulnerability is a Use-After-Free (UAF) in the EVS AIDL HAL, arising from a data race on an unsynchronized `std::weak_ptr` within…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2026-58926","published":"2026-11-02T20:21:12.920Z","updated":"2026-11-03T18:59:25.842Z","title":"A Use-After-Free (UAF) vulnerability exists in the EVS HAL, allowing a privileged client to free a `buffer_handle_t` while the producer thread is still using…","severity":"LOW","score":2.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00069,"kevAdded":null},{"id":"CVE-2026-58925","published":"2026-11-02T20:21:11.897Z","updated":"2026-11-02T20:21:11.897Z","title":"The report details a heap Use-After-Free (UAF) vulnerability within the `android.hardware.automotive.evs-default` HAL service, stemming from unsynchronized…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2026-58924","published":"2026-11-02T20:21:10.883Z","updated":"2026-11-02T20:21:10.883Z","title":"The vulnerability is a heap out-of-bounds read in the EVS HAL's `getStreamList()` method. An attacker can craft a `CameraDesc.metadata` byte array, which is…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2026-58915","published":"2026-11-02T20:21:09.862Z","updated":"2026-11-03T20:33:43.235Z","title":"A physical occupant on an Android Automotive OS (AAOS) Multi-User Multi-Display (MUMD) passenger display can view sensitive Heads-Up Notification (HUN) content…","severity":"MEDIUM","score":6.1,"vendor":"Google","product":"Android","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2026-49906","published":"2026-11-02T20:21:08.851Z","updated":"2026-11-03T15:23:50.715Z","title":"An unprivileged application can bypass the `android.car.permission.CAR_DISPLAY_IN_CLUSTER` permission by registering an activity with the…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00128,"kevAdded":null},{"id":"CVE-2026-49903","published":"2026-11-02T20:21:07.826Z","updated":"2026-11-02T20:21:07.826Z","title":"The `ClusterRenderingService.dump()` method, accessible to processes holding `android.permission.DUMP` and `android.permission.PACKAGE_USAGE_STATS`, acts as a…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":0.00144,"kevAdded":null},{"id":"CVE-2026-59048","published":"2026-11-02T19:55:14.970Z","updated":"2026-11-02T19:55:14.970Z","title":"In rb_cpu_init of trace.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00136,"kevAdded":null},{"id":"CVE-2026-59047","published":"2026-11-02T19:55:13.919Z","updated":"2026-11-03T20:14:38.241Z","title":"In multiple locations, there is a possible denial of service due to a logic error in the code. This could lead to local denial of service with no additional…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00078,"kevAdded":null},{"id":"CVE-2026-59046","published":"2026-11-02T19:55:12.892Z","updated":"2026-11-03T20:09:04.595Z","title":"In __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local denial…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2026-59045","published":"2026-11-02T19:55:11.873Z","updated":"2026-11-03T15:21:06.489Z","title":"In multiple locations, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2026-59044","published":"2026-11-02T19:55:10.869Z","updated":"2026-11-03T04:56:35.579Z","title":"In multiple locations, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2026-59043","published":"2026-11-02T19:55:09.866Z","updated":"2026-11-03T15:24:30.548Z","title":"In arm_lpae_split_blk_unmap of io-pgtable-arm-common.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of…","severity":"HIGH","score":7.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00075,"kevAdded":null},{"id":"CVE-2026-59042","published":"2026-11-02T19:55:08.840Z","updated":"2026-11-03T15:24:56.771Z","title":"In __pkvm_pages_to_ppages of mmu.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00085,"kevAdded":null},{"id":"CVE-2026-59031","published":"2026-11-02T19:55:07.835Z","updated":"2026-11-03T20:14:54.994Z","title":"In InputDispatcher::flushSensor of InputDispatcher.cpp, there is a possible denial of service due to a logic error in the code. This could lead to local denial…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null},{"id":"CVE-2026-59028","published":"2026-11-02T19:55:06.818Z","updated":"2026-11-03T04:56:27.400Z","title":"In resolveAidConflictLocked of RegisteredAidCache.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2026-59022","published":"2026-11-02T19:55:05.816Z","updated":"2026-11-02T19:55:05.816Z","title":"In multiple functions of MediaProvider.java, there is a possible permission bypass due to a logic error in the code. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00127,"kevAdded":null},{"id":"CVE-2026-59021","published":"2026-11-02T19:55:04.792Z","updated":"2026-11-03T20:21:25.050Z","title":"In multiple locations, there is a possible denial of service due to improper input validation. This could lead to local denial of service with User execution…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null},{"id":"CVE-2026-59020","published":"2026-11-02T19:55:03.775Z","updated":"2026-11-03T20:13:16.038Z","title":"In removeUserData of DevicePolicyManagerService.java, there is a possible denial of service due to a race condition. This could lead to local denial of service…","severity":"MEDIUM","score":5.9,"vendor":"Google","product":"Android","kev":false,"epss":0.0006,"kevAdded":null},{"id":"CVE-2026-59016","published":"2026-11-02T19:55:02.708Z","updated":"2026-11-04T04:56:10.876Z","title":"In sendAnomalyProfile of ProfilingService.java, there is a possible path traversal issue due to path traversal. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00086,"kevAdded":null},{"id":"CVE-2026-59015","published":"2026-11-02T19:55:01.697Z","updated":"2026-11-03T20:34:45.720Z","title":"In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00072,"kevAdded":null},{"id":"CVE-2026-59014","published":"2026-11-02T19:55:00.687Z","updated":"2026-11-04T04:56:23.058Z","title":"In multiple locations, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00077,"kevAdded":null},{"id":"CVE-2026-59012","published":"2026-11-02T19:54:59.686Z","updated":"2026-11-02T19:54:59.686Z","title":"In checkLastKnownCellIdAccessPermission of TelephonyPermissions.java, there is a possible permission bypass due to a missing permission check. This could lead…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00121,"kevAdded":null},{"id":"CVE-2026-59011","published":"2026-11-02T19:54:58.682Z","updated":"2026-11-02T19:54:58.682Z","title":"In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00127,"kevAdded":null},{"id":"CVE-2026-59010","published":"2026-11-02T19:54:57.687Z","updated":"2026-11-03T20:15:11.799Z","title":"In deserialize of legacy.rs, there is a possible denial of service due to a missing bounds check. This could lead to local denial of service with no additional…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null},{"id":"CVE-2026-59008","published":"2026-11-02T19:54:56.672Z","updated":"2026-11-03T20:15:30.606Z","title":"In setApplicationRestrictions of DevicePolicyManagerService.java, there is a possible denial of service due to resource exhaustion. This could lead to local…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null},{"id":"CVE-2026-59007","published":"2026-11-02T19:54:55.678Z","updated":"2026-11-03T20:18:48.284Z","title":"In decode_packed_entry_number of codebook.c, there is a possible out-of-bounds read due to a logic error in the code. This could lead to remote information…","severity":"MEDIUM","score":5.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00222,"kevAdded":null},{"id":"CVE-2026-59006","published":"2026-11-02T19:54:54.656Z","updated":"2026-11-03T20:43:34.655Z","title":"In getTouchOcclusionMode of WindowState.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local information…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null},{"id":"CVE-2026-59005","published":"2026-11-02T19:54:53.648Z","updated":"2026-11-04T04:56:10.072Z","title":"In insertInternal of MmsProvider.java, there is a possible multiuser isolation issue due to a missing permission check. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00075,"kevAdded":null},{"id":"CVE-2026-59004","published":"2026-11-02T19:54:52.641Z","updated":"2026-11-04T04:56:22.223Z","title":"In multiple locations, there is a possible permission bypass due to an uncaught exception. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00082,"kevAdded":null},{"id":"CVE-2026-59003","published":"2026-11-02T19:54:51.640Z","updated":"2026-11-03T20:44:06.231Z","title":"In getSubscriptionProperty of SubscriptionManagerService.java, there is a possible information disclosure due to a missing permission check. This could lead to…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00072,"kevAdded":null},{"id":"CVE-2026-59002","published":"2026-11-02T19:54:50.626Z","updated":"2026-11-02T19:54:50.626Z","title":"In handleMessage of UsbDeviceManager.java, there is a possible lock-screen bypass due to a logic error in the code. This could lead to physical information…","severity":"MEDIUM","score":4.6,"vendor":"Google","product":"Android","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2026-59001","published":"2026-11-02T19:54:49.611Z","updated":"2026-11-02T19:54:49.611Z","title":"In checkQueryPermission of TelephonyProvider.java, there is a possible permission bypass due to a logic error in the code. This could lead to local information…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":0.00127,"kevAdded":null},{"id":"CVE-2026-59000","published":"2026-11-02T19:54:48.593Z","updated":"2026-11-03T04:56:28.447Z","title":"In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2026-58997","published":"2026-11-02T19:54:47.598Z","updated":"2026-11-02T19:54:47.598Z","title":"In validateImageInfo of Bitmap.cpp, there is a possible out-of-bounds read due to a precondition check failure. This could lead to local information disclosure…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2026-58995","published":"2026-11-02T19:54:46.576Z","updated":"2026-11-04T04:56:21.432Z","title":"In getEntryFileName of ZipFileRO.cpp, there is a possible memory safety issue due to a heap buffer overflow. This could lead to local escalation of privilege…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null},{"id":"CVE-2026-58994","published":"2026-11-02T19:54:45.547Z","updated":"2026-11-04T04:56:09.277Z","title":"In multiple functions of NfcService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null},{"id":"CVE-2026-58990","published":"2026-11-02T19:54:44.531Z","updated":"2026-11-02T19:54:44.531Z","title":"In l2c_fcr_process_peer_cfg_req of l2c_fcr.cc, there is a possible memory safety issue due to an integer overflow. This could lead to remote information…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":0.00161,"kevAdded":null},{"id":"CVE-2026-58989","published":"2026-11-02T19:54:43.516Z","updated":"2026-11-04T04:56:20.612Z","title":"In setOemUnlockAllowedByUser of OemLockService.java, there is a possible way to bypass FRP due to a missing permission check. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null},{"id":"CVE-2026-58988","published":"2026-11-02T19:54:42.516Z","updated":"2026-11-03T20:35:22.784Z","title":"In isValid of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null},{"id":"CVE-2026-58986","published":"2026-11-02T19:54:41.503Z","updated":"2026-11-04T04:56:19.700Z","title":"In notifyPictureProfileHandleSelection of MediaQualityService.java, there is a possible permission bypass due to a missing permission check. This could lead to…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null},{"id":"CVE-2026-58985","published":"2026-11-02T19:54:40.505Z","updated":"2026-11-03T20:15:45.161Z","title":"In handleConnectInternal of RpcServerTrusty.cpp, there is a possible denial of service due to a logic error in the code. This could lead to local denial of…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null},{"id":"CVE-2026-58984","published":"2026-11-02T19:54:39.440Z","updated":"2026-11-03T04:56:36.399Z","title":"In multiple locations, there is a possible memory corruption due to a use-after-free. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00106,"kevAdded":null},{"id":"CVE-2026-58979","published":"2026-11-02T19:54:38.231Z","updated":"2026-11-04T04:56:18.902Z","title":"In canPresent of PresentationController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00086,"kevAdded":null},{"id":"CVE-2026-58978","published":"2026-11-02T19:54:37.215Z","updated":"2026-11-03T15:48:10.250Z","title":"In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to physical escalation of privilege with no…","severity":"MEDIUM","score":6.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2026-58976","published":"2026-11-02T19:54:36.205Z","updated":"2026-11-02T19:54:36.205Z","title":"In getSelectionBySubIds of ProviderUtil.java, there is a possible cross-user data leak due to a logic error in the code. This could lead to local information…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2026-58975","published":"2026-11-02T19:54:35.189Z","updated":"2026-11-04T04:56:18.100Z","title":"In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00077,"kevAdded":null},{"id":"CVE-2026-58974","published":"2026-11-02T19:54:34.180Z","updated":"2026-11-04T04:56:17.199Z","title":"In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null},{"id":"CVE-2026-58971","published":"2026-11-02T19:54:33.149Z","updated":"2026-11-02T19:54:33.149Z","title":"In _mupdf_get_hdr of wprint_mupdf.c, there is a possible out-of-bounds read due to an integer overflow. This could lead to local information disclosure with no…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2026-58970","published":"2026-11-02T19:54:32.126Z","updated":"2026-11-03T04:56:29.202Z","title":"In deliverResult of AppTimeTracker.java, there is a possible background activity launch due to a confused deputy. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2026-58969","published":"2026-11-02T19:54:31.107Z","updated":"2026-11-02T19:54:31.107Z","title":"In multiple functions of MediaQualityService.java, there is a possible permission bypass due to a missing permission check. This could lead to local…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":0.00121,"kevAdded":null},{"id":"CVE-2026-58968","published":"2026-11-02T19:54:30.106Z","updated":"2026-11-04T13:40:10.544Z","title":"In oapvd_vlc_metadata of oapv_vlc.c, there is a possible memory corruption due to a double free. This could lead to remote escalation of privilege with no…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00285,"kevAdded":null},{"id":"CVE-2026-58966","published":"2026-11-02T19:54:29.096Z","updated":"2026-11-04T04:56:14.625Z","title":"In multiple functions of hppsfilter.c, there is a possible out-of-bounds write due to a stack buffer overflow. This could lead to local escalation of privilege…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null},{"id":"CVE-2026-58965","published":"2026-11-02T19:54:28.094Z","updated":"2026-11-03T04:56:29.982Z","title":"In handleAudioEffectBroadcast of MusicFxHelper.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2026-58964","published":"2026-11-02T19:54:27.072Z","updated":"2026-11-04T04:56:07.726Z","title":"In checkDestination of SmsUsageMonitor.java, there is a possible permission bypass due to improper input validation. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00082,"kevAdded":null},{"id":"CVE-2026-58963","published":"2026-11-02T19:54:26.076Z","updated":"2026-11-02T19:54:26.076Z","title":"In multiple locations, there is a possible denial of service due to improper input validation. This could lead to remote denial of service with no additional…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":0.00161,"kevAdded":null},{"id":"CVE-2026-58962","published":"2026-11-02T19:54:25.071Z","updated":"2026-11-04T04:56:13.533Z","title":"In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible permission bypass due to a missing permission check. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null},{"id":"CVE-2026-58961","published":"2026-11-02T19:54:24.077Z","updated":"2026-11-04T13:42:38.393Z","title":"In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background activity launch due to a logic error in the code. This could lead…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00081,"kevAdded":null},{"id":"CVE-2026-58957","published":"2026-11-02T19:54:23.071Z","updated":"2026-11-03T04:56:26.630Z","title":"In resolveToHeavyWeightSwitcherIfNeeded of ActivityStarter.java, there is a possible background activity launch due to a confused deputy. This could lead to…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2026-58956","published":"2026-11-02T19:54:22.071Z","updated":"2026-11-04T04:56:06.116Z","title":"In modpowF4 of avb_rsa.c, there is a possible signature verification bypass due to a logic error in the code. This could lead to local escalation of privilege…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00086,"kevAdded":null},{"id":"CVE-2026-58955","published":"2026-11-02T19:54:21.056Z","updated":"2026-11-03T20:16:04.014Z","title":"In updateNotificationChannel of PreferencesHelper.java, there is a possible ui obfuscation issue due to a logic error in the code. This could lead to local…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null},{"id":"CVE-2026-58953","published":"2026-11-02T19:54:20.049Z","updated":"2026-11-02T19:54:20.049Z","title":"In dec_vlc_read of oapv_vlc.c, there is a possible out-of-bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":0.00163,"kevAdded":null},{"id":"CVE-2026-58951","published":"2026-11-02T19:54:19.029Z","updated":"2026-11-02T19:54:19.029Z","title":"In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":0.00121,"kevAdded":null},{"id":"CVE-2026-58949","published":"2026-11-02T19:54:18.025Z","updated":"2026-11-04T17:54:23.779Z","title":"In parseMetaData of StagefrightMetadataRetriever.cpp, there is a possible denial of service due to a stack buffer overflow. This could lead to remote denial of…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00276,"kevAdded":null},{"id":"CVE-2026-58946","published":"2026-11-02T19:54:17.003Z","updated":"2026-11-03T04:56:24.979Z","title":"In navigateUpTo of ActivityClientController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2026-58945","published":"2026-11-02T19:54:15.999Z","updated":"2026-11-02T19:54:15.999Z","title":"In multiple locations, there is a possible side channel information leak due to improperly used crypto. This could lead to paired device information disclosure…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2026-58944","published":"2026-11-02T19:54:14.972Z","updated":"2026-11-03T04:56:24.223Z","title":"In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background application launch (bal) issue due to a confused deputy. This could…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2026-58943","published":"2026-11-02T19:54:13.976Z","updated":"2026-11-03T04:56:30.770Z","title":"In run of AddAccountSettings.java, there is a possible background activity launch due to a confused deputy. This could lead to local escalation of privilege…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2026-58942","published":"2026-11-02T19:54:12.961Z","updated":"2026-11-03T04:56:37.152Z","title":"In do_fault_around of memory.c, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2026-58938","published":"2026-11-02T19:54:11.944Z","updated":"2026-11-02T19:54:11.944Z","title":"In parseChunk of MPEG4Extractor.cpp, there is a possible denial of service due to improper input validation. This could lead to remote denial of service with…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":0.00161,"kevAdded":null},{"id":"CVE-2026-58937","published":"2026-11-02T19:54:10.926Z","updated":"2026-11-03T20:21:25.181Z","title":"In multiple locations, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null},{"id":"CVE-2026-58936","published":"2026-11-02T19:54:09.925Z","updated":"2026-11-04T13:32:45.155Z","title":"In png_set_tRNS of pngset.c, there is a possible memory corruption due to a use-after-free. This could lead to remote code execution with no additional…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00306,"kevAdded":null},{"id":"CVE-2026-58934","published":"2026-11-02T19:54:08.906Z","updated":"2026-11-03T04:56:23.437Z","title":"In prepareWindowToDisplayDuringRelayout of WindowState.java, there is a possible permission bypass due to a logic error in the code. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2026-58933","published":"2026-11-02T19:54:07.883Z","updated":"2026-11-03T20:18:16.458Z","title":"In process of C2SoftApvDec.cpp, there is a possible out-of-bounds read due to a logic error in the code. This could lead to remote information disclosure with…","severity":"MEDIUM","score":5.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00222,"kevAdded":null},{"id":"CVE-2026-58886","published":"2026-11-02T19:54:06.870Z","updated":"2026-11-05T18:59:19.941Z","title":"In updateInputWindows of InputMonitor.java, there is a possible tapjacking issue due to a logic error in the code. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00148,"kevAdded":null},{"id":"CVE-2026-58885","published":"2026-11-02T19:54:05.863Z","updated":"2026-11-03T04:56:31.557Z","title":"In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2026-58884","published":"2026-11-02T19:54:04.844Z","updated":"2026-11-03T04:56:32.358Z","title":"In startTetheredHotspotRequest of WifiServiceImpl.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2026-58883","published":"2026-11-02T19:54:03.835Z","updated":"2026-11-02T19:54:03.835Z","title":"In multiple locations, there is a possible denial of service due to a logic error in the code. This could lead to remote denial of service with no additional…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":0.00168,"kevAdded":null},{"id":"CVE-2026-58882","published":"2026-11-02T19:54:02.807Z","updated":"2026-11-02T19:54:02.807Z","title":"In decodeWapPdu of WapPushOverSms.java, there is a possible out of bounds read due to an integer overflow. This could lead to a remote denial of service with…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":0.00188,"kevAdded":null},{"id":"CVE-2026-58879","published":"2026-11-02T19:54:01.812Z","updated":"2026-11-04T04:56:05.341Z","title":"In descramble of multiple files, there is a possible out-of-bounds write due to improper casting. This could lead to local escalation of privilege with no…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00077,"kevAdded":null},{"id":"CVE-2026-58877","published":"2026-11-02T19:54:00.796Z","updated":"2026-11-03T20:36:51.940Z","title":"In checkNearbyDevicesPermission of WifiP2pServiceImpl.java, there is a possible permission bypass due to a confused deputy. This could lead to local…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00076,"kevAdded":null},{"id":"CVE-2026-58876","published":"2026-11-02T19:53:59.795Z","updated":"2026-11-04T13:41:23.225Z","title":"In multiple locations, there is a possible memory safety issue due to a use-after-free. This could lead to remote code execution with no additional execution…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00306,"kevAdded":null},{"id":"CVE-2026-58875","published":"2026-11-02T19:53:58.780Z","updated":"2026-11-03T20:21:25.312Z","title":"In multiple locations, there is a possible denial of service due to improper input validation. This could lead to local denial of service with no additional…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null},{"id":"CVE-2026-58871","published":"2026-11-02T19:53:57.779Z","updated":"2026-11-04T04:56:04.478Z","title":"In set_type4_frame_classifier of sta_iface.cpp, there is a possible memory safety issue due to a heap buffer overflow. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null},{"id":"CVE-2026-58870","published":"2026-11-02T19:53:56.762Z","updated":"2026-11-02T19:53:56.762Z","title":"In onPersistentGroupsChanged of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check. This could lead to local…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":0.00121,"kevAdded":null},{"id":"CVE-2026-58868","published":"2026-11-02T19:53:55.761Z","updated":"2026-11-05T19:15:32.162Z","title":"In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00211,"kevAdded":null},{"id":"CVE-2026-58867","published":"2026-11-02T19:53:54.748Z","updated":"2026-11-04T04:56:03.671Z","title":"In getMessenger of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null},{"id":"CVE-2026-58866","published":"2026-11-02T19:53:53.745Z","updated":"2026-11-03T04:56:21.862Z","title":"In setAccessibilityWindowAttributes of AccessibilityWindowManager.java, there is a possible untrusted/misleading UI issue due to a missing permission check.…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2026-58857","published":"2026-11-02T19:53:52.716Z","updated":"2026-11-05T18:59:40.509Z","title":"In decrypt of CryptoHalHidl.cpp, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional…","severity":"HIGH","score":8.1,"vendor":"Google","product":"Android","kev":false,"epss":0.00208,"kevAdded":null},{"id":"CVE-2026-58853","published":"2026-11-02T19:53:51.705Z","updated":"2026-11-03T22:13:29.275Z","title":"In multiple functions of ipphelper.c, there is a possible stack bugger overflow due to a missing bounds check. This could lead to remote denial of service with…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00355,"kevAdded":null},{"id":"CVE-2026-58847","published":"2026-11-02T19:53:50.693Z","updated":"2026-11-03T15:25:58.972Z","title":"In kvm_vfio_pviommu_attach of vfio.c, there is a possible double free due to a logic error in the code. This could lead to local escalation of privilege with…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2026-58845","published":"2026-11-02T19:53:49.583Z","updated":"2026-11-03T15:26:25.265Z","title":"In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2026-58844","published":"2026-11-02T19:53:48.564Z","updated":"2026-11-03T15:27:05.777Z","title":"In multiple locations, there is a possible out of bounds read/write due to an incorrect bounds check. This could lead to local escalation of privilege with no…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2026-58838","published":"2026-11-02T19:53:47.583Z","updated":"2026-11-04T18:00:29.843Z","title":"In multiple functions of Helpers.java, there is a possible information disclosure due to improper input validation. This could lead to local information…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null},{"id":"CVE-2026-58837","published":"2026-11-02T19:53:46.574Z","updated":"2026-11-03T04:56:20.318Z","title":"In multiple locations, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2026-58836","published":"2026-11-02T19:53:45.561Z","updated":"2026-11-03T04:56:19.530Z","title":"In handlePackagePostInstall of InstallPackageHelper.java, there is a possible Enhanced Confirmation Mode (ECM) bypass vulnerability that allows a sideloaded…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2026-58829","published":"2026-11-02T19:53:44.559Z","updated":"2026-11-03T04:56:37.964Z","title":"In fuse_backing_mmap of backing.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2026-58828","published":"2026-11-02T19:53:43.553Z","updated":"2026-11-03T04:56:38.757Z","title":"In multiple functions of base.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00179,"kevAdded":null},{"id":"CVE-2026-58827","published":"2026-11-02T19:53:42.548Z","updated":"2026-11-03T04:56:39.517Z","title":"In multiple functions of dma-buf.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2026-58826","published":"2026-11-02T19:53:41.509Z","updated":"2026-11-03T04:56:41.036Z","title":"In ksys_unshare of fork.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00179,"kevAdded":null},{"id":"CVE-2026-58825","published":"2026-11-02T19:53:40.443Z","updated":"2026-11-03T04:56:42.077Z","title":"In multiple functions of fork.c, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2026-58824","published":"2026-11-02T19:53:39.431Z","updated":"2026-11-03T15:28:09.647Z","title":"In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2026-58821","published":"2026-11-02T19:53:38.418Z","updated":"2026-11-03T20:16:23.309Z","title":"In multiple functions of SearchRequestDatabaseUtil.java, there is a possible way to access protected data due to SQL injection. This could lead to local denial…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2026-58817","published":"2026-11-02T19:53:36.244Z","updated":"2026-11-03T20:21:25.443Z","title":"In parseKnownActivityEmbeddingCerts of ParsingUtils.java, there is a possible permanent denial of service due to improper input validation. This could lead to…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null},{"id":"CVE-2026-58814","published":"2026-11-02T19:53:35.219Z","updated":"2026-11-04T17:59:44.753Z","title":"In parseContentType of PduParser.java, there is a possible denial of service due to an integer overflow. This could lead to remote denial of service with no…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.0028,"kevAdded":null},{"id":"CVE-2026-55292","published":"2026-11-02T19:53:34.198Z","updated":"2026-11-04T17:59:12.269Z","title":"In rw_ci_data_cback of rw_ci.cc, there is a possible memory safety issue due to integer underflow. This could lead to remote information disclosure with no…","severity":"MEDIUM","score":5.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00221,"kevAdded":null},{"id":"CVE-2026-55289","published":"2026-11-02T19:53:33.194Z","updated":"2026-11-03T04:56:33.155Z","title":"In multiple functions in multiple locations, there is a possible execution of sensitive USSD codes due to a confused deputy. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2026-55288","published":"2026-11-02T19:53:32.189Z","updated":"2026-11-03T18:44:06.296Z","title":"In validEfCfis of SIMRecords.java, there is a possible way to cause a denial of service due to an uncaught exception. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00077,"kevAdded":null},{"id":"CVE-2026-55287","published":"2026-11-02T19:53:31.185Z","updated":"2026-11-03T04:56:18.698Z","title":"In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to trick the user into granting account credentials due to misleading or…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00099,"kevAdded":null},{"id":"CVE-2026-55283","published":"2026-11-02T19:53:30.160Z","updated":"2026-11-03T04:56:42.877Z","title":"In multiple locations, there is a possible memory safety issue due to a use-after-free. This could lead to remote escalation of privilege with no additional…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.0016,"kevAdded":null},{"id":"CVE-2026-55275","published":"2026-11-02T19:53:29.148Z","updated":"2026-11-03T04:56:43.638Z","title":"In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote escalation of privilege with no additional…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.0016,"kevAdded":null},{"id":"CVE-2026-55272","published":"2026-11-02T19:53:28.115Z","updated":"2026-11-03T20:21:25.572Z","title":"In loadDescription of DeviceAdminAdd.java, there is a possible denial of service due to improper input validation. This could lead to local denial of service…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2026-55271","published":"2026-11-02T19:53:27.111Z","updated":"2026-11-03T04:56:15.538Z","title":"In forwardToPreferredActionPickHandler of ContactsPickerActivity.kt, there is a possible intent redirection due to a confused deputy. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2026-55264","published":"2026-11-02T19:53:26.090Z","updated":"2026-11-03T20:37:05.186Z","title":"In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible information leak due to a confused deputy. This could lead to local…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00072,"kevAdded":null},{"id":"CVE-2026-55263","published":"2026-11-02T19:53:25.067Z","updated":"2026-11-04T04:56:01.639Z","title":"In multiple functions of AllowBindAppWidgetActivity.java, there is a possible misunderstanding of reject/consent actions due to misleading or insufficient UI.…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00077,"kevAdded":null},{"id":"CVE-2026-55262","published":"2026-11-02T19:53:24.053Z","updated":"2026-11-03T04:56:48.199Z","title":"In setNotificationListenerAccessGrantedForUserInternal of NotificationManagerService.java, there is a possible policy desynchronization due to improper input…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00099,"kevAdded":null},{"id":"CVE-2026-55261","published":"2026-11-02T19:53:23.051Z","updated":"2026-11-04T04:56:00.701Z","title":"In nfa_t4tnfcee_store_rx_buf of nfa_nfcee_act.cc, there is a possible way to achieve code execution due to a missing permission check. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00075,"kevAdded":null},{"id":"CVE-2026-55257","published":"2026-11-02T19:53:22.010Z","updated":"2026-11-03T04:56:14.637Z","title":"In UsbDialogHelper of UsbDialogHelper.java, there is a possible UI confusion due to misleading or insufficient UI. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00099,"kevAdded":null},{"id":"CVE-2026-49935","published":"2026-11-02T19:53:20.997Z","updated":"2026-11-03T20:38:12.385Z","title":"In getXmlFileNameForUser of LocaleManagerService.java, there is a possible permission bypass due to a confusable path traversal. This could lead to local…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00112,"kevAdded":null},{"id":"CVE-2026-49934","published":"2026-11-02T19:53:19.976Z","updated":"2026-11-04T04:55:59.717Z","title":"In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper input validation. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00076,"kevAdded":null},{"id":"CVE-2026-49931","published":"2026-11-02T19:53:15.500Z","updated":"2026-11-03T04:56:33.940Z","title":"In onActivityResult in multiple locations, there is a possible contact leak from protected profile due to a confused deputy. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2026-49924","published":"2026-11-02T19:53:14.294Z","updated":"2026-11-03T20:16:43.647Z","title":"In ShortcutInfo of ShortcutInfo.java, there is a possible way to crash the launcher via unauthorized shortcuts due to resource exhaustion. This could lead to…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null},{"id":"CVE-2026-49923","published":"2026-11-02T19:53:13.253Z","updated":"2026-11-03T04:56:13.086Z","title":"In onResult of AccountManagerService.java, there is a possible untrusted/misleading UI issue due to a logic error in the code. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2026-49922","published":"2026-11-02T19:53:12.211Z","updated":"2026-11-03T04:56:34.716Z","title":"In queryRemoteConnectionServices of ConnectionServiceWrapper.java, there is a possible permission bypass due to a confused deputy. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2026-49912","published":"2026-11-02T19:53:11.174Z","updated":"2026-11-04T17:58:40.644Z","title":"In multiple functions of MediaCarouselController.kt, there is a possible way for media to show up after disablement due to a logic error in the code. This…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00078,"kevAdded":null},{"id":"CVE-2026-45514","published":"2026-11-02T19:53:10.139Z","updated":"2026-11-03T04:56:10.738Z","title":"In multiple functions of SaveUi.java, there is a possible bypass of package installation requirements due to a logic error in the code. This could lead to…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2026-28665","published":"2026-11-02T19:53:09.105Z","updated":"2026-11-04T04:55:58.934Z","title":"In onCreate of SettingsApplication.java, there is a possible cross-profile consent dialog label injection due to improper input validation. This could lead to…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2026-28645","published":"2026-11-02T19:53:08.064Z","updated":"2026-11-02T20:14:58.061Z","title":"In onStrongAuthRequiredChanged of UsbService.java, there is a possible unauthenticated enabling of USB data due to a logic error in the code. This could lead…","severity":"MEDIUM","score":6.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00135,"kevAdded":null},{"id":"CVE-2026-28643","published":"2026-11-02T19:53:07.037Z","updated":"2026-11-03T20:17:02.653Z","title":"In multiple locations, there is a possible denial of service due to a missing permission check. This could lead to local denial of service with no additional…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null},{"id":"CVE-2026-28632","published":"2026-11-02T19:53:05.999Z","updated":"2026-11-04T17:57:20.226Z","title":"In multiple locations, there is a possible way to share files across profiles due to a logic error in the code. This could lead to local information disclosure…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00078,"kevAdded":null},{"id":"CVE-2026-28621","published":"2026-11-02T19:53:04.987Z","updated":"2026-11-02T19:53:04.987Z","title":"In getRingtone of RingtoneFactory.java, there is a possible unprivileged access risk due to a missing permission check. This could lead to local information…","severity":"UNKNOWN","score":null,"vendor":"Google","product":"Android","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2026-28597","published":"2026-11-02T19:53:03.955Z","updated":"2026-11-03T04:56:09.961Z","title":"In writeGrantedUriPermissions of UriGrantsManagerService.java, there is a possible permission bypass due to improper input validation. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2026-28588","published":"2026-11-02T19:53:02.890Z","updated":"2026-11-03T04:56:09.180Z","title":"In shouldBlockDirectoryFromTree of ExternalStorageProvider.java, there is a possible way to access protected data due to a logic error in the code. This could…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2026-0053","published":"2026-11-02T19:52:57.757Z","updated":"2026-11-04T04:55:58.119Z","title":"In multiple locations, there is a possible method for a primary user to disable secure nfc on other full users due to insufficient isolation between Android…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00075,"kevAdded":null},{"id":"CVE-2025-26433","published":"2026-11-02T19:52:54.690Z","updated":"2026-11-04T13:42:17.409Z","title":"In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00077,"kevAdded":null},{"id":"CVE-2025-22436","published":"2026-11-02T19:52:51.620Z","updated":"2026-11-04T04:55:35.922Z","title":"In multiple locations, there is a possible way to trick a user into disclosing Autofill contents due to a tapjacking/overlay attack. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2026-28648","published":"2026-10-05T18:39:22.949Z","updated":"2026-10-06T13:05:40.016Z","title":"In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00068,"kevAdded":null},{"id":"CVE-2026-28647","published":"2026-10-05T18:39:21.941Z","updated":"2026-10-06T13:06:16.719Z","title":"In updateState of DeviceAdminAppsPreferenceController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00071,"kevAdded":null},{"id":"CVE-2026-28641","published":"2026-10-05T18:39:20.912Z","updated":"2026-10-06T13:06:44.167Z","title":"In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.java, there is a possible permission bypass due to a logic error in the code.…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00071,"kevAdded":null},{"id":"CVE-2026-28640","published":"2026-10-05T18:39:19.906Z","updated":"2026-10-06T13:07:19.770Z","title":"In checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java, there is a possible permission bypass due to improper input validation. This…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null},{"id":"CVE-2026-28625","published":"2026-10-05T18:39:18.865Z","updated":"2026-10-06T13:07:47.688Z","title":"In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00071,"kevAdded":null},{"id":"CVE-2026-58880","published":"2026-10-05T18:24:06.623Z","updated":"2026-10-06T03:56:05.218Z","title":"In handle_app_val_response of btif_rc.cc, there is a possible way to achieve code execution due to a race condition. This could lead to local escalation of…","severity":"HIGH","score":7,"vendor":"Google","product":"Android","kev":false,"epss":0.00071,"kevAdded":null},{"id":"CVE-2026-58865","published":"2026-10-05T18:24:05.594Z","updated":"2026-10-05T18:58:29.124Z","title":"In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check. This could lead to remote denial of…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00223,"kevAdded":null},{"id":"CVE-2026-58859","published":"2026-10-05T18:24:04.540Z","updated":"2026-10-06T03:56:11.614Z","title":"In multiple places, there is a possible denial of service due to an uncaught exception. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00068,"kevAdded":null},{"id":"CVE-2026-58856","published":"2026-10-05T18:24:03.500Z","updated":"2026-10-05T19:09:54.137Z","title":"In returnOutputBufferLocked of DeprecatedCamera3StreamSplitter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00064,"kevAdded":null},{"id":"CVE-2026-58854","published":"2026-10-05T18:24:02.477Z","updated":"2026-10-06T03:56:00.735Z","title":"In multiple locations, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00068,"kevAdded":null},{"id":"CVE-2026-58841","published":"2026-10-05T18:24:01.457Z","updated":"2026-10-06T03:55:59.753Z","title":"In multiple functions of VirtualAudioControllerTest.java, there is a possible permission bypass due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00066,"kevAdded":null},{"id":"CVE-2026-58835","published":"2026-10-05T18:24:00.435Z","updated":"2026-10-06T03:56:04.439Z","title":"In cfg2prop of btif_storage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00243,"kevAdded":null},{"id":"CVE-2026-58834","published":"2026-10-05T18:23:59.371Z","updated":"2026-10-05T19:10:40.464Z","title":"In setPermissionGrantState of DevicePolicyManagerService.java, there is a possible persistent denial of service due to improper input validation. This could…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00063,"kevAdded":null},{"id":"CVE-2026-58815","published":"2026-10-05T18:23:58.338Z","updated":"2026-10-06T03:55:59.053Z","title":"In multiple locations, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00073,"kevAdded":null},{"id":"CVE-2026-55286","published":"2026-10-05T18:23:57.283Z","updated":"2026-10-06T03:56:12.431Z","title":"In stpropnci_process of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00073,"kevAdded":null},{"id":"CVE-2026-55280","published":"2026-10-05T18:23:56.233Z","updated":"2026-10-06T03:56:03.221Z","title":"In multiple locations, there is a possible out-of-bounds write due to uninitialized data. This could lead to remote escalation of privilege with no additional…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00231,"kevAdded":null},{"id":"CVE-2026-55270","published":"2026-10-05T18:23:55.211Z","updated":"2026-10-06T03:55:58.346Z","title":"In dialInternal in multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00068,"kevAdded":null},{"id":"CVE-2026-55269","published":"2026-10-05T18:23:54.200Z","updated":"2026-10-06T03:56:01.873Z","title":"In FilterCapturedPacket of snoop_logger.cc, there is a possible memory safety issue due to improper input validation. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00073,"kevAdded":null},{"id":"CVE-2026-55266","published":"2026-10-05T18:23:53.194Z","updated":"2026-10-06T03:56:13.914Z","title":"In qsort of libufdt_sysdeps_vendor.c, there is a possible out-of-bounds write due to resource exhaustion. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00073,"kevAdded":null},{"id":"CVE-2026-55265","published":"2026-10-05T18:23:52.133Z","updated":"2026-10-05T19:39:37.332Z","title":"In multiple functions of PduParser.java, there is a possible out of bounds read due to a missing bounds check. This could lead to a remote denial of service…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00253,"kevAdded":null},{"id":"CVE-2026-49937","published":"2026-10-05T18:23:51.100Z","updated":"2026-10-06T03:56:13.210Z","title":"In multiple functions of MessageQueueBase.h, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00073,"kevAdded":null},{"id":"CVE-2026-49933","published":"2026-10-05T18:23:50.070Z","updated":"2026-10-06T03:56:07.318Z","title":"In handle_le_monitor_device_event of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitialized pointer…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00073,"kevAdded":null},{"id":"CVE-2026-49885","published":"2026-10-05T18:23:49.023Z","updated":"2026-10-06T03:56:14.694Z","title":"In rw_t4t_update_file of rw_t4t.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00073,"kevAdded":null},{"id":"CVE-2026-49880","published":"2026-10-05T18:23:47.965Z","updated":"2026-10-06T21:31:04.828Z","title":"In multiple functions of nfa_nfcee_act.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00073,"kevAdded":null},{"id":"CVE-2026-49878","published":"2026-10-05T18:23:46.958Z","updated":"2026-10-06T03:56:09.436Z","title":"In wpas_handle_robust_av_scs_recv_action of robust_av.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote…","severity":"HIGH","score":7.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00288,"kevAdded":null},{"id":"CVE-2026-45524","published":"2026-10-05T18:23:45.941Z","updated":"2026-10-06T03:56:16.357Z","title":"In isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due to a missing permission check. This could lead to local escalation of privilege…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00075,"kevAdded":null},{"id":"CVE-2026-28667","published":"2026-10-05T18:23:43.678Z","updated":"2026-10-05T20:55:27.916Z","title":"In multiple functions of rw_t5t.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.0007,"kevAdded":null},{"id":"CVE-2026-28659","published":"2026-09-08T19:20:33.261Z","updated":"2026-10-05T19:01:49.486Z","title":"In MicroXR Blobstore, there is a possible way to access other app's files due to a missing permission check. This could lead to local escalation of privilege…","severity":"CRITICAL","score":10,"vendor":"Google","product":"Android XR","kev":false,"epss":0.00191,"kevAdded":null},{"id":"CVE-2026-49883","published":"2026-09-08T19:10:22.006Z","updated":"2026-09-10T03:57:32.795Z","title":"In checkReadPermission of PermissionsManager.java, there is a possible way to monitor sensitive device state data due to a missing permission check. This could…","severity":"CRITICAL","score":10,"vendor":"Google","product":"Android Wear","kev":false,"epss":0.00174,"kevAdded":null},{"id":"CVE-2026-58941","published":"2026-09-08T18:06:08.140Z","updated":"2026-09-08T21:02:06.884Z","title":"In multiple functions of iommu.c, there is a possible out of bounds read/write due to improper input validation. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2026-58874","published":"2026-09-08T18:06:07.072Z","updated":"2026-09-08T21:06:55.899Z","title":"In multiple functions of SmsController.java, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00088,"kevAdded":null},{"id":"CVE-2026-58848","published":"2026-09-08T18:06:05.999Z","updated":"2026-09-08T20:55:11.786Z","title":"In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition. This could lead to local escalation of privilege…","severity":"HIGH","score":7,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2026-58846","published":"2026-09-08T18:06:04.930Z","updated":"2026-09-08T20:53:31.165Z","title":"In kvm_iommu_map_sg of iommu.c, there is a possible use after free due to a missing permission check. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2026-58839","published":"2026-09-08T18:06:03.849Z","updated":"2026-09-08T20:50:43.931Z","title":"In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2026-58823","published":"2026-09-08T18:06:02.788Z","updated":"2026-09-08T20:49:58.290Z","title":"In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2026-58822","published":"2026-09-08T18:06:01.728Z","updated":"2026-09-08T20:45:55.975Z","title":"In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting. This could lead to remote code execution with no…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00382,"kevAdded":null},{"id":"CVE-2026-58820","published":"2026-09-08T18:06:00.665Z","updated":"2026-09-09T13:14:12.699Z","title":"In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2026-55294","published":"2026-09-08T18:05:59.601Z","updated":"2026-09-08T20:33:38.875Z","title":"In ihevcd_get_tu_data_size of ihevcd_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2026-55290","published":"2026-09-08T18:05:58.527Z","updated":"2026-09-10T15:41:06.014Z","title":"In setTo of ResourceTypes.cpp, there is a possible out-of-bounds heap read due to a missing bounds check. This could lead to local information disclosure with…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00088,"kevAdded":null},{"id":"CVE-2026-55285","published":"2026-09-08T18:05:57.441Z","updated":"2026-09-08T20:32:09.886Z","title":"In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2026-55277","published":"2026-09-08T18:05:56.391Z","updated":"2026-09-08T20:24:18.849Z","title":"In checkUiccListenConfigNeeded of RoutingManager.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote…","severity":"HIGH","score":8,"vendor":"Google","product":"Android","kev":false,"epss":0.00168,"kevAdded":null},{"id":"CVE-2026-55273","published":"2026-09-08T18:05:55.342Z","updated":"2026-09-08T19:36:46.603Z","title":"In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improper input validation. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2026-55256","published":"2026-09-08T18:05:54.277Z","updated":"2026-09-10T15:40:17.859Z","title":"In parsePartHeaders of multiple files, there is a possible persistent denial of service due to improper input validation. This could lead to remote denial of…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00331,"kevAdded":null},{"id":"CVE-2026-49932","published":"2026-09-08T18:05:53.219Z","updated":"2026-09-08T20:17:57.329Z","title":"In parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2026-49927","published":"2026-09-08T18:05:52.150Z","updated":"2026-09-08T20:15:09.182Z","title":"In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2026-49921","published":"2026-09-08T18:05:51.095Z","updated":"2026-09-08T19:58:10.554Z","title":"In multiple locations, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00386,"kevAdded":null},{"id":"CVE-2026-49919","published":"2026-09-08T18:05:50.012Z","updated":"2026-09-10T13:32:42.492Z","title":"In tt_face_colr_blend_layer of ttcolr.c, there is a possible remote code execution due to an integer overflow. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00099,"kevAdded":null},{"id":"CVE-2026-49918","published":"2026-09-08T18:05:48.941Z","updated":"2026-09-10T13:33:34.740Z","title":"In multiple functions, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2026-49895","published":"2026-09-08T18:05:47.873Z","updated":"2026-09-10T15:41:33.347Z","title":"In get_eht_operation_channel_width of ieee802_11_common.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote…","severity":"LOW","score":3.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00126,"kevAdded":null},{"id":"CVE-2026-49887","published":"2026-09-08T18:05:46.806Z","updated":"2026-09-10T13:34:28.953Z","title":"In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2026-49884","published":"2026-09-08T18:05:45.747Z","updated":"2026-09-10T13:35:33.331Z","title":"In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2026-49882","published":"2026-09-08T18:05:44.662Z","updated":"2026-09-10T13:37:16.558Z","title":"In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00375,"kevAdded":null},{"id":"CVE-2026-49881","published":"2026-09-08T18:05:43.593Z","updated":"2026-09-10T13:38:02.586Z","title":"In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2026-49879","published":"2026-09-08T18:05:42.510Z","updated":"2026-09-10T13:38:38.458Z","title":"In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00372,"kevAdded":null},{"id":"CVE-2026-45531","published":"2026-09-08T18:05:41.451Z","updated":"2026-09-10T14:03:01.260Z","title":"In read_boot_region of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2026-45528","published":"2026-09-08T18:05:40.385Z","updated":"2026-09-10T14:31:57.176Z","title":"In getManageSpaceActivityIntent of StorageManagerService.java, there is a possible LaunchAnyWhere chain due to an unsafe PendingIntent. This could lead to…","severity":"HIGH","score":7.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2026-45527","published":"2026-09-08T18:05:39.321Z","updated":"2026-09-10T15:42:07.599Z","title":"In convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible way to cause a temporary denial of service due to an integer overflow. This could…","severity":"MEDIUM","score":4.3,"vendor":"Google","product":"Android","kev":false,"epss":0.0031,"kevAdded":null},{"id":"CVE-2026-45525","published":"2026-09-08T18:05:38.139Z","updated":"2026-09-10T15:42:37.243Z","title":"In multiple locations, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2026-45521","published":"2026-09-08T18:05:37.046Z","updated":"2026-09-10T15:43:08.543Z","title":"In openFile of AppFuseBridge.java, there is a possible information disclosure due to a missing permission check. This could lead to local information…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00088,"kevAdded":null},{"id":"CVE-2026-45520","published":"2026-09-08T18:05:35.964Z","updated":"2026-09-10T14:10:12.854Z","title":"In onAttach of BiometricsSettingsBase.java, there is a possible authentication bypass due to a confused deputy. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2026-45519","published":"2026-09-08T18:05:34.899Z","updated":"2026-09-10T16:13:13.922Z","title":"In screenArgsForPermissionCheckIfAny of multiple locations there is a possible risk of unauthorized access due to a confused deputy. This could lead to local…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2026-45515","published":"2026-09-08T18:05:33.824Z","updated":"2026-09-10T14:10:40.323Z","title":"In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2026-28671","published":"2026-09-08T18:05:32.762Z","updated":"2026-09-10T16:13:49.570Z","title":"In updateInternal of MediaProvider.java, there is a possible expose contents of files due to a race condition. This could lead to local information disclosure…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.0007,"kevAdded":null},{"id":"CVE-2026-28668","published":"2026-09-08T18:05:31.666Z","updated":"2026-09-10T14:16:07.102Z","title":"In LimitRealloc of malloc_limit.cpp, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2026-28666","published":"2026-09-08T18:05:30.590Z","updated":"2026-09-10T14:17:08.087Z","title":"In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering check bypass. This could…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00336,"kevAdded":null},{"id":"CVE-2026-28664","published":"2026-09-08T18:05:29.509Z","updated":"2026-09-08T19:33:40.057Z","title":"In WriteImageToDisk of runtime_image.cc, there is a possible file tampering due to a logic error in the code. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2026-28663","published":"2026-09-08T18:05:28.430Z","updated":"2026-09-10T14:36:00.757Z","title":"In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2026-28662","published":"2026-09-08T18:05:27.357Z","updated":"2026-09-10T14:17:50.371Z","title":"In p2p_process_prov_disc_bootstrap_req of p2p_pd.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote…","severity":"HIGH","score":8,"vendor":"Google","product":"Android","kev":false,"epss":0.00167,"kevAdded":null},{"id":"CVE-2026-28660","published":"2026-09-08T18:05:26.290Z","updated":"2026-09-10T16:14:37.204Z","title":"In getAllSessions of multiple files, there is a possible confused deputy due to a logic error in the code. This could lead to local information disclosure with…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2026-28658","published":"2026-09-08T18:05:25.218Z","updated":"2026-09-10T14:25:42.607Z","title":"In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the code. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2026-28657","published":"2026-09-08T18:05:24.152Z","updated":"2026-09-10T14:26:27.856Z","title":"In onActivityResult of AppWidgetConfigActivityProxy.java, there is a possible unauthorized URI permission grant due to a confused deputy. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00088,"kevAdded":null},{"id":"CVE-2026-28656","published":"2026-09-08T18:05:22.999Z","updated":"2026-09-10T14:32:45.417Z","title":"In multiple functions of DeviceAdminAdd.java, there is a possible way to an overlay due to a tapjacking/overlay attack. This could lead to local escalation of…","severity":"HIGH","score":7.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2026-28655","published":"2026-09-08T18:05:21.929Z","updated":"2026-09-10T14:28:10.036Z","title":"In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2026-28653","published":"2026-09-08T18:05:20.797Z","updated":"2026-09-11T03:56:19.813Z","title":"In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2026-28652","published":"2026-09-08T18:05:19.730Z","updated":"2026-09-10T17:18:50.476Z","title":"In multiple functions of RangingServiceImpl.java, there is a possible MITM due to a missing permission check. This could lead to remote information disclosure…","severity":"LOW","score":3.1,"vendor":"Google","product":"Android","kev":false,"epss":0.00204,"kevAdded":null},{"id":"CVE-2026-28650","published":"2026-09-08T18:05:18.657Z","updated":"2026-09-10T14:28:42.519Z","title":"In setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypass due to a logic error in the code. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2026-28644","published":"2026-09-08T18:05:17.591Z","updated":"2026-09-10T14:29:26.422Z","title":"In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible permission bypass due to a confused deputy. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2026-28642","published":"2026-09-08T18:05:16.523Z","updated":"2026-09-10T14:30:03.130Z","title":"In executeRequest of ActivityStarter.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2026-28639","published":"2026-09-08T18:05:15.391Z","updated":"2026-09-10T14:31:29.580Z","title":"In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2026-28638","published":"2026-09-08T18:05:14.323Z","updated":"2026-09-10T16:23:05.262Z","title":"In multiple functions of XmpDataParser.java, there is a possible improper data sanitization due to a logic error in the code. This could lead to local…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2026-28636","published":"2026-09-08T18:05:13.248Z","updated":"2026-09-10T14:30:51.516Z","title":"In setupLayout of PickActivity.java, there is a possible bypass of the \"Install unknown apps\" security restriction due to a confused deputy. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2026-28634","published":"2026-09-08T18:05:12.186Z","updated":"2026-09-10T14:36:56.036Z","title":"In handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to send a USSD request without permission due to a logic error in the code. This…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2026-28633","published":"2026-09-08T18:05:11.123Z","updated":"2026-09-10T16:26:09.428Z","title":"In initForUserNoTracing of VoiceInteractionManagerService.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2026-28631","published":"2026-09-08T18:05:10.064Z","updated":"2026-09-10T14:36:29.865Z","title":"In buildMiniResolver of IntentForwarderActivity.java, there is a possible consent bypass due to a tapjacking/overlay attack. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2026-28630","published":"2026-09-08T18:05:08.994Z","updated":"2026-09-10T16:26:51.550Z","title":"In onCreate of ContactsPickerActivity.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local information disclosure…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2026-28627","published":"2026-09-08T18:05:07.898Z","updated":"2026-09-10T17:04:09.686Z","title":"In btm_sec_encrypt_change of btm_sec.cc, there is a possible downgrade attack due to a logic error in the code. This could lead to remote information…","severity":"MEDIUM","score":4.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00265,"kevAdded":null},{"id":"CVE-2026-28626","published":"2026-09-08T18:05:06.837Z","updated":"2026-09-10T14:34:16.909Z","title":"In onCreate of SetupPassthroughActivity.java, there is a possible way to launch arbitrary activity due to Intent redirection . This could lead to local…","severity":"HIGH","score":7.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2026-28624","published":"2026-09-08T18:05:05.766Z","updated":"2026-09-10T14:37:28.960Z","title":"In multiple locations, there is a possible read/write access to files without the proper permissions due to a confused deputy. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00088,"kevAdded":null},{"id":"CVE-2026-28623","published":"2026-09-08T18:05:04.697Z","updated":"2026-09-10T17:07:24.248Z","title":"In writeToParcel of BleRssiRangingCapabilities.java, there is a possible way to obtain the Bluetooth MAC address due to a missing permission check. This could…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2026-28622","published":"2026-09-08T18:05:03.628Z","updated":"2026-09-10T17:08:37.565Z","title":"In getQueryBuilderInternal of MediaProvider.java, there is a possible way to retrieve location metadata due to a permissions bypass. This could lead to local…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2026-28620","published":"2026-09-08T18:05:02.549Z","updated":"2026-09-10T14:37:56.568Z","title":"In multiple locations, there is a possible unauthorized URI access due to a permissions bypass. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2026-28618","published":"2026-09-08T18:05:01.476Z","updated":"2026-09-10T14:38:29.909Z","title":"In dec_frm_prepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00438,"kevAdded":null},{"id":"CVE-2026-28617","published":"2026-09-08T18:05:00.408Z","updated":"2026-09-10T17:10:03.481Z","title":"In add of WifiNetworkSuggestionsManager.java, there is a possible persistent DOS due to resource exhaustion. This could lead to local denial of service with no…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2026-28616","published":"2026-09-08T18:04:59.353Z","updated":"2026-09-11T03:56:08.834Z","title":"In Setup Wizard, there is a possible way to force connection to a malicious network due to confused deputy. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00088,"kevAdded":null},{"id":"CVE-2026-28614","published":"2026-09-08T18:04:58.296Z","updated":"2026-09-10T14:38:55.461Z","title":"In onCreate of SlicePermissionActivity.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2026-28613","published":"2026-09-08T18:04:57.222Z","updated":"2026-09-10T14:33:40.863Z","title":"In initAppLinkTypeAndIntent of ChannelImpl.java, there is a possible launch an arbitrary intent due to improper input validation. This could lead to local…","severity":"HIGH","score":7.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2026-28612","published":"2026-09-08T18:04:56.165Z","updated":"2026-09-10T14:39:39.083Z","title":"In resolveActivity of ActivityStarter.java, there is a possible way to perform Intent Redirection attacks due to a logic error in the code. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2026-28611","published":"2026-09-08T18:04:55.090Z","updated":"2026-09-10T14:40:42.079Z","title":"In multiple functions of NfcService.java, there is a possible silent payment session hijacking enablement due to a missing permission check. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00088,"kevAdded":null},{"id":"CVE-2026-28609","published":"2026-09-08T18:04:54.008Z","updated":"2026-09-10T14:56:51.109Z","title":"In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting. This could lead to remote code execution with no additional…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00372,"kevAdded":null},{"id":"CVE-2026-28607","published":"2026-09-08T18:04:52.928Z","updated":"2026-09-10T15:09:36.074Z","title":"In multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused deputy. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2026-28606","published":"2026-09-08T18:04:51.864Z","updated":"2026-09-11T13:00:49.342Z","title":"In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code. This could lead to remote…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00386,"kevAdded":null},{"id":"CVE-2026-28604","published":"2026-09-08T18:04:50.799Z","updated":"2026-09-10T15:09:10.364Z","title":"In multiple locations, there is a possible use after free due to a race condition. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00258,"kevAdded":null},{"id":"CVE-2026-28603","published":"2026-09-08T18:04:49.737Z","updated":"2026-09-10T15:15:29.446Z","title":"In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible read/write access to private files due to a confused deputy. This could…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00088,"kevAdded":null},{"id":"CVE-2026-28602","published":"2026-09-08T18:04:48.682Z","updated":"2026-09-11T03:56:33.931Z","title":"In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due to a logic error in the code. This…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2026-28600","published":"2026-09-08T18:04:47.613Z","updated":"2026-09-10T15:08:13.673Z","title":"In onCreate of PaymentDefaultDialog.java, there is a possible way to change default payment app due to a confused deputy. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00088,"kevAdded":null},{"id":"CVE-2026-28599","published":"2026-09-08T18:04:46.556Z","updated":"2026-09-10T15:15:02.913Z","title":"In addCreatorToken of ActivityManagerService.java, there is a possible Intent Redirection Bypass due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2026-28596","published":"2026-09-08T18:04:45.497Z","updated":"2026-09-10T17:14:40.603Z","title":"In parseInterventionFromXml of GameManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2026-28594","published":"2026-09-08T18:04:44.434Z","updated":"2026-09-10T15:07:42.005Z","title":"In multiple locations, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2026-28593","published":"2026-09-08T18:04:43.372Z","updated":"2026-09-10T15:10:28.698Z","title":"In getItemList of SettingsFragment.java, there is a possible user interaction bypass due to misleading or insufficient UI. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2026-28590","published":"2026-09-08T18:04:42.298Z","updated":"2026-09-10T15:06:58.877Z","title":"In multiple locations, there is a possible improper encryption key validation due to a logic error in the code. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00052,"kevAdded":null},{"id":"CVE-2026-28584","published":"2026-09-08T18:04:41.227Z","updated":"2026-09-10T17:19:34.013Z","title":"In createSessionInternal of PackageInstallerService.java, there is a possible way to permanently DoS the device due to a logic error in the code. This could…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2026-28583","published":"2026-09-08T18:04:40.164Z","updated":"2026-09-10T15:04:46.692Z","title":"In validate_camera_metadata_structure of camera_metadata.c, there is a possible out of bounds write due to a logical error in the code. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2026-28582","published":"2026-09-08T18:04:39.095Z","updated":"2026-09-10T17:15:19.025Z","title":"In onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to and modification of device credentials due to a missing…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2026-28572","published":"2026-09-08T18:04:35.874Z","updated":"2026-09-10T15:05:26.154Z","title":"In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00088,"kevAdded":null},{"id":"CVE-2026-0084","published":"2026-09-08T18:04:34.795Z","updated":"2026-09-10T15:02:44.549Z","title":"In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2026-0065","published":"2026-09-08T18:04:33.732Z","updated":"2026-09-10T15:02:10.680Z","title":"In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in the background due…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2026-0054","published":"2026-09-08T18:04:32.667Z","updated":"2026-09-10T17:15:50.333Z","title":"In isCallerAllowed of WalletContextualLocationsService.kt, there is a possible way to get wallet information due to a missing permission check. This could lead…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2026-28573","published":"2026-06-18T06:29:35.804Z","updated":"2026-06-22T16:37:29.664Z","title":"In AndroidManifest.xml, there is a possible persistent denial of service due to a missing permission check. This could lead to local denial of service with no…","severity":"CRITICAL","score":10,"vendor":"Google","product":"Android","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2026-0063","published":"2026-06-17T07:24:27.328Z","updated":"2026-06-18T03:56:06.023Z","title":"In setAllowedCarriers of PhoneInterfaceManager.java, there is a possible way to disable carrier restrictions due to a logic error in the code. This could lead…","severity":"CRITICAL","score":10,"vendor":"Google","product":"Android","kev":false,"epss":0.00155,"kevAdded":null},{"id":"CVE-2026-28587","published":"2026-06-17T07:21:45.809Z","updated":"2026-06-17T10:40:46.047Z","title":"In MmsSmsProvider of MmsSmsProvider.java, there is a possible way to retrieve sensitive information due to a missing permission check. This could lead to local…","severity":"CRITICAL","score":10,"vendor":"Google","product":"Android","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2026-28576","published":"2026-06-17T07:19:47.943Z","updated":"2026-06-17T10:41:28.684Z","title":"In Contacts Provider, there is a possible way to access the contacts database due to SQL injection. This could lead to local information disclosure with no…","severity":"CRITICAL","score":10,"vendor":"Android","product":"Android","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2026-28615","published":"2026-06-17T07:17:32.708Z","updated":"2026-06-18T03:56:03.824Z","title":"In Telecomm, there is a possible way to initiate an unauthorized phone call due to a permissions bypass. This could lead to local escalation of privilege with…","severity":"CRITICAL","score":10,"vendor":"Google","product":"Android","kev":false,"epss":0.00123,"kevAdded":null},{"id":"CVE-2026-0083","published":"2026-06-17T07:15:28.081Z","updated":"2026-06-18T03:56:02.613Z","title":"In Nfc::eventCallback() of Nfc.h, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no…","severity":"CRITICAL","score":10,"vendor":"Google","product":"Android","kev":false,"epss":0.00121,"kevAdded":null},{"id":"CVE-2026-0082","published":"2026-06-17T07:13:55.302Z","updated":"2026-06-18T03:56:00.843Z","title":"In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access permission assignment due to an insecure default value. This could…","severity":"CRITICAL","score":10,"vendor":"Google","product":"Android","kev":false,"epss":0.00165,"kevAdded":null},{"id":"CVE-2026-0081","published":"2026-06-17T07:12:15.261Z","updated":"2026-06-18T03:55:59.696Z","title":"In NFC, there is a possible way to spoof an NFC event due to a missing permission check. This could lead to local escalation of privilege with no additional…","severity":"CRITICAL","score":10,"vendor":"Google","product":"Android","kev":false,"epss":0.00148,"kevAdded":null},{"id":"CVE-2026-0071","published":"2026-06-17T07:09:34.799Z","updated":"2026-06-18T03:55:57.528Z","title":"In SettingsLib, there is a possible missing permission check due to a logic error in the code. This could lead to local escalation of privilege with no…","severity":"CRITICAL","score":10,"vendor":"Google","product":"Android","kev":false,"epss":0.00155,"kevAdded":null},{"id":"CVE-2026-28575","published":"2026-06-17T07:02:33.191Z","updated":"2026-06-17T14:01:52.523Z","title":"In PackageInstaller.Session#transfer of frameworks/base/services/core/java/com/android/server/pm/PackageInstallerSession.java, there is a possible memory…","severity":"CRITICAL","score":10,"vendor":"Google","product":"Android","kev":false,"epss":0.00125,"kevAdded":null},{"id":"CVE-2026-0064","published":"2026-06-17T06:59:37.092Z","updated":"2026-06-17T14:01:08.760Z","title":"In multiple places, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional…","severity":"CRITICAL","score":10,"vendor":"Google","product":"Android","kev":false,"epss":0.00122,"kevAdded":null},{"id":"CVE-2026-0092","published":"2026-06-17T06:57:07.855Z","updated":"2026-06-18T03:55:52.020Z","title":"In Package Manager, there is a possible device lock controller bypass due to a missing permission check. This could lead to local escalation of privilege with…","severity":"CRITICAL","score":10,"vendor":"Google","product":"Android","kev":false,"epss":0.00218,"kevAdded":null},{"id":"CVE-2026-0068","published":"2026-06-17T06:49:10.184Z","updated":"2026-06-18T03:56:09.342Z","title":"In createSessionInternal of PackageInstallerService.java, there is a possible method to remove a DPC app from a managed device without DO consent due to desync…","severity":"CRITICAL","score":10,"vendor":"Google","product":"Android","kev":false,"epss":0.00123,"kevAdded":null},{"id":"CVE-2026-0057","published":"2026-06-17T05:53:48.624Z","updated":"2026-06-17T13:35:01.894Z","title":"In Contacts Provider, there is a possible way to access an incoming call's phone number and associated metadata due to a missing permission check. This could…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00065,"kevAdded":null},{"id":"CVE-2026-0019","published":"2026-06-17T05:53:47.545Z","updated":"2026-10-01T07:16:07.982Z","title":"In SettingsLib, there is a possible way to disable system components due to a logic error in the code. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2025-48643","published":"2026-06-17T05:53:46.463Z","updated":"2026-06-18T03:55:49.881Z","title":"In multiple locations there is a possible provisioning bypass due to improper input validation. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00084,"kevAdded":null},{"id":"CVE-2025-48640","published":"2026-06-17T05:53:45.399Z","updated":"2026-06-18T03:55:46.582Z","title":"In multiple locations, there is a possible 3rd party passkey entry pairing approval due to a missing permission check. This could lead to remote…","severity":"HIGH","score":8,"vendor":"Google","product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2025-48617","published":"2026-06-17T05:53:44.339Z","updated":"2026-06-18T03:55:47.661Z","title":"In overrideConfig of CarrierConfigLoader.java, there is a possible way to bypass UID check due to a permissions bypass. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00077,"kevAdded":null},{"id":"CVE-2025-48571","published":"2026-06-17T05:53:43.248Z","updated":"2026-06-17T10:43:33.116Z","title":"In multiple functions of btm_sec.cc, there is a possible way for an attacker to intercept SMS messages due to a logic error in the code. This could lead to…","severity":"MEDIUM","score":4.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00191,"kevAdded":null},{"id":"CVE-2026-28586","published":"2026-06-01T21:14:56.215Z","updated":"2026-11-02T19:53:01.848Z","title":"In multiple functions of AppOpsService.java, there is a possible missing permission check due to a permissions bypass. This could lead to local information…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00106,"kevAdded":null},{"id":"CVE-2026-28581","published":"2026-06-01T21:14:56.114Z","updated":"2026-09-08T18:04:38.030Z","title":"In fixInitiatingUserIfNecessary of CallIntentProcessor.java, there is a possible way to make an emergency call due to a logic error in the code. This could…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00071,"kevAdded":null},{"id":"CVE-2026-28580","published":"2026-06-01T21:14:56.007Z","updated":"2026-11-02T19:52:59.780Z","title":"In multiple functions of NotificationChannel.java, there is a possible desync in persistence due to an incorrect bounds check. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00073,"kevAdded":null},{"id":"CVE-2026-28578","published":"2026-06-01T21:14:55.919Z","updated":"2026-06-01T22:39:53.890Z","title":"In multiple functions of DevicePolicyManagerService.java, there is a possible desync from persistence due to improper input validation. This could lead to…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00066,"kevAdded":null},{"id":"CVE-2026-28577","published":"2026-06-01T21:14:55.809Z","updated":"2026-06-02T03:56:11.803Z","title":"In addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00067,"kevAdded":null},{"id":"CVE-2026-0100","published":"2026-06-01T21:14:55.715Z","updated":"2026-06-02T03:56:12.954Z","title":"In Load of LoadedArsc.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00075,"kevAdded":null},{"id":"CVE-2026-0099","published":"2026-06-01T21:14:55.610Z","updated":"2026-06-02T03:56:14.051Z","title":"In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background due to a logic error in the code. This could…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00071,"kevAdded":null},{"id":"CVE-2026-0098","published":"2026-06-01T21:14:55.519Z","updated":"2026-06-02T03:56:15.194Z","title":"In getCallingPackageName of Shared.java, there is a possible way to bypass activity start restrictions due to a confused deputy. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00068,"kevAdded":null},{"id":"CVE-2026-0097","published":"2026-06-01T21:14:55.421Z","updated":"2026-06-02T03:56:16.361Z","title":"In multiple locations, there is a possible way to bypass user interaction when pairing an LE device due to a logic error. This could lead to remote…","severity":"HIGH","score":8,"vendor":"Google","product":"Android","kev":false,"epss":0.00121,"kevAdded":null},{"id":"CVE-2026-0096","published":"2026-06-01T21:14:55.332Z","updated":"2026-06-02T03:56:17.578Z","title":"In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into forgetting a device due to misleading or insufficient UI. This could…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00073,"kevAdded":null},{"id":"CVE-2026-0095","published":"2026-06-01T21:14:55.239Z","updated":"2026-06-02T03:56:18.869Z","title":"In l2c_fcr_clone_buf of l2c_fcr.cc, there is a possible way to trigger controlled heap corruption within the privileged Bluetooth process due to an integer…","severity":"HIGH","score":8,"vendor":"Google","product":"Android","kev":false,"epss":0.00107,"kevAdded":null},{"id":"CVE-2026-0094","published":"2026-06-01T21:14:55.139Z","updated":"2026-06-02T03:56:20.008Z","title":"In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into approving access to certificates due to misleading or…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00058,"kevAdded":null},{"id":"CVE-2026-0093","published":"2026-06-01T21:14:54.986Z","updated":"2026-06-02T03:56:21.185Z","title":"In multiple locations, there is a possible misleading UI due to obfuscation. This could lead to local escalation of privilege with no additional execution…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00073,"kevAdded":null},{"id":"CVE-2026-0091","published":"2026-06-01T21:14:54.868Z","updated":"2026-06-02T03:56:22.314Z","title":"In multiple locations, there is a possible way to execute code in the launcher process due to an over-privileged shell user. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00067,"kevAdded":null},{"id":"CVE-2026-0089","published":"2026-06-01T21:14:54.786Z","updated":"2026-06-02T03:56:23.439Z","title":"In multiple functions of PackageInstallerService.java, there is a possible way to install unverified apps due to a missing permission check. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00067,"kevAdded":null},{"id":"CVE-2026-0088","published":"2026-06-01T21:14:54.695Z","updated":"2026-06-02T15:59:45.375Z","title":"In getCallingAppLabel of CertInstaller.java, there is a possible way to hide a sensitive security dialogue due to misleading or insufficient UI. This could…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null},{"id":"CVE-2026-0087","published":"2026-06-01T21:14:54.606Z","updated":"2026-06-03T03:55:22.016Z","title":"In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app link due to a logic error in the code.…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00082,"kevAdded":null},{"id":"CVE-2026-0086","published":"2026-06-01T21:14:54.519Z","updated":"2026-06-03T03:55:37.186Z","title":"In onCreate of DisableSupervisionActivity.kt, there is a possible way to delete supervision data due to a missing null check. This could lead to local…","severity":"MEDIUM","score":6.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00075,"kevAdded":null},{"id":"CVE-2026-0085","published":"2026-06-01T21:14:54.429Z","updated":"2026-06-01T23:18:20.213Z","title":"In applySimpleFieldMaxSize of DataRowHandler.java, there is a possible way to insert a large contact name due to improper input validation. This could lead to…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00071,"kevAdded":null},{"id":"CVE-2026-0080","published":"2026-06-01T21:14:54.301Z","updated":"2026-06-01T23:45:08.655Z","title":"In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow. This could lead to remote denial of…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00265,"kevAdded":null},{"id":"CVE-2026-0079","published":"2026-06-01T21:14:54.206Z","updated":"2026-06-01T23:19:52.384Z","title":"In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00071,"kevAdded":null},{"id":"CVE-2026-0078","published":"2026-06-01T21:14:54.115Z","updated":"2026-06-03T03:55:40.679Z","title":"In setGlobalProxy of DevicePolicyManagerService.java, there is a possible desync in persistence due to improper input validation. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null},{"id":"CVE-2026-0077","published":"2026-06-01T21:14:54.013Z","updated":"2026-06-03T12:53:31.195Z","title":"In resumeConfigurationDispatch of ActivityRecord.java, there is a possible background application launch (bal) due to a logic error in the code. This could…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00082,"kevAdded":null},{"id":"CVE-2026-0076","published":"2026-06-01T21:14:53.925Z","updated":"2026-06-03T03:55:39.468Z","title":"In validateNode of ResourceTypes.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null},{"id":"CVE-2026-0075","published":"2026-06-01T21:14:53.821Z","updated":"2026-06-03T12:53:51.201Z","title":"In multiple functions, there is a possible way to access the contacts database due to a SQL injection. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2026-0074","published":"2026-06-01T21:14:53.658Z","updated":"2026-06-01T23:19:10.327Z","title":"In getPreferredSize of LauncherProcessImageListener.kt, there is a possible denial of service due to resource exhaustion. This could lead to local denial of…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00071,"kevAdded":null},{"id":"CVE-2026-0070","published":"2026-06-01T21:14:53.564Z","updated":"2026-06-01T23:20:38.226Z","title":"In multiple functions of DevicePolicyManagerService.java, there is a possible way to hide a system critical package due to improper input validation. This…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00071,"kevAdded":null},{"id":"CVE-2026-0069","published":"2026-06-01T21:14:53.466Z","updated":"2026-06-01T23:21:12.503Z","title":"In verifySignature of ApkChecksums.java, there is a possible way to cause a crash due to resource exhaustion. This could lead to local denial of service with…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00071,"kevAdded":null},{"id":"CVE-2026-0067","published":"2026-06-01T21:14:53.359Z","updated":"2026-06-01T23:22:38.060Z","title":"In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a permanent denial of service due to a logic error in the code. This…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00071,"kevAdded":null},{"id":"CVE-2026-0061","published":"2026-06-01T21:14:53.271Z","updated":"2026-06-02T12:32:18.695Z","title":"In multiple functions of WindowState.java, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could…","severity":"MEDIUM","score":5.9,"vendor":"Google","product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2026-0060","published":"2026-06-01T21:14:53.177Z","updated":"2026-06-01T23:46:02.515Z","title":"In updateState of GraphicsDriverEnableAngleAsSystemDriverController.java, there is a possible persistent dos issue due to an unusual root cause. This could…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00071,"kevAdded":null},{"id":"CVE-2026-0059","published":"2026-06-01T21:14:53.022Z","updated":"2026-06-02T03:56:25.729Z","title":"In multiple functions of sdp_discovery.cc, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to remote…","severity":"HIGH","score":8,"vendor":"Google","product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2026-0056","published":"2026-06-01T21:14:52.922Z","updated":"2026-06-01T23:26:16.237Z","title":"In setTo of ResourceTypes.cpp, there is a possible read out of bounds due to an incorrect bounds check. This could lead to local information disclosure with no…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2026-0055","published":"2026-06-01T21:14:52.825Z","updated":"2026-06-03T03:55:34.902Z","title":"In createSessionInternal of PackageInstallerService.java, there is a possible to update a Device Policy Controller (DPC) into an invalid directory due to a…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00132,"kevAdded":null},{"id":"CVE-2026-0052","published":"2026-06-01T21:14:52.730Z","updated":"2026-06-01T23:40:23.214Z","title":"In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow. This could lead to remote denial of…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00253,"kevAdded":null},{"id":"CVE-2026-0051","published":"2026-06-01T21:14:52.629Z","updated":"2026-06-01T23:40:02.448Z","title":"In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a system crash due to improper input validation. This could lead to…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00253,"kevAdded":null},{"id":"CVE-2026-0050","published":"2026-06-01T21:14:52.509Z","updated":"2026-06-01T23:28:49.413Z","title":"In handleBondStateChanged of AdapterService.java, there is a possible sensitive information disclosure due to a permissions bypass. This could lead to local…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00068,"kevAdded":null},{"id":"CVE-2026-0048","published":"2026-06-01T21:14:52.386Z","updated":"2026-06-03T03:55:33.758Z","title":"In hide of WindowState.java, there is a possible way to trick the user into approving permissions due to a tapjacking/overlay attack. This could lead to local…","severity":"MEDIUM","score":6.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2026-0046","published":"2026-06-01T21:14:52.283Z","updated":"2026-06-03T03:55:32.606Z","title":"In InputInterceptor of Letterbox.java, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could lead…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2026-0045","published":"2026-06-01T21:14:52.182Z","updated":"2026-06-03T03:55:23.169Z","title":"In bta_jv_rfcomm_connect of bta_jv_act.cc, there is a possible bypass of bonding for a secure connection due to a logic error in the code. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2026-0044","published":"2026-06-01T21:14:52.084Z","updated":"2026-06-01T23:39:39.072Z","title":"In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause the system to crash due to an integer overflow. This could lead to remote…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00253,"kevAdded":null},{"id":"CVE-2026-0043","published":"2026-06-01T21:14:51.989Z","updated":"2026-06-01T23:36:16.851Z","title":"In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null},{"id":"CVE-2026-0042","published":"2026-06-01T21:14:51.862Z","updated":"2026-06-01T23:37:00.435Z","title":"In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to resource exhaustion. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00071,"kevAdded":null},{"id":"CVE-2026-0041","published":"2026-06-01T21:14:51.773Z","updated":"2026-06-01T23:38:48.216Z","title":"In multiple functions of ubsan_throwing_runtime.cpp, there is a possible UBSan failure due to an integer overflow. This could lead to remote denial of service…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00253,"kevAdded":null},{"id":"CVE-2026-0040","published":"2026-06-01T21:14:51.667Z","updated":"2026-06-01T23:39:12.870Z","title":"In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow. This could lead to remote denial of…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00253,"kevAdded":null},{"id":"CVE-2026-0039","published":"2026-06-01T21:14:51.505Z","updated":"2026-06-01T23:41:55.152Z","title":"In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This could lead to remote…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00253,"kevAdded":null},{"id":"CVE-2026-0036","published":"2026-06-01T21:14:51.409Z","updated":"2026-06-03T03:55:24.299Z","title":"In startAnimation of StageCoordinator.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00072,"kevAdded":null},{"id":"CVE-2026-0018","published":"2026-06-01T21:14:51.309Z","updated":"2026-10-01T07:16:07.061Z","title":"In multiple functions of AccessibilityManagerService.java, there is a possible persistent denial of service due to improper input validation. This could lead…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2026-0016","published":"2026-06-01T21:14:51.162Z","updated":"2026-10-01T07:16:05.193Z","title":"In updateProvidersWhenServiceRemoved of CredentialManagerService.java, there is a possible way to override settings across users due to a permissions bypass.…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2026-0009","published":"2026-06-01T21:14:51.028Z","updated":"2026-08-26T18:37:16.224Z","title":"In multiple locations, there is a possible tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2025-48652","published":"2026-06-01T21:14:50.877Z","updated":"2026-06-03T03:55:25.547Z","title":"In performPreInstallChecks of InstallRepository.kt, there is a possible way to bypass MDM policy due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2025-48649","published":"2026-06-01T21:14:50.748Z","updated":"2026-06-03T03:55:26.675Z","title":"In multiple locations, there is a possible way to reset user-selected permissions selections due to a permissions bypass. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null},{"id":"CVE-2025-48648","published":"2026-06-01T21:14:50.651Z","updated":"2026-06-01T23:44:05.093Z","title":"In isSameApp of NotificationManagerService.java, there is a possible persistent dos due to resource exhaustion. This could lead to local denial of service with…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00068,"kevAdded":null},{"id":"CVE-2025-48616","published":"2026-06-01T21:14:50.535Z","updated":"2026-06-01T23:46:54.862Z","title":"In multiple functions of KeyguardViewMediator.java , there is a possible way to bypass lockdown mode with screen pinning due to a logic error in the code. This…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2025-48595","published":"2026-06-01T21:14:49.921Z","updated":"2026-06-03T03:55:19.122Z","title":"In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":true,"epss":0.01947,"kevAdded":"2026-06-02"},{"id":"CVE-2025-48570","published":"2026-06-01T21:14:49.636Z","updated":"2026-06-03T03:55:27.828Z","title":"In multiple functions of PipTaskOrganizer.java, there is a possible way to launch an activity from the background due to a confused deputy. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00072,"kevAdded":null},{"id":"CVE-2025-32348","published":"2026-06-01T21:14:49.512Z","updated":"2026-06-03T03:55:28.961Z","title":"In multiple locations, there is a possible background activity launch due to a missing permission check. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00072,"kevAdded":null},{"id":"CVE-2025-26418","published":"2026-06-01T21:14:49.395Z","updated":"2026-06-03T12:52:41.529Z","title":"In setUserDisclaimerAcknowledged of CarDevicePolicyService.java, there is a possible way to bypass the user dialog when adding an account to a managed device…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00068,"kevAdded":null},{"id":"CVE-2025-22426","published":"2026-06-01T21:14:49.135Z","updated":"2026-11-03T22:02:55.559Z","title":"In resolveContentProvider of ComputerEngine.java, there is a possible way to access URIs across users due to a logic error in the code. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00084,"kevAdded":null},{"id":"CVE-2025-22424","published":"2026-06-01T21:14:48.951Z","updated":"2026-11-02T19:52:48.564Z","title":"In multiple locations, there is a possible way to reveal images across users due to improper input validation. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00088,"kevAdded":null},{"id":"CVE-2026-0072","published":"2026-06-01T17:38:48.206Z","updated":"2026-06-01T19:14:42.058Z","title":"In addInputMethodListener of com.android.server.inputmethod.InputMethodManagerService, there is a missing permission check. This could lead to local escalation…","severity":"CRITICAL","score":10,"vendor":"Google","product":"Android XR","kev":false,"epss":0.00122,"kevAdded":null},{"id":"CVE-2026-0073","published":"2026-05-04T18:00:10.613Z","updated":"2026-05-05T03:56:34.252Z","title":"In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code. This could lead to…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00541,"kevAdded":null},{"id":"CVE-2026-0049","published":"2026-04-06T18:20:38.337Z","updated":"2026-05-27T16:51:02.351Z","title":"In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2025-48651","published":"2026-04-06T18:20:31.044Z","updated":"2026-09-08T18:04:27.364Z","title":"In importWrappedKey of KMKeymasterApplet.java, there is a possible way access keys that should be restricted due to improper input validation. This could lead…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2025-48611","published":"2026-03-10T19:33:06.605Z","updated":"2026-03-16T13:48:55.174Z","title":"In DeviceId of DeviceId.java, there is a possible desync in persistence due to a missing bounds check. This could lead to local escalation of privilege with no…","severity":"CRITICAL","score":10,"vendor":"Google","product":"Android","kev":false,"epss":0.00206,"kevAdded":null},{"id":"CVE-2025-48636","published":"2026-03-02T19:02:51.909Z","updated":"2026-03-06T03:04:33.553Z","title":"In openFile of BugreportContentProvider.java, there is a possible way to read and write unauthorized files due to a path traversal error. This could lead to…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2024-31328","published":"2026-03-02T19:02:50.846Z","updated":"2026-03-06T03:04:51.529Z","title":"In broadcastIntentLockedTraced of BroadcastController.java, there is a possible way to launch arbitrary activities from the background on the paired companion…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00132,"kevAdded":null},{"id":"CVE-2026-0047","published":"2026-03-02T18:43:00.441Z","updated":"2026-03-06T03:58:37.310Z","title":"In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access private information due to a missing permission check. This…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00132,"kevAdded":null},{"id":"CVE-2026-0038","published":"2026-03-02T18:42:59.363Z","updated":"2026-03-06T03:58:08.209Z","title":"In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalation…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00223,"kevAdded":null},{"id":"CVE-2026-0037","published":"2026-03-02T18:42:58.298Z","updated":"2026-03-06T03:57:34.347Z","title":"In multiple functions of ffa.c, there is a possible memory corruption due to a logic error in the code. This could lead to local escalation of privilege with…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00146,"kevAdded":null},{"id":"CVE-2026-0035","published":"2026-03-02T18:42:57.261Z","updated":"2026-03-06T03:57:08.667Z","title":"In createRequest of MediaProvider.java, there is a possible way for an app to gain read/write access to non-existing files due to a logic error in the code.…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2026-0034","published":"2026-03-02T18:42:56.220Z","updated":"2026-03-06T03:56:41.563Z","title":"In setPackageOrComponentEnabled of ManagedServices.java, there is a possible notification policy desync due to improper input validation. This could lead to…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2026-0032","published":"2026-03-02T18:42:55.173Z","updated":"2026-03-11T15:01:19.214Z","title":"In multiple functions of mem_protect.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00099,"kevAdded":null},{"id":"CVE-2026-0031","published":"2026-03-02T18:42:54.154Z","updated":"2026-03-06T03:53:59.862Z","title":"In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00146,"kevAdded":null},{"id":"CVE-2026-0030","published":"2026-03-02T18:42:53.135Z","updated":"2026-03-06T03:53:33.149Z","title":"In __host_check_page_state_range of mem_protect.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00146,"kevAdded":null},{"id":"CVE-2026-0029","published":"2026-03-02T18:42:51.716Z","updated":"2026-03-11T15:01:42.341Z","title":"In __pkvm_init_vm of pkvm.c, there is a possible memory corruption due to a logic error in the code. This could lead to local escalation of privilege with no…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2026-0028","published":"2026-03-02T18:42:50.692Z","updated":"2026-03-06T03:52:49.612Z","title":"In __pkvm_host_share_guest of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00146,"kevAdded":null},{"id":"CVE-2026-0027","published":"2026-03-02T18:42:49.690Z","updated":"2026-03-06T03:52:29.204Z","title":"In smmu_detach_dev of arm-smmu-v3.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":6.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2026-0026","published":"2026-03-02T18:42:48.684Z","updated":"2026-03-06T03:52:00.451Z","title":"In removePermission of PermissionManagerServiceImpl.java, there is a possible way to override any system permission due to a logic error in the code. This…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2026-0025","published":"2026-03-02T18:42:47.642Z","updated":"2026-03-11T15:02:02.268Z","title":"In hasImage of Notification.java, there is a possible way to reveal information across users due to a permissions bypass. This could lead to local escalation…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2026-0024","published":"2026-03-02T18:42:46.619Z","updated":"2026-03-06T03:51:17.337Z","title":"In isRedactionNeededForOpenViaContentResolver of MediaProvider.java, there is a possible way to reveal the location of media due to a missing permission check.…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00099,"kevAdded":null},{"id":"CVE-2026-0023","published":"2026-03-02T18:42:45.491Z","updated":"2026-03-11T15:02:28.452Z","title":"In createSessionInternal of PackageInstallerService.java, there is a possible way for an app to update its ownership due to a missing permission check. This…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2026-0021","published":"2026-03-02T18:42:43.590Z","updated":"2026-03-06T03:50:31.938Z","title":"In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible cross-user permission bypass due to a confused deputy. This could lead to…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2026-0020","published":"2026-03-02T18:42:42.577Z","updated":"2026-03-06T03:50:04.208Z","title":"In parsePermissionGroup of ParsedPermissionUtils.java, there is a possible way to bypass a consent dialog to obtain permissions due to a permissions bypass.…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2026-0017","published":"2026-03-02T18:42:41.539Z","updated":"2026-10-01T07:16:06.119Z","title":"In onChange of BiometricService.java, there is a possible way to enable fingerprint unlock due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00194,"kevAdded":null},{"id":"CVE-2026-0015","published":"2026-03-02T18:42:40.526Z","updated":"2026-03-06T03:49:23.989Z","title":"In multiple locations of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00107,"kevAdded":null},{"id":"CVE-2026-0014","published":"2026-03-02T18:42:39.508Z","updated":"2026-09-27T05:07:46.531Z","title":"In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00159,"kevAdded":null},{"id":"CVE-2026-0013","published":"2026-03-02T18:42:38.389Z","updated":"2026-08-26T18:37:21.578Z","title":"In setupLayout of PickActivity.java, there is a possible way to start any activity as a DocumentsUI app due to a confused deputy. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00172,"kevAdded":null},{"id":"CVE-2026-0012","published":"2026-03-02T18:42:37.379Z","updated":"2026-08-26T18:37:20.240Z","title":"In setHideSensitive of ExpandableNotificationRow.java, there is a possible contact name leak due due to a logic error in the code. This could lead to local…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2026-0011","published":"2026-03-02T18:42:36.357Z","updated":"2026-08-26T18:37:18.882Z","title":"In enableSystemPackageLPw of Settings.java, there is a possible way to prevent location access from working due to a logic error in the code. This could lead…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2026-0010","published":"2026-03-02T18:42:35.324Z","updated":"2026-09-08T18:04:31.597Z","title":"In onTransact of IDrmManagerService.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00129,"kevAdded":null},{"id":"CVE-2026-0008","published":"2026-03-02T18:42:34.208Z","updated":"2026-09-08T18:04:29.490Z","title":"In multiple functions of FaceEnroll.kt, there is a possible privilege escalation due to a confused deputy. This could lead to local escalation of privilege…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00131,"kevAdded":null},{"id":"CVE-2026-0007","published":"2026-03-02T18:42:33.130Z","updated":"2026-03-11T15:02:50.936Z","title":"In writeToParcel of WindowInfo.cpp, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2026-0006","published":"2026-03-02T18:42:32.119Z","updated":"2026-03-06T03:46:43.807Z","title":"In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow. This could lead to remote code execution with no…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.0064,"kevAdded":null},{"id":"CVE-2026-0005","published":"2026-03-02T18:42:31.031Z","updated":"2026-03-06T03:46:18.128Z","title":"In onServiceDisconnected of KeyguardServiceDelegate.java, there is a possible partial bypass of app pinning allowing limited interaction with other apps…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00132,"kevAdded":null},{"id":"CVE-2025-48654","published":"2026-03-02T18:42:29.942Z","updated":"2026-03-06T03:45:53.303Z","title":"In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00106,"kevAdded":null},{"id":"CVE-2025-48653","published":"2026-03-02T18:42:28.923Z","updated":"2026-03-06T03:45:28.625Z","title":"In loadDataAndPostValue of multiple files, there is a possible way to obscure permission usage due to a logic error in the code. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00106,"kevAdded":null},{"id":"CVE-2025-48650","published":"2026-03-02T18:42:27.914Z","updated":"2026-03-06T03:45:01.653Z","title":"In multiple locations, there is a possible information disclosure due to SQL injection. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00123,"kevAdded":null},{"id":"CVE-2025-48646","published":"2026-03-02T18:42:26.894Z","updated":"2026-03-06T03:44:35.070Z","title":"In executeRequest of ActivityStarter.java, there is a possible launch anywhere due to a confused deputy. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2025-48645","published":"2026-03-02T18:42:25.869Z","updated":"2026-04-21T02:41:36.807Z","title":"In loadDescription of DeviceAdminInfo.java, there is a possible persistent package due to improper input validation. This could lead to local escalation of…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00208,"kevAdded":null},{"id":"CVE-2025-48644","published":"2026-03-02T18:42:24.863Z","updated":"2026-03-06T03:43:27.832Z","title":"In multiple locations, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2025-48642","published":"2026-03-02T18:42:23.829Z","updated":"2026-03-06T03:43:02.144Z","title":"In jump_to_payload of payload.rs, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2025-48641","published":"2026-03-02T18:42:22.809Z","updated":"2026-03-06T03:42:40.802Z","title":"In multiple functions of Nfc.h, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null},{"id":"CVE-2025-48635","published":"2026-03-02T18:42:21.792Z","updated":"2026-03-06T03:42:18.726Z","title":"In multiple functions of TaskFragmentOrganizerController.java, there is a possible activity token leak due to a logic error in the code. This could lead to…","severity":"HIGH","score":7.7,"vendor":"Google","product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2025-48634","published":"2026-03-02T18:42:20.781Z","updated":"2026-03-06T03:41:58.360Z","title":"In relayoutWindow of WindowManagerService.java, there is a possible tapjack attack due to a missing permission check. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2025-48630","published":"2026-03-02T18:42:17.716Z","updated":"2026-03-06T03:41:06.677Z","title":"In drawLayersInternal of SkiaRenderEngine.cpp, there is a possible way to access the GPU cache due to side channel information disclosure. This could lead to…","severity":"HIGH","score":7.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2025-48619","published":"2026-03-02T18:42:16.720Z","updated":"2026-03-06T03:40:43.551Z","title":"In multiple functions of ContentProvider.java, there is a possible way for an app with read-only access to truncate files due to a logic error in the code.…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2025-48613","published":"2026-03-02T18:42:15.702Z","updated":"2026-04-21T02:41:16.037Z","title":"In VBMeta, there is a possible way to modify and resign VBMeta using a test key, assuming the original image was previously signed with the same key. This…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2025-48609","published":"2026-03-02T18:42:14.652Z","updated":"2026-04-08T15:06:00.453Z","title":"In multiple functions of MmsProvider.java, there is a possible way to arbitrarily delete files which affect telephony, SMS, and MMS functionalities due to a…","severity":"CRITICAL","score":9.1,"vendor":"Google","product":"Android","kev":false,"epss":0.00278,"kevAdded":null},{"id":"CVE-2025-48605","published":"2026-03-02T18:42:13.608Z","updated":"2026-03-06T03:39:28.894Z","title":"In multiple functions of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a logic error in the code. This could lead to local escalation…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2025-48602","published":"2026-03-02T18:42:12.601Z","updated":"2026-03-06T03:39:03.709Z","title":"In exitKeyguardAndFinishSurfaceBehindRemoteAnimation of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a logic error in the code. This…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2025-48587","published":"2026-03-02T18:42:11.576Z","updated":"2026-03-06T03:18:10.432Z","title":"In multiple functions of ProfilingService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2025-48585","published":"2026-03-02T18:42:10.566Z","updated":"2026-03-06T03:17:39.093Z","title":"In multiple functions of ProfilingService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2025-48582","published":"2026-03-02T18:42:09.512Z","updated":"2026-03-06T03:17:11.891Z","title":"In multiple locations, there is a possible way to delete media without the MANAGE_EXTERNAL_STORAGE permission due to an intent redirect. This could lead to…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2025-48579","published":"2026-03-02T18:42:08.409Z","updated":"2026-03-06T03:16:39.403Z","title":"In multiple functions of MediaProvider.java, there is a possible external storage write permission bypass due to a confused deputy. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2025-48578","published":"2026-03-02T18:42:07.211Z","updated":"2026-03-06T03:16:01.591Z","title":"In multiple functions of MediaProvider.java, there is a possible way to bypass the WRITE_EXTERNAL_STORAGE permission due to a missing permission check. This…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2025-48577","published":"2026-03-02T18:42:06.201Z","updated":"2026-03-06T03:15:27.151Z","title":"In multiple functions of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a race condition. This could lead to local escalation of…","severity":"HIGH","score":7.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2025-48574","published":"2026-03-02T18:42:05.185Z","updated":"2026-03-06T03:14:51.089Z","title":"In validateAddingWindowLw of DisplayPolicy.java, there is a possible way for an app to intercept drag-and-drop events due to a missing permission check. This…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2025-48568","published":"2026-03-02T18:42:03.987Z","updated":"2026-03-06T03:14:15.729Z","title":"In multiple locations, there is a possible lockscreen bypass due to a race condition. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2025-48567","published":"2026-03-02T18:42:00.828Z","updated":"2026-03-06T03:13:46.165Z","title":"In multiple locations, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to incorrect unicode…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00122,"kevAdded":null},{"id":"CVE-2025-32313","published":"2026-03-02T18:41:57.788Z","updated":"2026-03-06T03:12:26.592Z","title":"In UsageEvents of UsageEvents.java, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2024-43766","published":"2026-03-02T18:41:56.729Z","updated":"2026-03-06T03:11:34.257Z","title":"In multiple functions of btm_ble_sec.cc, there is a possible unencrypted communication due to Invalid error handling. This could lead to remote…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00077,"kevAdded":null},{"id":"CVE-2025-48647","published":"2026-01-16T18:19:02.047Z","updated":"2026-02-26T14:44:46.653Z","title":"In cpm_fwtp_msg_handler of cpm/google/lib/tracepoint/cpm_fwtp_ipc.c, there is a possible memory overwrite due to improper input validation. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Google Devices","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2025-48625","published":"2025-12-08T17:27:55.843Z","updated":"2026-02-26T16:57:10.297Z","title":"In multiple locations of UsbDataAdvancedProtectionHook.java, there is a possible way to access USB data when the screen is off due to a race condition. This…","severity":"HIGH","score":7,"vendor":"Google","product":"Android","kev":false,"epss":0.00065,"kevAdded":null},{"id":"CVE-2025-48608","published":"2025-12-08T17:27:54.807Z","updated":"2025-12-08T19:39:44.874Z","title":"In isValidMediaUri of SettingsProvider.java, there is a possible cross user media read due to a missing permission check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.0007,"kevAdded":null},{"id":"CVE-2025-48606","published":"2025-12-08T17:27:53.735Z","updated":"2025-12-08T20:56:59.166Z","title":"In preparePackage of InstallPackageHelper.java, there is a possible way for an app to appear hidden upon installation without a mechanism to uninstall it due…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2025-48569","published":"2025-12-08T17:27:52.659Z","updated":"2025-12-08T19:45:26.318Z","title":"In multiple locations, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00072,"kevAdded":null},{"id":"CVE-2025-48639","published":"2025-12-08T16:57:52.485Z","updated":"2026-02-26T16:57:10.800Z","title":"In DefaultTransitionHandler.java, there is a possible way to unknowingly grant permissions to an app due to a tapjacking/overlay attack. This could lead to…","severity":"HIGH","score":7.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2025-48638","published":"2025-12-08T16:57:51.347Z","updated":"2026-02-26T16:57:11.387Z","title":"In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00106,"kevAdded":null},{"id":"CVE-2025-48637","published":"2025-12-08T16:57:50.299Z","updated":"2026-02-26T16:57:11.857Z","title":"In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00106,"kevAdded":null},{"id":"CVE-2025-48633","published":"2025-12-08T16:57:49.260Z","updated":"2026-02-26T16:57:12.360Z","title":"In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisioning due to a logic error in the code.…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":true,"epss":0.0026,"kevAdded":"2025-12-02"},{"id":"CVE-2025-48632","published":"2025-12-08T16:57:48.201Z","updated":"2026-02-26T16:57:12.794Z","title":"In setDisplayName of AssociationRequest.java, there is a possible way to cause CDM associations to persist after the user has disassociated them due to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00082,"kevAdded":null},{"id":"CVE-2025-48631","published":"2025-12-08T16:57:47.157Z","updated":"2026-03-06T03:41:33.386Z","title":"In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to remote denial of…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.0047,"kevAdded":null},{"id":"CVE-2025-48629","published":"2025-12-08T16:57:46.073Z","updated":"2026-02-26T16:57:13.316Z","title":"In findAvailRecognizer of VoiceInteractionManagerService.java, there is a possible way to become the default speech recognizer app due to an insecure default…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00082,"kevAdded":null},{"id":"CVE-2025-48628","published":"2025-12-08T16:57:44.832Z","updated":"2026-02-26T16:57:13.854Z","title":"In validateIconUserBoundary of PrintManagerService.java, there is a possible cross-user image leak due to a confused deputy. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00082,"kevAdded":null},{"id":"CVE-2025-48627","published":"2025-12-08T16:57:43.786Z","updated":"2026-02-26T16:57:14.324Z","title":"In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to launch an activity from the background due to a logic error in the…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00086,"kevAdded":null},{"id":"CVE-2025-48626","published":"2025-12-08T16:57:42.743Z","updated":"2026-02-26T16:57:14.803Z","title":"In multiple locations, there is a possible way to launch an application from the background due to a precondition check failure. This could lead to remote…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00377,"kevAdded":null},{"id":"CVE-2025-48624","published":"2025-12-08T16:57:41.715Z","updated":"2026-02-26T16:57:15.494Z","title":"In multiple functions of arm-smmu-v3.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2025-48623","published":"2025-12-08T16:57:40.686Z","updated":"2026-02-26T16:57:15.954Z","title":"In init_pkvm_hyp_vcpu of pkvm.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00106,"kevAdded":null},{"id":"CVE-2025-48622","published":"2025-12-08T16:57:39.354Z","updated":"2025-12-17T15:58:33.781Z","title":"In ProcessArea of dng_misc_opcodes.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local information disclosure with…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00107,"kevAdded":null},{"id":"CVE-2025-48621","published":"2025-12-08T16:57:38.281Z","updated":"2025-12-17T15:58:31.800Z","title":"In DefaultTransitionHandler.java, there is a possible way to enable a tapjacking attack due to a insecure default. This could lead to local escalation of…","severity":"HIGH","score":7.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00132,"kevAdded":null},{"id":"CVE-2025-48620","published":"2025-12-08T16:57:37.173Z","updated":"2026-02-26T16:57:16.407Z","title":"In onSomePackagesChanged of VoiceInteractionManagerService.java, there is a possible way for a third party application's component name to persist even after…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2025-48618","published":"2025-12-08T16:57:36.094Z","updated":"2025-12-17T15:58:27.810Z","title":"In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due to improper locking. This could lead to…","severity":"MEDIUM","score":6.6,"vendor":"Google","product":"Android","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2025-48615","published":"2025-12-08T16:57:35.044Z","updated":"2026-06-01T21:14:50.448Z","title":"In getComponentName of MediaButtonReceiverHolder.java, there is a possible desync in persistence due to resource exhaustion. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2025-48614","published":"2025-12-08T16:57:34.001Z","updated":"2025-12-17T15:58:23.783Z","title":"In rebootWipeUserData of RecoverySystem.java, there is a possible way to factory reset the device while in DSU mode due to a missing permission check. This…","severity":"MEDIUM","score":4.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00106,"kevAdded":null},{"id":"CVE-2025-48612","published":"2025-12-08T16:57:32.977Z","updated":"2026-06-01T21:14:50.282Z","title":"In setDefaultKey of DefaultPaymentSettings.java, there is a possible way for an application to set the main user's default NFC payment setting due to improper…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2025-48610","published":"2025-12-08T16:57:31.946Z","updated":"2025-12-17T15:58:19.762Z","title":"In __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possible configuration data leak due to a logic error in the code. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2025-48607","published":"2025-12-08T16:57:30.863Z","updated":"2025-12-17T15:58:17.792Z","title":"In multiple locations, there is a possible way to create a large amount of app ops due to a logic error in the code. This could lead to local denial of service…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00082,"kevAdded":null},{"id":"CVE-2025-48604","published":"2025-12-08T16:57:29.798Z","updated":"2025-12-17T15:58:15.757Z","title":"In multiple locations, there is a possible way to read files from another user due to a missing permission check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00084,"kevAdded":null},{"id":"CVE-2025-48603","published":"2025-12-08T16:57:28.750Z","updated":"2025-12-17T15:58:13.760Z","title":"In InputMethodInfo of InputMethodInfo.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2025-48601","published":"2025-12-08T16:57:27.717Z","updated":"2025-12-17T15:58:11.676Z","title":"In multiple locations, there is a possible permanent denial of service due to improper input validation. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00082,"kevAdded":null},{"id":"CVE-2025-48600","published":"2025-12-08T16:57:26.689Z","updated":"2026-11-02T19:52:56.739Z","title":"In multiple files, there is a possible way to reveal information across users due to a missing permission check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2025-48599","published":"2025-12-08T16:57:25.619Z","updated":"2026-02-26T16:57:17.836Z","title":"In multiple functions of WifiScanModeActivity.java, there is a possible way to bypass a device config restriction due to a missing permission check. This could…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00082,"kevAdded":null},{"id":"CVE-2025-48598","published":"2025-12-08T16:57:24.597Z","updated":"2025-12-17T15:58:07.351Z","title":"In multiple locations, there is a possible way to alter the primary user's face unlock settings due to a confused deputy. This could lead to physical…","severity":"MEDIUM","score":6.6,"vendor":"Google","product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2025-48597","published":"2025-12-08T16:57:23.573Z","updated":"2026-02-26T16:57:18.404Z","title":"In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00081,"kevAdded":null},{"id":"CVE-2025-48596","published":"2025-12-08T16:57:22.538Z","updated":"2026-02-26T16:57:18.853Z","title":"In appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2025-48594","published":"2025-12-08T16:57:21.515Z","updated":"2026-02-26T16:57:19.329Z","title":"In onUidImportance of DisassociationProcessor.java, there is a possible way to retain companion application privileges after disassociation due to improper…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2025-48592","published":"2025-12-08T16:57:20.472Z","updated":"2025-12-17T15:57:59.165Z","title":"In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00347,"kevAdded":null},{"id":"CVE-2025-48591","published":"2025-12-08T16:57:19.421Z","updated":"2025-12-17T15:57:57.148Z","title":"In multiple locations, there is a possible way to read files from another user due to a missing permission check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2025-48590","published":"2025-12-08T16:57:18.267Z","updated":"2025-12-17T15:57:55.121Z","title":"In verifyAndGetBypass of AppOpsService.java, there is a possible method for a malicious app to prevent dialing emergency services under limited circumstances…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2025-48589","published":"2025-12-08T16:57:17.177Z","updated":"2026-02-26T16:57:19.916Z","title":"In multiple functions of HeaderPrivacyIconsController.kt, there is a possible way to grand permissions across user due to a logic error in the code. This could…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2025-48588","published":"2025-12-08T16:57:16.064Z","updated":"2026-02-26T16:57:20.529Z","title":"In startAlwaysOnVpn of Vpn.java, there is a possible way to disable always-on VPN due to a logic error in the code. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2025-48586","published":"2025-12-08T16:57:15.034Z","updated":"2026-02-26T16:57:21.078Z","title":"In onActivityResult of EditFdnContactScreen.java, there is a possible way to leak contacts from the work profile due to a confused deputy. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00088,"kevAdded":null},{"id":"CVE-2025-48584","published":"2025-12-08T16:57:13.962Z","updated":"2025-12-17T15:57:46.939Z","title":"In multiple functions of NotificationManagerService.java, there is a possible way to bypass the per-package channel limits causing resource exhaustion. This…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2025-48583","published":"2025-12-08T16:57:12.905Z","updated":"2026-02-26T16:57:21.572Z","title":"In multiple functions of BaseBundle.java, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2025-48580","published":"2025-12-08T16:57:11.828Z","updated":"2026-02-26T16:57:22.034Z","title":"In connectInternal of MediaBrowser.java, there is a possible way to access while in use permission while the app is in background due to a logic error in the…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00126,"kevAdded":null},{"id":"CVE-2025-48576","published":"2025-12-08T16:57:10.729Z","updated":"2025-12-17T15:57:40.844Z","title":"In updateNotificationChannelGroupFromPrivilegedListener of NotificationManagerService.java, there is a possible permanent denial of service due to resource…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2025-48575","published":"2025-12-08T16:57:09.682Z","updated":"2026-02-26T16:57:22.542Z","title":"In multiple functions of CertInstaller.java, there is a possible way to install certificates due to a permissions bypass. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00068,"kevAdded":null},{"id":"CVE-2025-48573","published":"2025-12-08T16:57:08.515Z","updated":"2026-02-26T16:57:22.994Z","title":"In sendCommand of MediaSessionRecord.java, there is a possible way to launch the foreground service while the app is in the background due to FGS while-in-use…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00088,"kevAdded":null},{"id":"CVE-2025-48572","published":"2025-12-08T16:57:07.461Z","updated":"2026-02-26T16:57:23.517Z","title":"In multiple locations, there is a possible way to launch activities from the background due to a permissions bypass. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":true,"epss":0.00259,"kevAdded":"2025-12-02"},{"id":"CVE-2025-48566","published":"2025-12-08T16:57:06.427Z","updated":"2026-09-08T18:04:25.248Z","title":"In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00131,"kevAdded":null},{"id":"CVE-2025-48565","published":"2025-12-08T16:57:05.400Z","updated":"2026-09-08T18:04:23.159Z","title":"In multiple locations, there is a possible way to bypass the cross profile intent filter due to a logic error in the code. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00137,"kevAdded":null},{"id":"CVE-2025-48564","published":"2025-12-08T16:57:04.311Z","updated":"2026-09-08T18:04:21.056Z","title":"In multiple locations, there is a possible intent filter bypass due to a race condition. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7,"vendor":"Google","product":"Android","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2025-48555","published":"2025-12-08T16:57:03.166Z","updated":"2026-02-26T16:57:25.447Z","title":"In multiple functions of NotificationStation.java, there is a possible cross-profile information disclosure due to a confused deputy. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00086,"kevAdded":null},{"id":"CVE-2025-48536","published":"2025-12-08T16:57:02.019Z","updated":"2026-02-26T16:57:25.937Z","title":"In grantAllowlistedPackagePermissions of SettingsSliceProvider.java, there is a possible way for a third party app to modify secure settings due to a confused…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00086,"kevAdded":null},{"id":"CVE-2025-48525","published":"2025-12-08T16:57:00.905Z","updated":"2026-02-26T16:57:26.516Z","title":"In disassociate of DisassociationProcessor.java, there is a possible way for an app to continue reading notifications when not associated to a companion device…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2025-32329","published":"2025-12-08T16:56:59.847Z","updated":"2026-02-26T16:57:26.984Z","title":"In multiple functions of Session.java, there is a possible way to view images belonging to a different user of the device due to a logic error in the code.…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2025-32328","published":"2025-12-08T16:56:58.809Z","updated":"2026-02-26T16:57:27.478Z","title":"In multiple functions of Session.java, there is a possible way to view images belonging to a different user of the device due to a logic error in the code.…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2025-32319","published":"2025-12-08T16:56:57.793Z","updated":"2026-02-26T16:57:27.935Z","title":"In ensureBound of RemotePrintService.java, there is a possible way for a background app to keep foreground permissions due to a permissions bypass. This could…","severity":"MEDIUM","score":6.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2025-22432","published":"2025-12-08T16:56:56.761Z","updated":"2026-02-26T16:57:28.504Z","title":"In notifyTimeout of CallRedirectionProcessor.java, there is a possible persistent connection due to improper input validation. This could lead to local…","severity":"MEDIUM","score":6.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2025-22420","published":"2025-12-08T16:56:55.708Z","updated":"2026-02-26T16:57:28.998Z","title":"In multiple locations, there is a possible way to leak audio files across user profiles due to a confused deputy. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00081,"kevAdded":null},{"id":"CVE-2025-48593","published":"2025-11-18T04:51:57.663Z","updated":"2026-02-26T16:56:47.324Z","title":"In bta_hf_client_cb_init of bta_hf_client_main.cc, there is a possible remote code execution due to a use after free. This could lead to remote code execution…","severity":"HIGH","score":8,"vendor":"Google","product":"Android","kev":false,"epss":0.00871,"kevAdded":null},{"id":"CVE-2025-32320","published":"2025-09-05T16:10:08.196Z","updated":"2026-02-26T17:49:12.446Z","title":"In System UI, there is a possible way to view other users' images due to a confused deputy. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00078,"kevAdded":null},{"id":"CVE-2025-32318","published":"2025-09-05T16:10:07.061Z","updated":"2026-02-26T17:49:12.771Z","title":"In Skia, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00297,"kevAdded":null},{"id":"CVE-2025-32317","published":"2025-09-05T16:10:06.002Z","updated":"2025-09-05T16:43:02.650Z","title":"In App Widget, there is a possible Information Disclosure due to a confused deputy. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00075,"kevAdded":null},{"id":"CVE-2025-32316","published":"2025-09-05T16:10:04.806Z","updated":"2025-09-05T16:44:02.720Z","title":"In gralloc4, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null},{"id":"CVE-2025-26461","published":"2025-09-05T16:10:03.595Z","updated":"2025-09-05T17:03:52.638Z","title":"In Permission Manager, there is a possible way for the microphone privacy indicator to remain activated even after the user attempts to close the app due to a…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00081,"kevAdded":null},{"id":"CVE-2025-26434","published":"2025-09-05T16:10:02.497Z","updated":"2025-09-05T16:45:05.233Z","title":"In libxml2, there is a possible out of bounds read due to a buffer overflow. This could lead to local information disclosure with no additional execution…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00081,"kevAdded":null},{"id":"CVE-2024-0028","published":"2025-09-05T16:10:01.094Z","updated":"2025-09-05T16:56:16.231Z","title":"In Audio Service, there is a possible way to obtain MAC addresses of nearby Bluetooth devices due to a missing permission check. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00075,"kevAdded":null},{"id":"CVE-2025-32322","published":"2025-09-04T19:39:27.026Z","updated":"2025-09-04T20:02:46.048Z","title":"In onCreate of MediaProjectionPermissionActivity.java , there is a possible way to grant a malicious app a token enabling unauthorized screen recording…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00082,"kevAdded":null},{"id":"CVE-2025-26439","published":"2025-09-04T19:28:10.842Z","updated":"2026-02-26T17:49:14.017Z","title":"In getComponentName of AccessibilitySettingsUtils.java, there is a possible way to for a malicious Talkback service to be enabled instead of the system…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2025-26431","published":"2025-09-04T19:28:09.809Z","updated":"2026-02-26T17:49:14.396Z","title":"In setupAccessibilityServices of AccessibilityFragment.java, there is a possible way to hide an enabled accessibility service due to a logic error in the code.…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2025-26419","published":"2025-09-04T19:28:08.789Z","updated":"2026-02-26T17:49:14.792Z","title":"In initPhoneSwitch of SystemSettingsFragment.java, there is a possible FRP bypass due to a logic error in the code. This could lead to local escalation of…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00088,"kevAdded":null},{"id":"CVE-2024-40664","published":"2025-09-04T19:28:07.752Z","updated":"2025-09-05T15:29:36.633Z","title":"In setupAccessibilityServices of AccessibilityFragment.java , there is a possible way to hide an enabled accessibility service due to a logic error in the…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00081,"kevAdded":null},{"id":"CVE-2025-22415","published":"2025-09-04T19:23:54.678Z","updated":"2026-11-03T22:02:55.421Z","title":"In android_app of Android.bp, there is a possible way to launch any activity as a system user. This could lead to local escalation of privilege with no…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null},{"id":"CVE-2025-22414","published":"2025-09-04T19:23:53.589Z","updated":"2026-02-26T17:49:15.305Z","title":"In FrpBypassAlertActivity of FrpBypassAlertActivity.java, there is a possible way to bypass FRP due to a missing permission check. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00081,"kevAdded":null},{"id":"CVE-2024-49731","published":"2025-09-04T19:18:59.502Z","updated":"2026-11-03T21:52:42.580Z","title":"In apk-versions.txt, there is a possible corruption of telemetry opt-in settings on other watches when setting up a new Pixel Watch due to a logic error in the…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2025-48581","published":"2025-09-04T18:34:41.808Z","updated":"2026-06-01T21:14:49.832Z","title":"In VerifyNoOverlapInSessions of apexd.cpp, there is a possible way to block security updates due to a logic error in the code. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00199,"kevAdded":null},{"id":"CVE-2025-48563","published":"2025-09-04T18:34:40.807Z","updated":"2026-02-26T17:49:16.223Z","title":"In onNullBinding of RemoteFillService.java, there is a possible background activity launch due to an insecure default value. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00088,"kevAdded":null},{"id":"CVE-2025-48562","published":"2025-09-04T18:34:39.793Z","updated":"2025-09-08T18:59:15.112Z","title":"In writeContent of RemotePrintDocument.java, there is a possible information disclosure due to a logic error. This could lead to local information disclosure…","severity":"MEDIUM","score":5,"vendor":"Google","product":"Android","kev":false,"epss":0.00088,"kevAdded":null},{"id":"CVE-2025-48561","published":"2025-09-04T18:34:38.810Z","updated":"2025-09-08T19:05:09.392Z","title":"In multiple locations, there is a possible way to access data displayed on the screen due to side channel information disclosure. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00135,"kevAdded":null},{"id":"CVE-2025-48560","published":"2025-09-04T18:34:37.798Z","updated":"2025-09-04T20:16:37.128Z","title":"In AndroidManifest.xml, there is a possible way for an app to monitor motion events due to a confused deputy. This could lead to local information disclosure…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00075,"kevAdded":null},{"id":"CVE-2025-48559","published":"2025-09-04T18:34:36.799Z","updated":"2025-09-04T20:17:13.154Z","title":"In multiple functions of AppOpsService.java, there is a possible add a large amount of app ops due to improper input validation. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.0009,"kevAdded":null},{"id":"CVE-2025-48558","published":"2025-09-04T18:34:35.810Z","updated":"2026-02-26T17:49:16.591Z","title":"In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent intended for system app due to Implicit intent hijacking. This…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.0008,"kevAdded":null},{"id":"CVE-2025-48556","published":"2025-09-04T18:34:34.767Z","updated":"2026-02-26T17:49:16.770Z","title":"In multiple methods of NotificationChannel.java, there is a possible desynchronization from persistence due to improper input validation. This could lead to…","severity":"HIGH","score":7.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2025-48554","published":"2025-09-04T18:34:33.748Z","updated":"2025-09-05T13:46:22.611Z","title":"In handlePackagesChanged of DevicePolicyManagerService.java, there is a possible persistent denial of service due to a logic error in the code. This could lead…","severity":"MEDIUM","score":6.1,"vendor":"Google","product":"Android","kev":false,"epss":0.00084,"kevAdded":null},{"id":"CVE-2025-48553","published":"2025-09-04T18:34:32.730Z","updated":"2026-02-26T17:49:17.065Z","title":"In handlePackagesChanged of DevicePolicyManagerService.java, there is a possible DoS of a device admin due to a logic error in the code. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2025-48552","published":"2025-09-04T18:34:31.731Z","updated":"2026-02-26T17:49:17.426Z","title":"In saveGlobalProxyLocked of DevicePolicyManagerService.java, there is a possible way to desync from persistence due to a logic error in the code. This could…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2025-48551","published":"2025-09-04T18:34:30.724Z","updated":"2025-09-04T20:18:10.874Z","title":"In multiple locations, there is a possible leak of an image across the Android User isolation boundary due to a confused deputy. This could lead to local…","severity":"MEDIUM","score":5,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null},{"id":"CVE-2025-48550","published":"2025-09-04T18:34:29.739Z","updated":"2025-09-04T20:18:50.739Z","title":"In testGrantSlicePermission of SliceManagerTest.java, there is a possible permanent denial of service due to a path traversal error. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2025-48549","published":"2025-09-04T18:34:28.739Z","updated":"2026-02-26T17:49:17.764Z","title":"In multiple locations, there is a possible way to record audio via a background app due to a missing permission check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2025-48548","published":"2025-09-04T18:34:27.710Z","updated":"2026-02-26T17:49:18.120Z","title":"In multiple functions of AppOpsControllerImpl.java, there is a possible way to record audio without displaying the privacy indicator due to a race condition.…","severity":"HIGH","score":7.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2025-48547","published":"2025-09-04T18:34:26.685Z","updated":"2026-02-26T17:49:18.461Z","title":"In multiple locations, there is a possible one-time permission bypass due to a logic error in the code. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00086,"kevAdded":null},{"id":"CVE-2025-48546","published":"2025-09-04T18:34:25.673Z","updated":"2026-02-26T17:49:18.638Z","title":"In checkPermissions of SafeActivityOptions.java, there is a possible background activity launch due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2025-48545","published":"2025-09-04T18:34:24.644Z","updated":"2026-03-04T14:23:54.984Z","title":"In isSystemUid of AccountManagerService.java, there is a possible way for an app to access privileged APIs due to a confused deputy. This could lead to local…","severity":"HIGH","score":7.1,"vendor":"Google","product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2025-48544","published":"2025-09-04T18:34:23.649Z","updated":"2026-03-06T03:13:01.072Z","title":"In multiple locations, there is a possible way to read files belonging to other apps due to SQL injection. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2025-48543","published":"2025-09-04T18:34:22.655Z","updated":"2026-02-26T17:49:19.685Z","title":"In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use after free. This could lead to local…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":true,"epss":0.00656,"kevAdded":"2025-09-04"},{"id":"CVE-2025-48542","published":"2025-09-04T18:34:21.658Z","updated":"2025-09-04T19:52:22.875Z","title":"In multiple functions of AccountManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00081,"kevAdded":null},{"id":"CVE-2025-48541","published":"2025-09-04T18:34:20.644Z","updated":"2026-02-26T17:49:20.094Z","title":"In onCreate of FaceSettings.java, there is a possible way to remove biometric unlock across user profiles due to improper input validation. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2025-48540","published":"2025-09-04T18:34:19.631Z","updated":"2026-02-26T17:49:20.445Z","title":"In processTransactInternal of RpcState.cpp, there is a possible local out of memory write due to a logic error in the code. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2025-48539","published":"2025-09-04T18:34:18.652Z","updated":"2026-02-26T17:49:20.598Z","title":"In SendPacketToPeer of acl_arbiter.cc, there is a possible out of bounds read due to a use after free. This could lead to remote (proximal/adjacent) code…","severity":"HIGH","score":8,"vendor":"Google","product":"Android","kev":false,"epss":0.00437,"kevAdded":null},{"id":"CVE-2025-48538","published":"2025-09-04T18:34:17.642Z","updated":"2025-09-04T20:22:57.955Z","title":"In setApplicationHiddenSettingAsUser of PackageManagerService.java, there is a possible way to hide a system critical package due to improper input validation.…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00084,"kevAdded":null},{"id":"CVE-2025-48537","published":"2025-09-04T18:34:16.616Z","updated":"2025-09-04T20:24:07.971Z","title":"In multiple locations, there is a possible way to persistently DoS the device due to improper input validation. This could lead to local information disclosure…","severity":"HIGH","score":7.1,"vendor":"Google","product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2025-48535","published":"2025-09-04T18:34:15.589Z","updated":"2026-02-26T17:49:20.890Z","title":"In assertSafeToStartCustomActivity of AppRestrictionsFragment.java , there is a possible way to exploit a parcel mismatch resulting in a launch anywhere…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2025-48534","published":"2025-09-04T18:34:14.563Z","updated":"2025-09-05T13:48:41.724Z","title":"In getDefaultCBRPackageName of CellBroadcastHandler.java, there is a possible escalation of privilege due to a logic error in the code. This could lead to…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00294,"kevAdded":null},{"id":"CVE-2025-48532","published":"2025-09-04T18:34:13.538Z","updated":"2026-02-26T17:49:21.173Z","title":"In markMediaAsFavorite of MediaProvider.java, there is a possible way to bypass the WRITE_EXTERNAL_STORAGE permission due to a confused deputy. This could lead…","severity":"HIGH","score":7.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2025-48531","published":"2025-09-04T18:34:12.489Z","updated":"2026-02-26T17:49:21.479Z","title":"In getCallingPackageName of CredentialStorage, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2025-48529","published":"2025-09-04T18:34:11.346Z","updated":"2025-09-04T20:27:57.757Z","title":"In setRingtoneUri of VoicemailNotificationSettingsUtil.java , there is a possible cross user data leak due to a confused deputy. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00085,"kevAdded":null},{"id":"CVE-2025-48528","published":"2025-09-04T18:34:10.219Z","updated":"2026-11-03T22:03:04.922Z","title":"In multiple locations, there is a possible way to overlay biometrics due to a tapjacking/overlay attack. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.0009,"kevAdded":null},{"id":"CVE-2025-48527","published":"2025-09-04T18:34:09.061Z","updated":"2025-09-05T15:08:36.842Z","title":"In multiple locations, there is a possible way to leak hidden work profile notifications due to a logic error in the code. This could lead to local information…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2025-48526","published":"2025-09-04T18:34:07.920Z","updated":"2026-11-03T22:03:04.765Z","title":"In createMultiProfilePagerAdapter of ChooserActivity.java , there is a possible way for an app to launch the ChooserActivity in another profile due to improper…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.0009,"kevAdded":null},{"id":"CVE-2025-48524","published":"2025-09-04T18:34:06.885Z","updated":"2025-09-05T17:23:17.692Z","title":"In isSystem of WifiPermissionsUtil.java, there is a possible permission bypass due to a missing permission check. This could lead to local denial of service…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2025-48523","published":"2025-09-04T18:34:05.838Z","updated":"2026-02-26T17:49:22.362Z","title":"In onCreate of SelectAccountActivity.java, there is a possible way to add contacts without permission due to a logic error in the code. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2025-48522","published":"2025-09-04T18:34:04.810Z","updated":"2026-02-26T17:49:22.683Z","title":"In setDisplayName of AssociationRequest.java, there is a possible way for an app to retain CDM association due to a logic error in the code. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00099,"kevAdded":null},{"id":"CVE-2025-32350","published":"2025-09-04T18:34:03.809Z","updated":"2026-02-26T17:49:23.018Z","title":"In maybeShowDialog of ControlsSettingsDialogManager.kt, there is a possible overlay of the ControlsSettingsDialog due to a tapjacking/overlay attack. This…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00086,"kevAdded":null},{"id":"CVE-2025-32349","published":"2025-09-04T18:34:02.796Z","updated":"2026-02-26T17:49:23.392Z","title":"In multiple locations, there is a possible privilege escalation due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2025-32347","published":"2025-09-04T18:34:01.756Z","updated":"2026-02-26T17:49:23.703Z","title":"In onStart of BiometricEnrollIntroduction.java, there is a possible way to determine the device's location due to an unsafe PendingIntent. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00086,"kevAdded":null},{"id":"CVE-2025-32346","published":"2025-09-04T18:34:00.694Z","updated":"2026-02-26T17:49:23.900Z","title":"In onActivityResult of VoicemailSettingsActivity.java, there is a possible work profile contact number leak due to a confused deputy. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00082,"kevAdded":null},{"id":"CVE-2025-32345","published":"2025-09-04T18:33:59.684Z","updated":"2026-02-26T17:49:24.341Z","title":"In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a secondary user to disable the primary user's deceptive app…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2025-32333","published":"2025-09-04T18:33:58.672Z","updated":"2026-02-26T17:49:24.656Z","title":"In startSpaActivityForApp of SpaActivity.kt, there is a possible cross-user permission bypass due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2025-32332","published":"2025-09-04T18:33:57.653Z","updated":"2026-02-26T17:49:24.972Z","title":"In multiple locations, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2025-32331","published":"2025-09-04T18:33:56.600Z","updated":"2026-02-26T17:49:25.296Z","title":"In showDismissibleKeyguard of KeyguardService.java, there is a possible way to bypass app pinning due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2025-32330","published":"2025-09-04T18:33:55.600Z","updated":"2025-09-05T17:19:32.423Z","title":"In generateRandomPassword of LocalBluetoothLeBroadcast.java, there is a possible way to intercept the Auracast audio stream due to an insecure default value.…","severity":"MEDIUM","score":5.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00128,"kevAdded":null},{"id":"CVE-2025-32327","published":"2025-09-04T18:33:54.594Z","updated":"2026-02-26T17:49:25.615Z","title":"In multiple functions of PickerDbFacade.java, there is a possible unauthorized data access due to SQL injection. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2025-32326","published":"2025-09-04T18:33:53.562Z","updated":"2026-02-26T17:49:25.769Z","title":"In multiple functions of AppRestrictionsFragment.java, there is a possible way to bypass intent security check due to a confused deputy. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2025-32325","published":"2025-09-04T18:33:52.544Z","updated":"2026-02-26T17:49:26.078Z","title":"In appendFrom of Parcel.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2025-32324","published":"2025-09-04T18:33:51.515Z","updated":"2026-02-26T17:49:26.420Z","title":"In onCommand of ActivityManagerShellCommand.java, there is a possible arbitrary activity launch due to a confused deputy. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2025-32323","published":"2025-09-04T18:33:50.501Z","updated":"2025-09-05T17:17:40.011Z","title":"In getCallingAppName of Shared.java, there is a possible way to trick users into granting file access via deceptive text in a permission popup due to improper…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2025-32321","published":"2025-09-04T18:33:49.472Z","updated":"2026-02-26T17:49:26.716Z","title":"In isSafeIntent of AccountTypePreferenceLoader.java, there is a possible way to bypass an intent type check due to a confused deputy. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2025-26464","published":"2025-09-04T18:33:48.471Z","updated":"2026-02-26T17:49:27.022Z","title":"In executeAppFunction of AppSearchManagerService.java, there is a possible background activity launch due to a logic error in the code. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00099,"kevAdded":null},{"id":"CVE-2025-26454","published":"2025-09-04T18:33:47.465Z","updated":"2026-02-26T17:49:27.181Z","title":"In validateUriSchemeAndPermission of DisclaimersParserImpl.java , there is a possible way to access data from another user due to a confused deputy. This could…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2025-0089","published":"2025-09-04T18:33:46.476Z","updated":"2026-02-26T17:49:27.554Z","title":"In multiple locations, there is a possible way to hijack the Launcher app due to a logic error in the code. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2025-0076","published":"2025-09-04T18:33:45.415Z","updated":"2025-09-05T15:16:52.689Z","title":"In multiple locations, there is a possible way to view icons belonging to another user due to a missing permission check. This could lead to local information…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2024-49714","published":"2025-09-04T18:33:44.377Z","updated":"2026-02-26T17:49:27.966Z","title":"In avrc_vendor_msg of avrc_opt.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to paired device escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2025-48533","published":"2025-09-04T18:17:27.065Z","updated":"2025-09-05T15:09:40.842Z","title":"In multiple locations, there is a possible way to use apps linked from a context menu of a lockscreen app due to a race condition. This could lead to local…","severity":"HIGH","score":7,"vendor":"Google","product":"Android","kev":false,"epss":0.0009,"kevAdded":null},{"id":"CVE-2025-48530","published":"2025-09-04T18:17:26.058Z","updated":"2025-09-05T15:07:57.861Z","title":"In multiple locations, there is a possible condition that results in OOB accesses due to an incorrect bounds check. This could lead to remote code execution in…","severity":"HIGH","score":8.1,"vendor":"Google","product":"Android","kev":false,"epss":0.00515,"kevAdded":null},{"id":"CVE-2025-22441","published":"2025-09-04T18:17:24.935Z","updated":"2026-02-26T17:49:28.333Z","title":"In getContextForResourcesEnsuringCorrectCachedApkPaths of RemoteViews.java, there is a possible way to load arbitrary java code in a privileged context due to…","severity":"HIGH","score":7.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00121,"kevAdded":null},{"id":"CVE-2025-32312","published":"2025-09-04T17:15:08.208Z","updated":"2026-02-26T17:49:28.655Z","title":"In createIntentsList of PackageParser.java , there is a possible way to bypass lazy bundle hardening, allowing modified data to be passed to the next process…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2025-26463","published":"2025-09-04T17:15:07.161Z","updated":"2025-09-05T15:13:58.416Z","title":"In allowPackageAccess of multiple files, resource exhaustion is possible when repeatedly adding allowed packages. This could lead to a local persistent denial…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00086,"kevAdded":null},{"id":"CVE-2025-26462","published":"2025-09-04T17:15:06.107Z","updated":"2026-02-26T17:49:28.795Z","title":"In AccessibilityServiceConnection.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00084,"kevAdded":null},{"id":"CVE-2025-26458","published":"2025-09-04T17:15:04.973Z","updated":"2025-09-05T21:01:44.842Z","title":"In multiple functions of LocationProviderManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2025-26456","published":"2025-09-04T17:15:03.841Z","updated":"2026-02-26T17:49:29.174Z","title":"In multiple functions of DexUseManagerLocal.java, there is a possible way to crash system server due to a logic error in the code. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2025-26455","published":"2025-09-04T17:15:02.803Z","updated":"2026-02-26T17:49:29.624Z","title":"In multiple functions of NdkMediaCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2025-26453","published":"2025-09-04T17:15:01.776Z","updated":"2025-09-05T21:02:37.428Z","title":"In isContentUriForOtherUser of BluetoothOppSendFileInfo.java, there is a possible cross user data leak due to a logic error in the code. This could lead to…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2025-26452","published":"2025-09-04T17:15:00.710Z","updated":"2026-02-26T17:49:29.975Z","title":"In loadDrawableForCookie of ResourcesImpl.java, there is a possible way to access task snapshots of other apps due to a confused deputy. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.0008,"kevAdded":null},{"id":"CVE-2025-26450","published":"2025-09-04T17:14:59.689Z","updated":"2026-02-26T17:49:30.388Z","title":"In onInputEvent of IInputMethodSessionWrapper.java, there is a possible way for an untrusted app to inject key and motion events to the default IME due to a…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.0008,"kevAdded":null},{"id":"CVE-2025-26449","published":"2025-09-04T17:14:58.696Z","updated":"2025-09-05T17:16:07.539Z","title":"In multiple locations, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00082,"kevAdded":null},{"id":"CVE-2025-26448","published":"2025-09-04T17:14:57.681Z","updated":"2025-09-05T17:15:49.551Z","title":"In writeToParcel of CursorWindow.cpp, there is a possible out of bounds read due to uninitialized data. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00084,"kevAdded":null},{"id":"CVE-2025-26445","published":"2025-09-04T17:14:56.675Z","updated":"2025-09-05T17:15:17.422Z","title":"In offerNetwork of ConnectivityService.java, there is a possible leak of sensitive data due to a missing permission check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null},{"id":"CVE-2025-26443","published":"2025-09-04T17:14:55.668Z","updated":"2026-02-26T17:49:30.737Z","title":"In parseHtml of HtmlToSpannedParser.java, there is a possible way to install apps without allowing installation from unknown sources due to a logic error in…","severity":"HIGH","score":7.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2025-26441","published":"2025-09-04T17:14:54.679Z","updated":"2025-09-05T17:14:53.150Z","title":"In add_attr of sdp_discovery.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00289,"kevAdded":null},{"id":"CVE-2025-26437","published":"2025-09-04T17:14:53.688Z","updated":"2025-09-05T17:13:58.055Z","title":"In CredentialManagerServiceStub of CredentialManagerService.java, there is a possible way to retrieve candidate credentials due to a missing permission check.…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null},{"id":"CVE-2025-26432","published":"2025-09-04T17:14:52.661Z","updated":"2025-09-05T17:13:21.582Z","title":"In multiple locations, there is a possible way to persistently DoS the device due to a missing length check. This could lead to local denial of service with no…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00081,"kevAdded":null},{"id":"CVE-2025-26444","published":"2025-09-04T17:12:00.227Z","updated":"2026-02-26T17:49:30.885Z","title":"In onHandleForceStop of VoiceInteractionManagerService.java, there is a bug that could cause the system to incorrectly revert to the default assistant…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2025-26442","published":"2025-09-04T17:11:59.208Z","updated":"2025-09-05T21:03:06.878Z","title":"In onCreate of NotificationAccessConfirmationActivity.java, there is a possible incorrect verification of proper intent filters in NLS due to a logic error in…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2025-26440","published":"2025-09-04T17:11:58.203Z","updated":"2026-02-26T17:49:31.314Z","title":"In multiple functions of CameraService.cpp, there is a possible way to use the camera from the background due to a permissions bypass. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2025-26438","published":"2025-09-04T17:11:57.204Z","updated":"2026-02-26T17:49:31.660Z","title":"In smp_process_secure_connection_oob_data of smp_act.cc, there is a possible way to bypass SMP authentication due to Incorrect implementation of a protocol.…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00345,"kevAdded":null},{"id":"CVE-2025-26436","published":"2025-09-04T17:11:56.198Z","updated":"2026-02-26T17:49:32.210Z","title":"In clearAllowBgActivityStarts of PendingIntentRecord.java, there is a possible way for an application to launch an activity from the background due to BAL…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2025-26435","published":"2025-09-04T17:11:55.213Z","updated":"2026-02-26T17:49:32.599Z","title":"In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a secondary user to disable the primary user's deceptive app…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00084,"kevAdded":null},{"id":"CVE-2025-26430","published":"2025-09-04T17:11:54.225Z","updated":"2026-02-26T17:49:32.758Z","title":"In getDestinationForApp of SpaAppBridgeActivity, there is a possible cross-user file reveal due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00084,"kevAdded":null},{"id":"CVE-2025-26429","published":"2025-09-04T17:11:53.241Z","updated":"2025-09-04T20:29:27.190Z","title":"In collectOps of AppOpsService.java, there is a possible way to cause permanent DoS due to improper input validation. This could lead to local denial of…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00081,"kevAdded":null},{"id":"CVE-2025-26428","published":"2025-09-04T17:11:52.227Z","updated":"2025-09-04T19:56:38.539Z","title":"In startLockTaskMode of LockTaskController.java, there is a possible lock screen bypass due to a logic error in the code. This could lead to physical…","severity":"LOW","score":3.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2025-26427","published":"2025-09-04T17:11:51.207Z","updated":"2026-02-26T17:49:33.108Z","title":"In multiple locations, there is a possible Android/data access due to a path traversal error. This could lead to local escalation of privilege with no…","severity":"MEDIUM","score":4.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2025-26426","published":"2025-09-04T17:11:50.204Z","updated":"2026-02-26T17:49:33.561Z","title":"In BroadcastController.java of registerReceiverWithFeatureTraced, there is a possible way to receive broadcasts meant for the \"android\" package due to improper…","severity":"MEDIUM","score":5.1,"vendor":"Google","product":"Android","kev":false,"epss":0.00106,"kevAdded":null},{"id":"CVE-2025-26425","published":"2025-09-04T17:11:49.190Z","updated":"2026-02-26T17:49:33.956Z","title":"In multiple functions of RoleService.java, there is a possible permission squatting vulnerability due to a logic error in the code. This could lead to local…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2025-26424","published":"2025-09-04T17:11:48.204Z","updated":"2025-09-04T19:53:35.883Z","title":"In multiple functions of VpnManager.java, there is a possible cross-user data leak due to a logic error in the code. This could lead to local information…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2025-26423","published":"2025-09-04T17:11:47.202Z","updated":"2026-02-26T17:49:35.382Z","title":"In validateIpConfiguration of WifiConfigurationUtil.java, there is a possible way to trigger a permanent DoS due to a missing bounds check. This could lead to…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2025-26422","published":"2025-09-04T17:11:46.184Z","updated":"2026-11-03T22:02:56.908Z","title":"In dump of WindowManagerService.java, there is a possible way of running dumpsys without the required permission due to a missing permission check. This could…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.0009,"kevAdded":null},{"id":"CVE-2025-26421","published":"2025-09-04T17:11:45.166Z","updated":"2026-02-26T17:49:36.104Z","title":"In multiple locations, there is a possible lock screen bypass due to a logic error in the code. This could lead to local escalation of privilege with no…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2025-26420","published":"2025-09-04T17:11:44.171Z","updated":"2026-02-26T17:49:36.572Z","title":"In multiple functions of GrantPermissionsActivity.java , there is a possible way to trick the user into granting the incorrect permission due to permission…","severity":"MEDIUM","score":4.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00088,"kevAdded":null},{"id":"CVE-2025-22425","published":"2025-09-04T17:11:43.156Z","updated":"2026-02-26T17:49:37.072Z","title":"In onCreate of InstallStart.java, there is a possible permissions bypass due to improper input validation. This could lead to local escalation of privilege…","severity":"MEDIUM","score":5.1,"vendor":"Google","product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2025-0087","published":"2025-09-04T17:11:42.123Z","updated":"2025-09-04T19:47:43.791Z","title":"In onCreate of UninstallerActivity.java, there is a possible way to uninstall a different user's app due to a missing permission check. This could lead to…","severity":"MEDIUM","score":5.1,"vendor":"Google","product":"Android","kev":false,"epss":0.00219,"kevAdded":null},{"id":"CVE-2025-0077","published":"2025-09-04T17:11:41.138Z","updated":"2026-11-03T21:52:46.915Z","title":"In multiple functions of UserController.java, there is a possible lock screen bypass due to a race condition. This could lead to local escalation of privilege…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2024-49739","published":"2025-09-04T17:11:40.123Z","updated":"2026-02-26T17:49:37.912Z","title":"In MMapVAccess of pmr_os.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2023-35657","published":"2025-09-04T17:11:37.011Z","updated":"2025-09-04T19:43:24.312Z","title":"In bta_av_config_ind of bta_av_aact.cc, there is a possible out of bounds read due to type confusion. This could lead to local information disclosure with no…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2025-26416","published":"2025-09-02T22:11:27.751Z","updated":"2026-02-26T17:49:47.668Z","title":"In initializeSwizzler of SkBmpStandardCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00536,"kevAdded":null},{"id":"CVE-2025-22442","published":"2025-09-02T22:11:26.672Z","updated":"2026-11-02T19:52:53.652Z","title":"In multiple functions of DevicePolicyManagerService.java, there is a possible way to install unauthorized applications into a newly created work profile due to…","severity":"HIGH","score":7,"vendor":"Google","product":"Android","kev":false,"epss":0.00062,"kevAdded":null},{"id":"CVE-2025-22439","published":"2025-09-02T22:11:25.681Z","updated":"2026-02-26T17:49:48.447Z","title":"In onLastAccessedStackLoaded of ActionHandler.java , there is a possible way to bypass storage restrictions across apps due to a missing permission check. This…","severity":"HIGH","score":7.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00081,"kevAdded":null},{"id":"CVE-2025-22438","published":"2025-09-02T22:11:24.666Z","updated":"2026-02-26T17:49:48.594Z","title":"In afterKeyEventLockedInterruptable of InputDispatcher.cpp, there is a possible use after free. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2025-22437","published":"2025-09-02T22:11:23.647Z","updated":"2026-02-26T17:49:48.884Z","title":"In setMediaButtonReceiver of multiple files, there is a possible way to launch arbitrary activities from background due to a logic error in the code. This…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00125,"kevAdded":null},{"id":"CVE-2025-22435","published":"2025-09-02T22:11:22.630Z","updated":"2026-02-26T17:49:49.187Z","title":"In avdt_msg_ind of avdt_msg.cc, there is a possible memory corruption due to type confusion. This could lead to paired device escalation of privilege with no…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00244,"kevAdded":null},{"id":"CVE-2025-22434","published":"2025-09-02T22:11:21.647Z","updated":"2026-02-26T17:49:49.698Z","title":"In handleKeyGestureEvent of PhoneWindowManager.java, there is a possible lock screen bypass due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2025-22433","published":"2025-09-02T22:11:20.673Z","updated":"2026-02-26T17:49:50.087Z","title":"In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commonly used in Work Profile scenarios due…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00099,"kevAdded":null},{"id":"CVE-2025-22431","published":"2025-09-02T22:11:19.663Z","updated":"2025-09-03T15:45:50.218Z","title":"In multiple locations, there is a possible method for a malicious app to prevent dialing emergency services under limited circumstances due to a logic error in…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00081,"kevAdded":null},{"id":"CVE-2025-22430","published":"2025-09-02T22:11:18.681Z","updated":"2025-09-03T15:45:56.745Z","title":"In isInSignificantPlace of multiple files, there is a possible way to access sensitive information due to a missing permission check. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2025-22429","published":"2025-09-02T22:11:17.697Z","updated":"2025-09-03T15:46:03.618Z","title":"In multiple locations, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalation of privilege…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00252,"kevAdded":null},{"id":"CVE-2025-22428","published":"2025-09-02T22:11:16.691Z","updated":"2026-02-26T17:49:50.266Z","title":"In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible way to grant permissions to an app on the secondary user from the primary user…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2025-22427","published":"2025-09-02T22:11:15.672Z","updated":"2026-02-26T17:49:50.584Z","title":"In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to grant notification access above the lock screen due to a logic error in…","severity":"HIGH","score":7.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2025-22423","published":"2025-09-02T22:11:14.667Z","updated":"2025-09-03T15:46:24.359Z","title":"In ParseTag of dng_ifd.cpp, there is a possible way to crash the image renderer due to a missing bounds check. This could lead to remote denial of service with…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00315,"kevAdded":null},{"id":"CVE-2025-22422","published":"2025-09-02T22:11:13.645Z","updated":"2026-02-26T17:49:50.909Z","title":"In multiple locations, there is a possible way to mislead a user into approving an authentication prompt for one app when its result will be used in another…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2025-22421","published":"2025-09-02T22:11:12.659Z","updated":"2025-09-03T15:52:01.349Z","title":"In contentDescForNotification of NotificationContentDescription.kt, there is a possible notification content leak through the lockscreen due to a logic error…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2025-22419","published":"2025-09-02T22:11:11.657Z","updated":"2026-02-26T17:49:51.247Z","title":"In multiple locations, there is a possible way to mislead the user into enabling malicious phone calls forwarding due to a tapjacking/overlay attack. This…","severity":"HIGH","score":7.3,"vendor":"Google","product":"Android","kev":false,"epss":0.0008,"kevAdded":null},{"id":"CVE-2025-22418","published":"2025-09-02T22:11:10.628Z","updated":"2026-02-26T17:49:51.680Z","title":"In multiple locations, there is a possible confused deputy due to Intent Redirect. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null},{"id":"CVE-2025-22417","published":"2025-09-02T22:11:09.648Z","updated":"2026-02-26T17:49:52.159Z","title":"In finishTransition of Transition.java, there is a possible way to bypass touch filtering restrictions due to a tapjacking/overlay attack. This could lead to…","severity":"HIGH","score":7.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00081,"kevAdded":null},{"id":"CVE-2025-22416","published":"2025-09-02T22:11:08.649Z","updated":"2026-02-26T17:49:52.744Z","title":"In onCreate of ChooserActivity.java , there is a possible way to view other users' images due to a confused deputy. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null},{"id":"CVE-2024-49730","published":"2025-09-02T22:11:07.640Z","updated":"2026-02-26T17:49:53.164Z","title":"In FuseDaemon.cpp, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2024-49728","published":"2025-09-02T22:11:06.608Z","updated":"2025-09-03T15:52:39.443Z","title":"In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a confused deputy. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2024-49722","published":"2025-09-02T22:11:05.590Z","updated":"2025-09-03T15:52:54.084Z","title":"In showAvatarPicker of EditUserPhotoController.java, there is a possible cross user image leak due to a confused deputy. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2024-49720","published":"2025-09-02T22:11:04.547Z","updated":"2026-02-26T17:49:53.589Z","title":"In multiple functions of Permissions.java, there is a possible way to override the state of the user's location permissions due to a logic error in the code.…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2024-40653","published":"2025-09-02T22:11:03.498Z","updated":"2026-02-26T17:49:53.933Z","title":"In multiple functions of ConnectionServiceWrapper.java, there is a possible way to retain a permission forever in the background due to a logic error in the…","severity":"HIGH","score":7.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00122,"kevAdded":null},{"id":"CVE-2025-26417","published":"2025-08-26T22:48:58.986Z","updated":"2025-08-27T14:13:41.118Z","title":"In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening files in shared storage due to a confused…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00325,"kevAdded":null},{"id":"CVE-2025-22413","published":"2025-08-26T22:48:57.984Z","updated":"2025-08-27T14:12:23.366Z","title":"In multiple functions of hyp-main.c, there is a possible privilege escalation due to a logic error in the code. This could lead to local information disclosure…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00099,"kevAdded":null},{"id":"CVE-2025-22412","published":"2025-08-26T22:48:56.963Z","updated":"2026-02-26T17:48:04.363Z","title":"In multiple functions of sdp_server.cc, there is a possible use after free due to a logic error in the code. This could lead to remote (proximal/adjacent) code…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00174,"kevAdded":null},{"id":"CVE-2025-22411","published":"2025-08-26T22:48:55.939Z","updated":"2026-02-26T17:48:05.459Z","title":"In process_service_attr_rsp of sdp_discovery.cc, there is a possible use after free due to a logic error in the code. This could lead to remote…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00174,"kevAdded":null},{"id":"CVE-2025-22410","published":"2025-08-26T22:48:54.927Z","updated":"2025-08-27T14:07:44.512Z","title":"In multiple locations, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2025-22409","published":"2025-08-26T22:48:53.937Z","updated":"2026-02-26T17:48:06.428Z","title":"In rfc_send_buf_uih of rfc_ts_frames.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.0009,"kevAdded":null},{"id":"CVE-2025-22408","published":"2025-08-26T22:48:52.916Z","updated":"2025-08-27T14:06:11.523Z","title":"In rfc_check_send_cmd of rfc_utils.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code execution with…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00403,"kevAdded":null},{"id":"CVE-2025-22407","published":"2025-08-26T22:48:51.907Z","updated":"2025-08-27T14:05:40.268Z","title":"In hidd_check_config_done of hidd_conn.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00084,"kevAdded":null},{"id":"CVE-2025-22406","published":"2025-08-26T22:48:50.898Z","updated":"2025-08-27T14:04:40.863Z","title":"In bnepu_check_send_packet of bnep_utils.cc, there is a possible way to achieve code execution due to a use after free. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2025-22405","published":"2025-08-26T22:48:49.898Z","updated":"2025-08-27T14:04:14.835Z","title":"In multiple locations, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2025-22404","published":"2025-08-26T22:48:48.900Z","updated":"2025-08-27T14:03:32.350Z","title":"In avct_lcb_msg_ind of avct_lcb_act.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2025-22403","published":"2025-08-26T22:48:47.884Z","updated":"2025-08-27T14:02:45.076Z","title":"In sdp_snd_service_search_req of sdp_discovery.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00403,"kevAdded":null},{"id":"CVE-2025-0093","published":"2025-08-26T22:48:46.854Z","updated":"2025-08-27T13:59:49.947Z","title":"In handleBondStateChanged of AdapterService.java, there is a possible unapproved data access due to a missing permission check. This could lead to remote…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00309,"kevAdded":null},{"id":"CVE-2025-0092","published":"2025-08-26T22:48:45.758Z","updated":"2025-08-27T13:58:02.927Z","title":"In handleBondStateChanged of AdapterService.java, there is a possible permission bypass due to misleading or insufficient UI. This could lead to remote…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00152,"kevAdded":null},{"id":"CVE-2025-0086","published":"2025-08-26T22:48:44.753Z","updated":"2025-08-27T14:09:35.395Z","title":"In onResult of AccountManagerService.java, there is a possible way to overwrite auth token due to a missing permission check. This could lead to local…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00129,"kevAdded":null},{"id":"CVE-2025-0084","published":"2025-08-26T22:48:43.740Z","updated":"2025-08-27T14:10:22.604Z","title":"In multiple locations, there is a possible out of bounds write due to a use after free. This could lead to remote code execution over Bluetooth, if HFP support…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00225,"kevAdded":null},{"id":"CVE-2025-0083","published":"2025-08-26T22:48:42.711Z","updated":"2025-08-27T14:01:28.545Z","title":"In multiple locations, there is a possible way to access content across user profiles due to URI double encoding. This could lead to local information…","severity":"MEDIUM","score":4,"vendor":"Google","product":"Android","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2025-0082","published":"2025-08-26T22:48:41.698Z","updated":"2025-08-27T14:42:07.881Z","title":"In multiple functions of StatusHint.java and TelecomServiceImpl.java, there is a possible way to reveal images across users due to a confused deputy. This…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2025-0081","published":"2025-08-26T22:48:40.650Z","updated":"2025-08-27T14:14:23.731Z","title":"In dng_lossless_decoder::HuffDecode of dng_lossless_jpeg.cpp, there is a possible way to cause a crash due to uninitialized data. This could lead to remote…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00366,"kevAdded":null},{"id":"CVE-2025-0080","published":"2025-08-26T22:48:39.638Z","updated":"2025-08-27T13:44:30.722Z","title":"In multiple locations, there is a possible way to overlay the installation confirmation dialog due to a tapjacking/overlay attack. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2025-0079","published":"2025-08-26T22:48:38.633Z","updated":"2025-08-27T13:48:17.455Z","title":"In multiple locations, there is a possible way that avdtp and avctp channels could be unencrypted due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00099,"kevAdded":null},{"id":"CVE-2025-0078","published":"2025-08-26T22:48:37.637Z","updated":"2025-08-27T13:52:36.086Z","title":"In main of main.cpp, there is a possible way to bypass SELinux due to a logic error in the code. This could lead to local escalation of privilege with no…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00302,"kevAdded":null},{"id":"CVE-2025-0075","published":"2025-08-26T22:48:36.630Z","updated":"2025-08-27T14:16:40.891Z","title":"In process_service_search_attr_req of sdp_server.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00413,"kevAdded":null},{"id":"CVE-2025-0074","published":"2025-08-26T22:48:35.616Z","updated":"2025-08-27T14:17:08.716Z","title":"In process_service_attr_rsp of sdp_discovery.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00413,"kevAdded":null},{"id":"CVE-2024-49740","published":"2025-08-26T22:48:34.573Z","updated":"2025-08-27T13:57:26.530Z","title":"In multiple locations, there is a possible crash loop due to resource exhaustion. This could lead to local denial of service with no additional execution…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2023-21125","published":"2025-08-26T22:48:27.450Z","updated":"2025-08-27T14:18:12.572Z","title":"In btif_hh_hsdata_rpt_copy_cb of bta_hh.cc, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege…","severity":"HIGH","score":8,"vendor":"Google","product":"Android","kev":false,"epss":0.00198,"kevAdded":null},{"id":"CVE-2024-40677","published":"2025-01-28T19:13:41.402Z","updated":"2025-01-28T20:57:11.156Z","title":"In shouldSkipForInitialSUW of AdvancedPowerUsageDetail.java, there is a possible way to bypass factory reset protections due to a missing permission check.…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00085,"kevAdded":null},{"id":"CVE-2024-40676","published":"2025-01-28T19:13:41.279Z","updated":"2025-02-06T15:10:01.515Z","title":"In checkKeyIntent of AccountManagerService.java, there is a possible way to bypass intent security check and install an unknown app due to a confused deputy.…","severity":"HIGH","score":7.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00168,"kevAdded":null},{"id":"CVE-2024-40675","published":"2025-01-28T19:13:41.191Z","updated":"2025-02-06T15:16:25.815Z","title":"In parseUriInternal of Intent.java, there is a possible infinite loop due to improper input validation. This could lead to local denial of service with no…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00315,"kevAdded":null},{"id":"CVE-2024-40674","published":"2025-01-28T19:13:41.052Z","updated":"2025-02-03T15:25:40.280Z","title":"In validateSsid of WifiConfigurationUtil.java, there is a possible way to overflow a system configuration file due to a logic error in the code. This could…","severity":"MEDIUM","score":5.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00223,"kevAdded":null},{"id":"CVE-2024-40673","published":"2025-01-28T19:13:40.927Z","updated":"2025-02-03T15:12:41.839Z","title":"In Source of ZipFile.java, there is a possible way for an attacker to execute arbitrary code by manipulating Dynamic Code Loading due to improper input…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00293,"kevAdded":null},{"id":"CVE-2024-40672","published":"2025-01-28T19:13:40.821Z","updated":"2025-01-28T20:59:08.080Z","title":"In onCreate of ChooserActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00085,"kevAdded":null},{"id":"CVE-2024-40670","published":"2025-01-28T19:13:40.727Z","updated":"2025-01-28T21:04:16.894Z","title":"In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00082,"kevAdded":null},{"id":"CVE-2024-40669","published":"2025-01-28T19:13:40.607Z","updated":"2025-01-28T21:05:17.382Z","title":"In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00082,"kevAdded":null},{"id":"CVE-2024-40651","published":"2025-01-28T19:13:40.514Z","updated":"2025-01-28T21:06:17.321Z","title":"In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00086,"kevAdded":null},{"id":"CVE-2024-40649","published":"2025-01-28T19:13:40.428Z","updated":"2025-01-28T21:07:05.464Z","title":"In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00086,"kevAdded":null},{"id":"CVE-2024-34748","published":"2025-01-28T19:13:40.342Z","updated":"2025-01-28T21:07:52.162Z","title":"In _DevmemXReservationPageAddress of devicemem_server.c, there is a possible use-after-free due to improper casting. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2024-34733","published":"2025-01-28T19:13:40.263Z","updated":"2025-01-28T21:08:42.850Z","title":"In DevmemXIntMapPages of devicemem_server.c, there is a possible arbitrary code execution due to an integer overflow. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2024-34732","published":"2025-01-28T19:13:40.171Z","updated":"2025-01-28T21:10:13.134Z","title":"In RGXMMUCacheInvalidate of rgxmem.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of privilege in…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00073,"kevAdded":null},{"id":"CVE-2018-9378","published":"2025-01-28T16:53:30.767Z","updated":"2025-01-28T19:37:36.790Z","title":"In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00085,"kevAdded":null},{"id":"CVE-2018-9373","published":"2025-01-28T16:52:42.889Z","updated":"2025-01-28T19:49:40.008Z","title":"In TdlsexRxFrameHandle of the MTK WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2017-13318","published":"2025-01-28T16:51:05.070Z","updated":"2025-01-28T19:51:54.881Z","title":"In HeifDataSource::readAt of HeifDecoderImpl.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote information…","severity":"MEDIUM","score":5.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2017-13317","published":"2025-01-28T16:50:03.206Z","updated":"2025-01-28T19:58:14.472Z","title":"In HeifDecoderImpl::getScanline of HeifDecoderImpl.cpp, there is a possible out of bounds read due to improper input validation. This could lead to remote…","severity":"MEDIUM","score":5.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2024-49749","published":"2025-01-21T23:04:44.500Z","updated":"2026-02-26T19:08:59.404Z","title":"In DGifSlurp of dgif_lib.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00253,"kevAdded":null},{"id":"CVE-2024-49748","published":"2025-01-21T23:04:44.424Z","updated":"2025-03-17T15:10:25.455Z","title":"In gatts_process_primary_service_req of gatt_sr.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00413,"kevAdded":null},{"id":"CVE-2024-49747","published":"2025-01-21T23:04:44.338Z","updated":"2025-03-18T14:30:00.882Z","title":"In gatts_process_read_by_type_req of gatt_sr.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to remote code…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00464,"kevAdded":null},{"id":"CVE-2024-49745","published":"2025-01-21T23:04:44.249Z","updated":"2025-02-18T19:47:42.996Z","title":"In growData of Parcel.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null},{"id":"CVE-2024-49744","published":"2025-01-21T23:04:44.166Z","updated":"2025-03-18T18:16:26.206Z","title":"In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to bypass parcel mismatch mitigation due to unsafe deserialization.…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00075,"kevAdded":null},{"id":"CVE-2024-49742","published":"2025-01-21T23:04:44.074Z","updated":"2025-03-13T13:43:47.005Z","title":"In onCreate of NotificationAccessConfirmationActivity.java , there is a possible way to hide an app with notification access in Settings due to a missing…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00073,"kevAdded":null},{"id":"CVE-2024-49738","published":"2025-01-21T23:04:43.976Z","updated":"2025-03-19T14:23:55.414Z","title":"In writeInplace of Parcel.cpp, there is a possible out of bounds write. This could lead to local escalation of privilege with no additional execution…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null},{"id":"CVE-2024-49737","published":"2025-01-21T23:04:43.896Z","updated":"2025-03-18T14:59:29.242Z","title":"In applyTaskFragmentOperation of WindowOrganizerController.java, there is a possible way to launch arbitrary activities as the system UID due to a logic error…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00076,"kevAdded":null},{"id":"CVE-2024-49736","published":"2025-01-21T23:04:43.820Z","updated":"2025-03-24T15:43:38.145Z","title":"In onClick of MainClear.java, there is a possible way to trigger factory reset without explicit user consent due to a logic error in the code. This could lead…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00075,"kevAdded":null},{"id":"CVE-2024-49735","published":"2025-01-21T23:04:43.717Z","updated":"2025-03-19T20:46:27.145Z","title":"In multiple locations, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00073,"kevAdded":null},{"id":"CVE-2024-49734","published":"2025-01-21T23:04:43.573Z","updated":"2025-03-24T16:17:55.482Z","title":"In multiple functions of ConnectivityService.java, there is a possible way for a Wi-Fi AP to determine what site a device has connected to through a VPN due to…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00283,"kevAdded":null},{"id":"CVE-2024-49733","published":"2025-01-21T23:04:43.453Z","updated":"2025-03-25T13:28:23.203Z","title":"In reload of ServiceListing.java , there is a possible way to allow a malicious app to hide an NLS from Settings due to a logic error in the code. This could…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.0008,"kevAdded":null},{"id":"CVE-2024-49732","published":"2025-01-21T23:04:43.353Z","updated":"2025-03-13T20:27:04.708Z","title":"In multiple functions of CompanionDeviceManagerService.java, there is a possible way to grant permissions without user consent due to a missing permission…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00073,"kevAdded":null},{"id":"CVE-2024-49724","published":"2025-01-21T23:04:43.259Z","updated":"2025-03-24T17:39:38.396Z","title":"In multiple functions of AccountManagerService.java, there is a possible way to bypass permissions and launch protected activities due to a race condition.…","severity":"HIGH","score":7,"vendor":"Google","product":"Android","kev":false,"epss":0.0007,"kevAdded":null},{"id":"CVE-2024-43771","published":"2025-01-21T23:04:43.179Z","updated":"2025-03-18T13:38:44.680Z","title":"In gatts_process_read_req of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent)…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00198,"kevAdded":null},{"id":"CVE-2024-43770","published":"2025-01-21T23:04:43.090Z","updated":"2025-03-18T14:06:52.920Z","title":"In gatts_process_find_info of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent)…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00219,"kevAdded":null},{"id":"CVE-2024-43765","published":"2025-01-21T23:04:42.989Z","updated":"2026-02-26T19:08:59.853Z","title":"In multiple locations, there is a possible way to obtain access to a folder due to a tapjacking/overlay attack. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null},{"id":"CVE-2024-43763","published":"2025-01-21T23:04:42.904Z","updated":"2025-03-17T16:54:20.011Z","title":"In build_read_multi_rsp of gatt_sr.cc, there is a possible denial of service due to a logic error in the code. This could lead to remote (proximal/adjacent)…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00122,"kevAdded":null},{"id":"CVE-2024-43096","published":"2025-01-21T23:04:42.806Z","updated":"2025-03-19T13:40:29.299Z","title":"In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent)…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2024-43095","published":"2025-01-21T23:04:42.642Z","updated":"2026-02-26T19:09:00.711Z","title":"In multiple locations, there is a possible way to obtain any system permission due to a logic error in the code. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00084,"kevAdded":null},{"id":"CVE-2024-34730","published":"2025-01-21T23:04:42.520Z","updated":"2026-02-26T19:09:01.216Z","title":"In multiple locations, there is a possible bypass of user consent to enabling new Bluetooth HIDs due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00078,"kevAdded":null},{"id":"CVE-2023-40132","published":"2025-01-21T23:04:42.269Z","updated":"2026-06-18T15:59:41.574Z","title":"In setActualDefaultRingtoneUri of RingtoneManager.java, there is a possible way to bypass content providers read permissions due to a missing permission check.…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00084,"kevAdded":null},{"id":"CVE-2023-40108","published":"2025-01-21T23:04:42.173Z","updated":"2026-06-18T15:59:23.562Z","title":"In multiple locations, there is a possible way to access media content belonging to another user due to a missing permission check. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00082,"kevAdded":null},{"id":"CVE-2018-9405","published":"2025-01-17T23:17:44.361Z","updated":"2025-03-14T16:56:48.152Z","title":"In BnDmAgent::onTransact of dm_agent.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2018-9401","published":"2025-01-17T23:17:04.245Z","updated":"2025-03-24T16:14:47.452Z","title":"In many locations, there is a possible way to access kernel memory in user space due to an incorrect bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2018-9406","published":"2025-01-17T23:16:13.761Z","updated":"2025-01-31T20:33:40.878Z","title":"In NlpService, there is a possible way to obtain location information due to a missing permission check. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2018-9389","published":"2025-01-17T23:15:26.974Z","updated":"2025-02-03T13:45:49.801Z","title":"In ip6_append_data of ip6_output.c, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to local escalation of…","severity":"MEDIUM","score":5.1,"vendor":"Google","product":"Android","kev":false,"epss":0.00106,"kevAdded":null},{"id":"CVE-2018-9387","published":"2025-01-17T23:14:44.749Z","updated":"2025-03-14T15:21:42.277Z","title":"In multiple functions of mnh-sm.c, there is a possible way to trigger a heap overflow due to an integer overflow. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2018-9464","published":"2025-01-17T23:14:03.492Z","updated":"2025-03-13T20:45:25.822Z","title":"In multiple locations, there is a possible way to read protected files due to a missing permission check. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2018-9461","published":"2025-01-17T23:13:16.156Z","updated":"2025-03-18T20:34:39.938Z","title":"In onAttachFragment of ShareIntentActivity.java, there is a possible way for an app to read files in the messages app due to a race condition. This could lead…","severity":"HIGH","score":7,"vendor":"Google","product":"Android","kev":false,"epss":0.00075,"kevAdded":null},{"id":"CVE-2018-9447","published":"2025-01-17T23:12:29.500Z","updated":"2025-03-19T13:37:02.446Z","title":"In onCreate of EmergencyCallbackModeExitDialog.java, there is a possible way to crash the emergency callback mode due to a missing null check. This could lead…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2018-9434","published":"2025-01-17T23:11:16.145Z","updated":"2025-03-24T16:04:17.270Z","title":"In multiple functions of Parcel.cpp, there is a possible way to bypass address space layout randomization. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2018-9382","published":"2025-01-17T23:10:28.749Z","updated":"2025-03-13T14:18:55.703Z","title":"In multiple functions of WifiServiceImpl.java, there is a possible way to activate Wi-Fi hotspot from a non-owner profile due to a missing permission check.…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00077,"kevAdded":null},{"id":"CVE-2018-9379","published":"2025-01-17T23:09:39.761Z","updated":"2025-03-13T19:42:41.116Z","title":"In multiple functions of MiniThumbFile.java, there is a possible way to view the thumbnails of deleted photos due to a confused deputy. This could lead to…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2018-9375","published":"2025-01-17T23:07:14.793Z","updated":"2025-03-13T14:27:38.492Z","title":"In multiple functions of UserDictionaryProvider.java, there is a possible way to add and delete words in the user dictionary due to a confused deputy. This…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.002,"kevAdded":null},{"id":"CVE-2017-13322","published":"2025-01-17T23:06:15.618Z","updated":"2025-03-13T13:22:22.833Z","title":"In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services due to a logic error in the code. This…","severity":"CRITICAL","score":10,"vendor":"Google","product":"Android","kev":false,"epss":0.00159,"kevAdded":null},{"id":"CVE-2018-9384","published":"2025-01-17T23:04:49.336Z","updated":"2025-03-15T15:09:47.458Z","title":"In multiple locations, there is a possible way to bypass KASLR due to an unusual root cause. This could lead to local information disclosure with System…","severity":"MEDIUM","score":4.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2018-9383","published":"2025-01-17T23:03:54.771Z","updated":"2025-03-18T14:23:12.487Z","title":"In asn1_ber_decoder of asn1_decoder.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":4.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2023-35685","published":"2025-01-08T17:35:14.462Z","updated":"2025-01-31T17:59:16.638Z","title":"In DevmemIntMapPages of devicemem_server.c, there is a possible physical page uaf due to a logic error in the code. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00158,"kevAdded":null},{"id":"CVE-2024-43769","published":"2025-01-02T23:58:27.333Z","updated":"2025-03-13T14:59:56.409Z","title":"In isPackageDeviceAdmin of PackageManagerService.java, there is a possible edge case which could prevent the uninstallation of CloudDpc due to a logic error in…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00081,"kevAdded":null},{"id":"CVE-2024-43768","published":"2025-01-02T23:58:27.245Z","updated":"2026-02-26T19:09:33.797Z","title":"In skia_alloc_func of SkDeflate.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00226,"kevAdded":null},{"id":"CVE-2024-43767","published":"2025-01-02T23:58:27.162Z","updated":"2025-03-19T18:15:30.811Z","title":"In prepare_to_draw_into_mask of SkBlurMaskFilterImpl.cpp, there is a possible heap overflow due to improper input validation. This could lead to remote code…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00496,"kevAdded":null},{"id":"CVE-2024-43764","published":"2025-01-02T23:58:27.018Z","updated":"2025-01-03T21:45:43.752Z","title":"In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to partially bypass lock screen. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00085,"kevAdded":null},{"id":"CVE-2024-43762","published":"2025-01-02T23:58:26.886Z","updated":"2025-01-03T21:25:32.529Z","title":"In multiple locations, there is a possible way to avoid unbinding of a service from the system due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00185,"kevAdded":null},{"id":"CVE-2024-43097","published":"2025-01-02T23:58:26.791Z","updated":"2026-02-26T19:09:34.125Z","title":"In resizeToAtLeast of SkRegion.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00358,"kevAdded":null},{"id":"CVE-2024-43077","published":"2025-01-02T23:58:26.607Z","updated":"2025-01-03T21:20:56.256Z","title":"In DevmemValidateFlags of devicemem_server.c , there is a possible out of bounds write due to memory corruption. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null},{"id":"CVE-2018-9391","published":"2024-12-05T22:25:10.215Z","updated":"2024-12-06T16:29:50.053Z","title":"In update_gps_sv and output_vzw_debug of vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/gpshal_wor ker.c, there is a possible out of bounds…","severity":"MEDIUM","score":6.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2018-9390","published":"2024-12-05T22:23:33.742Z","updated":"2024-12-06T16:34:19.189Z","title":"In procfile_write of gl_proc.c, there is a possible out of bounds read of a function pointer due to an incorrect bounds check. This could lead to local…","severity":"MEDIUM","score":6.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00088,"kevAdded":null},{"id":"CVE-2018-9388","published":"2024-12-05T22:22:17.968Z","updated":"2024-12-06T16:36:43.909Z","title":"In store_upgrade and store_cmd of drivers/input/touchscreen/stm/ftm4_pdc.c, there are out of bound writes due to missing bounds checks or integer underflows.…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00159,"kevAdded":null},{"id":"CVE-2018-9386","published":"2024-12-05T22:20:40.144Z","updated":"2024-12-06T16:39:39.034Z","title":"In reboot_block_command of htc reboot_block driver, there is a possible stack buffer overflow due to a missing bounds check. This could lead to local…","severity":"MEDIUM","score":6.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00085,"kevAdded":null},{"id":"CVE-2017-13308","published":"2024-12-05T22:05:21.894Z","updated":"2024-12-06T16:41:27.210Z","title":"In tscpu_write_GPIO_out and mtkts_Abts_write of mtk_ts_Abts.c, there is a possible buffer overflow in an sscanf due to improper input validation. This could…","severity":"MEDIUM","score":6.7,"vendor":"Google","product":"Android","kev":false,"epss":0.0008,"kevAdded":null},{"id":"CVE-2018-9463","published":"2024-12-04T23:40:22.862Z","updated":"2024-12-05T15:23:30.413Z","title":"In sw49408_irq_runtime_engine_debug of touch_sw49408.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2018-9462","published":"2024-12-04T23:39:05.744Z","updated":"2024-12-05T15:25:07.949Z","title":"In store_cmd of ftm4_pdc.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2018-9439","published":"2024-12-04T23:37:42.619Z","updated":"2024-12-05T15:33:21.903Z","title":"In __unregister_prot_hook and packet_release of af_packet.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2018-9416","published":"2024-12-04T23:36:19.267Z","updated":"2024-12-05T15:41:46.739Z","title":"In sg_remove_scat of scsi/sg.c, there is a possible memory corruption due to an unusual root cause. This could lead to local escalation of privilege with…","severity":"CRITICAL","score":10,"vendor":"Google","product":"Android","kev":false,"epss":0.00164,"kevAdded":null},{"id":"CVE-2018-9408","published":"2024-12-04T23:34:59.397Z","updated":"2024-12-05T15:52:07.414Z","title":"In m3326_gps_write and m3326_gps_read of gps.s, there is a possible Out Of Bounds Read due to a missing bounds check. This could lead to a local information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00084,"kevAdded":null},{"id":"CVE-2018-9407","published":"2024-12-04T23:33:27.727Z","updated":"2024-12-05T15:53:59.576Z","title":"In emmc_rpmb_ioctl of emmc_rpmb.c, there is an Information Disclosure due to a Missing Bounds Check. This could lead to Information Disclosure of kernel data.","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2018-9404","published":"2024-12-04T23:32:00.249Z","updated":"2024-12-05T16:01:26.044Z","title":"In oemCallback of ril.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2018-9403","published":"2024-12-04T23:29:24.147Z","updated":"2024-12-05T16:19:12.212Z","title":"In the MTK_FLP_MSG_HAL_DIAG_REPORT_DATA_NTF handler of flp2hal_- interface.c, there is a possible stack buffer overflow due to a missing bounds check. This…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00085,"kevAdded":null},{"id":"CVE-2018-9402","published":"2024-12-04T23:27:42.808Z","updated":"2024-12-05T16:21:56.367Z","title":"In multiple functions of gl_proc.c, there is a buffer overwrite due to a missing bounds check. This could lead to escalation of privileges in the kernel.","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2018-9400","published":"2024-12-04T23:14:32.596Z","updated":"2024-12-05T16:29:20.701Z","title":"In gt1x_debug_write_proc and gt1x_tool_write of drivers/input/touchscreen/mediatek/GT1151/gt1x_generic.c and gt1x_tools.c, there is a possible out of bounds…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2018-9399","published":"2024-12-04T23:13:11.225Z","updated":"2024-12-05T16:32:36.314Z","title":"In /proc/driver/wmt_dbg driver, there are several possible out of bounds writes. These could lead to local escalation of privilege with System execution…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2018-9398","published":"2024-12-04T23:11:48.916Z","updated":"2024-12-05T16:43:06.134Z","title":"In fm_set_stat of mediatek FM radio driver, there is a possible OOB write due to improper input validation. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2018-9397","published":"2024-12-04T23:10:14.272Z","updated":"2024-12-05T16:52:04.806Z","title":"In WMT_unlocked_ioctl of MTK WMT device driver, there is a possible OOB write due to a missing bounds check. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2018-9396","published":"2024-12-04T21:59:02.879Z","updated":"2024-12-05T17:08:24.572Z","title":"In rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a possible out of bounds write due to an incorrect bounds check.…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2018-9395","published":"2024-12-04T17:20:55.185Z","updated":"2024-12-05T17:13:11.248Z","title":"In mtk_cfg80211_vendor_packet_keep_alive_start and mtk_cfg80211_vendor_set_config of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_vendor.c, there…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2018-9394","published":"2024-12-04T17:19:10.992Z","updated":"2024-12-05T17:15:12.151Z","title":"In mtk_p2p_wext_set_key of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_p2p.c, there is a possible OOB write due to improper input validation. This…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2018-9393","published":"2024-12-04T17:17:25.388Z","updated":"2024-12-05T18:51:02.979Z","title":"In procfile_write of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_proc.c, there is a possible OOB write due to a missing bounds check. This could…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2018-9392","published":"2024-12-04T17:15:26.490Z","updated":"2024-12-05T18:53:34.277Z","title":"In get_binary of vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/data_coder.c, there is a possible out of bounds write due to a missing…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2018-9449","published":"2024-12-03T00:08:47.209Z","updated":"2024-12-03T14:40:59.650Z","title":"In process_service_search_attr_rsp of sdp_discovery.cc, there is a possible out of bound read due to a missing bounds check. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00081,"kevAdded":null},{"id":"CVE-2018-9441","published":"2024-12-03T00:02:26.901Z","updated":"2024-12-03T14:57:25.624Z","title":"In sdp_copy_raw_data of sdp_discovery.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00085,"kevAdded":null},{"id":"CVE-2018-9435","published":"2024-12-02T22:12:22.069Z","updated":"2024-12-03T14:58:06.946Z","title":"In gatt_process_error_rsp of gatt_cl.cc, there is a possible out of bound read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00084,"kevAdded":null},{"id":"CVE-2018-9431","published":"2024-12-02T21:39:18.222Z","updated":"2024-12-03T14:43:39.288Z","title":"In OSUInfo of OSUInfo.java, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00081,"kevAdded":null},{"id":"CVE-2018-9430","published":"2024-12-02T21:36:48.335Z","updated":"2024-12-03T14:48:09.933Z","title":"In prop2cfg of btif_storage.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00396,"kevAdded":null},{"id":"CVE-2018-9429","published":"2024-12-02T21:33:42.242Z","updated":"2024-12-03T14:50:44.318Z","title":"In buildImageItemsIfPossible of ItemTable.cpp there is a possible out of bound read due to uninitialized data. This could lead to information disclosure with…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00219,"kevAdded":null},{"id":"CVE-2018-9426","published":"2024-12-02T21:30:27.265Z","updated":"2024-12-03T15:07:45.180Z","title":"In RsaKeyPairGenerator::getNumberOfIterations of RSAKeyPairGenerator.java, an incorrect implementation could cause weak RSA key pairs being generated. This…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00246,"kevAdded":null},{"id":"CVE-2018-9423","published":"2024-12-02T21:26:58.452Z","updated":"2024-12-03T15:08:41.609Z","title":"In ihevcd_parse_slice_header of ihevcd_parse_slice_header.c there is a possible out of bound read due to missing bounds check. This could lead to denial of…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00157,"kevAdded":null},{"id":"CVE-2018-9418","published":"2024-12-02T21:23:20.707Z","updated":"2024-12-03T15:12:16.153Z","title":"In handle_app_cur_val_response of dtif_rc.cc, there is a possible stack buffer overflow due to a missing bounds check. This could lead to remote code execution…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00263,"kevAdded":null},{"id":"CVE-2018-9414","published":"2024-12-02T21:09:16.394Z","updated":"2024-12-03T17:26:05.941Z","title":"In gattServerSendResponseNative of com_android_bluetooth_gatt.cpp, there is a possible out of bounds stack write due to a missing bounds check. This could lead…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null},{"id":"CVE-2018-9413","published":"2024-12-02T21:03:50.218Z","updated":"2024-12-03T18:37:45.447Z","title":"In handle_notification_response of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution…","severity":"HIGH","score":8,"vendor":"Google","product":"Android","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2018-9376","published":"2024-12-02T20:59:25.345Z","updated":"2024-12-03T18:39:18.952Z","title":"In rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a possible out of bounds write due to an incorrect bounds check.…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00082,"kevAdded":null},{"id":"CVE-2018-9381","published":"2024-12-02T19:56:28.890Z","updated":"2024-12-02T21:23:58.597Z","title":"In gatts_process_read_by_type_req of gatt_sr.c, there is a possible information disclosure due to uninitialized data. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00246,"kevAdded":null},{"id":"CVE-2018-9380","published":"2024-12-02T19:54:27.063Z","updated":"2024-12-02T21:25:57.228Z","title":"In l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.003,"kevAdded":null},{"id":"CVE-2018-9377","published":"2024-11-28T00:23:14.763Z","updated":"2025-04-03T15:29:06.123Z","title":"In getIntentForIntentSender of ActivityManagerService.java, there is a possible way to access user metadata due to a pending intent. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2018-9374","published":"2024-11-27T23:42:11.151Z","updated":"2024-11-29T21:26:39.405Z","title":"In installPackageLI of PackageManagerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege with User execution…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2018-9354","published":"2024-11-27T22:37:57.293Z","updated":"2024-11-29T21:17:30.173Z","title":"In VideoFrameScheduler.cpp of VideoFrameScheduler::PLL::fit, there is a possible remote denial of service due to divide by 0. This could lead to remote denial…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00327,"kevAdded":null},{"id":"CVE-2018-9353","published":"2024-11-27T22:34:57.383Z","updated":"2024-11-29T21:27:51.298Z","title":"In ihevcd_parse_slice_data of ihevcd_parse_slice.c there is a possible heap buffer out of bound read due to a missing bounds check. This could lead to remote…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00327,"kevAdded":null},{"id":"CVE-2018-9352","published":"2024-11-27T22:31:43.655Z","updated":"2024-11-29T21:28:35.370Z","title":"In ihevcd_allocate_dynamic_bufs of ihevcd_api.c there is a possible resource exhaustion due to integer overflow. This could lead to remote denial of service…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.0033,"kevAdded":null},{"id":"CVE-2018-9351","published":"2024-11-27T22:05:01.280Z","updated":"2024-11-29T21:29:17.494Z","title":"In ih264e_fmt_conv_420p_to_420sp of ih264e_fmt_conv.c there is a possible out of bound read due to missing bounds check. This could lead to remote denial of…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00289,"kevAdded":null},{"id":"CVE-2018-9350","published":"2024-11-27T21:52:57.651Z","updated":"2024-11-29T21:33:46.527Z","title":"In ih264d_assign_pic_num of ih264d_utils.c there is a possible out of bound read due to missing bounds check. This could lead to a denial of service with no…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.0023,"kevAdded":null},{"id":"CVE-2018-9349","published":"2024-11-27T21:45:18.436Z","updated":"2024-11-29T21:34:31.449Z","title":"In mv_err_cost of mcomp.c there is a possible out of bounds read due to missing bounds check. This could lead to denial of service with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00247,"kevAdded":null},{"id":"CVE-2017-13323","published":"2024-11-27T21:35:53.233Z","updated":"2024-11-29T21:42:26.397Z","title":"In String16 of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege in an…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2017-13321","published":"2024-11-27T21:28:34.817Z","updated":"2024-11-29T21:38:44.970Z","title":"In SensorService::isDataInjectionEnabled of frameworks/native/services/sensorservice/SensorService.cpp, there is a possible out of bounds read due to a missing…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2017-13320","published":"2024-11-27T21:24:30.387Z","updated":"2024-11-29T21:39:34.675Z","title":"In impeg2d_bit_stream_flush() of libmpeg2dec there is a possible OOB read due to a missing bounds check. This could lead to Remote DoS with no additional…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.0023,"kevAdded":null},{"id":"CVE-2017-13319","published":"2024-11-27T19:55:01.605Z","updated":"2024-11-29T21:41:38.204Z","title":"In pvmp3_get_main_data_size of pvmp3_get_main_data_size.cpp, there is a possible buffer overread due to a missing bounds check. This could lead to remote…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00338,"kevAdded":null},{"id":"CVE-2017-13316","published":"2024-11-27T19:18:27.489Z","updated":"2024-11-29T21:45:02.130Z","title":"In checkPermissions of RecognitionService.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null},{"id":"CVE-2018-9487","published":"2024-11-20T17:50:13.832Z","updated":"2024-11-20T18:15:43.463Z","title":"In setVpnForcedLocked of Vpn.java, there is a possible blocking of internet traffic through vpn due to a bad uid check. This could lead to local denial of…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.0015,"kevAdded":null},{"id":"CVE-2018-9486","published":"2024-11-20T17:49:09.777Z","updated":"2024-11-20T18:16:36.714Z","title":"In hidh_l2cif_data_ind of hidh_conn.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2018-9485","published":"2024-11-20T17:47:28.369Z","updated":"2024-11-20T18:17:33.923Z","title":"In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00146,"kevAdded":null},{"id":"CVE-2018-9484","published":"2024-11-20T17:45:25.547Z","updated":"2024-11-20T18:19:50.606Z","title":"In l2cu_send_peer_config_rej of l2c_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00281,"kevAdded":null},{"id":"CVE-2018-9483","published":"2024-11-20T17:43:28.756Z","updated":"2024-11-20T18:20:38.165Z","title":"In bta_dm_remove_sec_dev_entry of bta_dm_act.cc, there is a possible out of bounds read due to a use after free. This could lead to remote information…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00146,"kevAdded":null},{"id":"CVE-2018-9482","published":"2024-11-20T17:41:49.187Z","updated":"2024-11-20T18:21:54.329Z","title":"In intr_data_copy_cb of btif_hd.cc, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure in the…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00086,"kevAdded":null},{"id":"CVE-2018-9481","published":"2024-11-20T17:40:25.846Z","updated":"2024-12-05T21:50:01.040Z","title":"In bta_hd_set_report_act of bta_hd_act.cc, there is a possible out-of-bounds read due to an integer overflow. This could lead to remote information disclosure…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2018-9480","published":"2024-11-20T17:39:03.431Z","updated":"2024-11-20T18:23:57.635Z","title":"In bta_hd_get_report_act of bta_hd_act.cc, there is a possible out-of-bounds read due to improper input validation. This could lead to remote information…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00146,"kevAdded":null},{"id":"CVE-2018-9479","published":"2024-11-20T17:37:56.046Z","updated":"2024-11-20T18:26:08.864Z","title":"In process_service_attr_req and process_service_search_attr_req of sdp_server.cc, there is an out of bounds write due to a missing bounds check. This could…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00382,"kevAdded":null},{"id":"CVE-2018-9478","published":"2024-11-20T17:30:49.093Z","updated":"2024-11-20T18:27:16.585Z","title":"In process_service_attr_req and process_service_search_attr_req of sdp_server.cc, there is an out of bounds write due to a missing bounds check. This could…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00382,"kevAdded":null},{"id":"CVE-2018-9477","published":"2024-11-20T17:28:44.954Z","updated":"2024-11-20T19:02:26.920Z","title":"In the development options section of the Settings app, there is a possible authentication bypass due to a missing permission check. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2018-9475","published":"2024-11-20T17:27:37.227Z","updated":"2024-11-20T18:28:21.519Z","title":"In HeadsetInterface::ClccResponse of btif_hf.cc, there is a possible out of bounds stack write due to a missing bounds check. This could lead to remote…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2018-9474","published":"2024-11-20T17:25:46.569Z","updated":"2024-11-20T18:29:24.620Z","title":"In writeToParcel of MediaPlayer.java, there is a possible serialization/deserialization mismatch due to improper input validation. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2018-9472","published":"2024-11-20T17:24:01.971Z","updated":"2024-11-20T19:08:31.192Z","title":"In xmlMemStrdupLoc of xmlmemory.c, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution in an…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00271,"kevAdded":null},{"id":"CVE-2018-9471","published":"2024-11-20T17:16:53.353Z","updated":"2024-11-20T18:38:12.566Z","title":"In the deserialization constructor of NanoAppFilter.java, there is a possible loss of data due to type confusion. This could lead to local escalation of…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00168,"kevAdded":null},{"id":"CVE-2018-9470","published":"2024-11-20T17:15:09.674Z","updated":"2024-11-20T19:00:33.228Z","title":"In bff_Scanner_addOutPos of Scanner.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote escalation of…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00268,"kevAdded":null},{"id":"CVE-2018-9469","published":"2024-11-20T16:53:36.233Z","updated":"2024-11-20T19:08:05.439Z","title":"In multiple functions of ShortcutService.java, there is a possible creation of a spoofed shortcut due to a missing permission check. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null},{"id":"CVE-2018-9468","published":"2024-11-20T16:51:52.139Z","updated":"2024-11-20T19:04:34.956Z","title":"In query of DownloadManager.java, there is a possible read/write of arbitrary files due to a permissions bypass. This could lead to local information…","severity":"HIGH","score":7.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00205,"kevAdded":null},{"id":"CVE-2018-9467","published":"2024-11-19T23:57:44.584Z","updated":"2024-11-21T15:33:34.617Z","title":"In the getHost() function of UriTest.java, there is the possibility of incorrect web origin determination. This could lead to incorrect security decisions with…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00316,"kevAdded":null},{"id":"CVE-2018-9466","published":"2024-11-19T22:21:20.706Z","updated":"2025-11-03T21:44:11.695Z","title":"In the xmlSnprintfElementContent function of valid.c, there is a possible out of bounds write. This could lead to remote escalation of privilege in an…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00328,"kevAdded":null},{"id":"CVE-2018-9456","published":"2024-11-19T22:19:46.371Z","updated":"2024-11-21T15:00:42.618Z","title":"In sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00301,"kevAdded":null},{"id":"CVE-2018-9440","published":"2024-11-19T22:18:01.261Z","updated":"2024-11-20T20:33:44.390Z","title":"In parse of M3UParser.cpp there is a possible resource exhaustion due to improper input validation. This could lead to denial of service with no additional…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00191,"kevAdded":null},{"id":"CVE-2018-9433","published":"2024-11-19T21:28:32.065Z","updated":"2024-11-21T15:04:44.729Z","title":"In ArrayConcatVisitor of builtins-array.cc, there is a possible type confusion due to improper input validation. This could lead to remote code execution with…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.0027,"kevAdded":null},{"id":"CVE-2018-9432","published":"2024-11-19T21:26:51.877Z","updated":"2024-11-20T15:23:36.991Z","title":"In createPhonebookDialogView and createMapDialogView of BluetoothPermissionActivity.java, there is a possible permissions bypass. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00075,"kevAdded":null},{"id":"CVE-2018-9428","published":"2024-11-19T21:25:02.634Z","updated":"2024-11-20T15:27:16.790Z","title":"In startDevice of AAudioServiceStreamBase.cpp there is a possible out of bounds write due to a use after free. This could lead to local arbitrary code…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00082,"kevAdded":null},{"id":"CVE-2018-9424","published":"2024-11-19T21:23:35.724Z","updated":"2024-11-20T15:30:30.046Z","title":"In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null},{"id":"CVE-2018-9421","published":"2024-11-19T21:22:12.436Z","updated":"2024-11-20T15:34:27.270Z","title":"In writeInplace of Parcel.cpp, there is a possible information leak across processes, using Binder, due to uninitialized data. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00076,"kevAdded":null},{"id":"CVE-2018-9420","published":"2024-11-19T21:20:13.958Z","updated":"2024-11-20T15:36:13.387Z","title":"In BnCameraService::onTransact of CameraService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00076,"kevAdded":null},{"id":"CVE-2018-9419","published":"2024-11-19T21:11:45.990Z","updated":"2024-11-20T15:40:28.265Z","title":"In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00281,"kevAdded":null},{"id":"CVE-2018-9417","published":"2024-11-19T21:10:08.251Z","updated":"2024-11-20T15:47:29.444Z","title":"In f_hidg_read and hidg_disable of f_hid.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null},{"id":"CVE-2018-9412","published":"2024-11-19T21:08:26.491Z","updated":"2025-03-19T17:15:42.796Z","title":"In removeUnsynchronization of ID3.cpp there is a possible resource exhaustion due to improper input validation. This could lead to denial of service with no…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00082,"kevAdded":null},{"id":"CVE-2018-9411","published":"2024-11-19T21:06:22.949Z","updated":"2024-11-20T15:55:45.282Z","title":"In decrypt of ClearKeyCasPlugin.cpp there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote arbitrary code execution…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00615,"kevAdded":null},{"id":"CVE-2018-9410","published":"2024-11-19T21:04:59.464Z","updated":"2024-11-21T15:07:38.597Z","title":"In analyzeAxes of FontUtils.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00076,"kevAdded":null},{"id":"CVE-2018-9365","published":"2024-11-19T20:44:28.663Z","updated":"2024-11-21T15:10:28.232Z","title":"In smp_data_received of smp_l2c.cc, there is a possible out of bounds read followed by code execution due to a missing bounds check. This could lead to remote…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Andrioid","kev":false,"epss":0.0027,"kevAdded":null},{"id":"CVE-2018-9409","published":"2024-11-19T19:26:23.886Z","updated":"2024-11-20T19:50:55.876Z","title":"In HWCSession::SetColorModeById of hwc_session.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.0009,"kevAdded":null},{"id":"CVE-2018-9372","published":"2024-11-19T19:23:55.561Z","updated":"2024-11-21T15:13:16.054Z","title":"In cmd_flash_mmc_sparse_img of dl_commands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to a local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.0009,"kevAdded":null},{"id":"CVE-2018-9371","published":"2024-11-19T19:22:26.550Z","updated":"2024-11-20T20:04:52.809Z","title":"In the Mediatek Preloader, there are out of bounds reads and writes due to an exposed interface that allows arbitrary peripheral memory mapping with…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2018-9370","published":"2024-11-19T19:20:49.972Z","updated":"2024-11-21T15:15:52.899Z","title":"In download.c there is a special mode allowing user to download data into memory and causing possible memory corruptions due to missing bounds check. This…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2018-9369","published":"2024-11-19T19:17:52.251Z","updated":"2024-11-21T15:18:15.122Z","title":"In bootloader there is fastboot command allowing user specified kernel command line arguments. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00082,"kevAdded":null},{"id":"CVE-2018-9368","published":"2024-11-19T19:16:25.726Z","updated":"2024-11-21T15:28:10.145Z","title":"In mtkscoaudio debugfs there is a possible arbitrary kernel memory write due to missing bounds check and weakened SELinux policies. This could lead to local…","severity":"MEDIUM","score":6.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2018-9367","published":"2024-11-19T19:15:12.182Z","updated":"2024-11-21T15:49:25.966Z","title":"In FT_ACDK_CCT_V2_OP_ISP_SET_TUNING_PARAS of Meta_CCAP_Para.cpp, there is a possible out of bounds write due to improper input validation. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.0009,"kevAdded":null},{"id":"CVE-2018-9366","published":"2024-11-19T19:13:00.352Z","updated":"2024-11-20T15:59:21.871Z","title":"In IMSA_Recv_Thread and VT_IMCB_Thread of ImsaClient.cpp and VideoTelephony.c, there is a possible out of bounds write due to an integer overflow. This could…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.0009,"kevAdded":null},{"id":"CVE-2018-9364","published":"2024-11-19T19:10:07.411Z","updated":"2024-11-20T16:06:50.949Z","title":"In the LG LAF component, there is a special command that allowed modification of certain partitions. This could lead to bypass of secure boot. User interaction…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00211,"kevAdded":null},{"id":"CVE-2018-9348","published":"2024-11-19T19:08:21.744Z","updated":"2024-11-20T16:10:21.715Z","title":"In SMF_ParseMetaEvent of eas_smf.c, there is a possible integer overflow. This could lead to remote denial of service due to resource exhaustion with no…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00306,"kevAdded":null},{"id":"CVE-2018-9346","published":"2024-11-19T19:03:45.821Z","updated":"2024-11-20T16:16:02.687Z","title":"In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00084,"kevAdded":null},{"id":"CVE-2018-9345","published":"2024-11-19T19:01:33.773Z","updated":"2024-11-20T16:17:35.245Z","title":"In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00084,"kevAdded":null},{"id":"CVE-2018-9344","published":"2024-11-19T18:59:40.177Z","updated":"2024-11-20T16:28:16.498Z","title":"In several functions of DescramblerImpl.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null},{"id":"CVE-2018-9341","published":"2024-11-19T18:51:40.920Z","updated":"2024-11-20T16:21:22.527Z","title":"In impeg2d_mc_fullx_fully of impeg2d_mc.c there is a possible out of bound write due to missing bounds check. This could lead to remote arbitrary code…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00411,"kevAdded":null},{"id":"CVE-2018-9340","published":"2024-11-19T18:48:52.988Z","updated":"2024-11-20T16:26:20.293Z","title":"In ResStringPool::setTo of ResourceTypes.cpp, it's possible for an attacker to control the value of mStringPoolSize to be out of bounds, causing information…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00151,"kevAdded":null},{"id":"CVE-2018-9339","published":"2024-11-19T18:45:21.601Z","updated":"2024-11-20T16:31:48.607Z","title":"In writeTypedArrayList and readTypedArrayList of Parcel.java, there is a possible escalation of privilege due to type confusion. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.0009,"kevAdded":null},{"id":"CVE-2018-9338","published":"2024-11-19T18:11:08.553Z","updated":"2024-11-21T16:15:04.571Z","title":"In ResStringPool::setTo of ResourceTypes.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2023-21270","published":"2024-11-19T18:00:47.701Z","updated":"2024-11-20T16:35:48.663Z","title":"In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way for an app to keep permissions that should be revoked due to incorrect…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Andrioid","kev":false,"epss":0.00088,"kevAdded":null},{"id":"CVE-2017-13315","published":"2024-11-19T17:50:22.454Z","updated":"2024-11-20T16:39:43.948Z","title":"In writeToParcel and createFromParcel of DcParamObject.java, there is a permission bypass due to a write size mismatch. This could lead to an elevation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2017-13313","published":"2024-11-15T22:00:33.699Z","updated":"2024-11-19T16:01:39.585Z","title":"In ElementaryStreamQueue::dequeueAccessUnitMPEG4Video of ESQueue.cpp, there is a possible infinite loop leading to resource exhaustion due to an incorrect…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00241,"kevAdded":null},{"id":"CVE-2017-13314","published":"2024-11-15T21:57:39.845Z","updated":"2024-11-19T16:05:33.399Z","title":"In setAllowOnlyVpnForUids of NetworkManagementService.java, there is a possible security settings bypass due to a missing permission check. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00073,"kevAdded":null},{"id":"CVE-2017-13312","published":"2024-11-15T21:54:40.228Z","updated":"2024-11-19T16:07:58.726Z","title":"In createFromParcel of MediaCas.java, there is a possible parcel read/write mismatch due to improper input validation. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00073,"kevAdded":null},{"id":"CVE-2017-13311","published":"2024-11-15T21:46:33.040Z","updated":"2024-11-19T16:13:02.674Z","title":"In the read() function of ProcessStats.java, there is a possible read/write serialization issue leading to a permissions bypass. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00073,"kevAdded":null},{"id":"CVE-2017-13310","published":"2024-11-15T21:36:53.028Z","updated":"2024-11-19T16:21:34.779Z","title":"In createFromParcel of ViewPager.java, there is a possible read/write serialization issue leading to a permissions bypass. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00073,"kevAdded":null},{"id":"CVE-2017-13309","published":"2024-11-15T20:52:13.398Z","updated":"2024-11-15T21:08:46.046Z","title":"In readEncryptedData of ConscryptEngine.java, there is a possible plaintext leak due to improperly used crypto. This could lead to local information disclosure…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00076,"kevAdded":null},{"id":"CVE-2017-13227","published":"2024-11-14T22:10:59.404Z","updated":"2024-11-20T16:20:55.951Z","title":"In the autofill service, the package name that is provided by the app process is trusted inappropriately. This could lead to information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00084,"kevAdded":null},{"id":"CVE-2024-43093","published":"2024-11-13T17:25:14.006Z","updated":"2025-10-21T22:55:36.710Z","title":"In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due…","severity":"HIGH","score":7.3,"vendor":"Google","product":"Android","kev":true,"epss":0.00709,"kevAdded":"2024-11-07"},{"id":"CVE-2024-43091","published":"2024-11-13T17:25:13.895Z","updated":"2024-12-04T14:27:19.296Z","title":"In filterMask of SkEmbossMaskFilter.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00733,"kevAdded":null},{"id":"CVE-2024-43090","published":"2024-11-13T17:25:13.791Z","updated":"2025-08-26T22:48:31.531Z","title":"In multiple locations, there is a possible cross-user image read due to a missing permission check. This could lead to local information disclosure with User…","severity":"MEDIUM","score":5,"vendor":"Google","product":"Android","kev":false,"epss":0.00164,"kevAdded":null},{"id":"CVE-2024-43089","published":"2024-11-13T17:25:13.683Z","updated":"2024-11-22T04:55:10.948Z","title":"In updateInternal of MediaProvider.java , there is a possible access of another app's files due to a missing permission check. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2024-43088","published":"2024-11-13T17:25:13.585Z","updated":"2024-11-22T04:55:09.679Z","title":"In multiple functions in AppInfoBase.java, there is a possible way to manipulate app permission settings belonging to another user on the device due to a…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00176,"kevAdded":null},{"id":"CVE-2024-43087","published":"2024-11-13T17:25:13.467Z","updated":"2024-11-22T04:55:13.453Z","title":"In getInstalledAccessibilityPreferences of AccessibilitySettings.java, there is a possible way to hide an enabled accessibility service in the accessibility…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2024-43086","published":"2024-11-13T17:25:13.382Z","updated":"2024-11-14T15:16:02.013Z","title":"In validateAccountsInternal of AccountManagerService.java, there is a possible way to leak account credentials to a third party app due to a confused deputy.…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2024-43085","published":"2024-11-13T17:25:13.283Z","updated":"2024-11-16T04:55:32.876Z","title":"In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents over USB without unlocking the device due to a logic error in…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00112,"kevAdded":null},{"id":"CVE-2024-43084","published":"2024-11-13T17:25:13.042Z","updated":"2025-03-13T18:40:40.406Z","title":"In visitUris of multiple files, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with no…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2024-43083","published":"2024-11-13T17:25:12.930Z","updated":"2024-11-13T21:50:55.699Z","title":"In validate of WifiConfigurationUtil.java , there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2024-43082","published":"2024-11-13T17:25:12.836Z","updated":"2024-11-14T15:21:47.409Z","title":"In onActivityResult of EditUserPhotoController.java, there is a possible cross-user media read due to a confused deputy. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2024-43081","published":"2024-11-13T17:25:12.752Z","updated":"2024-11-16T04:55:31.701Z","title":"In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a logic error in the code. This could lead…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2024-43080","published":"2024-11-13T17:25:12.658Z","updated":"2024-12-04T04:55:41.724Z","title":"In onReceive of AppRestrictionsFragment.java, there is a possible escalation of privilege due to unsafe deserialization. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00122,"kevAdded":null},{"id":"CVE-2024-40671","published":"2024-11-13T17:25:12.555Z","updated":"2024-11-14T15:44:21.478Z","title":"In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible way to achieve arbitrary code execution due to a missing permission check. This could lead…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00118,"kevAdded":null},{"id":"CVE-2024-40661","published":"2024-11-13T17:25:12.454Z","updated":"2024-12-04T04:55:40.516Z","title":"In mayAdminGrantPermission of AdminRestrictedPermissionsUtils.java, there is a possible way to access the microphone due to a missing permission check. This…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2024-40660","published":"2024-11-13T17:25:12.318Z","updated":"2024-11-16T04:55:30.610Z","title":"In setTransactionState of SurfaceFlinger.cpp, there is a possible way to change protected display attributes due to a logic error in the code. This could lead…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2024-34747","published":"2024-11-13T17:13:19.800Z","updated":"2024-11-15T21:15:39.442Z","title":"In DevmemXIntMapPages of devicemem_server.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2024-34729","published":"2024-11-13T17:13:19.713Z","updated":"2024-11-15T21:17:09.762Z","title":"In multiple locations, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2024-34719","published":"2024-11-13T17:13:19.624Z","updated":"2024-12-04T04:55:39.167Z","title":"In multiple locations, there is a possible permissions bypass due to a missing null check. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2024-31337","published":"2024-11-13T17:13:19.522Z","updated":"2024-11-15T21:18:18.327Z","title":"In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2024-23715","published":"2024-11-13T17:13:19.354Z","updated":"2024-11-20T16:17:14.833Z","title":"In PMRWritePMPageList of pmr.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege in…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2023-35686","published":"2024-11-13T17:13:19.238Z","updated":"2024-11-20T16:18:26.402Z","title":"In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2023-35659","published":"2024-11-13T17:13:19.072Z","updated":"2024-11-20T16:20:05.777Z","title":"In DevmemIntChangeSparse of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2024-40662","published":"2024-09-11T00:09:19.760Z","updated":"2024-09-11T13:54:27.659Z","title":"In scheme of Uri.java, there is a possible way to craft a malformed Uri object due to improper input validation. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2024-40659","published":"2024-09-11T00:09:19.421Z","updated":"2024-11-04T17:23:40.752Z","title":"In getRegistration of RemoteProvisioningService.java, there is a possible way to permanently disable the AndroidKeyStore key generation feature by updating the…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00082,"kevAdded":null},{"id":"CVE-2024-40658","published":"2024-09-11T00:09:19.108Z","updated":"2024-09-11T14:14:33.137Z","title":"In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00106,"kevAdded":null},{"id":"CVE-2024-40657","published":"2024-09-11T00:09:18.796Z","updated":"2024-09-11T14:17:03.812Z","title":"In addPreferencesForType of AccountTypePreferenceLoader.java, there is a possible way to disable apps for other users due to a confused deputy. This could lead…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null},{"id":"CVE-2024-40656","published":"2024-09-11T00:09:18.479Z","updated":"2024-11-04T16:48:40.062Z","title":"In handleCreateConferenceComplete of ConnectionServiceWrapper.java, there is a possible way to reveal images across users due to a confused deputy. This could…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00082,"kevAdded":null},{"id":"CVE-2024-40655","published":"2024-09-11T00:09:18.166Z","updated":"2025-03-18T20:42:47.617Z","title":"In bindAndGetCallIdentification of CallScreeningServiceHelper.java, there is a possible way to maintain a while-in-use permission in the background due to a…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.0008,"kevAdded":null},{"id":"CVE-2024-40654","published":"2024-09-11T00:09:17.859Z","updated":"2024-10-16T15:18:57.353Z","title":"In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.0008,"kevAdded":null},{"id":"CVE-2024-40652","published":"2024-09-11T00:09:17.551Z","updated":"2024-09-11T20:32:26.648Z","title":"In onCreate of SettingsHomepageActivity.java, there is a possible way to access the Settings app while the device is provisioning due to a missing permission…","severity":"HIGH","score":7.3,"vendor":"Google","product":"Android","kev":false,"epss":0.0008,"kevAdded":null},{"id":"CVE-2024-40650","published":"2024-09-11T00:09:17.227Z","updated":"2024-09-12T13:14:14.304Z","title":"In wifi_item_edit_content of styles.xml , there is a possible FRP bypass due to Missing check for FRP state. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.0008,"kevAdded":null},{"id":"CVE-2024-31336","published":"2024-09-11T00:09:16.895Z","updated":"2024-09-13T00:33:49.563Z","title":"In PVRSRVBridgeRGXKickTA3D2 of server_rgxta3d_bridge.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2024-23716","published":"2024-09-11T00:09:16.547Z","updated":"2024-09-12T13:33:14.558Z","title":"In DevmemIntPFNotify of devicemem_server.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege in the…","severity":"HIGH","score":7.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00075,"kevAdded":null},{"id":"CVE-2024-34743","published":"2024-08-15T21:56:34.208Z","updated":"2024-08-27T03:55:18.668Z","title":"In setTransactionState of SurfaceFlinger.cpp, there is a possible way to perform tapjacking due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00082,"kevAdded":null},{"id":"CVE-2024-34742","published":"2024-08-15T21:56:33.860Z","updated":"2024-11-25T18:09:39.555Z","title":"In shouldWrite of OwnersData.java, there is a possible edge case that prevents MDM policies from being persisted due to a logic error in the code. This could…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00078,"kevAdded":null},{"id":"CVE-2024-34741","published":"2024-08-15T21:56:33.509Z","updated":"2024-08-27T13:48:27.809Z","title":"In setForceHideNonSystemOverlayWindowIfNeeded of WindowState.java, there is a possible way for message content to be visible on the screensaver while lock…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2024-34740","published":"2024-08-15T21:56:33.151Z","updated":"2024-08-16T14:07:11.752Z","title":"In attributeBytesBase64 and attributeBytesHex of BinaryXmlSerializer.java, there is a possible arbitrary XML injection due to an integer overflow. This could…","severity":"HIGH","score":7.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00174,"kevAdded":null},{"id":"CVE-2024-34739","published":"2024-08-15T21:56:32.805Z","updated":"2025-09-11T14:11:12.107Z","title":"In shouldRestrictOverlayActivities of UsbProfileGroupSettingsManager.java, there is a possible escape from SUW due to a logic error in the code. This could…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00186,"kevAdded":null},{"id":"CVE-2024-34738","published":"2024-08-15T21:56:32.460Z","updated":"2025-03-26T21:10:58.257Z","title":"In multiple functions of AppOpsService.java, there is a possible way for unprivileged apps to read their own restrictRead app-op states due to a logic error in…","severity":"HIGH","score":7.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00082,"kevAdded":null},{"id":"CVE-2024-34737","published":"2024-08-15T21:56:32.112Z","updated":"2025-03-25T15:54:24.798Z","title":"In ensureSetPipAspectRatioQuotaTracker of ActivityClientController.java, there is a possible way to generate unmovable and undeletable pip windows due to a…","severity":"HIGH","score":7.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2024-34736","published":"2024-08-15T21:56:31.759Z","updated":"2024-11-05T21:18:05.065Z","title":"In setupVideoEncoder of StagefrightRecorder.cpp, there is a possible asynchronous playback when B-frame support is enabled. This could lead to local escalation…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00085,"kevAdded":null},{"id":"CVE-2024-34734","published":"2024-08-15T21:56:31.399Z","updated":"2024-10-24T19:44:21.863Z","title":"In onForegroundServiceButtonClicked of FooterActionsViewModel.kt, there is a possible way to disable the active VPN app from the lockscreen due to an insecure…","severity":"HIGH","score":7.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00086,"kevAdded":null},{"id":"CVE-2024-34731","published":"2024-08-15T21:56:31.049Z","updated":"2024-08-16T14:30:36.797Z","title":"In multiple functions of TranscodingResourcePolicy.cpp, there is a possible memory corruption due to a race condition. This could lead to local escalation of…","severity":"HIGH","score":7.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2024-34727","published":"2024-08-15T21:56:30.695Z","updated":"2025-03-19T15:13:48.417Z","title":"In sdpu_compare_uuid_with_attr of sdp_utils.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00393,"kevAdded":null},{"id":"CVE-2024-31333","published":"2024-08-15T21:56:30.339Z","updated":"2024-08-16T14:25:24.616Z","title":"In _MMU_AllocLevel of mmu_common.c, there is a possible arbitrary code execution due to an integer overflow. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2024-34726","published":"2024-07-09T20:11:28.444Z","updated":"2024-08-02T02:59:22.602Z","title":"In PVRSRV_MMap of pvr_bridge_k.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2024-34725","published":"2024-07-09T20:11:28.354Z","updated":"2024-08-02T02:59:21.787Z","title":"In DevmemIntUnexportCtx of devicemem_server.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of…","severity":"HIGH","score":7.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00071,"kevAdded":null},{"id":"CVE-2024-34724","published":"2024-07-09T20:11:28.274Z","updated":"2024-10-25T17:31:42.428Z","title":"In _UnrefAndMaybeDestroy of pmr.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of privilege in…","severity":"HIGH","score":7,"vendor":"Google","product":"Android","kev":false,"epss":0.00081,"kevAdded":null},{"id":"CVE-2024-34723","published":"2024-07-09T20:11:28.186Z","updated":"2024-08-02T02:59:22.588Z","title":"In onTransact of ParcelableListBinder.java , there is a possible way to steal mAllowlistToken to launch an app from background due to a logic error in the…","severity":"MEDIUM","score":5.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2024-34722","published":"2024-07-09T20:11:28.095Z","updated":"2025-01-21T23:04:42.418Z","title":"In smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a protocol. This could…","severity":"HIGH","score":7.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00251,"kevAdded":null},{"id":"CVE-2024-34721","published":"2024-07-09T20:11:28.009Z","updated":"2024-11-05T21:10:10.801Z","title":"In ensureFileColumns of MediaProvider.java, there is a possible disclosure of files owned by another user due to improper input validation. This could lead to…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2024-34720","published":"2024-07-09T20:11:27.923Z","updated":"2024-08-02T02:59:22.237Z","title":"In com_android_internal_os_ZygoteCommandBuffer_nativeForkRepeatedly of com_android_internal_os_ZygoteCommandBuffer.cpp, there is a possible method to perform…","severity":"HIGH","score":7.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2024-31339","published":"2024-07-09T20:11:27.850Z","updated":"2024-08-02T01:52:56.221Z","title":"In multiple functions of StatsService.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2024-31335","published":"2024-07-09T20:11:27.749Z","updated":"2024-08-02T01:52:56.601Z","title":"In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00122,"kevAdded":null},{"id":"CVE-2024-31334","published":"2024-07-09T20:11:27.662Z","updated":"2024-08-02T01:52:56.317Z","title":"In DevmemIntFreeDefBackingPage of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local…","severity":"MEDIUM","score":6.7,"vendor":"Google","product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2024-31332","published":"2024-07-09T20:11:27.580Z","updated":"2025-03-13T16:08:02.170Z","title":"In multiple locations, there is a possible way to bypass a restriction on adding new Wi-Fi connections due to a missing permission check. This could lead to…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2024-31331","published":"2024-07-09T20:11:27.490Z","updated":"2025-03-14T19:02:35.258Z","title":"In setMimeGroup of PackageManagerService.java, there is a possible way to hide the service from Settings due to a logic error in the code. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2024-31320","published":"2024-07-09T20:11:27.398Z","updated":"2024-08-02T01:52:56.211Z","title":"In setSkipPrompt of AssociationRequest.java , there is a possible way to establish a companion device association without any confirmation due to CDM. This…","severity":"HIGH","score":7.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00259,"kevAdded":null},{"id":"CVE-2024-31327","published":"2024-07-09T20:09:16.548Z","updated":"2025-03-14T15:23:34.643Z","title":"In multiple functions of MessageQueueBase.h, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege…","severity":"MEDIUM","score":5.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00082,"kevAdded":null},{"id":"CVE-2024-31326","published":"2024-07-09T20:09:16.474Z","updated":"2024-08-19T15:18:35.774Z","title":"In multiple locations, there is a possible way in which policy migration code will never be executed due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2024-31325","published":"2024-07-09T20:09:16.399Z","updated":"2024-08-02T01:52:56.246Z","title":"In multiple locations, there is a possible way to reveal images across users data due to a logic error in the code. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00107,"kevAdded":null},{"id":"CVE-2024-31324","published":"2024-07-09T20:09:16.323Z","updated":"2025-03-15T15:34:04.568Z","title":"In hide of WindowState.java, there is a possible way to bypass tapjacking/overlay protection by launching the activity in portrait mode first and then rotating…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2024-31323","published":"2024-07-09T20:09:16.244Z","updated":"2024-08-02T01:52:56.548Z","title":"In onCreate of multiple files, there is a possible way to trick the user into granting health permissions due to tapjacking. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2024-31322","published":"2024-07-09T20:09:16.169Z","updated":"2024-08-02T01:52:56.298Z","title":"In updateServicesLocked of AccessibilityManagerService.java, there is a possible way for an app to be hidden from the Setting while retaining Accessibility…","severity":"MEDIUM","score":6.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2024-31319","published":"2024-07-09T20:09:16.083Z","updated":"2024-08-02T01:52:56.306Z","title":"In updateNotificationChannelFromPrivilegedListener of NotificationManagerService.java, there is a possible cross-user data leak due to a confused deputy. This…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.0017,"kevAdded":null},{"id":"CVE-2024-31318","published":"2024-07-09T20:09:16.004Z","updated":"2024-08-02T01:52:56.195Z","title":"In CompanionDeviceManagerService.java, there is a possible way to pair a companion device without user acceptance due to a missing permission check. This could…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00106,"kevAdded":null},{"id":"CVE-2024-31317","published":"2024-07-09T20:09:15.933Z","updated":"2024-08-02T01:52:56.288Z","title":"In multiple functions of ZygoteProcess.java, there is a possible way to achieve code execution as any app via WRITE_SECURE_SETTINGS due to unsafe…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00779,"kevAdded":null},{"id":"CVE-2024-31316","published":"2024-07-09T20:09:15.859Z","updated":"2025-03-13T19:53:48.800Z","title":"In onResult of AccountManagerService.java, there is a possible way to perform an arbitrary background activity launch due to parcel mismatch. This could lead…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2024-31315","published":"2024-07-09T20:09:15.779Z","updated":"2025-03-19T17:48:15.629Z","title":"In multiple functions of ManagedServices.java, there is a possible way to hide an app with notification access in the Device & app notifications settings due…","severity":"MEDIUM","score":5.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2024-31314","published":"2024-07-09T20:09:15.683Z","updated":"2024-11-05T22:02:01.856Z","title":"In multiple functions of ShortcutService.java, there is a possible persistent DOS due to resource exhaustion. This could lead to local denial of service with…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2024-31313","published":"2024-07-09T20:09:15.601Z","updated":"2024-08-02T01:52:56.323Z","title":"In availableToWriteBytes of MessageQueueBase.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2024-31312","published":"2024-07-09T20:09:15.484Z","updated":"2024-10-31T14:49:02.306Z","title":"In multiple locations, there is a possible information leak due to a missing permission check. This could lead to local information disclosure exposing played…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2024-31311","published":"2024-07-09T20:09:15.382Z","updated":"2024-08-02T01:52:56.159Z","title":"In increment_annotation_count of stats_event.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2024-31310","published":"2024-07-09T20:09:15.312Z","updated":"2025-03-27T15:47:47.460Z","title":"In newServiceInfoLocked of AutofillManagerServiceImpl.java, there is a possible way to hide an enabled Autofill service app in the Autofill service settings…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00112,"kevAdded":null},{"id":"CVE-2024-23711","published":"2024-07-09T20:09:15.233Z","updated":"2024-08-01T23:13:07.122Z","title":"In DevmemXIntUnreserveRange of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2024-23698","published":"2024-07-09T20:09:15.160Z","updated":"2024-08-01T23:06:25.368Z","title":"In RGXFWChangeOSidPriority of rgxfwutils.c, there is a possible arbitrary code execution due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2024-23697","published":"2024-07-09T20:09:15.088Z","updated":"2024-08-01T23:06:25.425Z","title":"In RGXCreateHWRTData_aux of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege…","severity":"HIGH","score":7.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2024-23696","published":"2024-07-09T20:09:14.965Z","updated":"2024-08-01T23:06:25.367Z","title":"In RGXCreateZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2024-23695","published":"2024-07-09T20:09:14.894Z","updated":"2024-08-01T23:06:25.353Z","title":"In CacheOpPMRExec of cache_km.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege in the…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2023-21114","published":"2024-07-09T20:09:14.639Z","updated":"2024-08-02T09:28:25.676Z","title":"In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00123,"kevAdded":null},{"id":"CVE-2023-21113","published":"2024-07-09T20:09:14.555Z","updated":"2025-03-13T14:22:54.038Z","title":"In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00123,"kevAdded":null},{"id":"CVE-2024-23709","published":"2024-05-07T21:03:31.178Z","updated":"2024-10-25T19:10:30.195Z","title":"In multiple locations, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00786,"kevAdded":null},{"id":"CVE-2024-23708","published":"2024-05-07T21:03:31.096Z","updated":"2025-12-16T18:13:20.968Z","title":"In multiple functions of NotificationManagerService.java, there is a possible way to not show a toast message when a clipboard message has been accessed. This…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00343,"kevAdded":null},{"id":"CVE-2024-23707","published":"2024-05-07T21:03:31.019Z","updated":"2024-08-01T23:13:07.332Z","title":"In multiple locations, there is a possible permissions bypass due to improper input validation. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2024-23706","published":"2024-05-07T21:03:30.941Z","updated":"2025-12-16T18:13:20.834Z","title":"In multiple locations, there is a possible bypass of health data permissions due to an improper input validation. This could lead to local escalation of…","severity":"HIGH","score":7.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2024-23705","published":"2024-05-07T21:03:30.866Z","updated":"2025-12-16T18:13:20.697Z","title":"In multiple locations, there is a possible failure to persist or enforce user restrictions due to improper input validation. This could lead to local…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00313,"kevAdded":null},{"id":"CVE-2024-0043","published":"2024-05-07T21:03:30.780Z","updated":"2025-03-28T23:26:27.004Z","title":"In multiple locations, there is a possible notification listener grant to an app running in the work profile due to a logic error in the code. This could lead…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00149,"kevAdded":null},{"id":"CVE-2024-0025","published":"2024-05-07T21:03:30.690Z","updated":"2024-08-01T19:23:48.812Z","title":"In sendIntentSender of ActivityManagerService.java, there is a possible background activity launch due to a logic error. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00107,"kevAdded":null},{"id":"CVE-2024-0024","published":"2024-05-07T21:03:30.602Z","updated":"2024-08-01T17:41:14.667Z","title":"In multiple methods of UserManagerService.java, there is a possible failure to persist or enforce user restrictions due to improper input validation. This…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2024-23713","published":"2024-05-07T21:01:29.338Z","updated":"2024-08-01T23:13:07.259Z","title":"In migrateNotificationFilter of NotificationManagerService.java, there is a possible failure to persist notifications settings due to improper input…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2024-23712","published":"2024-05-07T21:01:29.249Z","updated":"2025-03-17T17:50:47.973Z","title":"In multiple functions of AppOpsService.java, there is a possible way to saturate the content of /data/system/appops_accesses.xml due to resource exhaustion.…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00085,"kevAdded":null},{"id":"CVE-2024-23710","published":"2024-05-07T21:01:29.174Z","updated":"2025-03-26T20:02:30.509Z","title":"In assertPackageWithSharedUserIdIsPrivileged of InstallPackageHelper.java, there is a possible execution of arbitrary app code as a privileged app due to a…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.0009,"kevAdded":null},{"id":"CVE-2024-23704","published":"2024-05-07T21:01:29.094Z","updated":"2024-08-01T23:13:07.307Z","title":"In onCreate of WifiDialogActivity.java, there is a possible way to bypass the DISALLOW_ADD_WIFI_CONFIG restriction due to a missing permission check. This…","severity":"HIGH","score":7,"vendor":"Google","product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2024-0042","published":"2024-05-07T21:01:29.018Z","updated":"2024-08-01T17:41:15.554Z","title":"In TBD of TBD, there is a possible confusion of OEM and DRM certificates due to improperly used crypto. This could lead to local bypass of DRM content…","severity":"MEDIUM","score":5.6,"vendor":"Google","product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2024-0027","published":"2024-05-07T21:01:28.935Z","updated":"2024-11-20T21:37:00.487Z","title":"In multiple functions of SnoozeHelper.java, there is a possible way to cause a boot loop due to resource exhaustion. This could lead to local denial of service…","severity":"MEDIUM","score":5.9,"vendor":"Google","product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2024-0026","published":"2024-05-07T21:01:28.832Z","updated":"2024-08-01T17:41:15.580Z","title":"In multiple functions of SnoozeHelper.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of…","severity":"MEDIUM","score":4.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2024-0022","published":"2024-05-07T21:01:28.747Z","updated":"2025-03-27T20:52:59.434Z","title":"In multiple functions of CompanionDeviceManagerService.java, there is a possible launch NotificationAccessConfirmationActivity of another user profile due to…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2024-23717","published":"2024-03-11T16:35:22.617Z","updated":"2024-08-16T18:59:05.413Z","title":"In access_secure_service_from_temp_bond of btm_sec.cc, there is a possible way to achieve keystroke injection due to improper input validation. This could lead…","severity":"CRITICAL","score":9.1,"vendor":"Google","product":"Android","kev":false,"epss":0.00366,"kevAdded":null},{"id":"CVE-2024-0053","published":"2024-03-11T16:35:22.542Z","updated":"2025-03-27T15:48:15.415Z","title":"In getCustomPrinterIcon of PrintManagerService.java, there is a possible way to view other user's images due to a confused deputy. This could lead to local…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2024-0052","published":"2024-03-11T16:35:22.458Z","updated":"2025-03-13T18:34:28.839Z","title":"In multiple functions of healthconnect, there is a possible leakage of exercise route data due to a missing permission check. This could lead to local…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2024-0051","published":"2024-03-11T16:35:22.378Z","updated":"2024-08-28T19:01:42.953Z","title":"In onQueueFilled of SoftMPEG4.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2024-0050","published":"2024-03-11T16:35:22.297Z","updated":"2024-08-14T20:09:30.390Z","title":"In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a missing validation check. This could lead to a local…","severity":"HIGH","score":7.1,"vendor":"Google","product":"Android","kev":false,"epss":0.00126,"kevAdded":null},{"id":"CVE-2024-0049","published":"2024-03-11T16:35:22.215Z","updated":"2025-04-16T15:47:37.518Z","title":"In multiple locations, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00222,"kevAdded":null},{"id":"CVE-2024-0048","published":"2024-03-11T16:35:22.131Z","updated":"2024-08-28T18:37:39.524Z","title":"In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of null responses. This…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00126,"kevAdded":null},{"id":"CVE-2024-0047","published":"2024-03-11T16:35:22.043Z","updated":"2025-03-27T15:16:09.506Z","title":"In writeUserLP of UserManagerService.java, device policies are serialized with an incorrect tag due to a logic error in the code. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00147,"kevAdded":null},{"id":"CVE-2024-0046","published":"2024-03-11T16:35:21.955Z","updated":"2024-08-05T19:38:52.146Z","title":"In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a logic error in the code. This could lead…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00122,"kevAdded":null},{"id":"CVE-2024-0045","published":"2024-03-11T16:35:21.876Z","updated":"2024-08-27T17:29:04.372Z","title":"In smp_proc_sec_req of smp_act.cc, there is a possible out of bounds read due to improper input validation. This could lead to remote (proximal/adjacent)…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00317,"kevAdded":null},{"id":"CVE-2024-0044","published":"2024-03-11T16:35:21.760Z","updated":"2025-01-28T19:13:40.074Z","title":"In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.0146,"kevAdded":null},{"id":"CVE-2024-0039","published":"2024-03-11T16:35:21.612Z","updated":"2025-03-13T18:24:30.462Z","title":"In attp_build_value_cmd of att_protocol.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.01512,"kevAdded":null},{"id":"CVE-2024-0023","published":"2024-02-16T19:36:25.339Z","updated":"2024-08-21T20:09:56.603Z","title":"In ConvertRGBToPlanarYUV of Codec2BufferUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local…","severity":"HIGH","score":7.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00396,"kevAdded":null},{"id":"CVE-2024-0021","published":"2024-02-16T19:33:31.985Z","updated":"2024-08-28T14:31:23.354Z","title":"In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way for an app in the work profile to enable notification listener services due…","severity":"HIGH","score":7,"vendor":"Google","product":"Android","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2024-0020","published":"2024-02-16T19:33:31.785Z","updated":"2025-03-19T13:59:39.447Z","title":"In onActivityResult of NotificationSoundPreference.java, there is a possible way to hear audio files belonging to a different user due to a confused deputy.…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00107,"kevAdded":null},{"id":"CVE-2024-0019","published":"2024-02-16T19:33:31.592Z","updated":"2025-03-13T14:50:24.650Z","title":"In setListening of AppOpsControllerImpl.java, there is a possible way to hide the microphone privacy indicator when restarting systemUI due to a missing check…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2024-0018","published":"2024-02-16T19:33:31.399Z","updated":"2024-08-15T18:11:46.532Z","title":"In convertYUV420Planar16ToY410 of ColorConverter.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00122,"kevAdded":null},{"id":"CVE-2024-0017","published":"2024-02-16T19:33:31.218Z","updated":"2024-11-04T18:22:41.180Z","title":"In shouldUseNoOpLocation of CameraActivity.java, there is a possible confused deputy due to a permissions bypass. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2024-0016","published":"2024-02-16T19:33:31.029Z","updated":"2024-10-31T14:35:01.693Z","title":"In multiple locations, there is a possible out of bounds read due to a missing bounds check. This could lead to paired device information disclosure with no…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00212,"kevAdded":null},{"id":"CVE-2024-0015","published":"2024-02-16T18:33:36.716Z","updated":"2025-03-14T18:09:57.683Z","title":"In convertToComponentName of DreamService.java, there is a possible way to launch arbitrary protected activities due to intent redirection. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00379,"kevAdded":null},{"id":"CVE-2023-40085","published":"2024-02-16T18:33:36.521Z","updated":"2024-11-01T15:48:32.614Z","title":"In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2023-21165","published":"2024-02-16T18:33:36.337Z","updated":"2024-08-26T18:06:55.870Z","title":"In DevmemIntUnmapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00088,"kevAdded":null},{"id":"CVE-2024-0041","published":"2024-02-16T00:08:19.126Z","updated":"2025-03-28T15:54:45.173Z","title":"In removePersistentDot of SystemStatusAnimationSchedulerImpl.kt, there is a possible race condition due to a logic error in the code. This could lead to local…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00099,"kevAdded":null},{"id":"CVE-2024-0040","published":"2024-02-16T00:08:18.790Z","updated":"2024-08-01T17:41:15.511Z","title":"In setParameter of MtpPacket.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.01954,"kevAdded":null},{"id":"CVE-2024-0038","published":"2024-02-16T00:08:18.446Z","updated":"2024-08-22T13:19:19.237Z","title":"In injectInputEventToInputFilter of AccessibilityManagerService.java, there is a possible arbitrary input event injection due to a missing permission check.…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2024-0037","published":"2024-02-16T00:08:18.031Z","updated":"2024-12-03T15:55:14.401Z","title":"In applyCustomDescription of SaveUi.java, there is a possible way to view images belonging to a different user due to a missing permission check. This could…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2024-0036","published":"2024-02-16T00:08:17.660Z","updated":"2024-08-21T20:12:35.267Z","title":"In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to bypass the restrictions on starting activities from the background…","severity":"HIGH","score":7.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2024-0035","published":"2024-02-16T00:08:17.297Z","updated":"2024-08-28T14:27:48.699Z","title":"In onNullBinding of TileLifecycleManager.java, there is a possible way to launch an activity from the background due to a missing null check. This could lead…","severity":"HIGH","score":7.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2024-0034","published":"2024-02-16T00:08:16.947Z","updated":"2025-03-19T18:00:14.471Z","title":"In BackgroundLaunchProcessController, there is a possible way to launch arbitrary activity from the background due to BAL Bypass. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00118,"kevAdded":null},{"id":"CVE-2024-0033","published":"2024-02-16T00:08:16.586Z","updated":"2024-08-16T17:45:24.531Z","title":"In multiple functions of ashmem-dev.cpp, there is a possible missing seal due to a heap buffer overflow. This could lead to local escalation of privilege with…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.0016,"kevAdded":null},{"id":"CVE-2024-0032","published":"2024-02-16T00:08:16.134Z","updated":"2025-08-26T22:48:29.486Z","title":"In multiple locations, there is a possible way to request access to directories that should be hidden due to improper input validation. This could lead to…","severity":"MEDIUM","score":6.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00457,"kevAdded":null},{"id":"CVE-2024-0031","published":"2024-02-16T00:08:15.792Z","updated":"2024-08-01T17:41:14.691Z","title":"In attp_build_read_by_type_value_cmd of att_protocol.cc , there is a possible out of bounds write due to improper input validation. This could lead to remote…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00613,"kevAdded":null},{"id":"CVE-2024-0030","published":"2024-02-16T00:08:15.454Z","updated":"2024-11-06T18:58:07.759Z","title":"In btif_to_bta_response of btif_gatt_util.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00385,"kevAdded":null},{"id":"CVE-2024-0029","published":"2024-02-16T00:08:15.102Z","updated":"2025-03-14T17:35:06.820Z","title":"In multiple files, there is a possible way to capture the device screen when disallowed by device policy due to a logic error in the code. This could lead to…","severity":"HIGH","score":7.1,"vendor":"Google","product":"Android","kev":false,"epss":0.0014,"kevAdded":null},{"id":"CVE-2024-0014","published":"2024-02-16T00:08:14.746Z","updated":"2025-03-28T19:36:56.442Z","title":"In startInstall of UpdateFetcher.java, there is a possible way to trigger a malicious config update due to a logic error. This could lead to local escalation…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00136,"kevAdded":null},{"id":"CVE-2023-40122","published":"2024-02-16T00:08:14.391Z","updated":"2024-11-21T20:15:26.472Z","title":"In applyCustomDescription of SaveUi.java, there is a possible way to view other user's images due to a confused deputy. This could lead to local information…","severity":"MEDIUM","score":5.3,"vendor":"Google","product":"Android","kev":false,"epss":0.0029,"kevAdded":null},{"id":"CVE-2023-40093","published":"2024-02-16T00:08:14.017Z","updated":"2024-12-03T18:53:27.525Z","title":"In multiple files, there is a possible way that trimmed content could be included in PDF output due to a logic error in the code. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00131,"kevAdded":null},{"id":"CVE-2023-40124","published":"2024-02-15T22:31:16.353Z","updated":"2024-11-04T16:17:33.093Z","title":"In multiple locations, there is a possible cross-user read due to a confused deputy. This could lead to local information disclosure of photos or other images…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2023-40115","published":"2024-02-15T22:31:16.207Z","updated":"2024-08-02T18:24:55.624Z","title":"In readLogs of StatsService.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00217,"kevAdded":null},{"id":"CVE-2023-40114","published":"2024-02-15T22:31:15.925Z","updated":"2024-08-15T18:10:22.035Z","title":"In multiple functions of MtpFfsHandle.cpp , there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2023-40113","published":"2024-02-15T22:31:15.797Z","updated":"2024-11-06T21:10:46.324Z","title":"In multiple locations, there is a possible way for apps to access cross-user message data due to a missing permission check. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00082,"kevAdded":null},{"id":"CVE-2023-40112","published":"2024-02-15T22:31:15.687Z","updated":"2024-10-31T13:49:25.722Z","title":"In ippSetValueTag of ipp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure of past print…","severity":"MEDIUM","score":5.1,"vendor":"Google","product":"Android","kev":false,"epss":0.00085,"kevAdded":null},{"id":"CVE-2023-40111","published":"2024-02-15T22:31:15.565Z","updated":"2025-03-28T23:14:06.733Z","title":"In setMediaButtonReceiver of MediaSessionRecord.java, there is a possible way to send a pending intent on behalf of system_server due to a confused deputy.…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-40110","published":"2024-02-15T22:31:15.450Z","updated":"2025-03-19T16:00:18.169Z","title":"In multiple functions of MtpPacket.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2023-40109","published":"2024-02-15T22:31:15.329Z","updated":"2024-08-16T15:32:15.092Z","title":"In createFromParcel of UsbConfiguration.java, there is a possible background activity launch (BAL) due to a permissions bypass. This could lead to local…","severity":"HIGH","score":7.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00186,"kevAdded":null},{"id":"CVE-2023-40107","published":"2024-02-15T22:31:15.170Z","updated":"2024-08-21T20:15:47.531Z","title":"In ARTPWriter of ARTPWriter.cpp, there is a possible use after free due to uninitialized data. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00085,"kevAdded":null},{"id":"CVE-2023-40106","published":"2024-02-15T22:31:15.055Z","updated":"2024-08-27T18:22:07.493Z","title":"In sanitizeSbn of NotificationManagerService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00085,"kevAdded":null},{"id":"CVE-2023-40105","published":"2024-02-15T22:31:14.906Z","updated":"2024-10-31T17:09:33.100Z","title":"In backupAgentCreated of ActivityManagerService.java, there is a possible way to leak sensitive data due to a missing permission check. This could lead to…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00082,"kevAdded":null},{"id":"CVE-2023-40104","published":"2024-02-15T22:31:14.778Z","updated":"2024-08-02T18:24:55.545Z","title":"In ca-certificates, there is a possible way to read encrypted TLS data due to untrusted cryptographic certificates. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00295,"kevAdded":null},{"id":"CVE-2023-40100","published":"2024-02-15T22:31:14.672Z","updated":"2024-08-28T18:56:23.409Z","title":"In discovery_thread of Dns64Configuration.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege…","severity":"HIGH","score":8.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2023-45781","published":"2023-12-04T22:40:55.978Z","updated":"2024-08-28T17:36:58.917Z","title":"In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.0013,"kevAdded":null},{"id":"CVE-2023-45779","published":"2023-12-04T22:40:55.784Z","updated":"2024-08-02T20:29:32.420Z","title":"In the APEX module framework of AOSP, there is a possible malicious update to platform components due to improperly used crypto. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00333,"kevAdded":null},{"id":"CVE-2023-45777","published":"2023-12-04T22:40:55.603Z","updated":"2024-08-02T20:29:32.338Z","title":"In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to launch arbitrary activities using system privileges due to Parcel…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00345,"kevAdded":null},{"id":"CVE-2023-45776","published":"2023-12-04T22:40:55.427Z","updated":"2024-08-02T20:29:31.611Z","title":"In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2023-45775","published":"2023-12-04T22:40:55.237Z","updated":"2024-08-02T20:29:32.446Z","title":"In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2023-45774","published":"2023-12-04T22:40:55.035Z","updated":"2024-12-02T17:27:25.244Z","title":"In fixUpIncomingShortcutInfo of ShortcutService.java, there is a possible way to view another user's image due to a confused deputy. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2023-45773","published":"2023-12-04T22:40:54.826Z","updated":"2024-08-28T17:39:45.693Z","title":"In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2023-40103","published":"2023-12-04T22:40:54.653Z","updated":"2024-08-28T17:41:07.767Z","title":"In multiple locations, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00162,"kevAdded":null},{"id":"CVE-2023-40098","published":"2023-12-04T22:40:54.464Z","updated":"2024-08-02T18:24:54.985Z","title":"In mOnDone of NotificationConversationInfo.java, there is a possible way to access app notification data of another user due to a logic error in the code. This…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00121,"kevAdded":null},{"id":"CVE-2023-40097","published":"2023-12-04T22:40:54.273Z","updated":"2024-08-02T18:24:55.688Z","title":"In hasPermissionForActivity of PackageManagerHelper.java, there is a possible URI grant due to improper input validation. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00126,"kevAdded":null},{"id":"CVE-2023-40096","published":"2023-12-04T22:40:54.088Z","updated":"2024-08-02T18:24:54.731Z","title":"In OpRecordAudioMonitor::onFirstRef of AudioRecordClient.cpp, there is a possible way to record audio from the background due to a missing flag. This could…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00197,"kevAdded":null},{"id":"CVE-2023-40095","published":"2023-12-04T22:40:53.888Z","updated":"2024-12-02T17:28:13.725Z","title":"In createDontSendToRestrictedAppsBundle of PendingIntentUtils.java, there is a possible background activity launch due to a missing check. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00126,"kevAdded":null},{"id":"CVE-2023-40094","published":"2023-12-04T22:40:53.676Z","updated":"2024-08-28T17:42:28.539Z","title":"In keyguardGoingAway of ActivityTaskManagerService.java, there is a possible lock screen bypass due to a missing permission check. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2023-40092","published":"2023-12-04T22:40:53.469Z","updated":"2024-08-02T18:24:55.382Z","title":"In verifyShortcutInfoPackage of ShortcutService.java, there is a possible way to see another user's image due to a confused deputy. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2023-40091","published":"2023-12-04T22:40:53.277Z","updated":"2024-08-02T18:24:55.534Z","title":"In onTransact of IncidentService.cpp, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00126,"kevAdded":null},{"id":"CVE-2023-40090","published":"2023-12-04T22:40:53.088Z","updated":"2024-08-02T18:24:55.523Z","title":"In BTM_BleVerifySignature of btm_ble.cc, there is a possible way to bypass signature validation due to side channel information disclosure. This could lead to…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00542,"kevAdded":null},{"id":"CVE-2023-40089","published":"2023-12-04T22:40:52.874Z","updated":"2024-08-02T18:24:55.245Z","title":"In getCredentialManagerPolicy of DevicePolicyManagerService.java, there is a possible method for users to select credential managers without permission due to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2023-40088","published":"2023-12-04T22:40:52.675Z","updated":"2024-08-02T18:24:55.553Z","title":"In callback_thread_event of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible memory corruption due to a use after free. This could lead…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.01717,"kevAdded":null},{"id":"CVE-2023-40087","published":"2023-12-04T22:40:52.488Z","updated":"2024-08-28T17:44:04.980Z","title":"In transcodeQ*ToFloat of btif_avrcp_audio_track.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to paired device…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00237,"kevAdded":null},{"id":"CVE-2023-40084","published":"2023-12-04T22:40:52.302Z","updated":"2024-08-02T18:24:55.510Z","title":"In run of MDnsSdListener.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.002,"kevAdded":null},{"id":"CVE-2023-40083","published":"2023-12-04T22:40:52.110Z","updated":"2024-08-02T18:24:55.532Z","title":"In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2023-40082","published":"2023-12-04T22:40:51.922Z","updated":"2024-12-02T17:33:08.846Z","title":"In modify_for_next_stage of fdt.rs, there is a possible way to render KASLR ineffective due to improperly used crypto. This could lead to remote escalation of…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00639,"kevAdded":null},{"id":"CVE-2023-40081","published":"2023-12-04T22:40:51.736Z","updated":"2024-08-02T18:24:55.397Z","title":"In loadMediaDataInBgForResumption of MediaDataManager.kt, there is a possible way to view another user's images due to a confused deputy. This could lead to…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00118,"kevAdded":null},{"id":"CVE-2023-40080","published":"2023-12-04T22:40:51.540Z","updated":"2024-08-02T18:24:54.644Z","title":"In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00132,"kevAdded":null},{"id":"CVE-2023-40079","published":"2023-12-04T22:40:51.346Z","updated":"2024-08-02T18:24:55.562Z","title":"In injectSendIntentSender of ShortcutService.java, there is a possible background activity launch due to a permissions bypass. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00127,"kevAdded":null},{"id":"CVE-2023-40078","published":"2023-12-04T22:40:51.150Z","updated":"2024-08-02T18:24:54.909Z","title":"In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00524,"kevAdded":null},{"id":"CVE-2023-40077","published":"2023-12-04T22:40:50.938Z","updated":"2024-08-02T18:24:54.721Z","title":"In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition. This could lead to remote escalation of privilege with no…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.08423,"kevAdded":null},{"id":"CVE-2023-40076","published":"2023-12-04T22:40:50.721Z","updated":"2025-05-29T13:47:24.117Z","title":"In createPendingIntent of CredentialManagerUi.java, there is a possible way to access credentials from other users due to a permissions bypass. This could lead…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.02281,"kevAdded":null},{"id":"CVE-2023-40075","published":"2023-12-04T22:40:50.530Z","updated":"2024-08-28T17:46:20.109Z","title":"In forceReplaceShortcutInner of ShortcutPackage.java, there is a possible way to register unlimited packages due to a missing bounds check. This could lead to…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2023-40074","published":"2023-12-04T22:40:50.334Z","updated":"2024-08-02T18:24:55.056Z","title":"In saveToXml of PersistableBundle.java, invalid data could lead to local persistent denial of service with no additional execution privileges needed. User…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00136,"kevAdded":null},{"id":"CVE-2023-40073","published":"2023-12-04T22:40:50.138Z","updated":"2024-08-02T18:24:54.873Z","title":"In visitUris of Notification.java, there is a possible cross-user media read due to Confused Deputy. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00134,"kevAdded":null},{"id":"CVE-2023-35690","published":"2023-12-04T22:40:49.946Z","updated":"2024-12-02T17:33:56.452Z","title":"In RGXDestroyHWRTData of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. This could lead to local escalation of privilege…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2023-35668","published":"2023-12-04T22:40:49.750Z","updated":"2024-08-28T17:49:58.836Z","title":"In visitUris of Notification.java, there is a possible way to display images from another user due to a confused deputy. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00136,"kevAdded":null},{"id":"CVE-2023-21403","published":"2023-12-04T22:40:49.543Z","updated":"2024-08-02T09:36:34.255Z","title":"In RGXDestroyZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. This could lead to local escalation of…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2023-21402","published":"2023-12-04T22:40:49.339Z","updated":"2024-08-02T09:36:34.325Z","title":"In MMU_UnmapPages of mmu_common.c, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege in…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2023-21401","published":"2023-12-04T22:40:49.129Z","updated":"2024-12-02T17:34:38.257Z","title":"In DevmemIntChangeSparse of devicemem_server.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2023-21263","published":"2023-12-04T22:40:48.595Z","updated":"2024-08-02T09:28:26.184Z","title":"In OSMMapPMRGeneric of pmr_os.c, there is a possible out of bounds write due to an uncaught exception. This could lead to local escalation of privilege in the…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2023-21228","published":"2023-12-04T22:40:48.398Z","updated":"2024-08-02T09:28:26.155Z","title":"In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2023-21227","published":"2023-12-04T22:40:48.217Z","updated":"2024-08-02T09:28:26.129Z","title":"In HTBLogKM of htbserver.c, there is a possible information disclosure due to log information disclosure. This could lead to local information disclosure in…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00294,"kevAdded":null},{"id":"CVE-2023-21218","published":"2023-12-04T22:40:47.994Z","updated":"2024-08-02T09:28:26.131Z","title":"In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2023-21217","published":"2023-12-04T22:40:47.799Z","updated":"2024-08-02T09:28:26.124Z","title":"In PMRWritePMPageList of TBD, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2023-21216","published":"2023-12-04T22:40:47.608Z","updated":"2025-05-29T13:49:46.575Z","title":"In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00398,"kevAdded":null},{"id":"CVE-2023-21215","published":"2023-12-04T22:40:47.418Z","updated":"2024-08-02T09:28:26.155Z","title":"In DevmemIntAcquireRemoteCtx of devicemem_server.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2023-21166","published":"2023-12-04T22:40:47.237Z","updated":"2024-10-11T18:01:19.606Z","title":"In RGXBackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2023-21164","published":"2023-12-04T22:40:47.041Z","updated":"2024-08-02T09:28:25.945Z","title":"In DevmemIntMapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2023-21163","published":"2023-12-04T22:40:46.838Z","updated":"2024-08-02T09:28:26.053Z","title":"In PMR_ReadBytes of pmr.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2023-21162","published":"2023-12-04T22:40:46.601Z","updated":"2024-12-02T17:35:10.410Z","title":"In RGXUnbackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2022-42541","published":"2023-11-29T21:29:47.079Z","updated":"2025-06-05T13:37:55.312Z","title":"Remote code execution","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.0062,"kevAdded":null},{"id":"CVE-2022-42540","published":"2023-11-29T21:29:46.883Z","updated":"2024-08-03T13:10:41.420Z","title":"Elevation of privilege","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00359,"kevAdded":null},{"id":"CVE-2022-42539","published":"2023-11-29T21:29:46.662Z","updated":"2024-08-03T13:10:41.198Z","title":"Information disclosure","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00303,"kevAdded":null},{"id":"CVE-2022-42538","published":"2023-11-29T21:29:46.455Z","updated":"2024-08-03T13:10:41.253Z","title":"Elevation of privilege","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00359,"kevAdded":null},{"id":"CVE-2022-42537","published":"2023-11-29T21:29:46.269Z","updated":"2024-08-03T13:10:41.245Z","title":"Remote code execution","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00574,"kevAdded":null},{"id":"CVE-2022-42536","published":"2023-11-29T21:29:46.076Z","updated":"2024-08-03T13:10:41.375Z","title":"Remote code execution","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00574,"kevAdded":null},{"id":"CVE-2023-45780","published":"2023-10-30T17:01:39.813Z","updated":"2026-04-08T18:01:15.620Z","title":"In Print Service, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00132,"kevAdded":null},{"id":"CVE-2023-40101","published":"2023-10-30T17:01:39.631Z","updated":"2024-09-17T13:20:31.525Z","title":"In collapse of canonicalize_md.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00145,"kevAdded":null},{"id":"CVE-2023-21398","published":"2023-10-30T17:01:39.442Z","updated":"2024-09-06T18:30:52.147Z","title":"In sdksandbox, there is a possible strandhogg style overlay attack due to a logic error in the code. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2023-21397","published":"2023-10-30T17:01:39.250Z","updated":"2024-09-06T18:33:01.274Z","title":"In Setup Wizard, there is a possible way to save a WiFi network due to an insecure default value. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2023-21396","published":"2023-10-30T17:01:39.070Z","updated":"2024-09-06T18:34:54.782Z","title":"In Activity Manager, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2023-21395","published":"2023-10-30T17:01:38.879Z","updated":"2024-08-02T09:36:34.216Z","title":"In Bluetooth, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure over Bluetooth with no…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00221,"kevAdded":null},{"id":"CVE-2023-21394","published":"2023-10-30T17:01:38.666Z","updated":"2024-08-02T09:36:33.740Z","title":"In registerPhoneAccount of TelecomServiceImpl.java, there is a possible way to reveal images from another user due to a missing permission check. This could…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2023-21393","published":"2023-10-30T17:01:38.471Z","updated":"2024-09-06T18:36:39.370Z","title":"In Settings, there is a possible way for the user to change SIM due to a missing permission check. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2023-21392","published":"2023-10-30T17:01:38.267Z","updated":"2024-08-02T09:36:34.148Z","title":"In Bluetooth, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege when connecting to a…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00188,"kevAdded":null},{"id":"CVE-2023-21391","published":"2023-10-30T17:01:38.064Z","updated":"2024-09-06T18:40:26.370Z","title":"In Messaging, there is a possible way to disable the messaging application due to improper input validation. This could lead to remote denial of service with…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00508,"kevAdded":null},{"id":"CVE-2023-21390","published":"2023-10-30T17:01:37.870Z","updated":"2024-09-05T20:07:57.605Z","title":"In Sim, there is a possible way to evade mobile preference restrictions due to a permission bypass. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00106,"kevAdded":null},{"id":"CVE-2023-21389","published":"2023-10-30T17:01:37.682Z","updated":"2024-09-06T18:45:51.800Z","title":"In Settings, there is a possible bypass of profile owner restrictions due to a missing permission check. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00107,"kevAdded":null},{"id":"CVE-2023-21388","published":"2023-10-30T17:01:37.495Z","updated":"2024-09-06T18:48:34.768Z","title":"In Settings, there is a possible restriction bypass due to a missing permission check. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00106,"kevAdded":null},{"id":"CVE-2023-21387","published":"2023-10-30T17:01:37.310Z","updated":"2024-09-06T18:49:49.381Z","title":"In User Backup Manager, there is a possible way to leak a token to bypass user confirmation for backup due to log information disclosure. This could lead to…","severity":"MEDIUM","score":4.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2023-21385","published":"2023-10-30T17:01:37.089Z","updated":"2024-09-06T20:11:17.368Z","title":"In Whitechapel, there is a possible out of bounds read due to memory corruption. This could lead to local information disclosure with no additional execution…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2023-21384","published":"2023-10-30T17:01:36.889Z","updated":"2024-09-06T20:11:46.030Z","title":"In Package Manager, there is a possible possible permissions bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2023-21383","published":"2023-10-30T17:01:36.693Z","updated":"2024-09-06T18:51:08.045Z","title":"In Settings, there is a possible way for the user to unintentionally send extra data due to an unclear prompt. This could lead to local information disclosure…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2023-21382","published":"2023-10-30T17:01:36.502Z","updated":"2024-09-06T18:52:23.589Z","title":"In Content Resolver, there is a possible method to access metadata about existing content providers on the device due to a missing permission check. This could…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00086,"kevAdded":null},{"id":"CVE-2023-21381","published":"2023-10-30T17:01:36.310Z","updated":"2024-09-06T18:55:22.999Z","title":"In Media Resource Manager, there is a possible local arbitrary code execution due to use after free. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2023-21380","published":"2023-10-30T17:01:36.112Z","updated":"2024-08-02T09:36:33.808Z","title":"In Bluetooth, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":"Google","product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2023-21379","published":"2023-10-30T17:01:35.923Z","updated":"2024-08-02T09:36:33.574Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server…","severity":"MEDIUM","score":4.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2023-21378","published":"2023-10-30T17:01:35.735Z","updated":"2024-09-06T18:57:10.680Z","title":"In Telecomm, there is a possible way to silence the ring for calls of secondary users due to a missing permission check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2023-21377","published":"2023-10-30T17:01:35.538Z","updated":"2024-09-06T18:59:14.204Z","title":"In SELinux Policy, there is a possible restriction bypass due to a permissions bypass. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-21376","published":"2023-10-30T17:01:35.326Z","updated":"2025-03-06T16:01:03.848Z","title":"In Telephony, there is a possible way to retrieve the ICCID due to a logic error in the code. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2023-21375","published":"2023-10-30T17:01:35.124Z","updated":"2024-09-06T19:13:15.529Z","title":"In Sysproxy, there is a possible out of bounds write due to an integer underflow. This could lead to local escalation of privilege with no additional execution…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2023-21374","published":"2023-10-30T17:01:34.944Z","updated":"2024-09-06T19:17:12.329Z","title":"In System UI, there is a possible factory reset protection bypass due to a logic error in the code. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-21373","published":"2023-10-30T17:01:34.762Z","updated":"2024-09-06T19:18:53.778Z","title":"In Telephony, there is a possible way for a guest user to change the preferred SIM due to a missing permission check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2023-21372","published":"2023-10-30T17:01:34.591Z","updated":"2024-09-17T13:21:35.399Z","title":"In libdexfile, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2023-21371","published":"2023-10-30T16:59:26.950Z","updated":"2024-09-06T19:22:09.354Z","title":"In Secure Element, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2023-21370","published":"2023-10-30T16:59:26.758Z","updated":"2024-09-06T19:25:11.541Z","title":"In the Security Element API, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2023-21369","published":"2023-10-30T16:59:26.560Z","updated":"2024-09-06T20:12:05.687Z","title":"In Usage Access, there is a possible way to display a Settings usage access restriction toggle screen due to a permissions bypass. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.0009,"kevAdded":null},{"id":"CVE-2023-21368","published":"2023-10-30T16:59:26.371Z","updated":"2024-09-06T20:12:34.208Z","title":"In Audio, there is a possible out of bounds read due to missing bounds check. This could lead to local information disclosure with no additional execution…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2023-21367","published":"2023-10-30T16:59:26.099Z","updated":"2024-09-06T20:12:53.440Z","title":"In Scudo, there is a possible way to exploit certain heap OOB read/write issues due to an insecure implementation/design. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2023-21366","published":"2023-10-30T16:56:39.728Z","updated":"2024-09-17T13:24:14.228Z","title":"In Scudo, there is a possible way for an attacker to predict heap allocation patterns due to insecure implementation/design. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2023-21365","published":"2023-10-30T16:56:39.539Z","updated":"2024-09-06T20:13:24.635Z","title":"In Contacts, there is a possible crash loop due to resource exhaustion. This could lead to local denial of service in the Phone app with User execution…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00085,"kevAdded":null},{"id":"CVE-2023-21364","published":"2023-10-30T16:56:39.335Z","updated":"2024-09-06T20:14:30.378Z","title":"In ContactsProvider, there is a possible crash loop due to resource exhaustion. This could lead to local persistent denial of service in the Phone app with…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.0009,"kevAdded":null},{"id":"CVE-2023-21362","published":"2023-10-30T16:56:39.102Z","updated":"2024-09-06T20:21:30.092Z","title":"In Usage, there is a possible permanent DoS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00085,"kevAdded":null},{"id":"CVE-2023-21361","published":"2023-10-30T16:56:38.921Z","updated":"2024-08-02T09:36:33.569Z","title":"In Bluetooth, there is a possibility of code-execution due to a use after free. This could lead to paired device escalation of privilege in the privileged…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00165,"kevAdded":null},{"id":"CVE-2023-21360","published":"2023-10-30T16:56:38.737Z","updated":"2024-08-02T09:36:33.532Z","title":"In Bluetooth, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2023-21359","published":"2023-10-30T16:56:38.524Z","updated":"2024-08-02T09:36:33.578Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server…","severity":"MEDIUM","score":4.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2023-21358","published":"2023-10-30T16:56:38.333Z","updated":"2025-04-30T18:02:43.437Z","title":"In UWB Google, there is a possible way for a malicious app to masquerade as system app com.android.uwb.resources due to improperly used crypto. This could lead…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2023-21357","published":"2023-10-30T16:56:38.133Z","updated":"2024-09-06T19:59:31.552Z","title":"In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges…","severity":"MEDIUM","score":4.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2023-21356","published":"2023-10-30T16:56:37.946Z","updated":"2024-08-02T09:36:33.528Z","title":"In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code execution with no…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00165,"kevAdded":null},{"id":"CVE-2023-21355","published":"2023-10-30T16:56:37.756Z","updated":"2024-09-06T19:26:12.993Z","title":"In libaudioclient, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2023-21354","published":"2023-10-30T16:56:37.580Z","updated":"2024-09-06T19:28:00.850Z","title":"In Package Manager Service, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2023-21353","published":"2023-10-30T16:56:37.386Z","updated":"2024-09-06T19:37:11.045Z","title":"In NFA, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00449,"kevAdded":null},{"id":"CVE-2023-21352","published":"2023-10-30T16:56:37.186Z","updated":"2024-09-06T19:38:10.430Z","title":"In NFA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2023-21351","published":"2023-10-30T16:56:36.993Z","updated":"2024-08-16T14:36:07.588Z","title":"In multiple locations, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00125,"kevAdded":null},{"id":"CVE-2023-21350","published":"2023-10-30T16:56:36.800Z","updated":"2024-09-06T19:39:04.078Z","title":"In Media Projection, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure.…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00088,"kevAdded":null},{"id":"CVE-2023-21349","published":"2023-10-30T16:56:36.612Z","updated":"2024-09-12T20:07:58.803Z","title":"In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure.…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2023-21348","published":"2023-10-30T16:56:36.438Z","updated":"2024-09-06T19:40:13.222Z","title":"In Window Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure.…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2023-21347","published":"2023-10-30T16:56:36.248Z","updated":"2024-08-02T09:36:33.568Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.0044,"kevAdded":null},{"id":"CVE-2023-21346","published":"2023-10-30T16:56:36.057Z","updated":"2024-09-06T19:41:14.158Z","title":"In the Device Idle Controller, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2023-21345","published":"2023-10-30T16:56:35.885Z","updated":"2024-09-06T19:43:35.825Z","title":"In Game Manager Service, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2023-21344","published":"2023-10-30T16:56:35.698Z","updated":"2024-09-06T19:44:53.616Z","title":"In Job Scheduler, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2023-21343","published":"2023-10-30T16:56:35.513Z","updated":"2024-09-06T19:46:29.190Z","title":"In ActivityStarter, there is a possible background activity launch due to an unsafe PendingIntent. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2023-21342","published":"2023-10-30T16:56:35.319Z","updated":"2025-09-04T17:11:35.979Z","title":"In RemoteSpeechRecognitionService of RemoteSpeechRecognitionService.java, there is a possible way to launch an activity from the background due to a logic…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2023-21341","published":"2023-10-30T16:56:35.108Z","updated":"2024-09-06T20:04:41.218Z","title":"In Permission Manager, there is a possible way to bypass required permissions due to a missing permission check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2023-21340","published":"2023-10-30T16:56:34.912Z","updated":"2024-09-06T20:05:37.163Z","title":"In Telecomm, there is a possible way to get the call state due to a missing permission check. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2023-21339","published":"2023-10-30T16:56:34.720Z","updated":"2024-09-06T20:08:26.452Z","title":"In Minikin, there is a possible way to trigger ANR by showing a malicious message due to resource exhaustion. This could lead to remote denial of service with…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00492,"kevAdded":null},{"id":"CVE-2023-21338","published":"2023-10-30T16:56:34.529Z","updated":"2024-09-06T20:16:24.626Z","title":"In Input Method, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2023-21337","published":"2023-10-30T16:56:34.340Z","updated":"2024-09-06T20:14:25.438Z","title":"In InputMethod, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00122,"kevAdded":null},{"id":"CVE-2023-21336","published":"2023-10-30T16:56:34.159Z","updated":"2024-09-06T19:47:22.895Z","title":"In Input Method, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00106,"kevAdded":null},{"id":"CVE-2023-21335","published":"2023-10-30T16:56:33.967Z","updated":"2024-09-06T19:48:47.928Z","title":"In Settings, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00106,"kevAdded":null},{"id":"CVE-2023-21334","published":"2023-10-30T16:56:33.779Z","updated":"2024-09-06T19:51:11.867Z","title":"In App Ops Service, there is a possible disclosure of information about installed packages due to a logic error in the code. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00112,"kevAdded":null},{"id":"CVE-2023-21333","published":"2023-10-30T16:56:33.584Z","updated":"2024-09-06T19:54:31.172Z","title":"In Text Services, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2023-21332","published":"2023-10-30T16:56:33.400Z","updated":"2024-09-06T19:55:47.022Z","title":"In Text Services, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2023-21331","published":"2023-10-30T16:56:33.193Z","updated":"2024-09-06T19:58:06.508Z","title":"In InputMethod, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2023-21330","published":"2023-10-30T16:56:32.976Z","updated":"2024-09-06T19:58:52.460Z","title":"In Overlay Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure.…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2023-21329","published":"2023-10-30T16:56:32.762Z","updated":"2024-09-06T20:00:11.022Z","title":"In Activity Manager, there is a possible way to determine whether an app is installed due to a missing permission check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2023-21328","published":"2023-10-30T16:56:32.558Z","updated":"2024-09-06T20:02:08.969Z","title":"In Package Installer, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2023-21327","published":"2023-10-30T16:56:32.367Z","updated":"2024-09-06T20:04:06.289Z","title":"In Permission Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure.…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2023-21326","published":"2023-10-30T16:56:32.181Z","updated":"2024-09-06T20:10:37.694Z","title":"In Package Manager Service, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2023-21325","published":"2023-10-30T16:56:31.988Z","updated":"2024-09-06T20:11:12.406Z","title":"In Settings, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2023-21324","published":"2023-10-30T16:56:31.805Z","updated":"2024-09-06T20:12:42.924Z","title":"In Package Installer, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure.…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00099,"kevAdded":null},{"id":"CVE-2023-21323","published":"2023-10-30T16:56:31.619Z","updated":"2024-09-06T20:15:15.720Z","title":"In Activity Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure.…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2023-21321","published":"2023-10-30T16:56:31.437Z","updated":"2024-09-06T20:15:58.839Z","title":"In Package Manager, there is a possible cross-user settings disclosure due to a missing permission check. This could lead to local information disclosure with…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2023-21320","published":"2023-10-30T16:56:31.245Z","updated":"2024-09-06T20:16:38.879Z","title":"In Device Policy, there is a possible way to verify if a particular admin app is registered on the device due to side channel information disclosure. This…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2023-21319","published":"2023-10-30T16:56:31.063Z","updated":"2024-09-06T20:17:08.134Z","title":"In UsageStatsService, there is a possible way to read installed 3rd party apps due to side channel information disclosure. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2023-21318","published":"2023-10-30T16:56:30.858Z","updated":"2024-09-06T20:17:37.838Z","title":"In Content, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2023-21317","published":"2023-10-30T16:56:30.670Z","updated":"2024-09-06T20:16:03.763Z","title":"In ContentService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure.…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2023-21316","published":"2023-10-30T16:56:30.471Z","updated":"2024-09-06T20:18:14.729Z","title":"In Content, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2023-21315","published":"2023-10-30T16:56:30.266Z","updated":"2024-08-02T09:36:33.248Z","title":"In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote (proximal/adjacent) information disclosure with…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2023-21314","published":"2023-10-30T16:56:30.060Z","updated":"2024-08-02T09:36:33.130Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution…","severity":"MEDIUM","score":4.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2023-21313","published":"2023-10-30T16:56:29.849Z","updated":"2024-09-06T20:07:32.720Z","title":"In Core, there is a possible way to forward calls without user knowledge due to a missing permission check. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2023-21312","published":"2023-10-30T16:56:29.671Z","updated":"2024-09-06T20:08:34.774Z","title":"In IntentResolver, there is a possible cross-user media read due to a confused deputy. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2023-21311","published":"2023-10-30T16:56:29.479Z","updated":"2024-09-06T20:09:38.853Z","title":"In Settings, there is a possible way to control private DNS settings from a secondary user due to a permissions bypass. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00088,"kevAdded":null},{"id":"CVE-2023-21310","published":"2023-10-30T16:56:29.294Z","updated":"2024-08-02T09:36:32.998Z","title":"In Bluetooth, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2023-21309","published":"2023-10-30T16:56:29.094Z","updated":"2024-09-06T20:11:37.594Z","title":"In libcore, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2023-21308","published":"2023-10-30T16:56:28.906Z","updated":"2024-09-06T20:13:11.940Z","title":"In Composer, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2023-21307","published":"2023-10-30T16:56:28.709Z","updated":"2024-08-02T09:36:32.902Z","title":"In Bluetooth, there is a possible way for a paired Bluetooth device to access a long term identifier for an Android device due to a permissions bypass. This…","severity":"MEDIUM","score":5,"vendor":"Google","product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2023-21306","published":"2023-10-30T16:56:28.509Z","updated":"2024-09-06T20:28:33.093Z","title":"In ContentService, there is a possible way to read installed sync content providers due to side channel information disclosure. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2023-21305","published":"2023-10-30T16:56:28.317Z","updated":"2024-09-06T20:30:09.991Z","title":"In Content, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-21304","published":"2023-10-30T16:56:28.113Z","updated":"2024-09-06T20:31:32.237Z","title":"In Content Service, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure.…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-21303","published":"2023-10-30T16:56:27.919Z","updated":"2024-09-06T20:31:16.322Z","title":"In Content, here is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-21302","published":"2023-10-30T16:56:27.736Z","updated":"2024-09-06T20:30:50.635Z","title":"In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure.…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2023-21301","published":"2023-10-30T16:56:27.543Z","updated":"2024-09-06T20:30:22.107Z","title":"In ActivityManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2023-21300","published":"2023-10-30T16:56:27.352Z","updated":"2024-09-06T20:21:46.687Z","title":"In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure.…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-21299","published":"2023-10-30T16:56:27.133Z","updated":"2024-10-11T18:08:21.358Z","title":"In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure.…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-21298","published":"2023-10-30T16:56:26.947Z","updated":"2024-09-06T20:21:14.565Z","title":"In Slice, there is a possible disclosure of installed applications due to side channel information disclosure. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2023-21297","published":"2023-10-30T16:56:26.759Z","updated":"2024-09-06T20:19:59.175Z","title":"In SEPolicy, there is a possible way to access the factory MAC address due to a permissions bypass. This could lead to local information disclosure with System…","severity":"MEDIUM","score":4.4,"vendor":"Google","product":"Android","kev":false,"epss":0.0009,"kevAdded":null},{"id":"CVE-2023-21296","published":"2023-10-30T16:18:54.940Z","updated":"2024-09-06T20:33:16.135Z","title":"In Permission, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2023-21295","published":"2023-10-30T16:18:54.755Z","updated":"2024-09-06T20:33:39.239Z","title":"In SliceManagerService, there is a possible way to check if a content provider is installed due to a missing null check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2023-21294","published":"2023-10-30T16:18:54.572Z","updated":"2024-09-06T20:34:03.907Z","title":"In Slice, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2023-21293","published":"2023-10-30T16:18:54.387Z","updated":"2024-09-06T20:34:29.171Z","title":"In PackageManagerNative, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2022-20531","published":"2023-10-30T16:18:54.199Z","updated":"2024-12-03T14:36:32.654Z","title":"In Telecom, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.0013,"kevAdded":null},{"id":"CVE-2022-20264","published":"2023-10-30T16:18:53.844Z","updated":"2024-10-29T20:47:34.493Z","title":"In Usage Stats Service, there is a possible way to determine whether an app is installed, without query permissions due to side channel information disclosure.…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2021-39810","published":"2023-10-30T16:18:53.654Z","updated":"2025-09-04T18:33:43.363Z","title":"In verifyDefaults of CardEmulationManager.java, there is a possible way to set a third party app as the default contactless payment app without user consent…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00118,"kevAdded":null},{"id":"CVE-2023-40140","published":"2023-10-27T20:22:59.679Z","updated":"2024-09-09T19:38:12.376Z","title":"In android_view_InputDevice_create of android_view_InputDevice.cpp, there is a possible way to execute arbitrary code due to a use after free. This could lead…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00221,"kevAdded":null},{"id":"CVE-2023-40139","published":"2023-10-27T20:22:59.503Z","updated":"2024-09-09T19:38:59.837Z","title":"In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2023-40138","published":"2023-10-27T20:22:59.315Z","updated":"2024-09-09T19:39:28.100Z","title":"In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-40137","published":"2023-10-27T20:22:59.038Z","updated":"2024-09-09T19:39:59.719Z","title":"In multiple functions of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-40136","published":"2023-10-27T20:22:58.825Z","updated":"2024-09-09T19:40:31.470Z","title":"In setHeader of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2023-40135","published":"2023-10-27T20:22:58.641Z","updated":"2024-09-09T19:41:08.331Z","title":"In applyCustomDescription of SaveUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2023-40134","published":"2023-10-27T20:22:58.463Z","updated":"2024-09-09T19:41:38.400Z","title":"In isFullScreen of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2023-40133","published":"2023-10-27T20:22:58.290Z","updated":"2024-09-09T19:42:17.245Z","title":"In multiple locations of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00184,"kevAdded":null},{"id":"CVE-2023-40131","published":"2023-10-27T20:22:58.077Z","updated":"2025-04-30T20:17:44.180Z","title":"In GpuService of GpuService.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7,"vendor":"Google","product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2023-40130","published":"2023-10-27T20:22:57.878Z","updated":"2025-12-17T15:57:10.217Z","title":"In notifyTimeout of CallRedirectionProcessor, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00112,"kevAdded":null},{"id":"CVE-2023-40129","published":"2023-10-27T20:22:57.693Z","updated":"2024-09-09T14:41:13.584Z","title":"In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent)…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00197,"kevAdded":null},{"id":"CVE-2023-40128","published":"2023-10-27T20:22:57.517Z","updated":"2024-09-09T14:44:35.111Z","title":"In several functions of xmlregexp.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2023-40127","published":"2023-10-27T20:22:57.293Z","updated":"2024-09-09T14:45:48.814Z","title":"In multiple locations, there is a possible way to access screenshots due to a confused deputy. This could lead to local information disclosure with no…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00203,"kevAdded":null},{"id":"CVE-2023-40125","published":"2023-10-27T20:22:57.089Z","updated":"2025-05-05T14:59:00.509Z","title":"In onCreate of ApnEditor.java, there is a possible way for a Guest user to change the APN due to a permission bypass. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00099,"kevAdded":null},{"id":"CVE-2023-40123","published":"2023-10-27T20:22:56.908Z","updated":"2024-09-09T14:48:21.937Z","title":"In updateActionViews of PipMenuView.java, there is a possible bypass of a multi user security boundary due to a confused deputy. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-40121","published":"2023-10-27T20:22:56.725Z","updated":"2024-09-09T14:49:22.331Z","title":"In appendEscapedSQLString of DatabaseUtils.java, there is a possible SQL injection due to unsafe deserialization. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00228,"kevAdded":null},{"id":"CVE-2023-40120","published":"2023-10-27T20:22:56.553Z","updated":"2025-05-05T14:59:10.242Z","title":"In multiple locations, there is a possible way to bypass user notification of foreground services due to improper input validation. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00099,"kevAdded":null},{"id":"CVE-2023-40117","published":"2023-10-27T20:22:56.374Z","updated":"2025-04-29T19:59:46.887Z","title":"In resetSettingsLocked of SettingsProvider.java, there is a possible lockscreen bypass due to a permissions bypass. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2023-40116","published":"2023-10-27T20:22:56.201Z","updated":"2025-05-05T14:59:16.366Z","title":"In onTaskAppeared of PipTaskOrganizer.java, there is a possible way to bypass background activity launch restrictions due to a logic error in the code. This…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2023-35663","published":"2023-10-18T19:10:32.213Z","updated":"2024-09-13T14:19:45.909Z","title":"In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.0029,"kevAdded":null},{"id":"CVE-2023-35656","published":"2023-10-18T19:10:32.026Z","updated":"2024-09-13T14:26:24.662Z","title":"In multiple functions of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.0029,"kevAdded":null},{"id":"CVE-2023-40142","published":"2023-10-11T19:27:08.329Z","updated":"2024-09-18T14:53:51.297Z","title":"In TBD of TBD, there is a possible way to bypass carrier restrictions due to a logic error in the code. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00106,"kevAdded":null},{"id":"CVE-2023-40141","published":"2023-10-11T19:26:45.729Z","updated":"2024-09-18T14:54:57.420Z","title":"In temp_residency_name_store of thermal_metrics.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00099,"kevAdded":null},{"id":"CVE-2023-35662","published":"2023-10-11T19:25:26.960Z","updated":"2024-09-18T15:00:47.479Z","title":"there is a possible out of bounds write due to buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00522,"kevAdded":null},{"id":"CVE-2023-35661","published":"2023-10-11T19:25:12.469Z","updated":"2024-09-18T18:40:10.552Z","title":"In ProfSixDecomTcpSACKoption of RohcPacketCommon.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.0044,"kevAdded":null},{"id":"CVE-2023-35660","published":"2023-10-11T19:24:44.146Z","updated":"2024-09-18T15:53:55.762Z","title":"In lwis_transaction_client_cleanup of lwis_transaction.c, there is a possible way to corrupt memory due to a use after free. This could lead to local…","severity":"MEDIUM","score":6.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2023-35655","published":"2023-10-11T19:23:16.364Z","updated":"2024-09-18T16:18:11.734Z","title":"In CanConvertPadV2Op of darwinn_mlir_converter_aidl.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local…","severity":"MEDIUM","score":6.7,"vendor":"Google","product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2023-35654","published":"2023-10-11T19:21:30.861Z","updated":"2024-09-18T16:18:42.477Z","title":"In ctrl_roi of stmvl53l1_module.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2023-35653","published":"2023-10-11T19:21:13.242Z","updated":"2024-09-18T15:58:41.384Z","title":"In TBD of TBD, there is a possible way to access location information due to a permissions bypass. This could lead to local information disclosure with System…","severity":"MEDIUM","score":4.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2023-35652","published":"2023-10-11T19:21:00.472Z","updated":"2024-09-18T16:00:06.080Z","title":"In ProtocolEmergencyCallListIndAdapter::Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00377,"kevAdded":null},{"id":"CVE-2023-35649","published":"2023-10-11T19:20:41.460Z","updated":"2024-09-18T16:00:45.832Z","title":"In several functions of Exynos modem files, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution…","severity":"HIGH","score":7.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00534,"kevAdded":null},{"id":"CVE-2023-35648","published":"2023-10-11T19:20:09.906Z","updated":"2024-09-18T16:01:17.596Z","title":"In ProtocolMiscLceIndAdapter::GetConfLevel() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00434,"kevAdded":null},{"id":"CVE-2023-35647","published":"2023-10-11T19:19:54.934Z","updated":"2024-09-18T16:01:46.576Z","title":"In ProtocolEmbmsGlobalCellIdAdapter::Init() of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00434,"kevAdded":null},{"id":"CVE-2023-35646","published":"2023-10-11T19:19:27.834Z","updated":"2024-09-18T18:41:08.177Z","title":"In TBD of TBD, there is a possible stack buffer overflow due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00522,"kevAdded":null},{"id":"CVE-2023-35645","published":"2023-10-11T18:40:24.221Z","updated":"2024-09-18T16:02:17.400Z","title":"In tbd of tbd, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges…","severity":"MEDIUM","score":6.4,"vendor":"Google","product":"Android","kev":false,"epss":0.00073,"kevAdded":null},{"id":"CVE-2023-21291","published":"2023-10-06T18:48:40.793Z","updated":"2024-09-19T16:01:03.988Z","title":"In visitUris of Notification.java, there is a possible way to reveal image contents from another user due to a missing permission check. This could lead to…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2023-21266","published":"2023-10-06T18:48:40.618Z","updated":"2025-05-05T14:59:28.865Z","title":"In multiple functions of ActivityManagerService.java, there is a possible way to escape Google Play protection due to a permissions bypass. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00121,"kevAdded":null},{"id":"CVE-2023-21253","published":"2023-10-06T18:48:40.422Z","updated":"2024-09-19T16:07:50.031Z","title":"In multiple locations, there is a possible way to crash multiple system services due to resource exhaustion. This could lead to local denial of service with no…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2023-21252","published":"2023-10-06T18:48:40.232Z","updated":"2024-09-19T16:10:21.568Z","title":"In validatePassword of WifiConfigurationUtil.java, there is a possible way to get the device into a boot loop due to improper input validation. This could lead…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00106,"kevAdded":null},{"id":"CVE-2023-21244","published":"2023-10-06T18:48:40.041Z","updated":"2025-05-01T19:16:57.257Z","title":"In visitUris of Notification.java, there is a possible bypass of user profile boundaries due to a missing permission check. This could lead to local escalation…","severity":"MEDIUM","score":6.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00129,"kevAdded":null},{"id":"CVE-2023-35687","published":"2023-09-11T20:09:55.452Z","updated":"2024-09-26T15:49:16.654Z","title":"In MtpPropertyValue of MtpProperty.h, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00163,"kevAdded":null},{"id":"CVE-2023-35684","published":"2023-09-11T20:09:55.266Z","updated":"2024-09-26T15:47:27.807Z","title":"In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to an integer overflow. This could lead to paired device escalation of privilege…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00168,"kevAdded":null},{"id":"CVE-2023-35683","published":"2023-09-11T20:09:55.077Z","updated":"2024-09-26T15:47:01.584Z","title":"In bindSelection of DatabaseUtils.java, there is a possible way to access files from other applications due to SQL injection. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00186,"kevAdded":null},{"id":"CVE-2023-35682","published":"2023-09-11T20:09:54.893Z","updated":"2025-05-05T15:17:59.539Z","title":"In hasPermissionForActivity of PackageManagerHelper.java, there is a possible way to start arbitrary components due to a confused deputy. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2023-35681","published":"2023-09-11T20:09:54.702Z","updated":"2024-09-26T15:46:22.621Z","title":"In eatt_l2cap_reconfig_completed of eatt_impl.h, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00614,"kevAdded":null},{"id":"CVE-2023-35680","published":"2023-09-11T20:09:54.517Z","updated":"2024-10-29T17:59:02.103Z","title":"In multiple locations, there is a possible way to import contacts belonging to other users due to a confused deputy. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00118,"kevAdded":null},{"id":"CVE-2023-35679","published":"2023-09-11T20:09:54.343Z","updated":"2024-09-26T15:45:20.974Z","title":"In MtpPropertyValue of MtpProperty.h, there is a possible out of bounds read due to uninitialized data. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2023-35677","published":"2023-09-11T20:09:54.167Z","updated":"2024-10-29T17:52:42.588Z","title":"In onCreate of DeviceAdminAdd.java, there is a possible way to forcibly add a device admin due to a missing permission check. This could lead to local denial…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00099,"kevAdded":null},{"id":"CVE-2023-35676","published":"2023-09-11T20:09:53.971Z","updated":"2024-09-26T14:28:34.798Z","title":"In createQuickShareAction of SaveImageInBackgroundTask.java, there is a possible way to trigger a background activity launch due to an unsafe PendingIntent.…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2023-35675","published":"2023-09-11T20:09:53.771Z","updated":"2024-09-26T14:30:04.570Z","title":"In loadMediaResumptionControls of MediaResumeListener.kt, there is a possible way to play and listen to media files played by another user on the same device…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00112,"kevAdded":null},{"id":"CVE-2023-35674","published":"2023-09-11T20:09:53.580Z","updated":"2025-10-21T23:05:38.736Z","title":"In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local escalation…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":true,"epss":0.02636,"kevAdded":"2023-09-13"},{"id":"CVE-2023-35673","published":"2023-09-11T20:09:53.391Z","updated":"2024-09-26T14:33:31.585Z","title":"In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote (proximal/adjacent) code…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00194,"kevAdded":null},{"id":"CVE-2023-35671","published":"2023-09-11T20:09:53.198Z","updated":"2024-09-26T14:34:53.613Z","title":"In onHostEmulationData of HostEmulationManager.java, there is a possible way for a general purpose NFC reader to read the full card number and expiry details…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00242,"kevAdded":null},{"id":"CVE-2023-35670","published":"2023-09-11T20:09:52.999Z","updated":"2025-05-02T16:53:52.496Z","title":"In computeValuesFromData of FileUtils.java, there is a possible way to insert files to other apps' external private directories due to a path traversal error.…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2023-35669","published":"2023-09-11T20:09:52.808Z","updated":"2024-09-26T14:25:51.263Z","title":"In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to control other running activities due to unsafe deserialization.…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00107,"kevAdded":null},{"id":"CVE-2023-35667","published":"2023-09-11T20:09:52.613Z","updated":"2024-09-26T14:47:51.656Z","title":"In updateList of NotificationAccessSettings.java, there is a possible way to hide approved notification listeners in the settings due to a logic error in the…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2023-35666","published":"2023-09-11T20:09:52.427Z","updated":"2024-09-26T14:40:39.522Z","title":"In bta_av_rc_msg of bta_av_act.cc, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2023-35665","published":"2023-09-11T20:09:52.237Z","updated":"2024-09-26T14:45:15.695Z","title":"In multiple files, there is a possible way to import a contact from another user due to a missing permission check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2023-35664","published":"2023-09-11T20:09:52.027Z","updated":"2024-09-26T14:49:42.795Z","title":"In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00088,"kevAdded":null},{"id":"CVE-2023-35658","published":"2023-09-11T20:09:51.810Z","updated":"2024-09-26T14:51:50.005Z","title":"In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible privilege escalation due to a use after free. This could lead to remote (proximal/adjacent)…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00191,"kevAdded":null},{"id":"CVE-2023-21229","published":"2023-08-14T21:11:13.328Z","updated":"2024-10-09T14:10:40.032Z","title":"In registerServiceLocked of ManagedServices.java, there is a possible bypass of background activity launch restrictions due to an unsafe PendingIntent. This…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2023-21230","published":"2023-08-14T21:10:56.039Z","updated":"2024-10-09T14:11:15.437Z","title":"In onAccessPointChanged of AccessPointPreference.java, there is a possible way for unprivileged apps to receive a broadcast about WiFi access point change and…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2023-21231","published":"2023-08-14T21:10:42.420Z","updated":"2024-10-09T14:11:46.447Z","title":"In getIntentForButton of ButtonManager.java, there is a possible way for an unprivileged application to start a non-exported or permission-protected activity…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2023-21232","published":"2023-08-14T21:10:31.494Z","updated":"2024-10-09T14:12:19.947Z","title":"In multiple locations, there is a possible way to retrieve sensor data without permissions due to a permissions bypass. This could lead to local information…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2023-21233","published":"2023-08-14T21:10:12.895Z","updated":"2024-10-09T14:18:23.627Z","title":"In multiple locations of avrc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00409,"kevAdded":null},{"id":"CVE-2023-21234","published":"2023-08-14T21:10:03.606Z","updated":"2024-10-09T14:19:17.765Z","title":"In launchConfirmationActivity of ChooseLockSettingsHelper.java, there is a possible way to enable developer options without the lockscreen PIN due to a missing…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00079,"kevAdded":null},{"id":"CVE-2023-21235","published":"2023-08-14T21:09:50.973Z","updated":"2024-10-09T14:20:00.254Z","title":"In onCreate of LockSettingsActivity.java, there is a possible way set a new lockscreen PIN without entering the existing PIN due to a permissions bypass. This…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2023-35689","published":"2023-08-14T21:09:29.953Z","updated":"2024-10-09T14:22:00.504Z","title":"In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way to access adb before SUW completion due to an insecure default value. This…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2023-21292","published":"2023-08-14T21:08:38.615Z","updated":"2024-10-09T14:33:32.167Z","title":"In openContentUri of ActivityManagerService.java, there is a possible way for a third party app to obtain restricted files due to a confused deputy. This could…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-21290","published":"2023-08-14T21:07:55.891Z","updated":"2024-10-09T14:34:21.752Z","title":"In update of MmsProvider.java, there is a possible way to bypass file permission checks due to a race condition. This could lead to local denial of service…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00073,"kevAdded":null},{"id":"CVE-2023-21289","published":"2023-08-14T21:07:27.693Z","updated":"2024-10-09T14:35:14.526Z","title":"In multiple locations, there is a possible bypass of a multi user security boundary due to a confused deputy. This could lead to local information disclosure…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2023-21288","published":"2023-08-14T21:07:10.453Z","updated":"2024-10-09T14:36:22.457Z","title":"In visitUris of Notification.java, there is a possible way to reveal images across users due to a missing permission check. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00178,"kevAdded":null},{"id":"CVE-2023-21287","published":"2023-08-14T21:06:51.823Z","updated":"2024-10-09T14:39:52.582Z","title":"In multiple locations, there is a possible code execution due to type confusion. This could lead to remote code execution with no additional execution…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00507,"kevAdded":null},{"id":"CVE-2023-21286","published":"2023-08-14T21:06:38.355Z","updated":"2024-10-09T14:42:17.999Z","title":"In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission check. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.0019,"kevAdded":null},{"id":"CVE-2023-21285","published":"2023-08-14T21:06:23.871Z","updated":"2024-10-09T14:43:10.844Z","title":"In setMetadata of MediaSessionRecord.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00185,"kevAdded":null},{"id":"CVE-2023-21284","published":"2023-08-14T21:06:09.845Z","updated":"2024-10-09T14:44:30.690Z","title":"In multiple functions of DevicePolicyManager.java, there is a possible way to prevent enabling the Find my Device feature due to improper input validation.…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00178,"kevAdded":null},{"id":"CVE-2023-21283","published":"2023-08-14T21:05:55.410Z","updated":"2024-10-09T14:45:55.818Z","title":"In multiple functions of StatusHints.java, there is a possible way to reveal images across users due to a confused deputy. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2023-21282","published":"2023-08-14T21:05:23.902Z","updated":"2025-11-04T21:08:20.707Z","title":"In TRANSPOSER_SETTINGS of lpp_tran.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.01232,"kevAdded":null},{"id":"CVE-2023-21281","published":"2023-08-14T21:05:06.431Z","updated":"2024-10-09T14:49:58.512Z","title":"In multiple functions of KeyguardViewMediator.java, there is a possible failure to lock after screen timeout due to a logic error in the code. This could lead…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2023-21280","published":"2023-08-14T21:04:48.201Z","updated":"2024-10-09T14:51:09.796Z","title":"In setMediaButtonBroadcastReceiver of MediaSessionRecord.java, there is a possible permanent DoS due to resource exhaustion. This could lead to local denial of…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2023-21279","published":"2023-08-14T21:04:31.594Z","updated":"2024-10-09T14:54:26.829Z","title":"In visitUris of RemoteViews.java, there is a possible cross-user media read due to a confused deputy. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-21278","published":"2023-08-14T21:03:27.874Z","updated":"2024-10-09T14:55:10.669Z","title":"In multiple locations, there is a possible way to obscure the microphone privacy indicator due to a logic error in the code. This could lead to local…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2023-21277","published":"2023-08-14T21:03:04.607Z","updated":"2024-10-09T14:56:42.802Z","title":"In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-21276","published":"2023-08-14T21:02:38.148Z","updated":"2024-10-09T14:58:03.031Z","title":"In writeToParcel of CursorWindow.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-21275","published":"2023-08-14T21:01:55.530Z","updated":"2024-10-09T14:59:48.795Z","title":"In decideCancelProvisioningDialog of AdminIntegratedFlowPrepareActivity.java, there is a possible way to bypass factory reset protections due to a logic error…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00229,"kevAdded":null},{"id":"CVE-2023-21274","published":"2023-08-14T21:01:43.205Z","updated":"2024-10-09T15:02:59.444Z","title":"In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2023-21273","published":"2023-08-14T21:01:24.805Z","updated":"2024-10-09T15:07:41.403Z","title":"In SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code…","severity":"HIGH","score":8.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00176,"kevAdded":null},{"id":"CVE-2023-21272","published":"2023-08-14T21:01:10.248Z","updated":"2024-10-09T15:14:06.299Z","title":"In readFrom of Uri.java, there is a possible bad URI permission grant due to improper input validation. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00179,"kevAdded":null},{"id":"CVE-2023-21271","published":"2023-08-14T21:00:47.078Z","updated":"2024-10-09T15:20:34.383Z","title":"In parseInputs of ShimPreparedModel.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2023-21269","published":"2023-08-14T21:00:08.724Z","updated":"2024-10-09T15:25:42.936Z","title":"In startActivityInner of ActivityStarter.java, there is a possible way to launch an activity into PiP mode from the background due to BAL bypass. This could…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.0009,"kevAdded":null},{"id":"CVE-2023-21268","published":"2023-08-14T20:59:52.485Z","updated":"2024-10-09T18:58:49.964Z","title":"In update of MmsProvider.java, there is a possible way to change directory permissions due to a path traversal error. This could lead to local denial of…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2023-21267","published":"2023-08-14T20:59:41.378Z","updated":"2024-08-02T09:28:26.209Z","title":"In multiple functions of KeyguardViewMediator.java, there is a possible way to bypass lockdown mode with screen pinning due to a logic error in the code. This…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2023-21265","published":"2023-08-14T20:59:28.509Z","updated":"2024-10-09T19:08:41.995Z","title":"In multiple locations, there are root CA certificates which need to be disabled. This could lead to remote information disclosure with no additional execution…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00336,"kevAdded":null},{"id":"CVE-2023-21264","published":"2023-08-14T20:59:10.345Z","updated":"2024-10-09T14:25:06.851Z","title":"In multiple functions of mem_protect.c, there is a possible way to access hypervisor memory due to a memory access check in the wrong place. This could lead to…","severity":"MEDIUM","score":6.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2023-21242","published":"2023-08-14T20:58:52.284Z","updated":"2024-10-09T14:26:12.319Z","title":"In isServerCertChainValid of InsecureEapNetworkHandler.java, there is a possible way to trust an imposter server due to a logic error in the code. This could…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00532,"kevAdded":null},{"id":"CVE-2023-21140","published":"2023-08-14T20:58:27.348Z","updated":"2024-10-09T19:10:39.337Z","title":"In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead…","severity":"MEDIUM","score":6.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00142,"kevAdded":null},{"id":"CVE-2023-21134","published":"2023-08-14T20:58:11.888Z","updated":"2024-10-09T19:11:41.385Z","title":"In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead…","severity":"MEDIUM","score":6.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00142,"kevAdded":null},{"id":"CVE-2023-21133","published":"2023-08-14T20:57:57.389Z","updated":"2024-10-09T19:12:21.313Z","title":"In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead…","severity":"MEDIUM","score":6.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00142,"kevAdded":null},{"id":"CVE-2023-21132","published":"2023-08-14T20:57:31.732Z","updated":"2024-10-09T19:13:01.708Z","title":"In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead…","severity":"MEDIUM","score":6.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00142,"kevAdded":null},{"id":"CVE-2023-20965","published":"2023-08-14T20:48:48.811Z","updated":"2024-10-09T19:13:54.759Z","title":"In processMessageImpl of ClientModeImpl.java, there is a possible credential disclosure in the TOFU flow due to a logic error in the code. This could lead to…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00639,"kevAdded":null},{"id":"CVE-2023-35692","published":"2023-07-14T15:57:35.248Z","updated":"2024-10-31T15:42:13.248Z","title":"In getLocationCache of GeoLocation.java, there is a possible way to send a mock location during an emergency call due to improper input validation. This could…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2023-21260","published":"2023-07-13T00:01:32.075Z","updated":"2024-10-30T18:54:40.719Z","title":"In notification access permission dialog box, malicious application can embedded a very long service label that overflow the original user prompt and possibly…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00074,"kevAdded":null},{"id":"CVE-2023-35694","published":"2023-07-12T23:56:38.081Z","updated":"2024-11-01T19:58:26.555Z","title":"In DMPixelLogger_ProcessDmCommand of DMPixelLogger.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote…","severity":"HIGH","score":7.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00416,"kevAdded":null},{"id":"CVE-2023-35693","published":"2023-07-12T23:56:14.984Z","updated":"2024-11-01T19:10:28.904Z","title":"In incfs_kill_sb of fs/incfs/vfs.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2023-35691","published":"2023-07-12T23:53:56.481Z","updated":"2024-11-01T19:57:07.127Z","title":"there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed. User…","severity":"HIGH","score":7.2,"vendor":"Google","product":"Android","kev":false,"epss":0.00491,"kevAdded":null},{"id":"CVE-2023-21400","published":"2023-07-12T23:53:37.414Z","updated":"2025-02-13T16:40:14.210Z","title":"In multiple functions of io_uring.c, there is a possible kernel memory corruption due to improper locking. This could lead to local escalation of privilege in…","severity":"MEDIUM","score":6.7,"vendor":"Google","product":"Android","kev":false,"epss":0.00259,"kevAdded":null},{"id":"CVE-2023-21399","published":"2023-07-12T23:53:16.607Z","updated":"2024-11-01T19:57:43.178Z","title":"there is a possible way to bypass cryptographic assurances due to a logic error in the code. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00066,"kevAdded":null},{"id":"CVE-2023-21262","published":"2023-07-12T23:34:24.569Z","updated":"2024-11-06T14:40:55.754Z","title":"In startInput of AudioPolicyInterfaceImpl.cpp, there is a possible way of erroneously displaying the microphone privacy indicator due to a race condition. This…","severity":"LOW","score":3.1,"vendor":"Google","product":"Android","kev":false,"epss":0.00145,"kevAdded":null},{"id":"CVE-2023-21257","published":"2023-07-12T23:33:38.516Z","updated":"2024-11-06T14:49:25.431Z","title":"In updateSettingsInternalLI of InstallPackageHelper.java, there is a possible way to sideload an app in the work profile due to a missing permission check.…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.0009,"kevAdded":null},{"id":"CVE-2023-21256","published":"2023-07-12T23:33:18.573Z","updated":"2024-11-06T14:53:42.744Z","title":"In SettingsHomepageActivity.java, there is a possible way to launch arbitrary activities via Settings due to a logic error in the code. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2023-21255","published":"2023-07-12T23:33:00.244Z","updated":"2025-02-13T16:40:10.760Z","title":"In multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00181,"kevAdded":null},{"id":"CVE-2023-21254","published":"2023-07-12T23:32:42.548Z","updated":"2024-11-05T15:59:22.827Z","title":"In getCurrentState of OneTimePermissionUserManager.java, there is a possible way to hold one-time permissions after the app is being killed due to a logic…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2023-21251","published":"2023-07-12T23:32:23.341Z","updated":"2024-11-05T16:05:31.390Z","title":"In onCreate of ConfirmDialog.java, there is a possible way to connect to VNP bypassing user's consent due to improper input validation. This could lead to…","severity":"HIGH","score":7.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00234,"kevAdded":null},{"id":"CVE-2023-21250","published":"2023-07-12T23:32:01.943Z","updated":"2024-11-06T15:48:14.827Z","title":"In gatt_end_operation of gatt_utils.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00555,"kevAdded":null},{"id":"CVE-2023-21249","published":"2023-07-12T23:30:49.435Z","updated":"2024-11-06T15:56:38.553Z","title":"In multiple functions of OneTimePermissionUserManager.java, there is a possible one-time permission retention due to a permissions bypass. This could lead to…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00088,"kevAdded":null},{"id":"CVE-2023-21248","published":"2023-07-12T23:30:29.146Z","updated":"2024-11-06T16:02:29.515Z","title":"In getAvailabilityStatus of WifiScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device policy restriction due to a missing…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2023-21247","published":"2023-07-12T23:30:08.509Z","updated":"2024-11-06T17:31:26.493Z","title":"In getAvailabilityStatus of BluetoothScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device policy restriction due to a…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2023-21246","published":"2023-07-12T23:29:44.442Z","updated":"2024-11-06T18:03:47.682Z","title":"In ShortcutInfo of ShortcutInfo.java, there is a possible way for an app to retain notification listening access due to an uncaught exception. This could lead…","severity":"LOW","score":3.3,"vendor":"Google","product":"Android","kev":false,"epss":0.00174,"kevAdded":null},{"id":"CVE-2023-21245","published":"2023-07-12T23:26:14.971Z","updated":"2025-01-06T17:07:22.989Z","title":"In showNextSecurityScreenOrFinish of KeyguardSecurityContainerController.java, there is a possible way to access the lock screen during device setup due to a…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2023-21243","published":"2023-07-12T23:25:29.073Z","updated":"2024-11-06T16:36:39.252Z","title":"In validateForCommonR1andR2 of PasspointConfiguration.java, there is a possible way to inflate the size of a config file with no limits due to a buffer…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2023-21241","published":"2023-07-12T23:24:58.250Z","updated":"2024-11-06T16:37:13.937Z","title":"In rw_i93_send_to_upper of rw_i93.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00099,"kevAdded":null},{"id":"CVE-2023-21240","published":"2023-07-12T23:23:54.255Z","updated":"2024-11-06T16:38:22.202Z","title":"In Policy of Policy.java, there is a possible boot loop due to resource exhaustion. This could lead to local denial of service with no additional execution…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2023-21239","published":"2023-07-12T23:23:29.250Z","updated":"2024-11-06T16:42:12.140Z","title":"In visitUris of Notification.java, there is a possible way to leak image data across user boundaries due to a confused deputy. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.0009,"kevAdded":null},{"id":"CVE-2023-21238","published":"2023-07-12T23:22:47.527Z","updated":"2024-11-06T16:43:05.995Z","title":"In visitUris of RemoteViews.java, there is a possible leak of images between users due to a confused deputy. This could lead to local information disclosure…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2023-21145","published":"2023-07-12T23:18:53.112Z","updated":"2024-11-06T16:46:21.903Z","title":"In updatePictureInPictureMode of ActivityRecord.java, there is a possible bypass of background launch restrictions due to a logic error in the code. This could…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2023-20942","published":"2023-07-12T23:18:19.060Z","updated":"2024-11-06T16:50:08.135Z","title":"In openMmapStream of AudioFlinger.cpp, there is a possible way to record audio without displaying the microphone privacy indicator due to a logic error in the…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.0007,"kevAdded":null},{"id":"CVE-2023-20918","published":"2023-07-12T23:18:00.205Z","updated":"2024-11-06T16:52:24.698Z","title":"In getPendingIntentLaunchFlags of ActivityOptions.java, there is a possible elevation of privilege due to a confused deputy with no additional execution…","severity":"CRITICAL","score":9.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00772,"kevAdded":null},{"id":"CVE-2021-0948","published":"2023-07-12T23:16:21.465Z","updated":"2024-11-06T17:27:37.540Z","title":"The PVRSRVBridgeGetMultiCoreInfo ioctl in the PowerVR kernel driver can return uninitialized kernel memory to user space. The contents of this memory could…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2023-21237","published":"2023-06-28T00:00:00.000Z","updated":"2025-10-21T23:05:44.154Z","title":"In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or insufficient UI.…","severity":"MEDIUM","score":6.2,"vendor":null,"product":"Android","kev":true,"epss":0.00266,"kevAdded":"2024-03-05"},{"id":"CVE-2023-21236","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-04T21:43:34.089Z","title":"In aoc_service_set_read_blocked of aoc.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2023-21226","published":"2023-06-28T00:00:00.000Z","updated":"2024-11-27T16:58:18.046Z","title":"In SAEMM_RetrieveTaiList of SAEMM_ContextManagement.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00441,"kevAdded":null},{"id":"CVE-2023-21225","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T19:23:46.059Z","title":"there is a possible way to bypass the protected confirmation screen due to Failure to lock display power. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2023-21224","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T19:25:09.074Z","title":"In ss_ProcessReturnResultComponent of ss_MmConManagement.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00455,"kevAdded":null},{"id":"CVE-2023-21223","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T19:26:03.792Z","title":"In LPP_ConvertGNSS_DataBitAssistance of LPP_CommonUtil.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00441,"kevAdded":null},{"id":"CVE-2023-21222","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T19:29:25.404Z","title":"In load_dt_data of storage.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2023-21220","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T19:30:34.026Z","title":"there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.0032,"kevAdded":null},{"id":"CVE-2023-21219","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T19:33:15.219Z","title":"there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.0032,"kevAdded":null},{"id":"CVE-2023-21214","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T19:35:23.489Z","title":"In addGroupWithConfigInternal of p2p_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00099,"kevAdded":null},{"id":"CVE-2023-21213","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T19:36:33.671Z","title":"In initiateTdlsTeardownInternal of sta_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2023-21212","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T19:39:33.545Z","title":"In multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the wifi server…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2023-21211","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T19:48:12.587Z","title":"In multiple files, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2023-21210","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T19:55:07.706Z","title":"In initiateHs20IconQueryInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2023-21209","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T19:56:00.801Z","title":"In multiple functions of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2023-21208","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-04T16:02:42.495Z","title":"In setCountryCodeInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2023-21207","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-04T16:03:31.638Z","title":"In initiateTdlsSetupInternal of sta_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2023-21206","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-04T16:04:24.642Z","title":"In initiateVenueUrlAnqpQueryInternal of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00106,"kevAdded":null},{"id":"CVE-2023-21205","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T19:39:59.384Z","title":"In startWpsPinDisplayInternal of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2023-21204","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T19:40:24.920Z","title":"In multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the wifi server…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2023-21203","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T19:41:26.487Z","title":"In startWpsPbcInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2023-21202","published":"2023-06-28T00:00:00.000Z","updated":"2024-08-02T09:28:26.122Z","title":"In btm_delete_stored_link_key_complete of btm_devctl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local…","severity":"MEDIUM","score":4.5,"vendor":null,"product":"Android","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2023-21201","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T19:41:55.306Z","title":"In on_create_record_event of btif_sdp_server.cc, there is a possible out of bounds read due to a missing null check. This could lead to remote denial of…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00472,"kevAdded":null},{"id":"CVE-2023-21200","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-04T16:05:00.710Z","title":"In on_remove_iso_data_path of btm_iso_impl.h, there is a possible out of bounds read due to improper input validation. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2023-21199","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-04T16:05:46.784Z","title":"In btu_ble_proc_ltk_req of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2023-21198","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-04T21:43:46.259Z","title":"In remove_sdp_record of btif_sdp_server.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2023-21197","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-04T21:38:16.686Z","title":"In btm_acl_process_sca_cmpl_pkt of btm_acl.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00441,"kevAdded":null},{"id":"CVE-2023-21196","published":"2023-06-28T00:00:00.000Z","updated":"2024-08-02T09:28:25.932Z","title":"In btm_ble_batchscan_filter_track_adv_vse_cback of btm_ble_batchscan.cc, there is a possible out of bounds read due to a missing bounds check. This could lead…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2023-21195","published":"2023-06-28T00:00:00.000Z","updated":"2024-08-02T09:28:26.047Z","title":"In btm_ble_periodic_adv_sync_tx_rcvd of btm_ble_gap.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local…","severity":"MEDIUM","score":4.5,"vendor":null,"product":"Android","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2023-21194","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-04T21:38:03.447Z","title":"In gatt_dbg_op_name of gatt_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2023-21193","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-04T21:37:53.956Z","title":"In VideoFrame of VideoFrame.h, there is a possible abort due to an integer overflow. This could lead to remote information disclosure with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00441,"kevAdded":null},{"id":"CVE-2023-21192","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-04T21:37:42.965Z","title":"In setInputMethodWithSubtypeIdLocked of InputMethodManagerService.java, there is a possible way to setup input methods that are not enabled due to improper…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2023-21191","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-04T21:37:18.310Z","title":"In fixNotification of NotificationManagerService.java, there is a possible bypass of notification hide preference due to a logic error in the code. This could…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2023-21190","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-04T21:36:47.660Z","title":"In btm_acl_encrypt_change of btm_acl.cc, there is a possible way for a remote device to turn off encryption without resulting in a terminated connection due to…","severity":"MEDIUM","score":5,"vendor":null,"product":"Android","kev":false,"epss":0.00076,"kevAdded":null},{"id":"CVE-2023-21189","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-04T21:36:01.244Z","title":"In startLockTaskMode of LockTaskController.java, there is a possible bypass of lock task mode due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00086,"kevAdded":null},{"id":"CVE-2023-21188","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-04T21:35:44.029Z","title":"In btm_ble_update_inq_result of btm_ble_gap.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2023-21187","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-05T15:35:42.049Z","title":"In onCreate of UsbAccessoryUriActivity.java, there is a possible way to escape the Setup Wizard due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2023-21186","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-04T21:35:30.573Z","title":"In LogResponse of Dns.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00472,"kevAdded":null},{"id":"CVE-2023-21185","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-04T21:35:16.171Z","title":"In multiple functions of WifiNetworkFactory.java, there is a missing permission check. This could lead to local escalation of privilege from the guest user…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00088,"kevAdded":null},{"id":"CVE-2023-21184","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-04T21:34:59.509Z","title":"In getCurrentPrivilegedPackagesForAllUsers of CarrierPrivilegesTracker.java, there is a possible permission bypass due to a logic error in the code. This could…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2023-21183","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-04T21:34:47.842Z","title":"In ForegroundUtils of ForegroundUtils.java, there is a possible way to read NFC tag data while the app is still in the background due to a logic error in the…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2023-21182","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-04T21:32:46.592Z","title":"In Exynos_parsing_user_data_registered_itu_t_t35 of VendorVideoAPI.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2023-21181","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-04T21:32:37.264Z","title":"In btm_ble_update_inq_result of btm_ble_gap.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2023-21180","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-04T21:32:25.617Z","title":"In xmlParseTryOrFinish of parser.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00455,"kevAdded":null},{"id":"CVE-2023-21179","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-04T21:32:15.724Z","title":"In parseSecurityParamsFromXml of XmlUtil.java, there is a possible bypass of user specified wifi encryption protocol due to improperly used crypto. This could…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00076,"kevAdded":null},{"id":"CVE-2023-21178","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-04T21:32:04.643Z","title":"In installKey of KeyUtil.cpp, there is a possible failure of file encryption due to a race condition. This could lead to local information disclosure with…","severity":"MEDIUM","score":4.1,"vendor":null,"product":"Android","kev":false,"epss":0.00054,"kevAdded":null},{"id":"CVE-2023-21177","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-04T21:31:17.751Z","title":"In requestAppKeyboardShortcuts of WindowManagerService.java, there is a possible way to infer the app a user is interacting with due to a missing permission…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2023-21176","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-05T15:37:43.012Z","title":"In list_key_entries of utils.rs, there is a possible way to disable user credentials due to resource exhaustion. This could lead to local denial of service…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2023-21175","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-05T15:39:59.181Z","title":"In onCreate of DataUsageSummary.java, there is a possible method for a guest user to enable or disable mobile data due to a permissions bypass. This could lead…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2023-21174","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-05T16:55:13.840Z","title":"In isPageSearchEnabled of BillingCycleSettings.java, there is a possible way for the guest user to change data limits due to a permissions bypass. This could…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2023-21173","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-05T16:54:28.867Z","title":"In multiple methods of DataUsageList.java, there is a possible way to learn about admin user's network activities due to a missing permission check. This could…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2023-21172","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-05T16:53:53.607Z","title":"In multiple functions of WifiCallingSettings.java, there is a possible way to change calling preferences for the admin user due to a permissions bypass. This…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2023-21171","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-04T21:31:08.420Z","title":"In verifyInputEvent of InputDispatcher.cpp, there is a possible way to conduct click fraud due to side channel information disclosure. This could lead to local…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2023-21170","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T15:05:28.928Z","title":"In executeSetClientTarget of ComposerCommandEngine.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2023-21169","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T15:07:42.562Z","title":"In inviteInternal of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2023-21168","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T15:09:10.702Z","title":"In convertCbYCrY of ColorConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2023-21167","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T15:10:35.093Z","title":"In setProfileName of DevicePolicyManagerService.java, there is a possible way to crash the SystemUI menu due to a missing bounds check. This could lead to…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2023-21161","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T15:11:17.919Z","title":"In Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2023-21160","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T15:12:09.384Z","title":"In BuildSetTcsFci of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2023-21159","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T14:39:21.356Z","title":"In Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2023-21158","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T14:40:08.212Z","title":"In encode of miscdata.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2023-21157","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T14:40:53.661Z","title":"In encode of wlandata.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2023-21156","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T14:42:06.288Z","title":"In BuildGetRadioNode of protocolmiscbulider.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2023-21155","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T14:45:22.440Z","title":"In BuildSetRadioNode of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a missing null check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2023-21154","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T14:46:12.214Z","title":"In StoreAdbSerialNumber of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2023-21153","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T14:48:08.746Z","title":"In Do_AIMS_SET_CALL_WAITING of imsservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2023-21152","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T14:49:37.720Z","title":"In FaceStatsAnalyzer::InterpolateWeightList of face_stats_analyzer.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2023-21151","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T14:51:37.885Z","title":"In the Google BMS kernel module, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2023-21150","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T14:52:12.124Z","title":"In handle_set_parameters_ctrl of hal_socket.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2023-21149","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T15:13:55.868Z","title":"In registerGsmaServiceIntentReceiver of ShannonRcsService.java, there is a possible way to activate/deactivate RCS service due to a missing permission check.…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00088,"kevAdded":null},{"id":"CVE-2023-21148","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T15:18:13.777Z","title":"In BuildSetConfig of protocolimsbuilder.cpp, there is a possible out of bounds read due to a missing null check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2023-21147","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T16:24:58.502Z","title":"In lwis_i2c_device_disable of lwis_device_i2c.c, there is a possible UAF due to a logic error in the code. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2023-21146","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-04T21:15:28.203Z","title":"there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed.…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2023-21066","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-04T21:15:18.714Z","title":"In cd_CodeMsg of cd_codec.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.0051,"kevAdded":null},{"id":"CVE-2022-20443","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-04T21:15:07.171Z","title":"In hasInputInfo of Layer.cpp, there is a possible bypass of user interaction requirements due to a tapjacking/overlay attack. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2023-21144","published":"2023-06-15T00:00:00.000Z","updated":"2024-12-18T18:17:43.425Z","title":"In doInBackground of NotificationContentInflater.java, there is a possible temporary denial or service due to long running operations. This could lead to…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00741,"kevAdded":null},{"id":"CVE-2023-21143","published":"2023-06-15T00:00:00.000Z","updated":"2024-12-18T18:21:51.372Z","title":"In multiple functions of multiple files, there is a possible way to make the device unusable due to improper input validation. This could lead to local denial…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00085,"kevAdded":null},{"id":"CVE-2023-21142","published":"2023-06-15T00:00:00.000Z","updated":"2024-12-18T18:27:46.014Z","title":"In multiple files, there is a possible way to access traces in the dev mode due to a permissions bypass. This could lead to local information disclosure with…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2023-21141","published":"2023-06-15T00:00:00.000Z","updated":"2024-12-17T19:33:34.996Z","title":"In several functions of several files, there is a possible way to access developer mode traces due to a permissions bypass. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2023-21139","published":"2023-06-15T00:00:00.000Z","updated":"2024-12-17T19:41:14.355Z","title":"In bindPlayer of MediaControlPanel.java, there is a possible launch arbitrary activity in SysUI due to Unsafe Intent. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2023-21138","published":"2023-06-15T00:00:00.000Z","updated":"2024-12-17T19:49:04.657Z","title":"In onNullBinding of CallRedirectionProcessor.java, there is a possible long lived connection due to improper input validation. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2023-21137","published":"2023-06-15T00:00:00.000Z","updated":"2024-12-18T18:29:43.638Z","title":"In several methods of JobStore.java, uncaught exceptions in job map parsing could lead to local persistent denial of service with no additional execution…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2023-21136","published":"2023-06-15T00:00:00.000Z","updated":"2024-12-18T18:32:47.419Z","title":"In multiple functions of JobStore.java, there is a possible way to cause a crash on startup due to improper input validation. This could lead to local denial…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00107,"kevAdded":null},{"id":"CVE-2023-21135","published":"2023-06-15T00:00:00.000Z","updated":"2024-12-18T18:34:12.523Z","title":"In onCreate of NotificationAccessSettings.java, there is a possible failure to persist notifications settings due to improper input validation. This could lead…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2023-21131","published":"2023-06-15T00:00:00.000Z","updated":"2024-12-18T18:40:14.773Z","title":"In checkKeyIntentParceledCorrectly() of ActivityManagerService.java, there is a possible bypass of Parcel Mismatch mitigations due to a logic error in the…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0009,"kevAdded":null},{"id":"CVE-2023-21130","published":"2023-06-15T00:00:00.000Z","updated":"2024-12-18T18:41:18.691Z","title":"In btm_ble_periodic_adv_sync_lost of btm_ble_gap.cc, there is a possible remote code execution due to a buffer overflow. This could lead to remote code…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00529,"kevAdded":null},{"id":"CVE-2023-21129","published":"2023-06-15T00:00:00.000Z","updated":"2024-12-18T18:46:02.760Z","title":"In getFullScreenIntentDecision of NotificationInterruptStateProviderImpl.java, there is a possible activity launch while the app is in the background due to a…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2023-21128","published":"2023-06-15T00:00:00.000Z","updated":"2024-12-18T16:34:10.571Z","title":"In various functions of AppStandbyController.java, there is a possible way to break manageability scenarios due to a logic error in the code. This could lead…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0009,"kevAdded":null},{"id":"CVE-2023-21127","published":"2023-06-15T00:00:00.000Z","updated":"2024-12-18T16:35:46.994Z","title":"In readSampleData of NuMediaExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote code execution with no…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.0047,"kevAdded":null},{"id":"CVE-2023-21126","published":"2023-06-15T00:00:00.000Z","updated":"2024-12-18T16:37:36.327Z","title":"In bindOutputSwitcherAndBroadcastButton of MediaControlPanel.java, there is a possible launch arbitrary activity under SysUI due to Unsafe Intent. This could…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00086,"kevAdded":null},{"id":"CVE-2023-21124","published":"2023-06-15T00:00:00.000Z","updated":"2024-12-18T16:38:57.553Z","title":"In run of multiple files, there is a possible escalation of privilege due to unsafe deserialization. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2023-21123","published":"2023-06-15T00:00:00.000Z","updated":"2024-12-18T16:40:39.246Z","title":"In multiple functions of multiple files, there is a possible way to bypass the DISALLOW_DEBUGGING_FEATURES restriction for tracing due to a missing permission…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00106,"kevAdded":null},{"id":"CVE-2023-21122","published":"2023-06-15T00:00:00.000Z","updated":"2024-12-18T16:41:50.563Z","title":"In various functions of various files, there is a possible way to bypass the DISALLOW_DEBUGGING_FEATURES restriction for tracing due to a missing permission…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00106,"kevAdded":null},{"id":"CVE-2023-21121","published":"2023-06-15T00:00:00.000Z","updated":"2024-12-18T18:50:07.657Z","title":"In onResume of AppManagementFragment.java, there is a possible way to prevent users from forgetting a previously connected VPN due to improper input…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2023-21120","published":"2023-06-15T00:00:00.000Z","updated":"2024-12-18T18:51:07.271Z","title":"In multiple functions of cdm_engine.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00072,"kevAdded":null},{"id":"CVE-2023-21115","published":"2023-06-15T00:00:00.000Z","updated":"2024-12-18T18:52:11.182Z","title":"In btm_sec_encrypt_change of btm_sec.cc, there is a possible way to downgrade the link key type due to improperly used crypto. This could lead to paired device…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2023-21108","published":"2023-06-15T00:00:00.000Z","updated":"2024-08-02T09:28:25.833Z","title":"In sdpu_build_uuid_seq of sdp_discovery.cc, there is a possible out of bounds write due to a use after free. This could lead to remote code execution over…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00239,"kevAdded":null},{"id":"CVE-2023-21105","published":"2023-06-15T00:00:00.000Z","updated":"2024-12-18T18:55:43.731Z","title":"In multiple functions of ChooserActivity.java, there is a possible cross-user media read due to a confused deputy. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2023-21101","published":"2023-06-15T00:00:00.000Z","updated":"2024-12-18T18:56:53.169Z","title":"In multiple functions of WVDrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00066,"kevAdded":null},{"id":"CVE-2023-21095","published":"2023-06-15T00:00:00.000Z","updated":"2024-12-18T18:57:59.657Z","title":"In canStartSystemGesture of RecentsAnimationDeviceState.java, there is a possible partial lockscreen bypass due to a race condition. This could lead to local…","severity":"MEDIUM","score":4.7,"vendor":null,"product":"Android","kev":false,"epss":0.00064,"kevAdded":null},{"id":"CVE-2021-0945","published":"2023-06-15T00:00:00.000Z","updated":"2024-12-18T19:00:07.040Z","title":"In _PMRCreate of the PowerVR kernel driver, a missing bounds check means it is possible to overwrite heap memory via PhysmemNewRamBackedPMR. This could lead to…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00316,"kevAdded":null},{"id":"CVE-2021-0701","published":"2023-06-15T00:00:00.000Z","updated":"2024-12-18T19:01:45.349Z","title":"In PVRSRVBridgeSyncPrimOpCreate of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00316,"kevAdded":null},{"id":"CVE-2023-21118","published":"2023-05-15T00:00:00.000Z","updated":"2025-01-31T13:41:15.263Z","title":"In unflattenString8 of Sensor.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with…","severity":"MEDIUM","score":6.2,"vendor":null,"product":"Android","kev":false,"epss":0.00203,"kevAdded":null},{"id":"CVE-2023-21117","published":"2023-05-15T00:00:00.000Z","updated":"2025-01-31T13:43:47.766Z","title":"In registerReceiverWithFeature of ActivityManagerService.java, there is a possible way for isolated processes to register a broadcast receiver due to a…","severity":"HIGH","score":8.4,"vendor":null,"product":"Android","kev":false,"epss":0.00084,"kevAdded":null},{"id":"CVE-2023-21116","published":"2023-05-15T00:00:00.000Z","updated":"2025-01-24T17:04:28.406Z","title":"In verifyReplacingVersionCode of InstallPackageHelper.java, there is a possible way to downgrade system apps below system image version due to a logic error in…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2023-21112","published":"2023-05-15T00:00:00.000Z","updated":"2025-01-24T17:05:40.344Z","title":"In AnalyzeMfcResp of NxpMfcReader.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2023-21111","published":"2023-05-15T00:00:00.000Z","updated":"2025-01-31T13:40:08.735Z","title":"In several functions of PhoneAccountRegistrar.java, there is a possible way to prevent an access to emergency services due to improper input validation. This…","severity":"MEDIUM","score":6.2,"vendor":null,"product":"Android","kev":false,"epss":0.00088,"kevAdded":null},{"id":"CVE-2023-21110","published":"2023-05-15T00:00:00.000Z","updated":"2025-01-24T17:37:33.624Z","title":"In several functions of SnoozeHelper.java, there is a possible way to grant notifications access due to resource exhaustion. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2023-21109","published":"2023-05-15T00:00:00.000Z","updated":"2025-01-24T17:40:04.766Z","title":"In multiple places of AccessibilityService, there is a possible way to hide the app from the user due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00127,"kevAdded":null},{"id":"CVE-2023-21107","published":"2023-05-15T00:00:00.000Z","updated":"2025-01-24T17:46:39.657Z","title":"In retrieveAppEntry of NotificationAccessDetails.java, there is a missing permission check. This could lead to local escalation of privilege across user…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00086,"kevAdded":null},{"id":"CVE-2023-21106","published":"2023-05-15T00:00:00.000Z","updated":"2025-01-24T17:49:35.719Z","title":"In adreno_set_param of adreno_gpu.c, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2023-21104","published":"2023-05-15T00:00:00.000Z","updated":"2025-01-24T17:53:15.859Z","title":"In applySyncTransaction of WindowOrganizer.java, a missing permission check could lead to local information disclosure with no additional execution privileges…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00082,"kevAdded":null},{"id":"CVE-2023-21103","published":"2023-05-15T00:00:00.000Z","updated":"2025-01-24T18:02:24.785Z","title":"In registerPhoneAccount of PhoneAccountRegistrar.java, uncaught exceptions in parsing persisted user data could lead to local persistent denial of service with…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2023-21102","published":"2023-05-15T00:00:00.000Z","updated":"2025-01-24T18:05:15.502Z","title":"In __efi_rt_asm_wrapper of efi-rt-wrapper.S, there is a possible bypass of shadow stack protection due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00176,"kevAdded":null},{"id":"CVE-2023-20930","published":"2023-05-15T00:00:00.000Z","updated":"2025-01-24T18:07:54.394Z","title":"In pushDynamicShortcut of ShortcutPackage.java, there is a possible way to get the device into a boot loop due to resource exhaustion. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00085,"kevAdded":null},{"id":"CVE-2023-20914","published":"2023-05-15T00:00:00.000Z","updated":"2025-01-24T18:09:30.849Z","title":"In onSetRuntimePermissionGrantStateByDeviceAdmin of AdminRestrictedPermissionsUtils.java, there is a possible way for the work profile to read SMS messages due…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0006,"kevAdded":null},{"id":"CVE-2021-0877","published":"2023-05-15T00:00:00.000Z","updated":"2025-01-24T16:28:58.095Z","title":"Product: AndroidVersions: Android SoCAndroid ID: A-273754094","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00292,"kevAdded":null},{"id":"CVE-2023-21100","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T16:59:00.211Z","title":"In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-21099","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T17:01:15.467Z","title":"In multiple methods of PackageInstallerSession.java, there is a possible way to start foreground services from the background due to a logic error in the code.…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-21098","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T17:17:42.828Z","title":"In multiple functions of AccountManagerService.java, there is a possible loading of arbitrary code into the System Settings app due to a confused deputy. This…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2023-21097","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T15:34:22.188Z","title":"In toUriInner of Intent.java, there is a possible way to launch an arbitrary activity due to a confused deputy. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00199,"kevAdded":null},{"id":"CVE-2023-21096","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T15:36:13.478Z","title":"In OnWakelockReleased of attribution_processor.cc, there is a use after free that could lead to remote code execution with no additional execution privileges…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00467,"kevAdded":null},{"id":"CVE-2023-21094","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T15:39:14.887Z","title":"In sanitize of LayerState.cpp, there is a possible way to take over the screen display and swap the display content due to a missing permission check. This…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00162,"kevAdded":null},{"id":"CVE-2023-21093","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T15:43:58.791Z","title":"In extractRelativePath of FileUtils.java, there is a possible way to access files in a directory belonging to other applications due to a path traversal error.…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2023-21092","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T18:44:44.156Z","title":"In retrieveServiceLocked of ActiveServices.java, there is a possible way to dynamically register a BroadcastReceiver using permissions of System App due to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2023-21091","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T18:45:48.113Z","title":"In canDisplayLocalUi of AppLocalePickerActivity.java, there is a possible way to change system app locales due to a missing permission check. This could lead…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2023-21090","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T18:46:28.189Z","title":"In parseUsesPermission of ParsingPackageUtils.java, there is a possible boot loop due to resource exhaustion. This could lead to local denial of service with…","severity":"MEDIUM","score":5,"vendor":null,"product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2023-21089","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T18:50:13.276Z","title":"In startInstrumentation of ActivityManagerService.java, there is a possible way to keep the foreground service alive while the app is in the background. This…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2023-21088","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T18:53:01.263Z","title":"In deliverOnFlushComplete of LocationProviderManager.java, there is a possible way to bypass background activity launch restrictions due to a logic error in…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00099,"kevAdded":null},{"id":"CVE-2023-21087","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T18:54:09.484Z","title":"In PreferencesHelper.java, an uncaught exception may cause the device to get stuck in a boot loop. This could lead to local persistent denial of service with…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0009,"kevAdded":null},{"id":"CVE-2023-21086","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T19:28:28.843Z","title":"In isToggleable of SecureNfcEnabler.java and SecureNfcPreferenceController.java, there is a possible way to enable NFC from a secondary account due to a…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00177,"kevAdded":null},{"id":"CVE-2023-21085","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T19:29:21.955Z","title":"In nci_snd_set_routing_cmd of nci_hmsgs.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00165,"kevAdded":null},{"id":"CVE-2023-21084","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T19:31:33.114Z","title":"In buildPropFile of filesystem.go, there is a possible insecure hash due to an improperly used crypto. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.0009,"kevAdded":null},{"id":"CVE-2023-21083","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T19:32:13.331Z","title":"In onNullBinding of CallScreeningServiceHelper.java, there is a possible way to record audio without showing a privacy indicator due to a permissions bypass.…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2023-21082","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T18:56:09.719Z","title":"In getNumberFromCallIntent of NewOutgoingCallIntentBroadcaster.java, there is a possible way to enumerate other user's contact phone number due to a confused…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00082,"kevAdded":null},{"id":"CVE-2023-21081","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T18:57:18.880Z","title":"In multiple functions of PackageInstallerService.java and related files, there is a possible way to bypass background activity launch restrictions due to a…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2023-21080","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T18:58:06.355Z","title":"In register_notification_rsp of btif_rc.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2023-20967","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T18:59:01.082Z","title":"In avdt_scb_hdl_pkt_no_frag of avdt_scb_act.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2023-20950","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T19:00:48.660Z","title":"In AlarmManagerActivity of AlarmManagerActivity.java, there is a possible way to bypass background activity launch restrictions via a pendingIntent. This could…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00084,"kevAdded":null},{"id":"CVE-2023-20941","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T19:01:55.315Z","title":"In acc_ctrlrequest_composite of f_accessory.c, there is a possible out of bounds write due to a missing bounds check. This could lead to physical escalation of…","severity":"MEDIUM","score":6.6,"vendor":null,"product":"Android","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2023-20935","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T19:03:29.671Z","title":"In deserialize of multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2023-20909","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T19:07:28.840Z","title":"In multiple functions of RunningTasks.java, there is a possible privilege escalation due to a missing privilege check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00179,"kevAdded":null},{"id":"CVE-2021-0885","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T16:22:09.353Z","title":"In PVRSRVBridgeSyncPrimOpTake of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2021-0884","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T16:49:16.596Z","title":"In PVRSRVBridgePhysmemImportSparseDmaBuf of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2021-0883","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T16:50:42.023Z","title":"In PVRSRVBridgeCacheOpQueue of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2021-0882","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T16:24:27.652Z","title":"In PVRSRVBridgeRGXKickSync of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2021-0881","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T16:53:09.220Z","title":"In PVRSRVBridgeRGXKickCDM of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2021-0880","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-06T19:42:27.582Z","title":"In PVRSRVBridgeRGXKickTA3D of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2021-0879","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-06T19:41:18.826Z","title":"In PVRSRVBridgeRGXTDMSubmitTransfer of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2021-0878","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-06T19:39:39.492Z","title":"In PVRSRVBridgeServerSyncGetStatus of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2021-0876","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T20:16:58.903Z","title":"In PVRSRVBridgePhysmemNewRamBackedLockedPMR of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2021-0875","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T20:19:25.469Z","title":"In PVRSRVBridgeChangeSparseMem of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2021-0874","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T20:24:12.794Z","title":"In PVRSRVBridgeDevicememHistorySparseChange of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2021-0873","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T20:28:26.085Z","title":"In PVRSRVBridgeRGXKickRS of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2021-0872","published":"2023-04-19T00:00:00.000Z","updated":"2025-02-05T20:30:50.907Z","title":"In PVRSRVBridgeRGXKickVRDM of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2023-21079","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-21T15:59:10.650Z","title":"In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00099,"kevAdded":null},{"id":"CVE-2023-21078","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-21T17:48:10.928Z","title":"In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00099,"kevAdded":null},{"id":"CVE-2023-21077","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-20T15:40:11.055Z","title":"In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00099,"kevAdded":null},{"id":"CVE-2023-21076","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-20T15:41:23.998Z","title":"In createTransmitFollowupRequest of nan.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2023-21075","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-20T15:42:13.811Z","title":"In get_svc_hash of nan.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00099,"kevAdded":null},{"id":"CVE-2023-21073","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-20T15:43:09.830Z","title":"In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00099,"kevAdded":null},{"id":"CVE-2023-21072","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-20T15:44:28.732Z","title":"In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00099,"kevAdded":null},{"id":"CVE-2023-21071","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-20T15:45:11.892Z","title":"In dhd_prot_ioctcmplt_process of dhd_msgbuf.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-21070","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-20T15:46:02.091Z","title":"In add_roam_cache_list of wl_roam.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-21069","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-20T15:47:12.898Z","title":"In wl_update_hidden_ap_ie of wl_cfgscan.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-21068","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-20T15:49:55.162Z","title":"In (TBD) of (TBD), there is a possible way to boot with a hidden debug policy due to a missing warning to the user. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0009,"kevAdded":null},{"id":"CVE-2023-21067","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-20T15:51:38.649Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-254114726References: N/A","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00267,"kevAdded":null},{"id":"CVE-2023-21065","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-20T15:53:29.204Z","title":"In fdt_next_tag of fdt.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-21064","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-20T15:54:48.719Z","title":"In DoSetPinControl of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-21063","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-20T15:55:41.060Z","title":"In ParseWithAuthType of simdata.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-21062","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-20T15:56:35.157Z","title":"In DoSetTempEcc of imsservice.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-21061","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-20T15:59:21.002Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-229255400References: N/A","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00289,"kevAdded":null},{"id":"CVE-2023-21060","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-20T16:00:40.416Z","title":"In sms_GetTpPiIe of sms_PduCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00436,"kevAdded":null},{"id":"CVE-2023-21059","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-20T16:01:28.987Z","title":"In EUTRAN_LCS_DecodeFacilityInformationElement of LPP_LcsManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00436,"kevAdded":null},{"id":"CVE-2023-21058","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-20T16:02:41.956Z","title":"In lcsm_SendRrAcquiAssist of lcsm_bcm_assist.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00489,"kevAdded":null},{"id":"CVE-2023-21057","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-21T19:18:36.356Z","title":"In ProfSixDecomTcpSACKoption of RohcPacketCommon, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00489,"kevAdded":null},{"id":"CVE-2023-21056","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-21T19:22:40.078Z","title":"In lwis_slc_buffer_free of lwis_device_slc.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-21055","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-21T19:27:40.237Z","title":"In dit_hal_ioctl of dit.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.4,"vendor":null,"product":"Android","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2023-21054","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-21T19:35:51.070Z","title":"In EUTRAN_LCS_ConvertLCS_MOLRReq of LPP_CommonUtil.c, there is a possible out of bounds write due to a logic error in the code. This could lead to remote code…","severity":"HIGH","score":7.2,"vendor":null,"product":"Android","kev":false,"epss":0.00539,"kevAdded":null},{"id":"CVE-2023-21053","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-21T19:44:42.446Z","title":"In sms_ExtractCbLanguage of sms_CellBroadcast.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00436,"kevAdded":null},{"id":"CVE-2023-21052","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-24T17:04:09.799Z","title":"In setToExternal of ril_external_client.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-21051","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-24T17:02:53.391Z","title":"In dwc3_exynos_clk_get of dwc3-exynos.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2023-21050","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-21T21:32:13.513Z","title":"In load_png_image of ExynosHWCHelper.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2023-21049","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-21T21:07:30.986Z","title":"In append_camera_metadata of camera_metadata.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2023-21048","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-24T19:38:25.264Z","title":"In handleEvent of nan.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2023-21047","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-24T14:29:18.483Z","title":"In ConvertToHalMetadata of aidl_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2023-21046","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-26T21:02:52.353Z","title":"In ConvertToHalMetadata of aidl_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2023-21045","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-24T19:44:49.931Z","title":"When cpif handles probe failures, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with System…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2023-21044","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-24T19:47:54.358Z","title":"In init of VendorGraphicBufferMeta, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2023-21043","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T14:21:35.752Z","title":"In (TBD) of (TBD), there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2023-21042","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-19T21:34:13.014Z","title":"In (TBD) of (TBD), there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2023-21041","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T14:23:33.947Z","title":"In append_to_params of param_util.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2023-21040","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T14:26:45.264Z","title":"In buildCommand of bluetooth_ccc.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2023-21039","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T14:29:18.925Z","title":"In dumpstateBoard of Dumpstate.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2023-21038","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T14:32:11.532Z","title":"In cs40l2x_cp_trigger_queue_show of cs40l2x.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-21036","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T14:35:52.873Z","title":"In BitmapExport.java, there is a possible failure to truncate images due to a logic error in the code.Product: AndroidVersions: Android kernelAndroid ID:…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00499,"kevAdded":null},{"id":"CVE-2023-21035","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T14:37:04.503Z","title":"In multiple functions of BackupHelper.java, there is a possible way for an app to get permissions previously granted to another app with the same package name…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2023-21034","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-26T20:58:53.159Z","title":"In multiple functions of SensorService.cpp, there is a possible access of accurate sensor data due to a permissions bypass. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00107,"kevAdded":null},{"id":"CVE-2023-21033","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T14:39:07.755Z","title":"In addNetwork of WifiManager.java, there is a possible way to trigger a persistent DoS due to resource exhaustion. This could lead to local denial of service…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2023-21032","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T14:46:27.486Z","title":"In _ufdt_output_node_to_fdt of ufdt_convert.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-21031","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T14:48:27.163Z","title":"In setPowerMode of HWC2.cpp, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":4.7,"vendor":null,"product":"Android","kev":false,"epss":0.00081,"kevAdded":null},{"id":"CVE-2023-21030","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T14:49:58.884Z","title":"In Confirmation of keystore_cli_v2.cpp, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege in an…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-21029","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T14:52:32.018Z","title":"In register of UidObserverController.java, there is a missing permission check. This could lead to local information disclosure of app usage with User…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00086,"kevAdded":null},{"id":"CVE-2023-21028","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T14:56:05.581Z","title":"In parse_printerAttributes of ipphelper.c, there is a possible out of bounds read due to a string without a null-terminator. This could lead to remote…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00436,"kevAdded":null},{"id":"CVE-2023-21027","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T15:24:20.218Z","title":"In multiple functions of PasspointXmlUtils.java, there is a possible authentication misconfiguration due to a logic error in the code. This could lead to…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00476,"kevAdded":null},{"id":"CVE-2023-21026","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T15:27:24.403Z","title":"In updateInputChannel of WindowManagerService.java, there is a possible way to set a touchable region beyond its own SurfaceControl due to a logic error in the…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2023-21025","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T15:28:55.920Z","title":"In ufdt_local_fixup_prop of ufdt_overlay.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2023-21024","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T15:42:16.328Z","title":"In maybeFinish of FallbackHome.java, there is a possible delay of lockdown screen due to logic error. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2023-21022","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T15:44:35.612Z","title":"In BufferBlock of Suballocation.cpp, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-21021","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-26T21:00:30.175Z","title":"In isTargetSdkLessThanQOrPrivileged of WifiServiceImpl.java, there is a possible way for the guest user to change admin user network settings due to a missing…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2023-21020","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-24T15:02:34.488Z","title":"In registerSignalHandlers of main.c, there is a possible local arbitrary code execution due to a use after free. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2023-21019","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-24T17:09:00.365Z","title":"In ih264e_init_proc_ctxt of ih264e_process.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2023-21018","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-26T20:59:35.375Z","title":"In UnwindingWorker of unwinding.cc, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-21017","published":"2023-03-24T00:00:00.000Z","updated":"2025-03-17T18:22:32.767Z","title":"In InstallStart of InstallStart.java, there is a possible way to change the installer package name due to an improper input validation. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-21016","published":"2023-03-24T00:00:00.000Z","updated":"2025-03-17T18:59:50.040Z","title":"In AccountTypePreference of AccountTypePreference.java, there is a possible way to mislead the user about accounts installed on the device due to improper…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2023-21015","published":"2023-03-24T00:00:00.000Z","updated":"2025-03-17T19:00:16.371Z","title":"In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0009,"kevAdded":null},{"id":"CVE-2023-21014","published":"2023-03-24T00:00:00.000Z","updated":"2025-03-19T18:47:36.959Z","title":"In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":5.1,"vendor":null,"product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2023-21013","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-24T14:33:15.520Z","title":"In forceStaDisconnection of hostapd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2023-21012","published":"2023-03-24T00:00:00.000Z","updated":"2025-03-24T18:25:09.911Z","title":"In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"LOW","score":3.7,"vendor":null,"product":"Android","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2023-21011","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-26T20:57:09.286Z","title":"In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2023-21010","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-26T20:56:33.746Z","title":"In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2023-21009","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-26T20:56:05.276Z","title":"In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2023-21008","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-26T20:55:37.557Z","title":"In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2023-21007","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-26T20:54:43.305Z","title":"In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2023-21006","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-26T20:55:10.496Z","title":"In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2023-21005","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-26T20:53:19.752Z","title":"In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0009,"kevAdded":null},{"id":"CVE-2023-21004","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-26T20:52:37.674Z","title":"In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0009,"kevAdded":null},{"id":"CVE-2023-21003","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-26T20:51:49.277Z","title":"In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0009,"kevAdded":null},{"id":"CVE-2023-21002","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-26T19:05:55.540Z","title":"In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2023-21001","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-26T20:51:13.076Z","title":"In onContextItemSelected of NetworkProviderSettings.java, there is a possible way for users to change the Wi-Fi settings of other users due to a missing…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2023-21000","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-26T20:50:17.280Z","title":"In MediaCodec.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00078,"kevAdded":null},{"id":"CVE-2023-20999","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T21:11:55.603Z","title":"In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial of service…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2023-20998","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T21:11:34.176Z","title":"In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial of service…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2023-20997","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T21:11:07.938Z","title":"In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial of service…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2023-20996","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T21:13:25.863Z","title":"In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial of service…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2023-20995","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T14:41:39.328Z","title":"In captureImage of CustomizedSensor.cpp, there is a possible way to bypass the fingerprint unlock due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2023-20994","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T14:42:57.029Z","title":"In _ufdt_output_property_to_fdt of ufdt_convert.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-20993","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-24T14:40:41.854Z","title":"In multiple functions of SnoozeHelper.java, there is a possible failure to persist settings due to an uncaught exception. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-20992","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T14:44:57.037Z","title":"In on_iso_link_quality_read of btm_iso_impl.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.5,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2023-20991","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T14:48:21.560Z","title":"In btm_ble_process_periodic_adv_sync_lost_evt of ble_scanner_hci_interface.cc , there is a possible out of bounds read due to a missing bounds check. This…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2023-20990","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T14:51:13.352Z","title":"In btm_ble_rand_enc_complete of btm_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2023-20989","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T21:14:25.818Z","title":"In btm_ble_write_adv_enable_complete of btm_ble_gap.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2023-20988","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T21:15:25.862Z","title":"In btm_read_rssi_complete of btm_acl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":4.5,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2023-20987","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T14:52:18.227Z","title":"In btm_read_link_quality_complete of btm_acl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.5,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2023-20986","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T14:53:41.301Z","title":"In btm_ble_clear_resolving_list_completecomplete of btm_ble_privacy.cc, there is a possible out of bounds read due to a missing bounds check. This could lead…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2023-20985","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T14:54:59.775Z","title":"In BTA_GATTS_HandleValueIndication of bta_gatts_api.cc, there is a possible out of bounds write due to improper input validation. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-20984","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T14:55:50.571Z","title":"In ParseBqrLinkQualityEvt of btif_bqr.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2023-20983","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T14:56:48.764Z","title":"In btm_ble_rand_enc_complete of btm_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2023-20982","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T14:59:03.879Z","title":"In btm_read_tx_power_complete of btm_acl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2023-20981","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T15:00:16.592Z","title":"In btu_ble_rc_param_req_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2023-20980","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T15:01:05.473Z","title":"In btu_ble_ll_conn_param_upd_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2023-20979","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T21:16:57.599Z","title":"In GetNextSourceDataPacket of bta_av_co.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2023-20977","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T15:45:51.109Z","title":"In btm_ble_read_remote_features_complete of btm_ble_gap.cc, there is a possible out of bounds read due to improper input validation. This could lead to local…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2023-20976","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T16:19:57.806Z","title":"In getConfirmationMessage of DefaultAutofillPicker.java, there is a possible way to mislead the user to select default autofill application due to improper…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2023-20975","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T15:52:54.286Z","title":"In getAvailabilityStatus of EnableContentCapturePreferenceController.java, there is a possible way to bypass DISALLOW_CONTENT_CAPTURE due to a permissions…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2023-20974","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T15:55:12.817Z","title":"In btm_ble_add_resolving_list_entry_complete of btm_ble_privacy.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2023-20973","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T15:57:22.703Z","title":"In btm_create_conn_cancel_complete of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2023-20972","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T15:58:56.962Z","title":"In btm_vendor_specific_evt of btm_devctl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2023-20971","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T16:02:36.062Z","title":"In removePermission of PermissionManagerServiceImpl.java, there is a possible way to obtain dangerous permissions without user consent due to a logic error in…","severity":"HIGH","score":7.8,"vendor":"Google","product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2023-20970","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T16:03:44.742Z","title":"In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2023-20969","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T16:05:46.032Z","title":"In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2023-20968","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T15:47:45.970Z","title":"In multiple functions of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2023-20966","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T21:18:51.938Z","title":"In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00099,"kevAdded":null},{"id":"CVE-2023-20964","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T16:10:21.912Z","title":"In multiple functions of MediaSessionRecord.java, there is a possible Intent rebroadcast due to a confused deputy. This could lead to local denial of service…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00121,"kevAdded":null},{"id":"CVE-2023-20963","published":"2023-03-24T00:00:00.000Z","updated":"2025-10-21T23:15:21.624Z","title":"In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":true,"epss":0.01465,"kevAdded":"2023-04-13"},{"id":"CVE-2023-20962","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T16:12:57.498Z","title":"In getSliceEndItem of MediaVolumePreferenceController.java, there is a possible way to start foreground activity from the background due to an unsafe…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00086,"kevAdded":null},{"id":"CVE-2023-20960","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T16:14:12.973Z","title":"In launchDeepLinkIntentToRight of SettingsHomepageActivity.java, there is a possible way to launch arbitrary activities due to improper input validation. This…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0022,"kevAdded":null},{"id":"CVE-2023-20959","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-21T15:26:36.323Z","title":"In AddSupervisedUserActivity, guest users are not prevented from starting the activity due to missing permissions checks. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00088,"kevAdded":null},{"id":"CVE-2023-20958","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T16:26:39.741Z","title":"In read_paint of ttcolr.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no…","severity":"HIGH","score":7.1,"vendor":null,"product":"Android","kev":false,"epss":0.00144,"kevAdded":null},{"id":"CVE-2023-20957","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T16:31:46.154Z","title":"In onAttach of SettingsPreferenceFragment.java, there is a possible bypass of Factory Reset Protections due to a confused deputy. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00088,"kevAdded":null},{"id":"CVE-2023-20956","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T16:33:44.075Z","title":"In Import of C2SurfaceSyncObj.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2023-20955","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T16:34:55.113Z","title":"In onPrepareOptionsMenu of AppInfoDashboardFragment.java, there is a possible way to bypass admin restrictions and uninstall applications for all users due to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00196,"kevAdded":null},{"id":"CVE-2023-20954","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T16:39:21.995Z","title":"In SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00493,"kevAdded":null},{"id":"CVE-2023-20953","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T21:20:11.175Z","title":"In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to bypass factory reset protection due to incorrect UI being shown prior to setup…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00122,"kevAdded":null},{"id":"CVE-2023-20952","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T21:21:20.363Z","title":"In A2DP_BuildCodecHeaderSbc of a2dp_sbc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2023-20951","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T21:29:48.021Z","title":"In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00493,"kevAdded":null},{"id":"CVE-2023-20947","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-28T20:39:20.568Z","title":"In getGroupState of GrantPermissionsViewModel.kt, there is a possible way to keep a one-time permission granted due to a permissions bypass. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2023-20936","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T21:23:40.224Z","title":"In bta_av_rc_disc_done of bta_av_act.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2023-20931","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-28T20:36:16.108Z","title":"In avdt_scb_hdl_write_req of avdt_scb_act.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2023-20929","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-28T20:34:22.021Z","title":"In sendHalfSheetCancelBroadcast of HalfSheetActivity.java, there is a possible way to learn nearby BT MAC addresses due to an unrestricted broadcast intent.…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2023-20926","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-28T20:32:43.365Z","title":"In onParentVisible of HeaderPrivacyIconsController.kt, there is a possible way to bypass factory reset protections due to a missing permission check. This…","severity":"MEDIUM","score":6.8,"vendor":null,"product":"Android","kev":false,"epss":0.00142,"kevAdded":null},{"id":"CVE-2023-20917","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-28T20:30:31.234Z","title":"In onTargetSelected of ResolverActivity.java, there is a possible way to share a wrong file due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00125,"kevAdded":null},{"id":"CVE-2023-20911","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-28T20:28:29.210Z","title":"In addPermission of PermissionManagerServiceImpl.java , there is a possible failure to persist permission settings due to resource exhaustion. This could lead…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2023-20910","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-28T20:22:35.928Z","title":"In add of WifiNetworkSuggestionsManager.java, there is a possible way to trigger permanent DoS due to resource exhaustion. This could lead to local denial of…","severity":"MEDIUM","score":5.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2023-20906","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-28T20:19:11.087Z","title":"In onPackageAddedInternal of PermissionManagerService.java, there is a possible way to silently grant a permission after a Target SDK update due to a…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2022-42528","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T15:02:23.744Z","title":"In ffa_mrd_prot of shared_mem.c, there is a possible ID due to a logic error in the code. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2022-42500","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-25T15:03:47.746Z","title":"In OEM_OnRequest of sced.cpp, there is a possible shell command execution due to improper input validation. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2022-42499","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-28T20:14:45.802Z","title":"In sms_SendMmCpErrMsg of sms_MmConManagement.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00703,"kevAdded":null},{"id":"CVE-2022-42498","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-28T20:13:34.538Z","title":"In Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00682,"kevAdded":null},{"id":"CVE-2022-20542","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-28T20:07:03.261Z","title":"In parseParamsBlob of types.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00134,"kevAdded":null},{"id":"CVE-2022-20532","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-28T20:04:10.862Z","title":"In parseTrackFragmentRun() of MPEG4Extractor.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote escalation of…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00489,"kevAdded":null},{"id":"CVE-2022-20499","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-28T20:02:30.887Z","title":"In validateForCommonR1andR2 of PasspointConfiguration.java, uncaught errors in parsing stored configs could lead to local persistent denial of service with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0017,"kevAdded":null},{"id":"CVE-2022-20467","published":"2023-03-24T00:00:00.000Z","updated":"2025-02-28T19:59:47.353Z","title":"In isBluetoothShareUri of BluetoothOppUtility.java, there is a possible incorrect file read due to a confused deputy. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2023-20948","published":"2023-02-28T00:00:00.000Z","updated":"2025-03-18T15:16:17.714Z","title":"In dropFramesUntilIframe of AAVCAssembler.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00429,"kevAdded":null},{"id":"CVE-2023-20946","published":"2023-02-28T00:00:00.000Z","updated":"2025-03-21T18:20:46.668Z","title":"In onStart of BluetoothSwitchPreferenceController.java, there is a possible permission bypass due to a confused deputy. This could lead to remote escalation of…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00479,"kevAdded":null},{"id":"CVE-2023-20945","published":"2023-02-28T00:00:00.000Z","updated":"2025-03-21T18:19:43.089Z","title":"In phNciNfc_MfCreateXchgDataHdr of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00174,"kevAdded":null},{"id":"CVE-2023-20944","published":"2023-02-28T00:00:00.000Z","updated":"2025-03-21T18:18:12.520Z","title":"In run of ChooseTypeAndAccountActivity.java, there is a possible escalation of privilege due to unsafe deserialization. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00192,"kevAdded":null},{"id":"CVE-2023-20943","published":"2023-02-28T00:00:00.000Z","updated":"2025-03-21T18:16:13.619Z","title":"In clearApplicationUserData of ActivityManagerService.java, there is a possible way to remove system files due to a path traversal error. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00184,"kevAdded":null},{"id":"CVE-2023-20940","published":"2023-02-28T00:00:00.000Z","updated":"2025-03-21T18:01:08.189Z","title":"In the Android operating system, there is a possible way to replace a boot partition due to improperly used crypto. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00062,"kevAdded":null},{"id":"CVE-2023-20939","published":"2023-02-28T00:00:00.000Z","updated":"2025-03-21T17:58:24.037Z","title":"In multiple functions of looper_backed_event_loop.cpp, there is a possible way to corrupt memory due to improper locking. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00072,"kevAdded":null},{"id":"CVE-2023-20938","published":"2023-02-28T00:00:00.000Z","updated":"2024-08-02T09:21:33.455Z","title":"In binder_transaction_buffer_release of binder.c, there is a possible use after free due to improper input validation. This could lead to local escalation of…","severity":"HIGH","score":8.1,"vendor":null,"product":"Android","kev":false,"epss":0.00337,"kevAdded":null},{"id":"CVE-2023-20937","published":"2023-02-28T00:00:00.000Z","updated":"2025-03-21T17:54:01.670Z","title":"In several functions of the Android Linux kernel, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00214,"kevAdded":null},{"id":"CVE-2023-20934","published":"2023-02-28T00:00:00.000Z","updated":"2025-03-21T17:52:17.068Z","title":"In resolveAttributionSource of ServiceUtilities.cpp, there is a possible way to disable the microphone privacy indicator due to a permissions bypass. This…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2023-20933","published":"2023-02-28T00:00:00.000Z","updated":"2025-03-21T17:48:09.462Z","title":"In several functions of MediaCodec.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00172,"kevAdded":null},{"id":"CVE-2023-20932","published":"2023-02-28T00:00:00.000Z","updated":"2025-03-21T16:08:22.211Z","title":"In onCreatePreferences of EditInfoFragment.java, there is a possible way to read contacts belonging to other users due to improper input validation. This could…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00107,"kevAdded":null},{"id":"CVE-2022-20551","published":"2023-02-28T00:00:00.000Z","updated":"2025-03-21T16:03:49.222Z","title":"In createTrack of AudioFlinger.cpp, there is a possible way to record audio without a privacy indicator due to a logic error in the code. This could lead to…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2022-20481","published":"2023-02-28T00:00:00.000Z","updated":"2025-03-21T15:59:16.418Z","title":"In multiple files, there is a possible way to preserve WiFi settings due to residual data after a reset. This could lead to local information disclosure with…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00122,"kevAdded":null},{"id":"CVE-2022-20455","published":"2023-02-28T00:00:00.000Z","updated":"2025-03-21T15:55:32.393Z","title":"In addAutomaticZenRule of ZenModeHelper.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2023-20949","published":"2023-02-15T00:00:00.000Z","updated":"2025-03-19T17:42:20.999Z","title":"In s2mpg11_pmic_probe of s2mpg11-regulator.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2023-20927","published":"2023-02-15T00:00:00.000Z","updated":"2025-03-19T17:44:37.325Z","title":"In permissions of AndroidManifest.xml, there is a possible way to grant signature permissions due to a permissions bypass. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00086,"kevAdded":null},{"id":"CVE-2023-20928","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-02T14:42:10.278Z","title":"In binder_vma_close of binder.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00184,"kevAdded":null},{"id":"CVE-2023-20925","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-02T14:18:11.217Z","title":"In setUclampMinLocked of PowerSessionManager.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00129,"kevAdded":null},{"id":"CVE-2023-20924","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-02T14:43:26.112Z","title":"In (TBD) of (TBD), there is a possible way to bypass the lockscreen due to Biometric Auth Failure. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":6.8,"vendor":null,"product":"Android","kev":false,"epss":0.00207,"kevAdded":null},{"id":"CVE-2023-20923","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-02T14:44:50.720Z","title":"In exported content providers of ShannonRcs, there is a possible way to get access to protected content providers due to a permissions bypass. This could lead…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2023-20922","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-02T14:46:00.443Z","title":"In setMimeGroup of PackageManagerService.java, there is a possible crash loop due to resource exhaustion. This could lead to local denial of service with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00128,"kevAdded":null},{"id":"CVE-2023-20921","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-02T14:47:18.438Z","title":"In onPackageRemoved of AccessibilityManagerService.java, there is a possibility to automatically grant accessibility services due to a logic error in the code.…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00278,"kevAdded":null},{"id":"CVE-2023-20920","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-02T14:48:14.827Z","title":"In queue of UsbRequest.java, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00136,"kevAdded":null},{"id":"CVE-2023-20919","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-02T14:49:29.094Z","title":"In getStringsForPrefix of Settings.java, there is a possible prevention of package uninstallation due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2023-20916","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-02T14:50:21.107Z","title":"In getMainActivityLaunchIntent of LauncherAppsService.java, there is a possible way to bypass the restrictions on starting activities from the background due…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00126,"kevAdded":null},{"id":"CVE-2023-20915","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-02T14:50:53.244Z","title":"In addOrReplacePhoneAccount of PhoneAccountRegistrar.java, there is a possible way to enable a phone account without user interaction due to a logic error in…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2023-20913","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-02T14:51:32.101Z","title":"In onCreate of PhoneAccountSettingsActivity.java and related files, there is a possible way to mislead the user into enabling a malicious phone account due to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00125,"kevAdded":null},{"id":"CVE-2023-20912","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-02T14:52:42.754Z","title":"In onActivityResult of AvatarPickerActivity.java, there is a possible way to access images belonging to other users due to a missing permission check. This…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00125,"kevAdded":null},{"id":"CVE-2023-20908","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-03T20:12:08.908Z","title":"In several functions of SettingsState.java, there is a possible system crash loop due to resource exhaustion. This could lead to local denial of service with…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00128,"kevAdded":null},{"id":"CVE-2023-20905","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-03T20:11:31.837Z","title":"In Mfc_Transceive of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00136,"kevAdded":null},{"id":"CVE-2023-20904","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-03T20:11:00.615Z","title":"In getTrampolineIntent of SettingsActivity.java, there is a possible launch of arbitrary activity due to an Intent mismatch in the code. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00136,"kevAdded":null},{"id":"CVE-2022-20494","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-03T20:10:27.210Z","title":"In AutomaticZenRule of AutomaticZenRule.java, there is a possible persistent DoS due to resource exhaustion. This could lead to local denial of service with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0045,"kevAdded":null},{"id":"CVE-2022-20493","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-03T20:09:52.547Z","title":"In Condition of Condition.java, there is a possible way to grant notification access due to improper input validation. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00229,"kevAdded":null},{"id":"CVE-2022-20492","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-03T20:09:21.679Z","title":"In many functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00282,"kevAdded":null},{"id":"CVE-2022-20490","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-01T19:35:09.919Z","title":"In multiple functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00282,"kevAdded":null},{"id":"CVE-2022-20489","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-02T15:20:29.038Z","title":"In many functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00289,"kevAdded":null},{"id":"CVE-2022-20461","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-02T15:21:37.010Z","title":"In pinReplyNative of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible out of bounds read due to type confusion. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00123,"kevAdded":null},{"id":"CVE-2022-20458","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-02T14:20:28.085Z","title":"The logs of sensitive information (PII) or hardware identifier should only be printed in Android \"userdebug\" or \"eng\" build. StatusBarNotification.getKey()…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00128,"kevAdded":null},{"id":"CVE-2022-20456","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-02T14:35:01.623Z","title":"In AutomaticZenRule of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0025,"kevAdded":null},{"id":"CVE-2022-20235","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-02T15:05:52.864Z","title":"The PowerVR GPU kernel driver maintains an \"Information Page\" used by its cache subsystem. This page can only be written by the GPU driver itself, but prior to…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00118,"kevAdded":null},{"id":"CVE-2022-20215","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-02T15:06:41.178Z","title":"In onCreate of MasterClearConfirmFragment.java, there is a possible factory reset due to a tapjacking/overlay attack. This could lead to local denial of…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0013,"kevAdded":null},{"id":"CVE-2022-20214","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-01T19:42:38.683Z","title":"In Car Settings app, the toggle button in Modify system settings is vulnerable to tapjacking attack. Attackers can overlay the toggle button to enable apps to…","severity":"MEDIUM","score":4.7,"vendor":null,"product":"Android","kev":false,"epss":0.00232,"kevAdded":null},{"id":"CVE-2022-20213","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-02T15:23:10.078Z","title":"In ApplicationsDetailsActivity of AndroidManifest.xml, there is a possible DoS due to a tapjacking/overlay attack. This could lead to local denial of service…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0013,"kevAdded":null},{"id":"CVE-2022-42544","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-17T16:04:54.177Z","title":"In getView of AddAppNetworksFragment.java, there is a possible way to mislead the user about network add requests due to improper input validation. This could…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00215,"kevAdded":null},{"id":"CVE-2022-42543","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-17T18:06:09.409Z","title":"In fdt_path_offset_namelen of fdt_ro.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00137,"kevAdded":null},{"id":"CVE-2022-42542","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-17T18:11:15.778Z","title":"In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00176,"kevAdded":null},{"id":"CVE-2022-42535","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-17T18:13:25.242Z","title":"In a query in MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lead to local information disclosure with…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00219,"kevAdded":null},{"id":"CVE-2022-42534","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-17T18:16:21.763Z","title":"In trusty_ffa_mem_reclaim of shared-mem-smcall.c, there is a possible privilege escalation due to improper input validation. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00177,"kevAdded":null},{"id":"CVE-2022-42532","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-17T19:13:11.816Z","title":"In Pixel firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2022-42531","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-17T19:16:19.183Z","title":"In mmu_map_for_fw of gs_ldfw_load.c, there is a possible mitigation bypass due to Permissive Memory Allocation. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2022-42530","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-17T18:17:32.019Z","title":"In Pixel firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2022-42529","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-17T18:21:50.121Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-235292841References: N/A","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00584,"kevAdded":null},{"id":"CVE-2022-42527","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-17T18:23:23.025Z","title":"In cd_SsParseMsg of cd_SsCodec.c, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00902,"kevAdded":null},{"id":"CVE-2022-42526","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-17T19:18:38.052Z","title":"In ConvertUtf8ToUcs2 of radio_hal_utils.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2022-42525","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-17T17:43:42.771Z","title":"In fillSetupDataCallInfo_V1_6 of ril_service_1_6.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2022-42524","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-17T19:20:00.333Z","title":"In sms_GetTpUdlIe of sms_PduCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00816,"kevAdded":null},{"id":"CVE-2022-42523","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-17T19:22:11.723Z","title":"In fillSetupDataCallInfo_V1_6 of ril_service_1_6.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2022-42522","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-17T19:27:19.106Z","title":"In DoSetCarrierConfig of miscservice.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00177,"kevAdded":null},{"id":"CVE-2022-42521","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-17T19:28:58.384Z","title":"In encode of wlandata.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2022-42520","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-17T19:29:48.305Z","title":"In ServiceInterface::HandleRequest of serviceinterface.cpp, there is a possible use after free. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2022-42519","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-17T19:30:38.469Z","title":"In CdmaBroadcastSmsConfigsRequestData::encode of cdmasmsdata.cpp, there is a possible stack clash leading to memory corruption. This could lead to local…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2022-42518","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-17T19:44:48.706Z","title":"In BroadcastSmsConfigsRequestData::encode of smsdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00174,"kevAdded":null},{"id":"CVE-2022-42517","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-17T19:58:08.749Z","title":"In MiscService::DoOemSetTcsFci of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2022-42516","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-17T20:05:33.768Z","title":"In ProtocolSimBuilderLegacy::BuildSimGetGbaAuth of protocolsimbuilderlegacy.cpp, there is a possible out of bounds read due to a missing bounds check. This…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.0017,"kevAdded":null},{"id":"CVE-2022-42515","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-17T20:07:05.619Z","title":"In MiscService::DoOemSetRtpPktlossThreshold of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00169,"kevAdded":null},{"id":"CVE-2022-42514","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-17T20:08:19.253Z","title":"In ProtocolImsBuilder::BuildSetConfig of protocolimsbuilder.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.0017,"kevAdded":null},{"id":"CVE-2022-42513","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T12:47:19.796Z","title":"In ProtocolEmbmsBuilder::BuildSetSession of protocolembmsbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2022-42512","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T13:07:22.904Z","title":"In VsimOperationDataExt::encode of vsimdata.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.0017,"kevAdded":null},{"id":"CVE-2022-42511","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T13:16:20.721Z","title":"In EmbmsSessionData::encode of embmsdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2022-42510","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T13:17:15.725Z","title":"In StringsRequestData::encode of requestdata.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local escalation…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00171,"kevAdded":null},{"id":"CVE-2022-42509","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T13:18:06.757Z","title":"In CallDialReqData::encode of callreqdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2022-42508","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-17T20:09:28.068Z","title":"In ProtocolCallBuilder::BuildSendUssd of protocolcallbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2022-42507","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-17T20:10:29.028Z","title":"In ProtocolSimBuilder::BuildSimUpdatePb3gEntry of protocolsimbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2022-42506","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-17T20:14:31.373Z","title":"In SimUpdatePbEntry::encode of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00178,"kevAdded":null},{"id":"CVE-2022-42505","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-17T20:15:32.370Z","title":"In ProtocolMiscBuilder::BuildSetSignalReportCriteria of protocolmiscbuilder.cpp, there is a possible out of bounds write due to an incorrect bounds check. This…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00178,"kevAdded":null},{"id":"CVE-2022-42504","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T13:18:54.094Z","title":"In CallDialReqData::encodeCallNumber of callreqdata.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00178,"kevAdded":null},{"id":"CVE-2022-42503","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T13:20:33.913Z","title":"In ProtocolMiscBuilder::BuildSetLinkCapaReportCriteria of protocolmiscbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00169,"kevAdded":null},{"id":"CVE-2022-42502","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T13:19:59.971Z","title":"In FacilityLock::Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2022-42501","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T13:21:09.093Z","title":"In HexString2Value of util.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2022-20610","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T13:32:30.428Z","title":"In cellular modem firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to remote code execution with LTE…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00772,"kevAdded":null},{"id":"CVE-2022-20609","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T13:33:17.793Z","title":"In Pixel cellular firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2022-20608","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T13:34:05.836Z","title":"In Pixel cellular firmware, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2022-20607","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T13:34:45.937Z","title":"In the Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with LTE…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.01049,"kevAdded":null},{"id":"CVE-2022-20606","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T13:35:27.989Z","title":"In SAEMM_MiningCodecTableWithMsgIE of SAEMM_RadioMessageCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to…","severity":"MEDIUM","score":4.9,"vendor":null,"product":"Android","kev":false,"epss":0.00864,"kevAdded":null},{"id":"CVE-2022-20605","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T13:36:12.389Z","title":"In SAECOMM_CopyBufferBytes of SAECOMM_Utility.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00821,"kevAdded":null},{"id":"CVE-2022-20604","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T13:36:58.171Z","title":"In SAECOMM_SetDcnIdForPlmn of SAECOMM_DbManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00282,"kevAdded":null},{"id":"CVE-2022-20603","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T13:37:44.951Z","title":"In SetDecompContextDb of RohcDeCompContextOfRbId.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code…","severity":"HIGH","score":7.2,"vendor":null,"product":"Android","kev":false,"epss":0.01001,"kevAdded":null},{"id":"CVE-2022-20602","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T13:38:38.999Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-211081867References: N/A","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00496,"kevAdded":null},{"id":"CVE-2022-20601","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T13:39:27.080Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-204541506References: N/A","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00496,"kevAdded":null},{"id":"CVE-2022-20600","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T14:20:33.475Z","title":"In TBD of TBD, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System execution…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2022-20599","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T14:21:23.567Z","title":"In Pixel firmware, there is a possible exposure of sensitive memory due to a missing bounds check. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2022-20598","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T14:25:03.549Z","title":"In sec_media_protect of media.c, there is a possible EoP due to an integer overflow. This could lead to local escalation of privilege of secure mode MFC Core…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2022-20597","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T14:42:17.355Z","title":"In ppmpu_set of ppmpu.c, there is a possible EoP due to an integer overflow. This could lead to local escalation of privilege with no additional execution…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2022-20596","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T14:43:04.992Z","title":"In sendChunk of WirelessCharger.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2022-20595","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T14:44:03.807Z","title":"In getWpcAuthChallengeResponse of WirelessCharger.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00178,"kevAdded":null},{"id":"CVE-2022-20594","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T14:45:24.422Z","title":"In updateStart of WirelessCharger.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2022-20593","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T14:46:19.740Z","title":"In pop_descriptor_string of BufferDescriptor.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00178,"kevAdded":null},{"id":"CVE-2022-20592","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T14:47:14.573Z","title":"In ppmp_validate_secbuf of drm_fw.c, there is a possible information disclosure due to improper input validation. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2022-20591","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T14:48:04.813Z","title":"In ppmpu_set of ppmpu.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00183,"kevAdded":null},{"id":"CVE-2022-20590","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T14:48:45.809Z","title":"In valid_va_sec_mfc_check of drm_access_control.c, there is a possible information disclosure due to improper input validation. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2022-20589","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T14:49:28.401Z","title":"In valid_va_secbuf_check of drm_access_control.c, there is a possible ID due to improper input validation. This could lead to local information disclosure with…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00127,"kevAdded":null},{"id":"CVE-2022-20588","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T14:50:18.075Z","title":"In sysmmu_map of sysmmu.c, there is a possible EoP due to a precondition check failure. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00129,"kevAdded":null},{"id":"CVE-2022-20587","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T14:51:11.440Z","title":"In ppmp_validate_wsm of drm_fw.c, there is a possible EoP due to improper input validation. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0013,"kevAdded":null},{"id":"CVE-2022-20586","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T14:51:50.927Z","title":"In valid_out_of_special_sec_dram_addr of drm_access_control.c, there is a possible EoP due to improper input validation. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0013,"kevAdded":null},{"id":"CVE-2022-20585","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T14:52:23.365Z","title":"In valid_out_of_special_sec_dram_addr of drm_access_control.c, there is a possible EoP due to improper input validation. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0013,"kevAdded":null},{"id":"CVE-2022-20584","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T14:52:54.917Z","title":"In page_number of shared_mem.c, there is a possible code execution in secure world due to improper input validation. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0013,"kevAdded":null},{"id":"CVE-2022-20583","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T14:53:38.906Z","title":"In ppmp_unprotect_mfcfw_buf of drm_fw.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00129,"kevAdded":null},{"id":"CVE-2022-20582","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T14:54:08.511Z","title":"In ppmp_unprotect_mfcfw_buf of drm_fw.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2022-20581","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T14:54:42.594Z","title":"In the Pixel camera driver, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.0019,"kevAdded":null},{"id":"CVE-2022-20580","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T14:56:42.410Z","title":"In ufdt_do_one_fixup of ufdt_overlay.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2022-20579","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T14:57:23.419Z","title":"In RadioImpl::setCdmaBroadcastConfig of ril_service_legacy.cpp, there is a possible stack clash leading to memory corruption. This could lead to local…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2022-20578","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T14:57:51.372Z","title":"In RadioImpl::setGsmBroadcastConfig of ril_service_legacy.cpp, there is a possible stack clash leading to memory corruption. This could lead to local…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2022-20577","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T14:58:22.503Z","title":"In OemSimAuthRequest::encode of wlandata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2022-20576","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T14:58:52.561Z","title":"In externalOnRequest of rilapplication.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2022-20575","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T14:59:41.540Z","title":"In read_ppmpu_info of drm_fw.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2022-20574","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T15:09:46.495Z","title":"In sec_sysmmu_info of drm_fw.c, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2022-20572","published":"2022-12-16T00:00:00.000Z","updated":"2026-10-14T15:02:26.516Z","title":"In verity_target of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission check. This could lead to local…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00639,"kevAdded":null},{"id":"CVE-2022-20571","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T14:52:11.967Z","title":"In extract_metadata of dm-android-verity.c, there is a possible way to corrupt kernel memory due to a use after free. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2022-20570","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-21T12:57:27.526Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-230660904References: N/A","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00169,"kevAdded":null},{"id":"CVE-2022-20569","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-21T12:58:53.384Z","title":"In thermal_cooling_device_stats_update of thermal_sysfs.c, there is a possible out of bounds write due to improper input validation. This could lead to local…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2022-20568","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-21T13:00:17.375Z","title":"In (TBD) of (TBD), there is a possible way to corrupt kernel memory due to a use after free. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00219,"kevAdded":null},{"id":"CVE-2022-20567","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-21T13:03:10.112Z","title":"In pppol2tp_create of l2tp_ppp.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System…","severity":"HIGH","score":7.4,"vendor":null,"product":"Android","kev":false,"epss":0.00136,"kevAdded":null},{"id":"CVE-2022-20566","published":"2022-12-16T00:00:00.000Z","updated":"2026-10-14T15:02:25.316Z","title":"In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00217,"kevAdded":null},{"id":"CVE-2022-20564","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-21T13:08:20.103Z","title":"In _ufdt_output_strtab_to_fdt of ufdt_convert.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2022-20563","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-21T13:09:19.308Z","title":"In TBD of ufdt_convert, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2022-20562","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-21T13:11:20.556Z","title":"In various functions of ap_input_processor.c, there is a possible way to record audio during a phone call due to a logic error in the code. This could lead to…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00181,"kevAdded":null},{"id":"CVE-2022-20561","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T19:34:52.720Z","title":"In TBD of aud_hal_tunnel.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0013,"kevAdded":null},{"id":"CVE-2022-20560","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T15:17:53.950Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-212623833References: N/A","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00283,"kevAdded":null},{"id":"CVE-2022-20559","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T15:24:11.381Z","title":"In revokeOwnPermissionsOnKill of PermissionManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00123,"kevAdded":null},{"id":"CVE-2022-20558","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T15:25:11.372Z","title":"In registerReceivers of DeviceCapabilityListener.java, there is a possible way to change preferred TTY mode due to a permissions bypass. This could lead to…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2022-20557","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T15:29:47.095Z","title":"In MessageQueueBase of MessageQueueBase.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2022-20556","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T15:31:03.253Z","title":"In launchConfigNewNetworkFragment of NetworkProviderSettings.java, there is a possible way for the guest user to add a new WiFi network due to a missing…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00159,"kevAdded":null},{"id":"CVE-2022-20555","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T15:32:02.978Z","title":"In ufdt_get_node_by_path_len of ufdt_convert.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00178,"kevAdded":null},{"id":"CVE-2022-20554","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T15:32:53.162Z","title":"In removeEventHubDevice of InputDevice.cpp, there is a possible OOB read due to a use after free. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2022-20553","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T15:33:46.566Z","title":"In onCreate of LogAccessDialogActivity.java, there is a possible way to bypass a permission check due to a tapjacking/overlay attack. This could lead to local…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00134,"kevAdded":null},{"id":"CVE-2022-20552","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T15:34:35.345Z","title":"In btif_a2dp_sink_command_ready of btif_a2dp_sink.cc, there is a possible out of bounds read due to a use after free. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2022-20550","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T15:35:26.632Z","title":"In Multiple Locations, there is a possibility to launch arbitrary protected activities due to a confused deputy. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0013,"kevAdded":null},{"id":"CVE-2022-20549","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T20:13:49.138Z","title":"In authToken2AidlVec of KeyMintUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00129,"kevAdded":null},{"id":"CVE-2022-20548","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T20:42:15.109Z","title":"In setParameter of EqualizerEffect.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0013,"kevAdded":null},{"id":"CVE-2022-20547","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-21T02:57:10.016Z","title":"In multiple functions of AdapterService.java, there is a possible way to manipulate Bluetooth state due to a missing permission check. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2022-20546","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-21T13:14:50.653Z","title":"In getCurrentConfigImpl of Effect.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00126,"kevAdded":null},{"id":"CVE-2022-20545","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-21T13:15:56.403Z","title":"In bindArtworkAndColors of MediaControlPanel.java, there is a possible way to crash the phone due to improper input validation. This could lead to remote…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00646,"kevAdded":null},{"id":"CVE-2022-20544","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-21T13:17:43.030Z","title":"In onOptionsItemSelected of ManageApplications.java, there is a possible bypass of profile owner restrictions due to a missing permission check. This could…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2022-20543","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-21T13:19:16.111Z","title":"In multiple locations, there is a possible display crash loop due to improper input validation. This could lead to local denial of service with system…","severity":"LOW","score":2.3,"vendor":null,"product":"Android","kev":false,"epss":0.00172,"kevAdded":null},{"id":"CVE-2022-20541","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-21T13:20:28.283Z","title":"In phNxpNciHal_ioctl of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":4.2,"vendor":null,"product":"Android","kev":false,"epss":0.00188,"kevAdded":null},{"id":"CVE-2022-20540","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T15:36:06.164Z","title":"In SurfaceFlinger::doDump of SurfaceFlinger.cpp, there is possible arbitrary code execution due to a use after free. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2022-20539","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T15:36:50.669Z","title":"In parameterToHal of Effect.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00129,"kevAdded":null},{"id":"CVE-2022-20538","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T15:37:32.243Z","title":"In getSmsRoleHolder of RoleService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2022-20537","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T15:38:19.984Z","title":"In createDialog of WifiScanModeActivity.java, there is a possible way for a Guest user to enable location-sensitive settings due to a missing permission check.…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2022-20536","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T15:41:40.617Z","title":"In registerBroadcastReceiver of RcsService.java, there is a possible way to change preferred TTY mode due to a missing permission check. This could lead to…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2022-20535","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T15:42:49.245Z","title":"In registerLocalOnlyHotspotSoftApCallback of WifiManager.java, there is a possible way to determine whether an app is installed, without query permissions, due…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00123,"kevAdded":null},{"id":"CVE-2022-20533","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T15:43:34.184Z","title":"In getSlice of WifiSlice.java, there is a possible way to connect a new WiFi network from the guest mode due to a missing permission check. This could lead to…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2022-20530","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T15:45:02.082Z","title":"In strings.xml, there is a possible permission bypass due to a misleading string. This could lead to remote information disclosure of call logs with no…","severity":"MEDIUM","score":5.3,"vendor":null,"product":"Android","kev":false,"epss":0.0051,"kevAdded":null},{"id":"CVE-2022-20529","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T15:47:25.776Z","title":"In multiple locations of WifiDialogActivity.java, there is a possible limited lockscreen bypass due to a logic error in the code. This could lead to local…","severity":"LOW","score":2.4,"vendor":null,"product":"Android","kev":false,"epss":0.00172,"kevAdded":null},{"id":"CVE-2022-20528","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T15:48:19.285Z","title":"In findParam of HevcUtils.cpp there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00123,"kevAdded":null},{"id":"CVE-2022-20527","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-21T13:21:49.099Z","title":"In HalCoreCallback of halcore.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure from…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2022-20526","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-21T13:22:48.043Z","title":"In CanvasContext::draw of CanvasContext.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00131,"kevAdded":null},{"id":"CVE-2022-20525","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-21T13:23:51.348Z","title":"In enforceVisualVoicemailPackage of PhoneInterfaceManager.java, there is a possible leak of visual voicemail package name due to a permissions bypass. This…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00121,"kevAdded":null},{"id":"CVE-2022-20524","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-21T13:25:16.508Z","title":"In compose of Vibrator.cpp, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00178,"kevAdded":null},{"id":"CVE-2022-20523","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-21T13:26:21.818Z","title":"In IncFs_GetFilledRangesStartingFrom of incfs.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":6.1,"vendor":null,"product":"Android","kev":false,"epss":0.00166,"kevAdded":null},{"id":"CVE-2022-20522","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T15:50:12.727Z","title":"In getSlice of ProviderModelSlice.java, there is a missing permission check. This could lead to local escalation of privilege from the guest user with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00163,"kevAdded":null},{"id":"CVE-2022-20521","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-23T19:59:35.821Z","title":"In sdpu_find_most_specific_service_uuid of sdp_utils.cc, there is a possible way to crash Bluetooth due to a missing null check. This could lead to local…","severity":"MEDIUM","score":5,"vendor":null,"product":"Android","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2022-20520","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T15:53:17.552Z","title":"In onCreate of various files, there is a possible tapjacking/overlay attack. This could lead to local escalation of privilege or denial of server with User…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00198,"kevAdded":null},{"id":"CVE-2022-20519","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T15:54:04.210Z","title":"In onCreate of AddAppNetworksActivity.java, there is a possible way for a guest user to configure WiFi networks due to a missing permission check. This could…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00155,"kevAdded":null},{"id":"CVE-2022-20518","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T15:55:05.819Z","title":"In query of MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lead to local information disclosure with…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00221,"kevAdded":null},{"id":"CVE-2022-20517","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T15:55:58.456Z","title":"In getMessagesByPhoneNumber of MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00221,"kevAdded":null},{"id":"CVE-2022-20516","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T15:56:43.779Z","title":"In rw_t3t_act_handle_check_ndef_rsp of rw_t3t.cc, there is a possible out of bounds read due to an integer overflow. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00821,"kevAdded":null},{"id":"CVE-2022-20515","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-18T15:57:40.623Z","title":"In onPreferenceClick of AccountTypePreferenceLoader.java, there is a possible way to retrieve protected files from the Settings app due to a confused deputy.…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2022-20514","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-21T13:58:34.598Z","title":"In acquireFabricatedOverlayIterator, nextFabricatedOverlayInfos, and releaseFabricatedOverlayIterator of Idmap2Service.cpp, there is a possible out of bounds…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2022-20513","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-21T14:10:49.360Z","title":"In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00217,"kevAdded":null},{"id":"CVE-2022-20512","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-21T14:12:33.920Z","title":"In navigateUpTo of Task.java, there is a possible way to launch an intent handler with a mismatched intent due to improper input validation. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00145,"kevAdded":null},{"id":"CVE-2022-20511","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-21T14:14:37.457Z","title":"In getNearbyAppStreamingPolicy of DevicePolicyManagerService.java, there is a missing permission check. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00165,"kevAdded":null},{"id":"CVE-2022-20510","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-21T13:28:25.561Z","title":"In getNearbyNotificationStreamingPolicy of DevicePolicyManagerService.java, there is a possible way to learn about the notification streaming policy of other…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00118,"kevAdded":null},{"id":"CVE-2022-20509","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-21T13:29:44.833Z","title":"In mapGrantorDescr of MessageQueueBase.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2022-20508","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-21T13:30:51.201Z","title":"In onAttach of ConfigureWifiSettings.java, there is a possible way for a guest user to change WiFi settings due to a permissions bypass. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2022-20507","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-21T13:32:14.571Z","title":"In onMulticastListUpdateNotificationReceived of UwbEventManager.java, there is a possible arbitrary code execution due to a missing bounds check. This could…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2022-20506","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-21T13:33:41.203Z","title":"In onCreate of WifiDialogActivity.java, there is a missing permission check. This could lead to local escalation of privilege from a guest user with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00167,"kevAdded":null},{"id":"CVE-2022-20505","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-21T13:38:21.107Z","title":"In openFile of CallLogProvider.java, there is a possible permission bypass due to a path traversal error. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2022-20504","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-21T13:39:45.993Z","title":"In multiple locations of DreamManagerService.java, there is a missing permission check. This could lead to local escalation of privilege and dismissal of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2022-20503","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-21T13:41:02.095Z","title":"In onCreate of WifiDppConfiguratorActivity.java, there is a possible way for a guest user to add a WiFi configuration due to a missing permission check. This…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00168,"kevAdded":null},{"id":"CVE-2022-20199","published":"2022-12-16T00:00:00.000Z","updated":"2025-04-21T13:42:18.235Z","title":"In multiple locations of NfcService.java, there is a possible disclosure of NFC tags due to a confused deputy. This could lead to local information disclosure…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00125,"kevAdded":null},{"id":"CVE-2022-20611","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T17:14:23.751Z","title":"In deletePackageVersionedInternal of DeletePackageHelper.java, there is a possible way to bypass carrier restrictions due to a permissions bypass. This could…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2022-20502","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T17:17:27.212Z","title":"In GetResolvedMethod of entrypoint_utils-inl.h, there is a possible use after free due to a stale cache. This could lead to local information disclosure with…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00164,"kevAdded":null},{"id":"CVE-2022-20501","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T17:35:15.114Z","title":"In onCreate of EnableAccountPreferenceActivity.java, there is a possible way to mislead the user into enabling a malicious phone account due to a…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.0014,"kevAdded":null},{"id":"CVE-2022-20500","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T13:52:57.629Z","title":"In loadFromXml of ShortcutPackage.java, there is a possible crash on boot due to an uncaught exception. This could lead to local denial of service with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00134,"kevAdded":null},{"id":"CVE-2022-20498","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T13:58:17.730Z","title":"In fdt_path_offset_namelen of fdt_ro.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.01156,"kevAdded":null},{"id":"CVE-2022-20497","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T14:02:02.090Z","title":"In updatePublicMode of NotificationLockscreenUserManagerImpl.java, there is a possible way to reveal sensitive notifications on the lockscreen due to an…","severity":"MEDIUM","score":4.6,"vendor":null,"product":"Android","kev":false,"epss":0.00191,"kevAdded":null},{"id":"CVE-2022-20496","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T14:04:47.790Z","title":"In setDataSource of initMediaExtractor.cpp, there is a possibility of arbitrary code execution due to a use after free. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00137,"kevAdded":null},{"id":"CVE-2022-20495","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T14:06:09.114Z","title":"In getEnabledAccessibilityServiceList of AccessibilityManager.java, there is a possible way to hide an accessibility service due to a logic error in the code.…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2022-20491","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T14:07:30.752Z","title":"In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00174,"kevAdded":null},{"id":"CVE-2022-20488","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T14:09:02.518Z","title":"In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2022-20487","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T14:10:18.043Z","title":"In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00125,"kevAdded":null},{"id":"CVE-2022-20486","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T14:11:28.172Z","title":"In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2022-20485","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T19:41:45.600Z","title":"In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2022-20484","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T19:42:23.956Z","title":"In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2022-20483","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T19:43:27.630Z","title":"In several functions that parse avrc response in avrc_pars_ct.cc and related files, there are possible out of bounds reads due to integer overflows. This could…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00662,"kevAdded":null},{"id":"CVE-2022-20482","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T19:45:08.559Z","title":"In createNotificationChannel of NotificationManager.java, there is a possible way to make the device unusable and require factory reset due to resource…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00162,"kevAdded":null},{"id":"CVE-2022-20480","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T19:46:44.118Z","title":"In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2022-20479","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T17:38:26.861Z","title":"In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00174,"kevAdded":null},{"id":"CVE-2022-20478","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T17:43:41.542Z","title":"In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00174,"kevAdded":null},{"id":"CVE-2022-20477","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T17:47:45.785Z","title":"In shouldHideNotification of KeyguardNotificationVisibilityProvider.kt, there is a possible way to show hidden notifications due to a logic error in the code.…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0015,"kevAdded":null},{"id":"CVE-2022-20476","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T17:49:10.041Z","title":"In setEnabledSetting of PackageManager.java, there is a possible way to get the device into an infinite reboot loop due to resource exhaustion. This could lead…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00162,"kevAdded":null},{"id":"CVE-2022-20475","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T14:13:20.031Z","title":"In test of ResetTargetTaskHelper.java, there is a possible hijacking of any app which sets allowTaskReparenting=\"true\" due to a confused deputy. This could…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00131,"kevAdded":null},{"id":"CVE-2022-20474","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T14:14:55.235Z","title":"In readLazyValue of Parcel.java, there is a possible loading of arbitrary code into the System Settings app due to a confused deputy. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00252,"kevAdded":null},{"id":"CVE-2022-20473","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T14:17:19.590Z","title":"In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote code execution with…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.08854,"kevAdded":null},{"id":"CVE-2022-20472","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T14:18:23.954Z","title":"In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote code execution with…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.06649,"kevAdded":null},{"id":"CVE-2022-20471","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T14:19:37.729Z","title":"In SendIncDecRestoreCmdPart2 of NxpMfcReader.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00137,"kevAdded":null},{"id":"CVE-2022-20470","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T14:21:47.795Z","title":"In bindRemoteViewsService of AppWidgetServiceImpl.java, there is a possible way to bypass background activity launch due to improper input validation. This…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00187,"kevAdded":null},{"id":"CVE-2022-20469","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T14:23:41.997Z","title":"In avct_lcb_msg_asmbl of avct_lcb_act.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00225,"kevAdded":null},{"id":"CVE-2022-20468","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T14:25:24.140Z","title":"In BNEP_ConnectResp of bnep_api.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00146,"kevAdded":null},{"id":"CVE-2022-20466","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T14:28:02.296Z","title":"In applyKeyguardFlags of NotificationShadeWindowControllerImpl.java, there is a possible way to observe the user's password on a secondary display due to an…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2022-20449","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T14:36:09.447Z","title":"In writeApplicationRestrictionsLAr of UserManagerService.java, there is a possible overwrite of system files due to a path traversal error. This could lead to…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2022-20442","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T19:48:58.582Z","title":"In onCreate of ReviewPermissionsActivity.java, there is a possible way to grant permissions for a separate app with API level < 23 due to a tapjacking/overlay…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2022-20411","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T19:51:17.003Z","title":"In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.01878,"kevAdded":null},{"id":"CVE-2022-20240","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T19:53:49.503Z","title":"In sOpAllowSystemRestrictionBypass of AppOpsManager.java, there is a possible leak of location information due to a missing permission check. This could lead…","severity":"LOW","score":2.3,"vendor":null,"product":"Android","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2021-39660","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T19:54:43.278Z","title":"In TBD of TBD, there is a possible way to archive arbitrary code execution in kernel due to a race condition. This could lead to local escalation of privilege…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00074,"kevAdded":null},{"id":"CVE-2021-0934","published":"2022-12-13T00:00:00.000Z","updated":"2025-04-22T14:37:26.559Z","title":"In findAllDeAccounts of AccountsDb.java, there is a possible denial of service due to resource exhaustion. This could lead to local denial of service with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2022-42533","published":"2022-11-17T00:00:00.000Z","updated":"2025-04-29T20:15:50.981Z","title":"In shared_metadata_init of SharedMetadata.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00137,"kevAdded":null},{"id":"CVE-2022-20460","published":"2022-11-17T00:00:00.000Z","updated":"2025-04-30T15:02:42.855Z","title":"In (TBD) mprot_unmap? of (TBD), there is a possible way to corrupt the memory mapping due to improper input validation. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2022-20459","published":"2022-11-17T00:00:00.000Z","updated":"2025-04-30T15:04:00.845Z","title":"In (TBD) of (TBD), there is a possible way to redirect code execution due to improper input validation. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2022-20428","published":"2022-11-17T00:00:00.000Z","updated":"2025-04-30T15:05:04.509Z","title":"In (TBD) of (TBD), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2022-20427","published":"2022-11-17T00:00:00.000Z","updated":"2025-04-30T13:58:59.174Z","title":"In (TBD) of (TBD), there is a possible way to corrupt memory due to improper input validation. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2022-20465","published":"2022-11-08T00:00:00.000Z","updated":"2025-05-01T15:14:40.240Z","title":"In dismiss and related functions of KeyguardHostViewController.java and related files, there is a possible lockscreen bypass due to a logic error in the code.…","severity":"MEDIUM","score":4.6,"vendor":null,"product":"Android","kev":false,"epss":0.00827,"kevAdded":null},{"id":"CVE-2022-20462","published":"2022-11-08T00:00:00.000Z","updated":"2025-05-01T15:15:49.677Z","title":"In phNxpNciHal_write_unlocked of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00152,"kevAdded":null},{"id":"CVE-2022-20457","published":"2022-11-08T00:00:00.000Z","updated":"2025-05-01T15:17:08.581Z","title":"In getMountModeInternal of StorageManagerService.java, there is a possible prevention of package installation due to improper input validation. This could lead…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2022-20454","published":"2022-11-08T00:00:00.000Z","updated":"2025-05-01T15:18:39.673Z","title":"In fdt_next_tag of fdt.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00147,"kevAdded":null},{"id":"CVE-2022-20453","published":"2022-11-08T00:00:00.000Z","updated":"2025-05-01T15:19:56.111Z","title":"In update of MmsProvider.java, there is a possible constriction of directory permissions due to a path traversal error. This could lead to local denial of…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00176,"kevAdded":null},{"id":"CVE-2022-20452","published":"2022-11-08T00:00:00.000Z","updated":"2025-05-01T15:21:25.124Z","title":"In initializeFromParcelLocked of BaseBundle.java, there is a possible method arbitrary code execution due to a confused deputy. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00418,"kevAdded":null},{"id":"CVE-2022-20451","published":"2022-11-08T00:00:00.000Z","updated":"2025-05-01T15:22:56.033Z","title":"In onCallRedirectionComplete of CallsManager.java, there is a possible permissions bypass due to a missing permission check. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00112,"kevAdded":null},{"id":"CVE-2022-20450","published":"2022-11-08T00:00:00.000Z","updated":"2025-05-01T15:24:58.703Z","title":"In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way to bypass user consent due to a missing permission check. This could…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2022-20448","published":"2022-11-08T00:00:00.000Z","updated":"2025-05-01T15:26:37.697Z","title":"In buzzBeepBlinkLocked of NotificationManagerService.java, there is a possible way to share data across users due to a permissions bypass. This could lead to…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2022-20447","published":"2022-11-08T00:00:00.000Z","updated":"2025-05-01T15:27:47.855Z","title":"In PAN_WriteBuf of pan_api.cc, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure over Bluetooth…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00322,"kevAdded":null},{"id":"CVE-2022-20446","published":"2022-11-08T00:00:00.000Z","updated":"2025-05-01T19:20:01.326Z","title":"In AlwaysOnHotwordDetector of AlwaysOnHotwordDetector.java, there is a possible way to access the microphone from the background due to a missing permission…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00112,"kevAdded":null},{"id":"CVE-2022-20445","published":"2022-11-08T00:00:00.000Z","updated":"2025-05-01T19:20:58.670Z","title":"In process_service_search_rsp of sdp_discovery.cc, there is a possible out of bounds read due to improper input validation. This could lead to remote…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00567,"kevAdded":null},{"id":"CVE-2022-20441","published":"2022-11-08T00:00:00.000Z","updated":"2025-05-01T15:28:52.067Z","title":"In navigateUpTo of Task.java, there is a possible way to launch an unexported intent handler due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00128,"kevAdded":null},{"id":"CVE-2022-20426","published":"2022-11-08T00:00:00.000Z","updated":"2025-05-01T15:30:07.647Z","title":"In multiple functions of many files, there is a possible obstruction of the user's ability to select a phone account due to resource exhaustion. This could…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00099,"kevAdded":null},{"id":"CVE-2022-20414","published":"2022-11-08T00:00:00.000Z","updated":"2025-05-01T15:31:33.387Z","title":"In setImpl of AlarmManagerService.java, there is a possible way to put a device into a boot loop due to an uncaught exception. This could lead to local denial…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2021-39661","published":"2022-11-08T00:00:00.000Z","updated":"2025-05-01T15:34:31.528Z","title":"In _PMRLogicalOffsetToPhysicalOffset of the PowerVR kernel driver, there is a possible out of bounds write due to a missing bounds check. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2021-1050","published":"2022-11-08T00:00:00.000Z","updated":"2025-05-01T15:36:01.127Z","title":"In MMU_UnmapPages of the PowerVR kernel driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00174,"kevAdded":null},{"id":"CVE-2022-20464","published":"2022-10-14T00:00:00.000Z","updated":"2025-05-15T15:10:13.713Z","title":"In various functions of ap_input_processor.c, there is a possible way to record audio during a phone call due to a logic error in the code. This could lead to…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2022-20397","published":"2022-10-14T00:00:00.000Z","updated":"2025-05-15T15:10:51.810Z","title":"In SitRilClient_OnResponse of SitRilSe.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00147,"kevAdded":null},{"id":"CVE-2021-0699","published":"2022-10-14T00:00:00.000Z","updated":"2025-05-15T15:13:14.999Z","title":"In HTBLogKM of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the kernel with…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2022-20440","published":"2022-10-11T00:00:00.000Z","updated":"2024-08-03T02:10:44.859Z","title":"In Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-242259918","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00118,"kevAdded":null},{"id":"CVE-2022-20439","published":"2022-10-11T00:00:00.000Z","updated":"2024-08-03T02:10:44.685Z","title":"In Messaging, There has unauthorized provider, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-242266172","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00121,"kevAdded":null},{"id":"CVE-2022-20438","published":"2022-10-11T00:00:00.000Z","updated":"2024-08-03T02:10:44.803Z","title":"In Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-242259920","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00121,"kevAdded":null},{"id":"CVE-2022-20437","published":"2022-10-11T00:00:00.000Z","updated":"2024-08-03T02:10:44.839Z","title":"In Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-242258929","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0017,"kevAdded":null},{"id":"CVE-2022-20436","published":"2022-10-11T00:00:00.000Z","updated":"2024-08-03T02:10:44.837Z","title":"There is an unauthorized service in the system service. Since the component does not have permission check, resulting in Local Elevation of privilege.Product:…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00168,"kevAdded":null},{"id":"CVE-2022-20435","published":"2022-10-11T00:00:00.000Z","updated":"2024-08-03T02:10:44.802Z","title":"There is a Unauthorized service in the system service, may cause the system reboot. Since the component does not have permission check and permission…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00168,"kevAdded":null},{"id":"CVE-2022-20434","published":"2022-10-11T00:00:00.000Z","updated":"2024-08-03T02:10:44.632Z","title":"There is an missing authorization issue in the system service. Since the component does not have permission check , resulting in Local Elevation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00168,"kevAdded":null},{"id":"CVE-2022-20433","published":"2022-10-11T00:00:00.000Z","updated":"2024-08-03T02:10:44.861Z","title":"There is an missing authorization issue in the system service. Since the component does not have permission check , resulting in Local Elevation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00168,"kevAdded":null},{"id":"CVE-2022-20432","published":"2022-10-11T00:00:00.000Z","updated":"2024-08-03T02:10:44.688Z","title":"There is an missing authorization issue in the system service. Since the component does not have permission check and permission protection,, resulting in…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00168,"kevAdded":null},{"id":"CVE-2022-20431","published":"2022-10-11T00:00:00.000Z","updated":"2024-08-03T02:10:44.858Z","title":"There is an missing authorization issue in the system service. Since the component does not have permission check , resulting in Local Elevation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2022-20430","published":"2022-10-11T00:00:00.000Z","updated":"2024-08-03T02:10:44.804Z","title":"There is an missing authorization issue in the system service. Since the component does not have permission check , resulting in Local Elevation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2022-20429","published":"2022-10-11T00:00:00.000Z","updated":"2024-08-03T02:10:44.692Z","title":"In CarSettings of app packages, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege in Bluetooth…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00176,"kevAdded":null},{"id":"CVE-2022-20425","published":"2022-10-11T00:00:00.000Z","updated":"2024-08-03T02:10:44.871Z","title":"In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent degradation of performance due to resource exhaustion. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00142,"kevAdded":null},{"id":"CVE-2022-20423","published":"2022-10-11T00:00:00.000Z","updated":"2024-08-03T02:10:44.619Z","title":"In rndis_set_response of rndis.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a…","severity":"MEDIUM","score":4.6,"vendor":null,"product":"Android","kev":false,"epss":0.00266,"kevAdded":null},{"id":"CVE-2022-20422","published":"2022-10-11T00:00:00.000Z","updated":"2026-10-14T15:02:24.077Z","title":"In emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to a race condition. This could lead to local escalation of…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00194,"kevAdded":null},{"id":"CVE-2022-20421","published":"2022-10-11T00:00:00.000Z","updated":"2026-10-14T14:53:09.981Z","title":"In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00625,"kevAdded":null},{"id":"CVE-2022-20420","published":"2022-10-11T00:00:00.000Z","updated":"2024-08-03T02:10:44.942Z","title":"In getBackgroundRestrictionExemptionReason of AppRestrictionController.java, there is a possible way to bypass device policy restrictions due to a logic error…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2022-20419","published":"2022-10-11T00:00:00.000Z","updated":"2024-08-03T02:10:44.798Z","title":"In setOptions of ActivityRecord.java, there is a possible load any arbitrary Java code into launcher process due to a logic error in the code. This could lead…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2022-20418","published":"2022-10-11T00:00:00.000Z","updated":"2024-08-03T02:10:44.684Z","title":"In pickStartSeq of AAVCAssembler.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00571,"kevAdded":null},{"id":"CVE-2022-20417","published":"2022-10-11T00:00:00.000Z","updated":"2024-08-03T02:10:44.774Z","title":"In audioTransportsToHal of HidlUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2022-20416","published":"2022-10-11T00:00:00.000Z","updated":"2024-08-03T02:10:44.838Z","title":"In audioTransportsToHal of HidlUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00151,"kevAdded":null},{"id":"CVE-2022-20415","published":"2022-10-11T00:00:00.000Z","updated":"2024-08-03T02:10:44.586Z","title":"In handleFullScreenIntent of StatusBarNotificationActivityStarter.java, there is a possible bypass of the restriction of starting activity from background due…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2022-20413","published":"2022-10-11T00:00:00.000Z","updated":"2024-08-03T02:10:44.559Z","title":"In start of Threads.cpp, there is a possible way to record audio during a phone call due to a logic error in the code. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00285,"kevAdded":null},{"id":"CVE-2022-20412","published":"2022-10-11T00:00:00.000Z","updated":"2024-08-03T02:10:44.862Z","title":"In fdt_next_tag of fdt.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.0015,"kevAdded":null},{"id":"CVE-2022-20410","published":"2022-10-11T00:00:00.000Z","updated":"2024-08-03T02:10:44.524Z","title":"In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to an integer overflow. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00802,"kevAdded":null},{"id":"CVE-2022-20409","published":"2022-10-11T00:00:00.000Z","updated":"2024-08-03T02:10:44.676Z","title":"In io_identity_cow of io_uring.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00645,"kevAdded":null},{"id":"CVE-2022-20394","published":"2022-10-11T00:00:00.000Z","updated":"2024-08-03T02:10:44.651Z","title":"In getInputMethodWindowVisibleHeight of InputMethodManagerService.java, there is a possible way to determine when another app is showing an IME due to a…","severity":"MEDIUM","score":5,"vendor":null,"product":"Android","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2022-20351","published":"2022-10-11T00:00:00.000Z","updated":"2024-08-03T02:10:44.472Z","title":"In queryInternal of CallLogProvider.java, there is a possible access to voicemail information due to SQL injection. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0013,"kevAdded":null},{"id":"CVE-2021-0951","published":"2022-10-11T00:00:00.000Z","updated":"2024-08-03T15:55:18.079Z","title":"In DevmemIntHeapAcquire of TBD, there is a possible arbitrary code execution due to an integer overflow. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2021-0696","published":"2022-10-11T00:00:00.000Z","updated":"2024-08-03T15:47:28.510Z","title":"In dllist_remove_node of TBD, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00079,"kevAdded":null},{"id":"CVE-2022-20364","published":"2022-09-14T00:00:00.000Z","updated":"2024-08-03T02:10:44.656Z","title":"In sysmmu_unmap of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00112,"kevAdded":null},{"id":"CVE-2022-20231","published":"2022-09-14T00:00:00.000Z","updated":"2024-08-03T02:02:31.033Z","title":"In smc_intc_request_fiq of arm_gic.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00112,"kevAdded":null},{"id":"CVE-2022-20399","published":"2022-09-13T19:15:06.000Z","updated":"2024-08-03T02:10:44.632Z","title":"In the SEPolicy configuration of system apps, there is a possible access to the 'ip' utility due to an insecure default value. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2022-20398","published":"2022-09-13T19:15:03.000Z","updated":"2024-08-03T02:10:44.695Z","title":"In addOrUpdateNetwork of WifiServiceImpl.java, there is a possible way for a guest user to configure Wi-Fi due to a permissions bypass. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2022-20396","published":"2022-09-13T19:15:00.000Z","updated":"2024-08-03T02:10:44.672Z","title":"In SettingsActivity.java, there is a possible way to make a device discoverable over Bluetooth, without permission or user interaction, due to a permissions…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00081,"kevAdded":null},{"id":"CVE-2022-20395","published":"2022-09-13T19:14:57.000Z","updated":"2024-08-03T02:10:44.733Z","title":"In checkAccess of MediaProvider.java, there is a possible file deletion due to a path traversal error. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2022-20393","published":"2022-09-13T19:14:54.000Z","updated":"2024-08-03T02:10:44.596Z","title":"In extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2022-20392","published":"2022-09-13T19:14:48.000Z","updated":"2025-06-05T18:17:24.728Z","title":"In declareDuplicatePermission of ParsedPermissionUtils.java, there is a possible way to obtain a dangerous permission without user consent due to improper…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2022-20391","published":"2022-09-13T19:14:44.000Z","updated":"2024-08-03T02:10:44.667Z","title":"Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257000","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00497,"kevAdded":null},{"id":"CVE-2022-20390","published":"2022-09-13T19:14:41.000Z","updated":"2024-08-03T02:10:44.623Z","title":"Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257002","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00497,"kevAdded":null},{"id":"CVE-2022-20389","published":"2022-09-13T19:14:39.000Z","updated":"2025-06-05T18:16:31.451Z","title":"Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257004","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00497,"kevAdded":null},{"id":"CVE-2022-20388","published":"2022-09-13T19:14:34.000Z","updated":"2025-06-05T18:16:08.295Z","title":"Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227323","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00497,"kevAdded":null},{"id":"CVE-2022-20387","published":"2022-09-13T19:14:31.000Z","updated":"2024-08-03T02:10:44.522Z","title":"Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227324","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00497,"kevAdded":null},{"id":"CVE-2022-20386","published":"2022-09-13T19:14:27.000Z","updated":"2024-08-03T02:10:44.668Z","title":"Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227328","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00497,"kevAdded":null},{"id":"CVE-2022-20385","published":"2022-09-13T19:14:22.000Z","updated":"2024-08-03T02:10:44.535Z","title":"a function called 'nla_parse', do not check the len of para, it will check nla_type (which can be controlled by userspace) with 'maxtype' (in this case, it is…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00426,"kevAdded":null},{"id":"CVE-2021-0943","published":"2022-09-13T19:14:19.000Z","updated":"2024-08-03T15:55:18.169Z","title":"In MMU_MapPages of TBD, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2021-0942","published":"2022-09-13T19:13:39.000Z","updated":"2024-08-03T15:55:17.580Z","title":"The path in this case is a little bit convoluted. The end result is that via an ioctl an untrusted app can control the ui32PageIndex offset in the…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00372,"kevAdded":null},{"id":"CVE-2021-0871","published":"2022-09-13T19:13:36.000Z","updated":"2024-08-03T15:47:28.436Z","title":"In PVRSRVBridgePMRPDumpSymbolicAddr of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2021-0697","published":"2022-09-13T19:13:28.000Z","updated":"2024-08-03T15:47:28.340Z","title":"In PVRSRVRGXSubmitTransferKM of rgxtransfer.c, there is a possible user after free due to a race condition. This could lead to local escalation of privilege…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00077,"kevAdded":null},{"id":"CVE-2022-20122","published":"2022-08-24T13:43:54.000Z","updated":"2024-08-03T02:02:30.575Z","title":"The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue using the page in GPU…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2021-39815","published":"2022-08-24T13:42:56.000Z","updated":"2024-08-04T02:20:33.005Z","title":"The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue using the page in GPU…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2021-0947","published":"2022-08-24T13:40:05.000Z","updated":"2024-08-03T15:55:18.158Z","title":"The method PVRSRVBridgeTLDiscoverStreams allocates puiStreamsInt on the heap, fills the contents of the buffer via TLServerDiscoverStreamsKM, and then copies…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00322,"kevAdded":null},{"id":"CVE-2021-0946","published":"2022-08-24T13:38:55.000Z","updated":"2024-08-03T15:55:17.702Z","title":"The method PVRSRVBridgePMRPDumpSymbolicAddr allocates puiMemspaceNameInt on the heap, fills the contents of the buffer via PMR_PDumpSymbolicAddr, and then…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00322,"kevAdded":null},{"id":"CVE-2021-0891","published":"2022-08-24T13:37:32.000Z","updated":"2024-08-03T15:47:28.266Z","title":"An unprivileged app can trigger PowerVR driver to return an uninitialized heap memory causing information disclosure.Product: AndroidVersions: Android…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.0031,"kevAdded":null},{"id":"CVE-2021-0887","published":"2022-08-24T13:36:03.000Z","updated":"2024-08-03T15:47:28.508Z","title":"In PVRSRVBridgeHeapCfgHeapConfigName, there is a possible leak of kernel heap content due to uninitialized data. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2021-0698","published":"2022-08-24T13:35:14.000Z","updated":"2024-08-03T15:47:28.311Z","title":"In PVRSRVBridgeHeapCfgHeapDetails, there is a possible leak of kernel heap content due to uninitialized data. This could lead to local information disclosure…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2022-20362","published":"2022-08-11T15:31:19.000Z","updated":"2024-08-03T02:10:44.492Z","title":"In Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution over Bluetooth with no additional…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00258,"kevAdded":null},{"id":"CVE-2022-20342","published":"2022-08-11T15:31:05.000Z","updated":"2024-08-03T02:10:44.552Z","title":"In WiFi, there is a possible disclosure of WiFi password to the end user due to an insecure default value. This could lead to local information disclosure with…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2022-20341","published":"2022-08-11T15:30:52.000Z","updated":"2024-08-03T02:10:44.766Z","title":"In ConnectivityService, there is a possible bypass of network permissions due to a missing permission check. This could lead to local information disclosure of…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2022-20340","published":"2022-08-11T15:30:40.000Z","updated":"2024-08-03T02:10:44.550Z","title":"In SELinux policy, there is a possible way of inferring which websites are being opened in the browser due to a missing permission check. This could lead to…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00099,"kevAdded":null},{"id":"CVE-2022-20339","published":"2022-08-11T15:30:26.000Z","updated":"2024-08-03T02:10:44.651Z","title":"In Android, there is a possible access of network neighbor table information due to an insecure SEpolicy configuration. This could lead to local information…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2022-20336","published":"2022-08-11T15:29:57.000Z","updated":"2024-08-03T02:10:44.505Z","title":"In Settings, there is a possible installed application disclosure due to a missing permission check. This could lead to local information disclosure of…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2022-20335","published":"2022-08-11T15:29:43.000Z","updated":"2024-08-03T02:10:44.560Z","title":"In Wifi Slice, there is a possible way to adjust Wi-Fi settings even when the permission has been disabled due to a missing permission check. This could lead…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2022-20334","published":"2022-08-11T15:29:28.000Z","updated":"2024-08-03T02:10:44.546Z","title":"In Bluetooth, there are possible process crashes due to dereferencing a null pointer. This could lead to remote denial of service with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00233,"kevAdded":null},{"id":"CVE-2022-20333","published":"2022-08-11T15:29:14.000Z","updated":"2024-08-03T02:10:44.408Z","title":"In Bluetooth, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00233,"kevAdded":null},{"id":"CVE-2022-20332","published":"2022-08-11T15:29:01.000Z","updated":"2024-08-03T02:10:44.518Z","title":"In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure.…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2022-20331","published":"2022-08-11T15:28:47.000Z","updated":"2024-08-03T02:10:44.455Z","title":"In the Framework, there is a possible way to enable a work profile without user consent due to a tapjacking/overlay attack. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2022-20330","published":"2022-08-11T15:28:33.000Z","updated":"2024-08-03T02:10:44.653Z","title":"In Bluetooth, there is a possible way to connect or disconnect bluetooth devices without user awareness due to a missing permission check. This could lead to…","severity":"LOW","score":3.5,"vendor":null,"product":"Android","kev":false,"epss":0.00131,"kevAdded":null},{"id":"CVE-2022-20329","published":"2022-08-11T15:28:22.000Z","updated":"2024-08-03T02:10:44.616Z","title":"In Wifi, there is a possible way to enable Wifi without permissions due to a missing permission check. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00099,"kevAdded":null},{"id":"CVE-2022-20328","published":"2022-08-11T15:28:07.000Z","updated":"2024-08-03T02:10:44.263Z","title":"In PackageManager, there is a possible way to determine whether an app is installed due to a missing permission check. This could lead to local information…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2022-20327","published":"2022-08-11T15:27:52.000Z","updated":"2024-08-03T02:10:44.242Z","title":"In Wi-Fi, there is a possible way to retrieve the WiFi SSID without location permissions due to a missing permission check. This could lead to local…","severity":"LOW","score":2.8,"vendor":null,"product":"Android","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2022-20326","published":"2022-08-11T15:27:37.000Z","updated":"2024-08-03T02:10:44.229Z","title":"In Telephony, there is a possible disclosure of SIM identifiers due to a missing permission check. This could lead to local information disclosure with User…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2022-20325","published":"2022-08-11T15:27:24.000Z","updated":"2024-08-03T02:10:44.827Z","title":"In Media, there is a possible code execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2022-20324","published":"2022-08-11T15:27:09.000Z","updated":"2024-08-03T02:10:43.957Z","title":"In Framework, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2022-20323","published":"2022-08-11T15:26:54.000Z","updated":"2024-08-03T02:10:44.691Z","title":"In PackageManager, there is a possible package installation disclosure due to a missing permission check. This could lead to local information disclosure with…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2022-20322","published":"2022-08-11T15:26:40.000Z","updated":"2024-08-03T02:10:44.617Z","title":"In PackageManager, there is a possible installed package disclosure due to a missing permission check. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2022-20321","published":"2022-08-11T15:26:28.000Z","updated":"2024-08-03T02:10:43.999Z","title":"In Settings, there is a possible way for an application without permissions to read content of WiFi QR codes due to a missing permission check. This could lead…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2022-20320","published":"2022-08-11T15:26:16.000Z","updated":"2024-08-03T02:10:44.190Z","title":"In ActivityManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure.…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2022-20319","published":"2022-08-11T15:26:01.000Z","updated":"2024-08-03T02:10:44.210Z","title":"In DreamServices, there is a possible way to launch arbitrary protected activities due to a confused deputy. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2022-20318","published":"2022-08-11T15:25:50.000Z","updated":"2024-08-03T02:10:44.336Z","title":"In PackageInstaller, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure.…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2022-20317","published":"2022-08-11T15:25:36.000Z","updated":"2024-08-03T02:10:44.585Z","title":"In SystemUI, there is a possible way to unexpectedly enable the external speaker due to a logic error in the code. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00121,"kevAdded":null},{"id":"CVE-2022-20316","published":"2022-08-11T15:25:25.000Z","updated":"2024-08-03T02:10:44.620Z","title":"In ContentResolver, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure.…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2022-20315","published":"2022-08-11T15:25:10.000Z","updated":"2024-08-03T02:10:44.834Z","title":"In ActivityManager, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2022-20314","published":"2022-08-11T15:24:53.000Z","updated":"2024-08-03T02:10:44.212Z","title":"In KeyChain, there is a possible spoof keychain chooser activity request due to improper input validation. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2022-20313","published":"2022-08-11T15:24:39.000Z","updated":"2024-08-03T02:10:44.741Z","title":"In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.8,"vendor":null,"product":"Android","kev":false,"epss":0.00177,"kevAdded":null},{"id":"CVE-2022-20312","published":"2022-08-11T15:24:24.000Z","updated":"2024-08-03T02:10:44.234Z","title":"In WifiP2pManager, there is a possible toobtain WiFi P2P MAC address without user consent due to missing permission check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2022-20311","published":"2022-08-11T15:24:10.000Z","updated":"2024-08-03T02:10:44.075Z","title":"In Telecomm, there is a possible disclosure of registered self managed phone accounts due to a missing permission check. This could lead to local information…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2022-20310","published":"2022-08-11T15:23:54.000Z","updated":"2024-08-03T02:10:44.021Z","title":"In Telecomm, there is a possible disclosure of registered self managed phone accounts due to a missing permission check. This could lead to local information…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2022-20309","published":"2022-08-11T15:23:39.000Z","updated":"2024-08-03T02:10:44.393Z","title":"In PackageInstaller, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure.…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2022-20308","published":"2022-08-11T15:23:27.000Z","updated":"2024-08-03T02:10:44.365Z","title":"In hostapd, there is a possible insecure configuration due to an insecure default value. This could lead to remote denial of service of the wifi hotspot with…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00619,"kevAdded":null},{"id":"CVE-2022-20307","published":"2022-08-11T15:23:12.000Z","updated":"2024-08-03T02:10:44.124Z","title":"In AlarmManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2022-20306","published":"2022-08-11T15:22:55.000Z","updated":"2024-08-03T02:10:44.072Z","title":"In Camera Provider HAL, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2022-20305","published":"2022-08-11T15:22:39.000Z","updated":"2024-08-03T02:10:44.241Z","title":"In ContentService, there is a possible disclosure of available account types due to a missing permission check. This could lead to local information disclosure…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2022-20304","published":"2022-08-11T15:22:26.000Z","updated":"2024-08-03T02:10:44.058Z","title":"In Content, there is a possible way to determinate the user's account due to side channel information disclosure. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2022-20303","published":"2022-08-11T15:22:11.000Z","updated":"2024-08-03T02:10:44.418Z","title":"In ContentService, there is a possible way to determine if an account is on the device without GET_ACCOUNTS permission due to a missing permission check. This…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2022-20302","published":"2022-08-11T15:21:58.000Z","updated":"2024-08-03T02:10:44.346Z","title":"In Settings, there is a possible way to bypass factory reset protections due to a sandbox escape. This could lead to local escalation of privilege if the…","severity":"HIGH","score":7.6,"vendor":null,"product":"Android","kev":false,"epss":0.00164,"kevAdded":null},{"id":"CVE-2022-20301","published":"2022-08-11T15:21:43.000Z","updated":"2024-08-03T02:10:44.209Z","title":"In Content, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2022-20300","published":"2022-08-11T15:21:27.000Z","updated":"2024-08-03T02:10:44.007Z","title":"In Content, there is a possible way to check if the given account exists on the device due to a missing permission check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2022-20299","published":"2022-08-11T15:21:12.000Z","updated":"2024-08-03T02:10:44.392Z","title":"In ContentService, there is a possible way to check if the given account exists on the device due to a missing permission check. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2022-20298","published":"2022-08-11T15:20:57.000Z","updated":"2024-08-03T02:10:44.456Z","title":"In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2022-20297","published":"2022-08-11T15:20:42.000Z","updated":"2024-08-03T02:10:44.273Z","title":"In Settings, there is a possible way to bypass factory reset protections due to a logic error in the code. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2022-20296","published":"2022-08-11T15:20:30.000Z","updated":"2024-08-03T02:10:44.081Z","title":"In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2022-20295","published":"2022-08-11T15:20:15.000Z","updated":"2024-08-03T02:10:44.233Z","title":"In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2022-20294","published":"2022-08-11T15:19:58.000Z","updated":"2024-08-03T02:10:44.607Z","title":"In Content, there is a possible way to learn about an account present on the device due to a missing permission check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2022-20293","published":"2022-08-11T15:19:43.000Z","updated":"2024-08-03T02:10:43.983Z","title":"In LauncherApps, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2022-20292","published":"2022-08-11T15:19:28.000Z","updated":"2024-08-03T02:10:43.880Z","title":"In Settings, there is a possible way to bypass factory reset protections due to a logic error in the code. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2022-20291","published":"2022-08-11T15:19:13.000Z","updated":"2024-08-03T02:10:44.493Z","title":"In AppOpsService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2022-20290","published":"2022-08-11T15:18:58.000Z","updated":"2024-08-03T02:10:43.516Z","title":"In Midi, there is a possible way to learn about private midi devices due to a permissions bypass. This could lead to local escalation of privilege with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2022-20289","published":"2022-08-11T15:18:43.000Z","updated":"2024-08-03T02:10:44.230Z","title":"In PackageInstaller, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure.…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2022-20288","published":"2022-08-11T15:18:29.000Z","updated":"2024-08-03T02:10:44.566Z","title":"In AppSearchManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2022-20287","published":"2022-08-11T15:18:14.000Z","updated":"2024-08-03T02:10:44.685Z","title":"In AppSearchManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2022-20286","published":"2022-08-11T15:17:59.000Z","updated":"2024-08-03T02:10:44.176Z","title":"In Connectivity, there is a possible bypass the restriction of starting activity from background due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2022-20285","published":"2022-08-11T15:17:44.000Z","updated":"2024-08-03T02:10:44.657Z","title":"In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure.…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2022-20284","published":"2022-08-11T15:17:29.000Z","updated":"2024-08-03T02:10:44.011Z","title":"In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of phone accounts…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2022-20283","published":"2022-08-11T15:17:14.000Z","updated":"2024-08-03T02:10:44.157Z","title":"In Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution over Bluetooth with no additional…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00258,"kevAdded":null},{"id":"CVE-2022-20282","published":"2022-08-11T15:16:58.000Z","updated":"2024-08-03T02:10:43.532Z","title":"In AppWidget, there is a possible way to start an activity from the background due to a missing permission check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2022-20281","published":"2022-08-11T15:16:43.000Z","updated":"2024-08-03T02:10:44.228Z","title":"In Core, there is a possible way to start an activity from the background due to a missing permission check. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2022-20280","published":"2022-08-11T15:16:27.000Z","updated":"2024-08-03T02:10:44.099Z","title":"In MMSProvider, there is a possible read of protected data due to improper input validationSQL injection. This could lead to local information disclosure of…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2022-20279","published":"2022-08-11T15:16:12.000Z","updated":"2024-08-03T02:10:43.505Z","title":"In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2022-20278","published":"2022-08-11T15:15:55.000Z","updated":"2024-08-03T02:10:44.589Z","title":"In Accounts, there is a possible way to write sensitive information to the system log due to insufficient log filtering. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2022-20277","published":"2022-08-11T15:15:40.000Z","updated":"2024-08-03T02:10:44.171Z","title":"In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2022-20276","published":"2022-08-11T15:15:25.000Z","updated":"2024-08-03T02:10:44.094Z","title":"In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2022-20275","published":"2022-08-11T15:15:09.000Z","updated":"2024-08-03T02:10:44.102Z","title":"In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2022-20274","published":"2022-08-11T15:14:53.000Z","updated":"2024-08-03T02:10:43.533Z","title":"In Keyguard, there is a missing permission check. This could lead to local escalation of privilege and prevention of screen timeout with User execution…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2022-20273","published":"2022-08-11T15:14:38.000Z","updated":"2024-08-03T02:10:43.518Z","title":"In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00241,"kevAdded":null},{"id":"CVE-2022-20272","published":"2022-08-11T15:14:26.000Z","updated":"2024-08-03T02:10:43.516Z","title":"In PermissionController, there is a possible misunderstanding about the default SMS application's permission set due to misleading text. This could lead to…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2022-20271","published":"2022-08-11T15:14:11.000Z","updated":"2024-08-03T02:10:44.116Z","title":"In PermissionController, there is a possible way to grant some permissions without user consent due to misleading or insufficient UI. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2022-20270","published":"2022-08-11T15:13:58.000Z","updated":"2024-08-03T02:10:43.517Z","title":"In Content, there is a possible way to learn gmail account name on the device due to a permissions bypass. This could lead to local information disclosure with…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2022-20269","published":"2022-08-11T15:13:42.000Z","updated":"2024-08-03T02:10:43.508Z","title":"In Bluetooth, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.8,"vendor":null,"product":"Android","kev":false,"epss":0.00177,"kevAdded":null},{"id":"CVE-2022-20268","published":"2022-08-11T15:13:30.000Z","updated":"2024-08-03T02:02:31.121Z","title":"In RestrictionsManager, there is a possible way to send a broadcast that should be restricted to system apps due to a permissions bypass. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00106,"kevAdded":null},{"id":"CVE-2022-20267","published":"2022-08-11T15:13:15.000Z","updated":"2024-08-03T02:02:31.055Z","title":"In bluetooth, there is a possible way to enable or disable bluetooth connection without user consent due to a missing permission check. This could lead to…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2022-20266","published":"2022-08-11T15:12:59.000Z","updated":"2024-08-03T02:02:31.092Z","title":"In Companion, there is a possible way to keep a service running with elevated importance without showing foreground service notification due to improper input…","severity":"MEDIUM","score":5,"vendor":null,"product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2022-20265","published":"2022-08-11T15:12:44.000Z","updated":"2024-08-03T02:02:31.054Z","title":"In Settings, there is a possible way to bypass factory reset permissions due to a permissions bypass. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":4.6,"vendor":null,"product":"Android","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2022-20263","published":"2022-08-11T15:12:28.000Z","updated":"2024-08-03T02:02:31.074Z","title":"In ActivityManager, there is a way to read process state for other users due to a missing permission check. This could lead to local information disclosure of…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2022-20262","published":"2022-08-11T15:12:13.000Z","updated":"2024-08-03T02:02:31.032Z","title":"In ActivityManager, there is a possible way to check another process's capabilities due to a missing permission check. This could lead to local information…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2022-20261","published":"2022-08-11T15:12:00.000Z","updated":"2024-08-03T02:02:31.034Z","title":"In LocationManager, there is a possible way to get location information due to a missing permission check. This could lead to local information disclosure with…","severity":"LOW","score":2.3,"vendor":null,"product":"Android","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2022-20260","published":"2022-08-11T15:11:47.000Z","updated":"2024-08-03T02:02:31.042Z","title":"In the Phone app, there is a possible crash loop due to resource exhaustion. This could lead to local persistent denial of service in the Phone app with User…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2022-20259","published":"2022-08-11T15:11:35.000Z","updated":"2024-08-03T02:02:31.026Z","title":"In Telephony, there is a possible leak of ICCID and EID due to a missing permission check. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2022-20258","published":"2022-08-11T15:11:20.000Z","updated":"2024-08-03T02:02:31.067Z","title":"In Bluetooth, there is a possible way to bypass compiler exploit mitigations due to a configuration error. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00106,"kevAdded":null},{"id":"CVE-2022-20257","published":"2022-08-11T15:11:04.000Z","updated":"2024-08-03T02:02:31.074Z","title":"In Bluetooth, there is a possible way to pair a display only device without PIN confirmation due to a logic error in the code. This could lead to local…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2022-20256","published":"2022-08-11T15:10:51.000Z","updated":"2024-08-03T02:02:31.059Z","title":"In the Audio HAL, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.4,"vendor":null,"product":"Android","kev":false,"epss":0.00076,"kevAdded":null},{"id":"CVE-2022-20255","published":"2022-08-11T15:10:35.000Z","updated":"2024-08-03T02:02:31.060Z","title":"In SettingsProvider, there is a possible way to read or change the default ringtone due to a missing permission check. This could lead to local escalation of…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2022-20254","published":"2022-08-11T15:10:19.000Z","updated":"2024-08-03T02:02:31.047Z","title":"In Wi-Fi, there is a permissions bypass. This could lead to local escalation of privilege from the guest user with no additional execution privileges needed.…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00188,"kevAdded":null},{"id":"CVE-2022-20253","published":"2022-08-11T15:10:03.000Z","updated":"2024-08-03T02:02:31.053Z","title":"In Bluetooth, there is a possible cleanup failure due to an uncaught exception. This could lead to remote denial of service in Bluetooth with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00233,"kevAdded":null},{"id":"CVE-2022-20252","published":"2022-08-11T15:09:46.000Z","updated":"2024-08-03T02:02:31.081Z","title":"In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure.…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2022-20251","published":"2022-08-11T15:09:30.000Z","updated":"2024-08-03T02:02:31.056Z","title":"In LocaleManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2022-20250","published":"2022-08-11T15:09:15.000Z","updated":"2024-08-03T02:02:31.127Z","title":"In Messaging, there is a possible way to attach files to a message without proper access checks due to improper input validation. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2022-20249","published":"2022-08-11T15:09:01.000Z","updated":"2024-08-03T02:02:31.068Z","title":"In LocaleManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2022-20248","published":"2022-08-11T15:08:44.000Z","updated":"2024-08-03T02:02:31.094Z","title":"In Settings, there is a possible way to connect to an open network bypassing DISALLOW_CONFIG_WIFI restriction due to a logic error in the code. This could lead…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00106,"kevAdded":null},{"id":"CVE-2022-20247","published":"2022-08-11T15:08:29.000Z","updated":"2024-08-03T02:02:31.053Z","title":"In Media, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00613,"kevAdded":null},{"id":"CVE-2022-20246","published":"2022-08-11T15:08:14.000Z","updated":"2024-08-03T02:02:31.045Z","title":"In WindowManager, there is a possible bypass of the restrictions for starting activities from the background due to an incorrect UID/permission check. This…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2022-20245","published":"2022-08-11T15:07:59.000Z","updated":"2024-08-03T02:02:31.044Z","title":"In WindowManager, there is a possible method to create a recording of the lock screen due to an insecure default value. This could lead to local information…","severity":"LOW","score":2.4,"vendor":null,"product":"Android","kev":false,"epss":0.00135,"kevAdded":null},{"id":"CVE-2022-20244","published":"2022-08-11T15:07:47.000Z","updated":"2024-08-03T02:02:31.034Z","title":"In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if more than 100…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00157,"kevAdded":null},{"id":"CVE-2022-20243","published":"2022-08-11T15:07:32.000Z","updated":"2024-08-03T02:02:31.052Z","title":"In Core Utilities, there is a possible log information disclosure. This could lead to local information disclosure of sensitive browsing data with System…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00066,"kevAdded":null},{"id":"CVE-2022-20242","published":"2022-08-11T15:07:16.000Z","updated":"2024-08-03T02:02:31.006Z","title":"In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2022-20241","published":"2022-08-11T15:07:00.000Z","updated":"2024-08-03T02:02:31.002Z","title":"In Messaging, there is a possible way to attach a private file to an SMS message due to improper input validation. This could lead to local information…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2021-0975","published":"2022-08-11T15:06:48.000Z","updated":"2024-08-03T15:55:18.163Z","title":"In USB Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2021-0735","published":"2022-08-11T15:06:18.000Z","updated":"2024-08-03T15:47:28.375Z","title":"In PackageManager, there is a possible way to get information about installed packages ignoring limitations introduced in Android 11 due to a missing…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0009,"kevAdded":null},{"id":"CVE-2021-0734","published":"2022-08-11T15:06:04.000Z","updated":"2024-08-03T15:47:28.293Z","title":"In Settings, there is a possible way to determine whether an app is installed without query permissions, due to side channel information disclosure. This could…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2022-20408","published":"2022-08-11T15:05:37.000Z","updated":"2024-08-03T02:10:44.860Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-204782372References: N/A","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00331,"kevAdded":null},{"id":"CVE-2022-20407","published":"2022-08-11T15:05:22.000Z","updated":"2024-08-03T02:10:44.667Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-210916981References: N/A","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00346,"kevAdded":null},{"id":"CVE-2022-20406","published":"2022-08-11T15:05:07.000Z","updated":"2024-08-03T02:10:44.637Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-184676385References: N/A","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00331,"kevAdded":null},{"id":"CVE-2022-20405","published":"2022-08-11T15:04:51.000Z","updated":"2024-08-03T02:10:44.745Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-216363416References: N/A","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00373,"kevAdded":null},{"id":"CVE-2022-20404","published":"2022-08-11T15:04:37.000Z","updated":"2024-08-03T02:10:44.822Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-205714161References: N/A","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00331,"kevAdded":null},{"id":"CVE-2022-20403","published":"2022-08-11T15:04:22.000Z","updated":"2024-08-03T02:10:44.699Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-207975764References: N/A","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00404,"kevAdded":null},{"id":"CVE-2022-20402","published":"2022-08-11T15:04:07.000Z","updated":"2024-08-03T02:10:44.602Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-218701042References: N/A","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00404,"kevAdded":null},{"id":"CVE-2022-20401","published":"2022-08-11T15:03:52.000Z","updated":"2024-08-03T02:10:44.873Z","title":"In SAEMM_RetrievEPLMNList of SAEMM_ContextManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00592,"kevAdded":null},{"id":"CVE-2022-20400","published":"2022-08-11T15:03:37.000Z","updated":"2024-08-03T02:10:44.746Z","title":"In cd_CodeMsg of cd_codec.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00661,"kevAdded":null},{"id":"CVE-2022-20384","published":"2022-08-11T15:03:24.000Z","updated":"2024-08-03T02:10:44.591Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-211727306References: N/A","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00373,"kevAdded":null},{"id":"CVE-2022-20383","published":"2022-08-11T15:03:08.000Z","updated":"2024-08-03T02:10:44.566Z","title":"In AllocateInternalBuffers of g3aa_buffer_allocator.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2022-20382","published":"2022-08-11T15:02:54.000Z","updated":"2024-08-03T02:10:44.688Z","title":"In (TBD) of (TBD), there is a possible out of bounds write due to kernel stack overflow. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2022-20381","published":"2022-08-11T15:02:42.000Z","updated":"2024-08-03T02:10:44.540Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-188935887References: N/A","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00373,"kevAdded":null},{"id":"CVE-2022-20380","published":"2022-08-11T15:02:28.000Z","updated":"2024-08-03T02:10:44.677Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-212625740References: N/A","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00331,"kevAdded":null},{"id":"CVE-2022-20379","published":"2022-08-11T15:02:13.000Z","updated":"2024-08-03T02:10:44.650Z","title":"In lwis_buffer_alloc of lwis_buffer.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2022-20378","published":"2022-08-11T15:01:57.000Z","updated":"2024-08-03T02:10:44.803Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-234657153References: N/A","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00391,"kevAdded":null},{"id":"CVE-2022-20377","published":"2022-08-11T15:01:43.000Z","updated":"2024-08-03T02:10:44.549Z","title":"In TBD of keymaster_ipc.cpp, there is a possible to force gatekeeper, fingerprint, and faceauth to use a known HMAC key. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2022-20376","published":"2022-08-11T15:01:29.000Z","updated":"2024-08-03T02:10:44.674Z","title":"In trusty_log_seq_start of trusty-log.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2022-20375","published":"2022-08-11T15:01:15.000Z","updated":"2024-08-03T02:10:44.711Z","title":"In LteRrcNrProAsnDecode of LteRrcNr_Codec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00619,"kevAdded":null},{"id":"CVE-2022-20373","published":"2022-08-11T15:00:50.000Z","updated":"2024-08-03T02:10:44.684Z","title":"In st21nfc_loc_set_polaritymode of fc/st21nfc.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.4,"vendor":null,"product":"Android","kev":false,"epss":0.00076,"kevAdded":null},{"id":"CVE-2022-20372","published":"2022-08-11T15:00:36.000Z","updated":"2026-01-05T18:41:52.470Z","title":"In exynos5_i2c_irq of (TBD), there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00106,"kevAdded":null},{"id":"CVE-2022-20371","published":"2022-08-11T15:00:21.000Z","updated":"2024-08-03T02:10:44.843Z","title":"In dm_bow_dtr and related functions of dm-bow.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.4,"vendor":null,"product":"Android","kev":false,"epss":0.00076,"kevAdded":null},{"id":"CVE-2022-20370","published":"2022-08-11T15:00:10.000Z","updated":"2024-08-03T02:10:44.879Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-215730643References: N/A","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00347,"kevAdded":null},{"id":"CVE-2022-20368","published":"2022-08-11T14:59:35.000Z","updated":"2024-08-03T02:10:44.623Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-224546354References: Upstream kernel","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2022-20367","published":"2022-08-11T14:59:24.000Z","updated":"2024-08-03T02:10:44.683Z","title":"In construct_transaction of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2022-20366","published":"2022-08-11T14:59:11.000Z","updated":"2024-08-03T02:10:44.612Z","title":"In ioctl_dpm_clk_update of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00107,"kevAdded":null},{"id":"CVE-2022-20365","published":"2022-08-11T14:58:59.000Z","updated":"2024-08-03T02:10:44.604Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-229632566References: N/A","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00391,"kevAdded":null},{"id":"CVE-2022-20237","published":"2022-08-11T14:58:45.000Z","updated":"2024-08-03T02:02:31.080Z","title":"In BuildDevIDResponse of miscdatabuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00661,"kevAdded":null},{"id":"CVE-2022-20180","published":"2022-08-11T14:58:31.000Z","updated":"2024-08-03T02:02:30.956Z","title":"In several functions of mali_gralloc_reference.cpp, there is a possible arbitrary code execution due to a missing bounds check. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2022-20158","published":"2022-08-11T14:58:17.000Z","updated":"2025-12-17T22:16:23.207Z","title":"In bdi_put and bdi_unregister of backing-dev.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00123,"kevAdded":null},{"id":"CVE-2022-20369","published":"2022-08-11T00:00:00.000Z","updated":"2024-08-03T02:10:44.612Z","title":"In v4l2_m2m_querybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00166,"kevAdded":null},{"id":"CVE-2022-20338","published":"2022-08-11T00:00:00.000Z","updated":"2026-03-06T19:00:30.180Z","title":"In HierarchicalUri.readFrom of Uri.java, there is a possible way to craft a malformed Uri object due to improper input validation. This could lead to a local…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00223,"kevAdded":null},{"id":"CVE-2022-20361","published":"2022-08-09T20:25:00.000Z","updated":"2025-08-27T18:46:04.782Z","title":"In btif_dm_auth_cmpl_evt of btif_dm.cc, there is a possible vulnerability in Cross-Transport Key Derivation due to Weakness in Bluetooth Standard. This could…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.01211,"kevAdded":null},{"id":"CVE-2022-20360","published":"2022-08-09T20:24:47.000Z","updated":"2025-10-20T17:58:14.031Z","title":"In setChecked of SecureNfcPreferenceController.java, there is a missing permission check. This could lead to local escalation of privilege from the guest user…","severity":"MEDIUM","score":6.2,"vendor":null,"product":"Android","kev":false,"epss":0.002,"kevAdded":null},{"id":"CVE-2022-20358","published":"2022-08-09T20:24:16.000Z","updated":"2025-09-03T19:05:24.540Z","title":"In startSync of AbstractThreadedSyncAdapter.java, there is a possible way to access protected content of content providers due to a missing permission check.…","severity":"HIGH","score":7.1,"vendor":null,"product":"Android","kev":false,"epss":0.00226,"kevAdded":null},{"id":"CVE-2022-20357","published":"2022-08-09T20:23:56.000Z","updated":"2024-08-03T02:10:44.742Z","title":"In writeToParcel of SurfaceControl.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2022-20356","published":"2022-08-09T20:23:45.000Z","updated":"2025-09-08T18:44:23.748Z","title":"In shouldAllowFgsWhileInUsePermissionLocked of ActiveServices.java, there is a possible way to start foreground service from background due to improper input…","severity":"MEDIUM","score":4,"vendor":null,"product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2022-20355","published":"2022-08-09T20:23:30.000Z","updated":"2024-08-03T02:10:44.525Z","title":"In get of PacProxyService.java, there is a possible system service crash due to improper input validation. This could lead to local denial of service with User…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2022-20354","published":"2022-08-09T20:23:16.000Z","updated":"2024-08-03T02:10:44.600Z","title":"In onDefaultNetworkChanged of Vpn.java, there is a possible way to disable VPN due to a logic error in the code. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2022-20353","published":"2022-08-09T20:23:01.000Z","updated":"2024-08-03T02:10:44.648Z","title":"In onSaveRingtone of DefaultRingtonePreference.java, there is a possible inappropriate file read due to improper input validation. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2022-20352","published":"2022-08-09T20:22:46.000Z","updated":"2024-08-03T02:10:44.490Z","title":"In addProviderRequestListener of LocationManagerService.java, there is a possible way to learn which packages request location information due to a missing…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2022-20350","published":"2022-08-09T20:22:32.000Z","updated":"2025-10-20T17:57:27.175Z","title":"In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to trick the victim to grant notification access to the wrong app due to…","severity":"MEDIUM","score":6.2,"vendor":null,"product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2022-20349","published":"2022-08-09T20:22:17.000Z","updated":"2024-08-03T02:10:44.656Z","title":"In WifiScanningPreferenceController and BluetoothScanningPreferenceController, there is a possible admin restriction bypass due to a missing permission check.…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2022-20348","published":"2022-08-09T20:22:04.000Z","updated":"2024-08-03T02:10:44.625Z","title":"In updateState of LocationServicesWifiScanningPreferenceController.java, there is a possible admin restriction bypass due to a missing permission check. This…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2022-20347","published":"2022-08-09T20:21:49.000Z","updated":"2025-10-20T17:56:37.857Z","title":"In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. This could lead to remote escalation of…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.01071,"kevAdded":null},{"id":"CVE-2022-20346","published":"2022-08-09T20:21:24.000Z","updated":"2025-10-20T17:55:17.947Z","title":"In updateAudioTrackInfoFromESDS_MPEG4Audio of MPEG4Extractor.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00519,"kevAdded":null},{"id":"CVE-2022-20345","published":"2022-08-09T20:21:10.000Z","updated":"2025-10-20T17:54:21.857Z","title":"In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.0048,"kevAdded":null},{"id":"CVE-2022-20344","published":"2022-08-09T20:20:54.000Z","updated":"2024-08-03T02:10:44.692Z","title":"In stealReceiveChannel of EventThread.cpp, there is a possible way to interfere with process communication due to a race condition. This could lead to local…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2022-20239","published":"2022-08-09T20:20:38.000Z","updated":"2025-10-20T17:53:05.224Z","title":"remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area), and because the 'vma->vm_page_prot' can also be controlled by…","severity":"MEDIUM","score":4.2,"vendor":null,"product":"Android","kev":false,"epss":0.00299,"kevAdded":null},{"id":"CVE-2021-39696","published":"2022-08-09T20:20:24.000Z","updated":"2024-08-04T02:13:37.703Z","title":"In Task.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00236,"kevAdded":null},{"id":"CVE-2022-20234","published":"2022-07-13T18:27:24.000Z","updated":"2024-08-03T02:02:31.029Z","title":"In Car Settings app, the NotificationAccessConfirmationActivity is exported. In NotificationAccessConfirmationActivity, it gets both 'mComponentName' and…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00363,"kevAdded":null},{"id":"CVE-2022-20212","published":"2022-07-13T18:27:17.000Z","updated":"2024-08-03T02:02:31.037Z","title":"In wifi.RequestToggleWifiActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking/overlay attack. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2022-20238","published":"2022-07-13T18:23:46.000Z","updated":"2024-08-03T02:02:31.007Z","title":"'remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area), and because the 'vma->vm_page_prot' can also be controlled by…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.0056,"kevAdded":null},{"id":"CVE-2022-20236","published":"2022-07-13T18:23:37.000Z","updated":"2024-08-03T02:02:31.096Z","title":"A drm driver have oob problem, could cause the system crash or EOPProduct: AndroidVersions: Android SoCAndroid ID: A-233124709","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00434,"kevAdded":null},{"id":"CVE-2022-20230","published":"2022-07-13T18:23:31.000Z","updated":"2024-08-03T02:02:31.005Z","title":"In choosePrivateKeyAlias of KeyChain.java, there is a possible access to the user's certificate due to improper input validation. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2022-20229","published":"2022-07-13T18:23:25.000Z","updated":"2024-08-03T02:02:31.095Z","title":"In bta_hf_client_handle_cind_list_item of bta_hf_client_at.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.02984,"kevAdded":null},{"id":"CVE-2022-20228","published":"2022-07-13T18:23:20.000Z","updated":"2024-08-03T02:02:31.097Z","title":"In various functions of C2DmaBufAllocator.cpp, there is a possible memory corruption due to a use after free. This could lead to remote information disclosure…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00598,"kevAdded":null},{"id":"CVE-2022-20227","published":"2022-07-13T18:23:13.000Z","updated":"2024-08-03T02:02:31.052Z","title":"In USB driver, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with User execution…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0014,"kevAdded":null},{"id":"CVE-2022-20226","published":"2022-07-13T18:23:07.000Z","updated":"2024-08-03T02:02:31.028Z","title":"In finishDrawingWindow of WindowManagerService.java, there is a possible tapjacking due to improper input validation. This could lead to local escalation of…","severity":"LOW","score":3.9,"vendor":null,"product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2022-20225","published":"2022-07-13T18:23:02.000Z","updated":"2024-08-03T02:02:31.002Z","title":"In getSubscriptionProperty of SubscriptionController.java, there is a possible read of a sensitive identifier due to a missing permission check. This could…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2022-20224","published":"2022-07-13T18:22:56.000Z","updated":"2024-08-03T02:02:31.055Z","title":"In AT_SKIP_REST of bta_hf_client_at.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.01329,"kevAdded":null},{"id":"CVE-2022-20223","published":"2022-07-13T18:22:51.000Z","updated":"2024-08-03T02:02:31.031Z","title":"In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible way to start a phone call without permissions due to a confused deputy.…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00176,"kevAdded":null},{"id":"CVE-2022-20222","published":"2022-07-13T18:22:45.000Z","updated":"2024-08-03T02:02:31.000Z","title":"In read_attr_value of gatt_db.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.01156,"kevAdded":null},{"id":"CVE-2022-20221","published":"2022-07-13T18:22:38.000Z","updated":"2024-08-03T02:02:31.078Z","title":"In avrc_ctrl_pars_vendor_cmd of avrc_pars_ct.cc, there is a possible out of bounds read due to improper input validation. This could lead to remote information…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00256,"kevAdded":null},{"id":"CVE-2022-20220","published":"2022-07-13T18:22:08.000Z","updated":"2024-08-03T02:02:31.027Z","title":"In openFile of CallLogProvider.java, there is a possible permission bypass due to a path traversal error. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00178,"kevAdded":null},{"id":"CVE-2022-20219","published":"2022-07-13T18:22:03.000Z","updated":"2024-08-03T02:02:31.006Z","title":"In multiple functions of StorageManagerService.java and UserManagerService.java, there is a possible way to leave user's directories unencrypted due to a logic…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00075,"kevAdded":null},{"id":"CVE-2022-20218","published":"2022-07-13T18:21:56.000Z","updated":"2024-08-03T02:02:31.039Z","title":"In PermissionController, there is a possible way to get and retain permissions without user's consent due to a logic error in the code. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00118,"kevAdded":null},{"id":"CVE-2022-20217","published":"2022-07-13T18:21:52.000Z","updated":"2024-08-03T02:02:31.120Z","title":"There is a unauthorized broadcast in the SprdContactsProvider. A third-party app could use this issue to delete Fdn contact.Product: AndroidVersions: Android…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00313,"kevAdded":null},{"id":"CVE-2022-20216","published":"2022-07-13T18:21:47.000Z","updated":"2024-08-03T02:02:31.042Z","title":"android exported is used to set third-party app access permissions, and the default value of intent-filter is true. com.sprd.firewall has set exported as…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.0056,"kevAdded":null},{"id":"CVE-2022-20203","published":"2022-06-15T21:50:11.000Z","updated":"2024-08-03T02:02:31.042Z","title":"In multiple locations of the nanopb library, there is a possible way to corrupt memory when decoding untrusted protobuf files. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00129,"kevAdded":null},{"id":"CVE-2022-20233","published":"2022-06-15T13:24:47.000Z","updated":"2024-08-03T02:02:31.046Z","title":"In param_find_digests_internal and related functions of the Titan-M source, there is a possible out of bounds write due to an incorrect bounds check. This…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00134,"kevAdded":null},{"id":"CVE-2022-20209","published":"2022-06-15T13:24:24.000Z","updated":"2024-08-03T02:02:31.032Z","title":"In hme_add_new_node_to_a_sorted_array of hme_utils.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00844,"kevAdded":null},{"id":"CVE-2022-20208","published":"2022-06-15T13:24:17.000Z","updated":"2024-08-03T02:02:31.028Z","title":"In parseRecursively of cppbor_parse.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2022-20207","published":"2022-06-15T13:24:11.000Z","updated":"2024-08-03T02:02:31.080Z","title":"In static definitions of GattServiceConfig.java, there is a possible permission bypass due to an insecure default value. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2022-20206","published":"2022-06-15T13:24:05.000Z","updated":"2024-08-03T02:02:31.029Z","title":"In setPackageOrComponentEnabled of NotificationManagerService.java, there is a missing permission check. This could lead to local information disclosure about…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2022-20205","published":"2022-06-15T13:23:59.000Z","updated":"2024-08-03T02:02:31.076Z","title":"In isFileUri of FileUtil.java, there is a possible way to bypass the check for a file:// scheme due to improper input validation. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2022-20204","published":"2022-06-15T13:23:51.000Z","updated":"2024-08-03T02:02:31.060Z","title":"In registerRemoteBugreportReceivers of DevicePolicyManagerService.java, there is a possible reporting of falsified bug reports due to a missing permission…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2022-20202","published":"2022-06-15T13:23:44.000Z","updated":"2024-08-03T02:02:31.030Z","title":"In ih264_resi_trans_quant_4x4_sse42 of ih264_resi_trans_quant_sse42.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00726,"kevAdded":null},{"id":"CVE-2022-20201","published":"2022-06-15T13:23:35.000Z","updated":"2024-08-03T02:02:31.043Z","title":"In getAppSize of InstalldNativeService.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00128,"kevAdded":null},{"id":"CVE-2022-20200","published":"2022-06-15T13:23:27.000Z","updated":"2024-08-03T02:02:31.043Z","title":"In updateApState of SoftApManager.java, there is a possible leak of hotspot state due to a missing permission check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2022-20198","published":"2022-06-15T13:23:20.000Z","updated":"2024-08-03T02:02:31.000Z","title":"In llcp_dlc_proc_connect_pdu of llcp_dlc.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2022-20197","published":"2022-06-15T13:23:12.000Z","updated":"2024-08-03T02:02:31.025Z","title":"In recycle of Parcel.java, there is a possible way to start foreground activity from background due to a permissions bypass. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2022-20196","published":"2022-06-15T13:23:07.000Z","updated":"2024-08-03T02:02:30.970Z","title":"In gallery3d and photos, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5,"vendor":null,"product":"Android","kev":false,"epss":0.00123,"kevAdded":null},{"id":"CVE-2022-20195","published":"2022-06-15T13:22:59.000Z","updated":"2024-08-03T02:02:30.996Z","title":"In the keystore library, there is a possible prevention of access to system Settings due to unsafe deserialization. This could lead to local denial of service…","severity":"MEDIUM","score":5,"vendor":null,"product":"Android","kev":false,"epss":0.00174,"kevAdded":null},{"id":"CVE-2022-20194","published":"2022-06-15T13:22:52.000Z","updated":"2024-08-03T02:02:30.966Z","title":"In onCreate of ChooseLockGeneric.java, there is a possible permission bypass. This could lead to local escalation of privilege with no additional execution…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2022-20193","published":"2022-06-15T13:22:46.000Z","updated":"2024-08-03T02:02:31.020Z","title":"In getUniqueUsagesWithLabels of PermissionUsageHelper.java, there is a possible incorrect permission attribution due to a logic error in the code. This could…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2022-20192","published":"2022-06-15T13:22:40.000Z","updated":"2024-08-03T02:02:31.012Z","title":"In grantEmbeddedWindowFocus of WindowManagerService.java, there is a possible way to change an input channel for embedded hierarchy due to a permissions…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2022-20191","published":"2022-06-15T13:22:34.000Z","updated":"2024-08-03T02:02:31.023Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-209324757References: N/A","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00543,"kevAdded":null},{"id":"CVE-2022-20190","published":"2022-06-15T13:22:28.000Z","updated":"2024-08-03T02:02:30.965Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-208744915References: N/A","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00484,"kevAdded":null},{"id":"CVE-2022-20188","published":"2022-06-15T13:22:21.000Z","updated":"2024-08-03T02:02:30.970Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-207254598References: N/A","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00411,"kevAdded":null},{"id":"CVE-2022-20185","published":"2022-06-15T13:22:08.000Z","updated":"2024-08-03T02:02:30.977Z","title":"In TBD of TBD, there is a possible use after free bug. This could lead to local escalation of privilege with System execution privileges needed. User…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00118,"kevAdded":null},{"id":"CVE-2022-20184","published":"2022-06-15T13:22:02.000Z","updated":"2024-08-03T02:02:31.003Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-209153114References: N/A","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00411,"kevAdded":null},{"id":"CVE-2022-20183","published":"2022-06-15T13:21:55.000Z","updated":"2024-08-03T02:02:30.986Z","title":"In hypx_create_blob_dmabuf of faceauth_hypx.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00118,"kevAdded":null},{"id":"CVE-2022-20182","published":"2022-06-15T13:21:48.000Z","updated":"2024-08-03T02:02:31.012Z","title":"In handle_ramdump of pixel_loader.c, there is a possible way to create a ramdump of non-secure memory due to a missing permission check. This could lead to…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2022-20181","published":"2022-06-15T13:21:39.000Z","updated":"2024-08-03T02:02:31.026Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-210936609References: N/A","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00401,"kevAdded":null},{"id":"CVE-2022-20179","published":"2022-06-15T13:21:33.000Z","updated":"2024-08-03T02:02:31.019Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-211683760References: N/A","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00392,"kevAdded":null},{"id":"CVE-2022-20178","published":"2022-06-15T13:21:27.000Z","updated":"2024-08-03T02:02:30.995Z","title":"In ioctl_dpm_qos_update and ioctl_event_control_set of (TBD), there is a possible out of bounds write due to an integer overflow. This could lead to local…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00118,"kevAdded":null},{"id":"CVE-2022-20177","published":"2022-06-15T13:21:18.000Z","updated":"2024-08-03T02:02:31.016Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-209906686References: N/A","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00411,"kevAdded":null},{"id":"CVE-2022-20176","published":"2022-06-15T13:21:12.000Z","updated":"2024-08-03T02:02:30.958Z","title":"In auth_store of sjtag-driver.c, there is a possible read of uninitialized memory due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2022-20175","published":"2022-06-15T13:21:06.000Z","updated":"2024-08-03T02:02:30.975Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-209252491References: N/A","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00411,"kevAdded":null},{"id":"CVE-2022-20174","published":"2022-06-15T13:20:46.000Z","updated":"2024-08-03T02:02:30.984Z","title":"In exynos_secEnv_init of mach-gs101.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2022-20173","published":"2022-06-15T13:20:40.000Z","updated":"2024-08-03T02:02:30.942Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-207116951References: N/A","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00543,"kevAdded":null},{"id":"CVE-2022-20172","published":"2022-06-15T13:20:34.000Z","updated":"2024-08-03T02:02:30.954Z","title":"In onbind of ShannonRcsService.java, there is a possible access to protect data due to a missing permission check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2022-20171","published":"2022-06-15T13:20:27.000Z","updated":"2024-08-03T02:02:30.964Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-215565667References: N/A","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00543,"kevAdded":null},{"id":"CVE-2022-20170","published":"2022-06-15T13:20:21.000Z","updated":"2024-08-03T02:02:30.963Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-209421931References: N/A","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00518,"kevAdded":null},{"id":"CVE-2022-20169","published":"2022-06-15T13:20:15.000Z","updated":"2024-08-03T02:02:30.952Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-211162353References: N/A","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00392,"kevAdded":null},{"id":"CVE-2022-20168","published":"2022-06-15T13:20:08.000Z","updated":"2024-08-03T02:02:30.918Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-210594998References: N/A","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00401,"kevAdded":null},{"id":"CVE-2022-20167","published":"2022-06-15T13:19:55.000Z","updated":"2024-08-03T02:02:30.996Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-204956204References: N/A","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00518,"kevAdded":null},{"id":"CVE-2022-20166","published":"2022-06-15T13:19:46.000Z","updated":"2024-08-03T02:02:30.943Z","title":"In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2022-20165","published":"2022-06-15T13:19:40.000Z","updated":"2024-08-03T02:02:30.930Z","title":"In asn1_parse of asn1.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2022-20164","published":"2022-06-15T13:19:35.000Z","updated":"2024-08-03T02:02:31.024Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-204891956References: N/A","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00518,"kevAdded":null},{"id":"CVE-2022-20162","published":"2022-06-15T13:19:28.000Z","updated":"2024-08-03T02:02:30.909Z","title":"In asn1_p256_int of crypto/asn1.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00147,"kevAdded":null},{"id":"CVE-2022-20160","published":"2022-06-15T13:19:21.000Z","updated":"2024-08-03T02:02:30.919Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-210083655References: N/A","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00518,"kevAdded":null},{"id":"CVE-2022-20159","published":"2022-06-15T13:19:14.000Z","updated":"2024-08-03T02:02:31.006Z","title":"In asn1_ec_pkey_parse of acropora/crypto/asn1_common.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2022-20156","published":"2022-06-15T13:19:08.000Z","updated":"2024-08-03T02:02:30.979Z","title":"In unflatten of GraphicBuffer.cpp, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2022-20155","published":"2022-06-15T13:19:02.000Z","updated":"2024-08-03T02:02:30.986Z","title":"In ipu_core_jqs_msg_transport_kernel_write_sync of ipu-core-jqs-msg-transport.c, there is a possible use-after-free due to a race condition. This could lead to…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00088,"kevAdded":null},{"id":"CVE-2022-20154","published":"2022-06-15T13:18:55.000Z","updated":"2026-10-08T21:03:11.665Z","title":"In lock_sock_nested of sock.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.4,"vendor":null,"product":"Android","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2022-20153","published":"2022-06-15T13:18:50.000Z","updated":"2026-10-08T21:14:08.500Z","title":"In rcu_cblist_dequeue of rcu_segcblist.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2022-20152","published":"2022-06-15T13:18:43.000Z","updated":"2024-08-03T02:02:30.682Z","title":"In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2022-20151","published":"2022-06-15T13:18:37.000Z","updated":"2024-08-03T02:02:30.981Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-210712565References: N/A","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00392,"kevAdded":null},{"id":"CVE-2022-20149","published":"2022-06-15T13:18:31.000Z","updated":"2024-08-03T02:02:30.795Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-211685939References: N/A","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00392,"kevAdded":null},{"id":"CVE-2022-20148","published":"2022-06-15T13:18:26.000Z","updated":"2024-08-03T02:02:30.939Z","title":"In TBD of TBD, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege in the kernel with System execution…","severity":"MEDIUM","score":6.4,"vendor":null,"product":"Android","kev":false,"epss":0.00123,"kevAdded":null},{"id":"CVE-2022-20146","published":"2022-06-15T13:18:20.000Z","updated":"2024-08-03T02:02:31.081Z","title":"In uploadFile of FileUploadServiceImpl.java, there is a possible incorrect file access due to a confused deputy. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2021-39806","published":"2022-06-15T13:17:42.000Z","updated":"2024-08-04T02:20:33.281Z","title":"In closef of label_backends_android.c, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege during…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2022-20210","published":"2022-06-15T13:03:08.000Z","updated":"2024-08-03T02:02:31.031Z","title":"The UE and the EMM communicate with each other using NAS messages. When a new NAS message arrives from the EMM, the modem parses it and fills in internal…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.04328,"kevAdded":null},{"id":"CVE-2022-20147","published":"2022-06-15T13:03:02.000Z","updated":"2024-08-03T02:02:31.013Z","title":"In nfa_dm_check_set_config of nfa_dm_main.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2022-20145","published":"2022-06-15T13:02:56.000Z","updated":"2024-08-03T02:02:30.978Z","title":"In startLegacyVpnPrivileged of Vpn.java, there is a possible way to retrieve VPN credentials due to a protocol downgrade attack. This could lead to remote…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.07205,"kevAdded":null},{"id":"CVE-2022-20143","published":"2022-06-15T13:02:41.000Z","updated":"2024-08-03T02:02:30.738Z","title":"In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2022-20142","published":"2022-06-15T13:02:33.000Z","updated":"2024-08-03T02:02:30.738Z","title":"In createFromParcel of GeofenceHardwareRequestParcelable.java, there is a possible arbitrary code execution due to parcel mismatch. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00244,"kevAdded":null},{"id":"CVE-2022-20141","published":"2022-06-15T13:02:23.000Z","updated":"2024-08-03T02:02:30.853Z","title":"In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00145,"kevAdded":null},{"id":"CVE-2022-20140","published":"2022-06-15T13:02:17.000Z","updated":"2024-08-03T02:02:30.962Z","title":"In read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.08687,"kevAdded":null},{"id":"CVE-2022-20138","published":"2022-06-15T13:02:09.000Z","updated":"2024-08-03T02:02:30.859Z","title":"In ACTION_MANAGED_PROFILE_PROVISIONED of DevicePolicyManagerService.java, there is a possible way for unprivileged app to send MANAGED_PROFILE_PROVISIONED…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00224,"kevAdded":null},{"id":"CVE-2022-20137","published":"2022-06-15T13:01:26.000Z","updated":"2024-08-03T02:02:30.734Z","title":"In onCreateContextMenu of NetworkProviderSettings.java, there is a possible way for non-owner users to change WiFi settings due to a missing permission check.…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00118,"kevAdded":null},{"id":"CVE-2022-20135","published":"2022-06-15T13:01:13.000Z","updated":"2024-08-03T02:02:30.657Z","title":"In writeToParcel of GateKeeperResponse.java, there is a possible parcel format mismatch. This could lead to local escalation of privilege with User execution…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00211,"kevAdded":null},{"id":"CVE-2022-20134","published":"2022-06-15T13:01:06.000Z","updated":"2024-08-03T02:02:30.548Z","title":"In readArguments of CallSubjectDialog.java, there is a possible way to trick the user to call the wrong phone number due to improper input validation. This…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2022-20133","published":"2022-06-15T13:00:59.000Z","updated":"2024-08-03T02:02:30.911Z","title":"In setDiscoverableTimeout of AdapterService.java, there is a possible bypass of user interaction due to a missing permission check. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2022-20132","published":"2022-06-15T13:00:51.000Z","updated":"2024-08-03T02:02:30.662Z","title":"In lg_probe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to improper input validation. This could lead…","severity":"MEDIUM","score":4.6,"vendor":null,"product":"Android","kev":false,"epss":0.0021,"kevAdded":null},{"id":"CVE-2022-20131","published":"2022-06-15T13:00:43.000Z","updated":"2024-08-03T02:02:30.732Z","title":"In nci_proc_rf_management_ntf of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00956,"kevAdded":null},{"id":"CVE-2022-20130","published":"2022-06-15T13:00:36.000Z","updated":"2024-08-03T02:02:30.749Z","title":"In transportDec_OutOfBandConfig of tpdec_lib.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.085,"kevAdded":null},{"id":"CVE-2022-20129","published":"2022-06-15T13:00:29.000Z","updated":"2024-08-03T02:02:30.695Z","title":"In registerPhoneAccount of PhoneAccountRegistrar.java, there is a possible way to prevent the user from selecting a phone account due to improper input…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2022-20127","published":"2022-06-15T13:00:18.000Z","updated":"2024-08-03T02:02:30.659Z","title":"In ce_t4t_data_cback of ce_t4t.cc, there is a possible out of bounds write due to a double free. This could lead to remote code execution with no additional…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.07199,"kevAdded":null},{"id":"CVE-2022-20126","published":"2022-06-15T13:00:12.000Z","updated":"2024-08-03T02:02:30.724Z","title":"In setScanMode of AdapterService.java, there is a possible way to enable Bluetooth discovery mode without user interaction due to a missing permission check.…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00255,"kevAdded":null},{"id":"CVE-2022-20125","published":"2022-06-15T13:00:06.000Z","updated":"2024-08-03T02:02:30.619Z","title":"In GBoard, there is a possible way to bypass factory reset protections due to a sandbox escape. This could lead to local escalation of privilege if an attacker…","severity":"MEDIUM","score":6.8,"vendor":null,"product":"Android","kev":false,"epss":0.00137,"kevAdded":null},{"id":"CVE-2022-20123","published":"2022-06-15T12:59:13.000Z","updated":"2024-08-03T02:02:30.652Z","title":"In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00956,"kevAdded":null},{"id":"CVE-2021-39691","published":"2022-06-15T12:57:57.000Z","updated":"2024-08-04T02:13:37.719Z","title":"In WindowManager, there is a possible tapjacking attack due to an incorrect window flag when processing user input. This could lead to local escalation of…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00118,"kevAdded":null},{"id":"CVE-2022-20186","published":"2022-06-15T00:00:00.000Z","updated":"2024-08-03T02:02:30.868Z","title":"In kbase_mem_alias of mali_kbase_mem_linux.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00548,"kevAdded":null},{"id":"CVE-2022-20144","published":"2022-06-15T00:00:00.000Z","updated":"2024-08-03T02:02:31.015Z","title":"In multiple functions of AvatarPhotoController.java, there is a possible access to content owned by system content providers due to a confused deputy. This…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00152,"kevAdded":null},{"id":"CVE-2022-20124","published":"2022-06-15T00:00:00.000Z","updated":"2024-08-03T02:02:30.843Z","title":"In deletePackageX of DeletePackageHelper.java, there is a possible way for a Guest user to reset pre-loaded applications for other users due to a permissions…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00164,"kevAdded":null},{"id":"CVE-2022-20121","published":"2022-05-10T20:17:24.000Z","updated":"2024-08-03T02:02:30.702Z","title":"In getNodeValue of USCCDMPlugin.java, there is a possible disclosure of ICCID due to a missing permission check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2022-20120","published":"2022-05-10T20:17:03.000Z","updated":"2024-08-03T02:02:30.840Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-203213034References: N/A","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.01444,"kevAdded":null},{"id":"CVE-2022-20119","published":"2022-05-10T20:16:42.000Z","updated":"2024-08-03T02:02:30.695Z","title":"In private_handle_t of mali_gralloc_buffer.h, there is a possible information disclosure due to uninitialized data. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2022-20118","published":"2022-05-10T20:16:24.000Z","updated":"2024-08-03T02:02:30.708Z","title":"In ion_ioctl and related functions of ion.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00088,"kevAdded":null},{"id":"CVE-2022-20117","published":"2022-05-10T20:15:58.000Z","updated":"2024-08-03T02:02:30.883Z","title":"In (TBD) of (TBD), there is a possible way to decrypt local data encrypted by the GSC due to improperly used crypto. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00078,"kevAdded":null},{"id":"CVE-2021-39738","published":"2022-05-10T20:02:53.000Z","updated":"2024-08-04T02:13:38.312Z","title":"In CarSetings, there is a possible to pair BT device bypassing user's consent due to a missing permission check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00128,"kevAdded":null},{"id":"CVE-2022-20116","published":"2022-05-10T19:59:40.000Z","updated":"2024-08-03T02:02:30.433Z","title":"In onEntryUpdated of OngoingCallController.kt, it is possible to launch non-exported activities due to intent redirection. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2022-20115","published":"2022-05-10T19:59:20.000Z","updated":"2024-08-03T02:02:30.630Z","title":"In broadcastServiceStateChanged of TelephonyRegistry.java, there is a possible way to learn base station information without location permission due to a…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2022-20114","published":"2022-05-10T19:58:54.000Z","updated":"2024-08-03T02:02:30.839Z","title":"In placeCall of TelecomManager.java, there is a possible way for an application to keep itself running with foreground service importance due to a permissions…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00122,"kevAdded":null},{"id":"CVE-2022-20113","published":"2022-05-10T19:58:31.000Z","updated":"2024-08-03T02:02:30.839Z","title":"In mPreference of DefaultUsbConfigurationPreferenceController.java, there is a possible way to enable file transfer mode due to a logic error in the code. This…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2022-20112","published":"2022-05-10T19:58:10.000Z","updated":"2024-08-03T02:02:30.926Z","title":"In getAvailabilityStatus of PrivateDnsPreferenceController.java, there is a possible way for a guest user to change private DNS settings due to a permissions…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2022-20011","published":"2022-05-10T19:57:48.000Z","updated":"2024-08-03T01:55:46.250Z","title":"In getArray of NotificationManagerService.java , there is a possible leak of one user notifications to another due to missing check. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00136,"kevAdded":null},{"id":"CVE-2022-20010","published":"2022-05-10T19:57:28.000Z","updated":"2024-08-03T01:55:46.169Z","title":"In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00272,"kevAdded":null},{"id":"CVE-2022-20009","published":"2022-05-10T19:57:10.000Z","updated":"2024-08-03T01:55:46.200Z","title":"In various functions of the USB gadget subsystem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.8,"vendor":null,"product":"Android","kev":false,"epss":0.00351,"kevAdded":null},{"id":"CVE-2022-20008","published":"2022-05-10T19:56:49.000Z","updated":"2024-08-03T01:55:46.136Z","title":"In mmc_blk_read_single of block.c, there is a possible way to read kernel heap memory due to uninitialized data. This could lead to local information…","severity":"MEDIUM","score":4.6,"vendor":null,"product":"Android","kev":false,"epss":0.00379,"kevAdded":null},{"id":"CVE-2022-20007","published":"2022-05-10T19:56:30.000Z","updated":"2024-08-03T01:55:46.214Z","title":"In startActivityForAttachedApplicationIfNeeded of RootWindowContainer.java, there is a possible way to overlay an app that believes it's still in the…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00218,"kevAdded":null},{"id":"CVE-2022-20006","published":"2022-05-10T19:56:10.000Z","updated":"2024-08-03T01:55:46.200Z","title":"In several functions of KeyguardServiceWrapper.java and related files,, there is a possible way to briefly view what's under the lockscreen due to a race…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2022-20005","published":"2022-05-10T19:55:44.000Z","updated":"2024-08-03T01:55:46.255Z","title":"In validateApkInstallLocked of PackageInstallerSession.java, there is a way to force a mismatch between running code and a parsed APK . This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00229,"kevAdded":null},{"id":"CVE-2022-20004","published":"2022-05-10T19:55:23.000Z","updated":"2024-08-03T01:55:46.089Z","title":"In checkSlicePermission of SliceManagerService.java, it is possible to access any slice URI due to improper input validation. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00218,"kevAdded":null},{"id":"CVE-2021-39700","published":"2022-05-10T19:54:59.000Z","updated":"2024-08-04T02:13:37.883Z","title":"In the policies of adbd.te, there was a logic error which caused the CTS Listening Ports Test to report invalid results. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2021-39670","published":"2022-05-10T19:54:37.000Z","updated":"2024-08-04T02:13:37.673Z","title":"In setStream of WallpaperManager.java, there is a possible way to cause a permanent DoS due to improper input validation. This could lead to local denial of…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00196,"kevAdded":null},{"id":"CVE-2021-39814","published":"2022-04-12T16:11:55.000Z","updated":"2024-08-04T02:20:33.320Z","title":"In ppmp_validate_wsm of drm_fw.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2021-39812","published":"2022-04-12T16:11:54.000Z","updated":"2024-08-04T02:20:33.343Z","title":"In TBD of TBD, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with no additional execution…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2021-39809","published":"2022-04-12T16:11:50.000Z","updated":"2024-08-04T02:20:33.299Z","title":"In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00755,"kevAdded":null},{"id":"CVE-2021-39808","published":"2022-04-12T16:11:49.000Z","updated":"2024-08-04T02:20:33.432Z","title":"In createNotificationChannelGroup of PreferencesHelper.java, there is a possible way for a service to run in foreground without user notification due to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2021-39807","published":"2022-04-12T16:11:48.000Z","updated":"2024-08-04T02:20:33.276Z","title":"In handleNfcStateChanged of SecureNfcEnabler.java, there is a possible way to enable NFC from the Guest account due to a missing permission check. This could…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2021-39805","published":"2022-04-12T16:11:47.000Z","updated":"2024-08-04T02:20:33.327Z","title":"In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00272,"kevAdded":null},{"id":"CVE-2021-39804","published":"2022-04-12T16:11:47.000Z","updated":"2024-08-04T02:20:33.365Z","title":"In reinit of HeifDecoderImpl.cpp, there is a possible crash due to a missing null check. This could lead to remote persistent denial of service in the file…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00425,"kevAdded":null},{"id":"CVE-2021-39803","published":"2022-04-12T16:11:46.000Z","updated":"2024-08-04T02:20:33.321Z","title":"In ~Impl of C2AllocatorIon.cpp, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with no…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00649,"kevAdded":null},{"id":"CVE-2021-39802","published":"2022-04-12T16:11:45.000Z","updated":"2024-08-04T02:20:33.250Z","title":"In change_pte_range of mprotect.c , there is a possible way to make a shared mmap writable due to a permissions bypass. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2021-39801","published":"2022-04-12T16:11:44.000Z","updated":"2024-08-04T02:20:33.261Z","title":"In ion_ioctl of ion-ioctl.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00122,"kevAdded":null},{"id":"CVE-2021-39800","published":"2022-04-12T16:11:44.000Z","updated":"2024-08-04T02:20:33.383Z","title":"In ion_ioctl of ion-ioctl.c, there is a possible way to leak kernel head data due to a use after free. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00149,"kevAdded":null},{"id":"CVE-2021-39799","published":"2022-04-12T16:11:43.000Z","updated":"2024-08-04T02:20:33.351Z","title":"In AttributionSource of AttributionSource.java, there is a possible permission bypass due to improper input validation. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00122,"kevAdded":null},{"id":"CVE-2021-39798","published":"2022-04-12T16:11:42.000Z","updated":"2024-08-04T02:20:33.026Z","title":"In Bitmap_createFromParcel of Bitmap.cpp, there is a possible arbitrary code execution due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2021-39797","published":"2022-04-12T16:11:41.000Z","updated":"2024-08-04T02:20:33.173Z","title":"In several functions of of LauncherApps.java, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00121,"kevAdded":null},{"id":"CVE-2021-39796","published":"2022-04-12T16:11:41.000Z","updated":"2024-08-04T02:20:33.345Z","title":"In HarmfulAppWarningActivity of HarmfulAppWarningActivity.java, there is a possible way to trick victim to install harmful app due to a tapjacking/overlay…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00171,"kevAdded":null},{"id":"CVE-2021-39794","published":"2022-04-12T16:11:39.000Z","updated":"2024-08-04T02:20:32.967Z","title":"In broadcastPortInfo of AdbService.java, there is a possible way for apps to run code as the shell user, if wireless debugging is enabled, due to a missing…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00353,"kevAdded":null},{"id":"CVE-2021-0707","published":"2022-04-12T16:11:38.000Z","updated":"2024-08-03T15:47:28.301Z","title":"In dma_buf_release of dma-buf.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00165,"kevAdded":null},{"id":"CVE-2021-0694","published":"2022-04-12T16:11:38.000Z","updated":"2024-08-03T15:47:28.395Z","title":"In setServiceForegroundInnerLocked of ActiveServices.java, there is a possible way for a background application to regain foreground permissions due to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2021-39754","published":"2022-03-30T16:02:59.000Z","updated":"2024-08-04T02:13:38.347Z","title":"In ContextImpl, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2022-20002","published":"2022-03-30T16:02:58.000Z","updated":"2024-08-03T01:55:46.089Z","title":"In incfs, there is a possible way of mounting on arbitrary paths due to a missing permission check. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2021-39791","published":"2022-03-30T16:02:57.000Z","updated":"2024-08-04T02:20:33.383Z","title":"In WallpaperManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2021-39790","published":"2022-03-30T16:02:56.000Z","updated":"2024-08-04T02:20:33.404Z","title":"In Dialer, there is a possible way to manipulate visual voicemail settings due to a missing permission check. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00316,"kevAdded":null},{"id":"CVE-2021-39789","published":"2022-03-30T16:02:54.000Z","updated":"2024-08-04T02:20:33.221Z","title":"In Telecom, there is a possible leak of TTY mode change due to a missing permission check. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2021-39788","published":"2022-03-30T16:02:53.000Z","updated":"2024-08-04T02:20:33.147Z","title":"In TelecomManager, there is a possible way to check if a particular self managed phone account was registered on the device due to side channel information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2021-39787","published":"2022-03-30T16:02:52.000Z","updated":"2024-08-04T02:20:33.191Z","title":"In SystemUI, there is a possible arbitrary Activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0038,"kevAdded":null},{"id":"CVE-2021-39786","published":"2022-03-30T16:02:51.000Z","updated":"2024-08-04T02:20:33.162Z","title":"In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2021-39784","published":"2022-03-30T16:02:50.000Z","updated":"2024-08-04T02:13:38.411Z","title":"In CellBroadcastReceiver, there is a possible path to enable specific cellular features due to a missing permission check. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2021-39783","published":"2022-03-30T16:02:49.000Z","updated":"2024-08-04T02:13:38.346Z","title":"In rcsservice, there is a possible way to modify TTY mode due to a missing permission check. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2021-39782","published":"2022-03-30T16:02:48.000Z","updated":"2024-08-04T02:13:38.430Z","title":"In Telephony, there is a possible unauthorized modification of the PLMN SIM file due to a missing permission check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2021-39781","published":"2022-03-30T16:02:47.000Z","updated":"2024-08-04T02:13:38.431Z","title":"In SmsController, there is a possible information disclosure due to a permissions bypass. This could lead to local escalation of privilege and sending sms with…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2021-39780","published":"2022-03-30T16:02:46.000Z","updated":"2024-08-04T02:13:38.395Z","title":"In Traceur, there is a possible bypass of developer settings requirements for capturing system traces due to a missing permission check. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00319,"kevAdded":null},{"id":"CVE-2021-39779","published":"2022-03-30T16:02:45.000Z","updated":"2024-08-04T02:13:38.412Z","title":"In getCallStateUsingPackage of Telecom Service, there is a missing permission check. This could lead to local information disclosure of the call state with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2021-39778","published":"2022-03-30T16:02:44.000Z","updated":"2024-08-04T02:13:38.334Z","title":"In Telecomm, there is a possible way to determine whether an app is installed, without query permissions, due to improper input validation. This could lead to…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00112,"kevAdded":null},{"id":"CVE-2021-39777","published":"2022-03-30T16:02:43.000Z","updated":"2024-08-04T02:13:38.373Z","title":"In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2021-39776","published":"2022-03-30T16:02:42.000Z","updated":"2024-08-04T02:13:38.412Z","title":"In NFC, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with User execution privileges needed.…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2021-39775","published":"2022-03-30T16:02:40.000Z","updated":"2024-08-04T02:13:38.367Z","title":"In People, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2021-39774","published":"2022-03-30T16:02:39.000Z","updated":"2024-08-04T02:13:38.363Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execution…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2021-39773","published":"2022-03-30T16:02:38.000Z","updated":"2024-08-04T02:13:38.403Z","title":"In VpnManagerService, there is a possible disclosure of installed VPN packages due to side channel information disclosure. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2021-39772","published":"2022-03-30T16:02:37.000Z","updated":"2024-08-04T02:13:38.338Z","title":"In Bluetooth, there is a possible way to access the a2dp audio control switch due to a missing permission check. This could lead to local escalation of…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00205,"kevAdded":null},{"id":"CVE-2021-39771","published":"2022-03-30T16:02:36.000Z","updated":"2024-08-04T02:13:38.450Z","title":"In Settings, there is a possible way to misrepresent which app wants to add a wifi network due to improper input validation. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00329,"kevAdded":null},{"id":"CVE-2021-39770","published":"2022-03-30T16:02:35.000Z","updated":"2024-08-04T02:13:38.415Z","title":"In Framework, there is a possible disclosure of the device owner package due to a missing permission check. This could lead to local information disclosure…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2021-39769","published":"2022-03-30T16:02:34.000Z","updated":"2024-08-04T02:13:38.430Z","title":"In Device Policy, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2021-39768","published":"2022-03-30T16:02:33.000Z","updated":"2024-08-04T02:13:38.413Z","title":"In Settings, there is a possible way to add an auto-connect WiFi network without the user's consent due to a missing permission check. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2021-39767","published":"2022-03-30T16:02:32.000Z","updated":"2024-08-04T02:13:38.350Z","title":"In miniadb, there is a possible way to get read/write access to recovery system properties due to an insecure default value. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2021-39766","published":"2022-03-30T16:02:31.000Z","updated":"2024-08-04T02:13:38.406Z","title":"In Settings, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2021-39765","published":"2022-03-30T16:02:30.000Z","updated":"2024-08-04T02:13:38.379Z","title":"In Gallery, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure with User execution privileges…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00126,"kevAdded":null},{"id":"CVE-2021-39764","published":"2022-03-30T16:02:29.000Z","updated":"2024-08-04T02:13:38.421Z","title":"In Settings, there is a possible way to display an incorrect app name due to improper input validation. This could lead to local escalation of privilege via…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00329,"kevAdded":null},{"id":"CVE-2021-39763","published":"2022-03-30T16:02:28.000Z","updated":"2024-08-04T02:13:38.380Z","title":"In Settings, there is a possible way to make the user enable WiFi due to improper input validation. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2021-39762","published":"2022-03-30T16:02:27.000Z","updated":"2024-08-04T02:13:38.385Z","title":"In tremolo, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00755,"kevAdded":null},{"id":"CVE-2021-39761","published":"2022-03-30T16:02:26.000Z","updated":"2024-08-04T02:13:38.424Z","title":"In Media, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2021-39760","published":"2022-03-30T16:02:24.000Z","updated":"2024-08-04T02:13:38.358Z","title":"In AudioService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2021-39759","published":"2022-03-30T16:02:23.000Z","updated":"2024-08-04T02:13:38.384Z","title":"In libstagefright, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2021-39758","published":"2022-03-30T16:02:22.000Z","updated":"2024-08-04T02:13:38.373Z","title":"In WindowManager, there is a possible way to start a foreground activity from the background due to a missing permission check. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2021-39757","published":"2022-03-30T16:02:21.000Z","updated":"2024-08-04T02:13:38.411Z","title":"In PermissionController, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00112,"kevAdded":null},{"id":"CVE-2021-39756","published":"2022-03-30T16:02:20.000Z","updated":"2024-08-04T02:13:38.327Z","title":"In Framework, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2021-39755","published":"2022-03-30T16:02:19.000Z","updated":"2024-08-04T02:13:38.306Z","title":"In DevicePolicyManager, there is a possible way to reveal the existence of an installed package without proper query permissions due to side channel…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2021-39753","published":"2022-03-30T16:02:18.000Z","updated":"2024-08-04T02:13:38.345Z","title":"In DomainVerificationService, there is a possible way to access app domain verification information due to a missing permission check. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2021-39752","published":"2022-03-30T16:02:17.000Z","updated":"2024-08-04T02:13:38.418Z","title":"In Bubbles, there is a possible way to interfere with Bubbles due to a permissions bypass. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2021-39751","published":"2022-03-30T16:02:16.000Z","updated":"2024-08-04T02:13:38.338Z","title":"In Settings, there is a possible way to read Bluetooth device names without proper permissions due to a missing permission check. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2021-39750","published":"2022-03-30T16:02:15.000Z","updated":"2024-08-04T02:13:38.371Z","title":"In PackageManager, there is a possible way to change the splash screen theme of other apps due to a missing permission check. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2021-39749","published":"2022-03-30T16:02:14.000Z","updated":"2024-08-04T02:13:38.339Z","title":"In WindowManager, there is a possible way to start non-exported and protected activities due to a missing permission check. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00205,"kevAdded":null},{"id":"CVE-2021-39748","published":"2022-03-30T16:02:13.000Z","updated":"2024-08-04T02:13:38.284Z","title":"In InputMethodEditor, there is a possible way to access some files accessible to Settings due to an unsafe PendingIntent. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2021-39747","published":"2022-03-30T16:02:12.000Z","updated":"2024-08-04T02:13:38.334Z","title":"In Settings Provider, there is a possible way to list values of non-readable global settings due to a permissions bypass. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2021-39746","published":"2022-03-30T16:02:11.000Z","updated":"2024-08-04T02:13:38.348Z","title":"In PermissionController, there is a possible way to delete some local files due to an unsafe PendingIntent. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2021-39745","published":"2022-03-30T16:02:10.000Z","updated":"2024-08-04T02:13:38.405Z","title":"In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2021-39744","published":"2022-03-30T16:02:08.000Z","updated":"2024-08-04T02:13:38.301Z","title":"In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2021-39743","published":"2022-03-30T16:02:07.000Z","updated":"2024-08-04T02:13:38.336Z","title":"In PackageManager, there is a possible way to update the last usage time of another package due to a missing permission check. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2021-39742","published":"2022-03-30T16:02:06.000Z","updated":"2024-08-04T02:13:38.250Z","title":"In Voicemail, there is a possible way to retrieve a trackable identifier due to a missing permission check. This could lead to local information disclosure…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00317,"kevAdded":null},{"id":"CVE-2021-39741","published":"2022-03-30T16:02:05.000Z","updated":"2024-08-04T02:13:38.396Z","title":"In Keymaster, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2021-39740","published":"2022-03-30T16:02:04.000Z","updated":"2024-08-04T02:13:38.379Z","title":"In Messaging, there is a possible way to bypass attachment restrictions due to improper input validation. This could lead to local information disclosure with…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00112,"kevAdded":null},{"id":"CVE-2021-39739","published":"2022-03-30T16:02:03.000Z","updated":"2024-08-04T02:13:38.354Z","title":"In ArrayMap, there is a possible leak of the content of SMS messages due to log information disclosure. This could lead to local information disclosure with…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2021-1033","published":"2022-03-30T16:02:01.000Z","updated":"2024-08-03T15:55:18.491Z","title":"In createGeneralSlice of ConnectedDevicesSliceProvider.java.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2021-1000","published":"2022-03-30T16:02:00.000Z","updated":"2024-08-03T15:55:18.205Z","title":"In createBluetoothDeviceSlice of ConnectedDevicesSliceProvider.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2021-39709","published":"2022-03-16T14:04:21.000Z","updated":"2024-08-04T02:13:37.802Z","title":"In sendSipAccountsRemovedNotification of SipAccountRegistry.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2021-39708","published":"2022-03-16T14:04:20.000Z","updated":"2024-08-04T02:13:37.879Z","title":"In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.0123,"kevAdded":null},{"id":"CVE-2021-39707","published":"2022-03-16T14:04:20.000Z","updated":"2024-08-04T02:13:37.979Z","title":"In onReceive of AppRestrictionsFragment.java, there is a possible way to start a phone call without permissions due to a confused deputy. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00126,"kevAdded":null},{"id":"CVE-2021-39706","published":"2022-03-16T14:04:19.000Z","updated":"2024-08-04T02:13:37.784Z","title":"In onResume of CredentialStorage.java, there is a possible way to cleanup content of credentials storage due to a missing permission check. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00657,"kevAdded":null},{"id":"CVE-2021-39704","published":"2022-03-16T14:04:17.000Z","updated":"2024-08-04T02:13:37.838Z","title":"In deleteNotificationChannelGroup of NotificationManagerService.java, there is a possible way to run foreground service without user notification due to a…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2021-39703","published":"2022-03-16T14:04:16.000Z","updated":"2024-08-04T02:13:37.804Z","title":"In updateState of UsbDeviceManager.java, there is a possible unauthorized access of files due to a confused deputy. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00126,"kevAdded":null},{"id":"CVE-2021-39702","published":"2022-03-16T14:04:15.000Z","updated":"2024-08-04T02:13:37.964Z","title":"In onCreate of RequestManageCredentials.java, there is a possible way for a third party app to install certificates without user approval due to a…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00334,"kevAdded":null},{"id":"CVE-2021-39701","published":"2022-03-16T14:04:15.000Z","updated":"2024-08-04T02:13:37.761Z","title":"In serviceConnection of ControlsProviderLifecycleManager.kt, there is a possible way to keep service running in foreground without notification or permission…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00398,"kevAdded":null},{"id":"CVE-2021-39698","published":"2022-03-16T14:04:14.000Z","updated":"2024-08-04T02:13:37.664Z","title":"In aio_poll_complete_work of aio.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00244,"kevAdded":null},{"id":"CVE-2021-39697","published":"2022-03-16T14:04:13.000Z","updated":"2024-08-04T02:13:37.825Z","title":"In checkFileUriDestination of DownloadProvider.java, there is a possible way to bypass external storage private directories protection due to a missing…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00128,"kevAdded":null},{"id":"CVE-2021-39695","published":"2022-03-16T14:04:12.000Z","updated":"2024-08-04T02:13:37.695Z","title":"In createOrUpdate of BasePermission.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00134,"kevAdded":null},{"id":"CVE-2021-39694","published":"2022-03-16T14:04:12.000Z","updated":"2024-08-04T02:13:37.760Z","title":"In parse of RoleParser.java, there is a possible way for default apps to get permissions explicitly denied by the user due to a permissions bypass. This could…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00128,"kevAdded":null},{"id":"CVE-2021-39693","published":"2022-03-16T14:04:11.000Z","updated":"2024-08-04T02:13:37.703Z","title":"In onUidStateChanged of AppOpsService.java, there is a possible way to access location without a visible indicator due to a logic error in the code. This could…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00132,"kevAdded":null},{"id":"CVE-2021-39692","published":"2022-03-16T14:04:10.000Z","updated":"2024-08-04T02:13:37.834Z","title":"In onCreate of SetupLayoutActivity.java, there is a possible way to setup a work profile bypassing user consent due to a tapjacking/overlay attack. This could…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00746,"kevAdded":null},{"id":"CVE-2021-39690","published":"2022-03-16T14:04:09.000Z","updated":"2024-08-04T02:13:37.883Z","title":"In setDisplayPadding of WallpaperManagerService.java, there is a possible way to cause a persistent DoS due to improper input validation. This could lead to…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00135,"kevAdded":null},{"id":"CVE-2021-39689","published":"2022-03-16T14:04:09.000Z","updated":"2024-08-04T02:13:37.819Z","title":"In multiple functions of odsign_main.cpp, there is a possible way to persist system attack due to a logic error in the code. This could lead to local…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2021-39686","published":"2022-03-16T14:04:08.000Z","updated":"2024-08-04T02:13:37.689Z","title":"In several functions of binder.c, there is a possible way to represent the wrong domain to SELinux due to a race condition. This could lead to local escalation…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00152,"kevAdded":null},{"id":"CVE-2021-39685","published":"2022-03-16T14:04:07.000Z","updated":"2024-08-04T02:13:37.681Z","title":"In various setup methods of the USB gadget subsystem, there is a possible out of bounds write due to an incorrect flag check. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00461,"kevAdded":null},{"id":"CVE-2021-39667","published":"2022-03-16T14:04:06.000Z","updated":"2024-08-04T02:13:37.716Z","title":"In ih264d_parse_decode_slice of ih264d_parse_slice.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00726,"kevAdded":null},{"id":"CVE-2021-39624","published":"2022-03-16T14:04:05.000Z","updated":"2024-08-04T02:13:37.347Z","title":"In PackageManager, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with User execution…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2021-0957","published":"2022-03-16T14:04:05.000Z","updated":"2024-08-03T15:55:18.272Z","title":"In NotificationStackScrollLayout of NotificationStackScrollLayout.java, there is a possible way to bypass Factory Reset Protections. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00135,"kevAdded":null},{"id":"CVE-2021-39793","published":"2022-03-16T14:04:04.000Z","updated":"2025-10-21T23:15:44.355Z","title":"In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":true,"epss":0.00685,"kevAdded":"2022-04-11"},{"id":"CVE-2021-39792","published":"2022-03-16T14:04:03.000Z","updated":"2024-08-04T02:20:33.243Z","title":"In usb_gadget_giveback_request of core.c, there is a possible use after free out of bounds read due to a race condition. This could lead to local information…","severity":"MEDIUM","score":4.1,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2021-39737","published":"2022-03-16T14:04:02.000Z","updated":"2024-08-04T02:13:38.313Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-208229524References: N/A","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00518,"kevAdded":null},{"id":"CVE-2021-39736","published":"2022-03-16T14:04:01.000Z","updated":"2024-08-04T02:13:38.291Z","title":"In prepare_io_entry and prepare_response of lwis_ioctl.c and lwis_periodic_io.c, there is a possible out of bounds write due to an integer overflow. This could…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2021-39735","published":"2022-03-16T14:04:00.000Z","updated":"2024-08-04T02:13:38.310Z","title":"In gasket_alloc_coherent_memory of gasket_page_table.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of…","severity":"MEDIUM","score":6.4,"vendor":null,"product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2021-39734","published":"2022-03-16T14:03:59.000Z","updated":"2024-08-04T02:13:38.360Z","title":"In sendMessage of OneToOneChatImpl.java (? TBD), there is a possible way to send an RCS message without permissions due to a missing permission check. This…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2021-39733","published":"2022-03-16T14:03:58.000Z","updated":"2024-08-04T02:13:38.295Z","title":"In amcs_cdev_unlocked_ioctl of audiometrics.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2021-39732","published":"2022-03-16T14:03:57.000Z","updated":"2024-08-04T02:13:38.286Z","title":"In copy_io_entries of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2021-39731","published":"2022-03-16T14:03:57.000Z","updated":"2024-08-04T02:13:38.341Z","title":"In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2021-39730","published":"2022-03-16T14:03:56.000Z","updated":"2024-08-04T02:13:38.287Z","title":"In TBD of TBD, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2021-39729","published":"2022-03-16T14:03:55.000Z","updated":"2024-08-04T02:13:38.362Z","title":"In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2021-39727","published":"2022-03-16T14:03:54.000Z","updated":"2024-08-04T02:13:38.259Z","title":"In eicPresentationRetrieveEntryValue of acropora/app/identity/libeic/EicPresentation.c, there is a possible information disclosure due to a race condition.…","severity":"MEDIUM","score":4.1,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2021-39726","published":"2022-03-16T14:03:54.000Z","updated":"2024-08-04T02:13:38.331Z","title":"In cd_ParseMsg of cd_codec.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00755,"kevAdded":null},{"id":"CVE-2021-39725","published":"2022-03-16T14:03:53.000Z","updated":"2024-08-04T02:13:38.412Z","title":"In gasket_free_coherent_memory_all of gasket_page_table.c, there is a possible memory corruption due to a double free. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2021-39724","published":"2022-03-16T14:03:52.000Z","updated":"2024-08-04T02:13:38.384Z","title":"In TuningProviderBase::GetTuningTreeSet of tuning_provider_base.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2021-39723","published":"2022-03-16T14:03:51.000Z","updated":"2024-08-04T02:13:38.317Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-209014813References: N/A","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00518,"kevAdded":null},{"id":"CVE-2021-39722","published":"2022-03-16T14:03:50.000Z","updated":"2024-08-04T02:13:38.333Z","title":"In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2021-39721","published":"2022-03-16T14:03:50.000Z","updated":"2024-08-04T02:13:38.349Z","title":"In TBD of TBD, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2021-39720","published":"2022-03-16T14:03:49.000Z","updated":"2024-08-04T02:13:38.338Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-207433926References: N/A","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00518,"kevAdded":null},{"id":"CVE-2021-39719","published":"2022-03-16T14:03:48.000Z","updated":"2024-08-04T02:13:38.229Z","title":"In lwis_top_register_io of lwis_device_top.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2021-39718","published":"2022-03-16T14:03:47.000Z","updated":"2024-08-04T02:13:38.244Z","title":"In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2021-39717","published":"2022-03-16T14:03:47.000Z","updated":"2024-08-04T02:13:38.259Z","title":"In iaxxx_btp_write_words of iaxxx-btp.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2021-39716","published":"2022-03-16T14:03:46.000Z","updated":"2024-08-04T02:13:38.331Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-206977562References: N/A","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00392,"kevAdded":null},{"id":"CVE-2021-39715","published":"2022-03-16T14:03:45.000Z","updated":"2024-08-04T02:13:38.337Z","title":"In __show_regs of process.c, there is a possible leak of kernel memory and addresses due to log information disclosure. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2021-39714","published":"2022-03-16T14:03:44.000Z","updated":"2024-08-04T02:13:37.892Z","title":"In ion_buffer_kmap_get of ion.c, there is a possible use-after-free due to an integer overflow. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00226,"kevAdded":null},{"id":"CVE-2021-39713","published":"2022-03-16T14:03:43.000Z","updated":"2024-08-04T02:13:37.940Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-173788806References: Upstream kernel","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00207,"kevAdded":null},{"id":"CVE-2021-39712","published":"2022-03-16T14:03:42.000Z","updated":"2024-08-04T02:13:37.935Z","title":"In TBD of TBD, there is a possible user after free vulnerability due to a race condition. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.4,"vendor":null,"product":"Android","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2021-39711","published":"2022-03-16T14:03:42.000Z","updated":"2024-08-04T02:13:37.838Z","title":"In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to Incorrect Size Value. This could lead to local information disclosure…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2021-39710","published":"2022-03-16T14:03:41.000Z","updated":"2024-08-04T02:13:37.930Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-202160245References: N/A","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00518,"kevAdded":null},{"id":"CVE-2021-39688","published":"2022-02-11T17:41:00.000Z","updated":"2024-08-04T02:13:37.777Z","title":"In TBD of TBD, there is a possible out of bounds read due to TBD. This could lead to local information disclosure with no additional execution privileges…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2021-39687","published":"2022-02-11T17:40:59.000Z","updated":"2024-08-04T02:13:37.747Z","title":"In HandleTransactionIoEvent of actuator_driver.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2021-39677","published":"2022-02-11T17:40:59.000Z","updated":"2024-08-04T02:13:37.759Z","title":"In startVideoStream() there is a possibility of an OOB Read in the heap, when the camera buffer is ‘zero’ in size.Product: AndroidVersions: Android-11Android…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00392,"kevAdded":null},{"id":"CVE-2021-0524","published":"2022-02-11T17:40:58.000Z","updated":"2024-08-03T15:40:01.317Z","title":"In isServiceDistractionOptimized of CarPackageManagerService.java, there is a possible disclosure of installed packages due to side channel information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2021-39676","published":"2022-02-11T17:40:56.000Z","updated":"2024-08-04T02:13:37.806Z","title":"In writeThrowable of AndroidFuture.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00123,"kevAdded":null},{"id":"CVE-2021-39672","published":"2022-02-11T17:40:56.000Z","updated":"2024-08-04T02:13:37.756Z","title":"In fastboot, there is a possible secure boot bypass due to a configuration error. This could lead to local escalation of privilege with no additional execution…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2021-39675","published":"2022-02-11T17:40:55.000Z","updated":"2024-08-04T02:13:37.698Z","title":"In GKI_getbuf of gki_buffer.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.05927,"kevAdded":null},{"id":"CVE-2021-39674","published":"2022-02-11T17:40:54.000Z","updated":"2024-08-04T02:13:37.586Z","title":"In btm_sec_connected and btm_sec_disconnected of btm_sec.cc file , there is a possible use after free. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00148,"kevAdded":null},{"id":"CVE-2021-39671","published":"2022-02-11T17:40:53.000Z","updated":"2024-08-04T02:13:37.632Z","title":"In code generated by aidl_const_expressions.cpp, there is a possible out of bounds read due to uninitialized data. This could lead to information disclosure…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.0049,"kevAdded":null},{"id":"CVE-2021-39669","published":"2022-02-11T17:40:53.000Z","updated":"2024-08-04T02:13:37.985Z","title":"In onCreate of InstallCaCertificateWarning.java, there is a possible way to mislead an user about CA installation circumstances due to a tapjacking/overlay…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2021-39668","published":"2022-02-11T17:40:52.000Z","updated":"2024-08-04T02:13:37.768Z","title":"In onActivityViewReady of DetailDialog.kt, there is a possible Intent Redirect due to a confused deputy. This could lead to local escalation of privilege that…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00132,"kevAdded":null},{"id":"CVE-2021-39666","published":"2022-02-11T17:40:51.000Z","updated":"2024-08-04T02:13:37.779Z","title":"In extract of MediaMetricsItem.h, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2021-39665","published":"2022-02-11T17:40:50.000Z","updated":"2024-08-04T02:13:37.593Z","title":"In checkSpsUpdated of AAVCAssembler.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00693,"kevAdded":null},{"id":"CVE-2021-39664","published":"2022-02-11T17:40:49.000Z","updated":"2024-08-04T02:13:37.614Z","title":"In LoadedPackage::Load of LoadedArsc.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00128,"kevAdded":null},{"id":"CVE-2021-39663","published":"2022-02-11T17:40:49.000Z","updated":"2024-08-04T02:13:37.623Z","title":"In openFileAndEnforcePathPermissionsHelper of MediaProvider.java, there is a possible bypass of a permissions check due to a confused deputy. This could lead…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0015,"kevAdded":null},{"id":"CVE-2021-39662","published":"2022-02-11T17:40:48.000Z","updated":"2024-08-04T02:13:37.757Z","title":"In checkUriPermission of MediaProvider.java , there is a possible way to gain access to the content of media provider collections due to a missing permission…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2021-39658","published":"2022-02-11T17:40:47.000Z","updated":"2024-08-04T02:13:37.704Z","title":"ismsEx service is a vendor service in unisoc equipment。ismsEx service is an extension of sms system service，but it does not check the permissions of the…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00573,"kevAdded":null},{"id":"CVE-2021-39635","published":"2022-02-11T17:40:46.000Z","updated":"2024-08-04T02:13:37.663Z","title":"ims_ex is a vendor system service used to manage VoLTE in unisoc devices，But it does not verify the caller's permissions，so that normal apps (No phone…","severity":"CRITICAL","score":9.1,"vendor":null,"product":"Android","kev":false,"epss":0.005,"kevAdded":null},{"id":"CVE-2021-39631","published":"2022-02-11T17:40:45.000Z","updated":"2024-08-04T02:13:37.350Z","title":"In clear_data_dlg_text of strings.xml, there is a possible situation when \"Clear storage\" functionality sets up the wrong security/privacy expectations due to…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2021-39619","published":"2022-02-11T17:40:44.000Z","updated":"2024-08-04T02:13:37.351Z","title":"In updatePackageMappingsData of UsageStatsService.java, there is a possible way to bypass security and privacy settings of app usage due to an unusual root…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2021-39616","published":"2022-02-11T17:40:44.000Z","updated":"2024-08-04T02:13:37.439Z","title":"Summary:Product: AndroidVersions: Android SoCAndroid ID: A-204686438","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2021-1037","published":"2022-01-14T19:11:25.000Z","updated":"2024-08-03T15:55:18.517Z","title":"The broadcast that DevicePickerFragment sends when a new device is paired doesn't have any permission checks, so any app can register to listen for it. This…","severity":"MEDIUM","score":5.3,"vendor":null,"product":"Android","kev":false,"epss":0.00316,"kevAdded":null},{"id":"CVE-2021-1036","published":"2022-01-14T19:11:23.000Z","updated":"2024-08-03T15:55:18.447Z","title":"In LocationSettingsActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking/overlay attack. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0032,"kevAdded":null},{"id":"CVE-2021-1035","published":"2022-01-14T19:11:22.000Z","updated":"2024-08-03T15:55:18.499Z","title":"In setLaunchIntent of BluetoothDevicePickerPreferenceController.java, there is a possible way to invoke an arbitrary broadcast receiver due to a confused…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00122,"kevAdded":null},{"id":"CVE-2021-39684","published":"2022-01-14T19:11:20.000Z","updated":"2024-08-04T02:13:37.757Z","title":"In target_init of gs101/abl/target/slider/target.c, there is a possible allocation of RWX memory due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00128,"kevAdded":null},{"id":"CVE-2021-39683","published":"2022-01-14T19:11:19.000Z","updated":"2024-08-04T02:13:37.642Z","title":"In copy_from_mbox of sss_ice_util.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00121,"kevAdded":null},{"id":"CVE-2021-39682","published":"2022-01-14T19:11:17.000Z","updated":"2024-08-04T02:13:37.776Z","title":"In mgm_alloc_page of memory_group_manager.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00122,"kevAdded":null},{"id":"CVE-2021-39681","published":"2022-01-14T19:11:16.000Z","updated":"2024-08-04T02:13:37.669Z","title":"In delete_protocol of main.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2021-39680","published":"2022-01-14T19:11:14.000Z","updated":"2024-08-04T02:13:37.729Z","title":"In sec_SHA256_Transform of sha256_core.c, there is a possible way to read heap data due to uninitialized data. This could lead to local information disclosure…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2021-39679","published":"2022-01-14T19:11:13.000Z","updated":"2024-08-04T02:13:37.936Z","title":"In init of vendor_graphicbuffer_meta.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2021-39678","published":"2022-01-14T19:11:12.000Z","updated":"2024-08-04T02:13:37.744Z","title":"In <TBD> of <TBD>, there is a possible bypass of Factory Reset Protection due to <TBD>. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00135,"kevAdded":null},{"id":"CVE-2021-39659","published":"2022-01-14T19:11:11.000Z","updated":"2024-08-04T02:13:37.814Z","title":"In sortSimPhoneAccountsForEmergency of CreateConnectionProcessor.java, there is a possible prevention of access to emergency calling due to an unhandled…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2021-39634","published":"2022-01-14T19:11:09.000Z","updated":"2024-08-04T02:13:37.270Z","title":"In fs/eventpoll.c, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00254,"kevAdded":null},{"id":"CVE-2021-39633","published":"2022-01-14T19:11:07.000Z","updated":"2024-08-04T02:13:37.423Z","title":"In gre_handle_offloads of ip_gre.c, there is a possible page fault due to an invalid memory access. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00178,"kevAdded":null},{"id":"CVE-2021-39632","published":"2022-01-14T19:11:06.000Z","updated":"2024-08-04T02:13:37.330Z","title":"In inotify_cb of events.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00122,"kevAdded":null},{"id":"CVE-2021-39630","published":"2022-01-14T19:11:05.000Z","updated":"2024-08-04T02:13:37.627Z","title":"In executeRequest of OverlayManagerService.java, there is a possible way to control fabricated overlays from adb shell due to a permissions bypass. This could…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00125,"kevAdded":null},{"id":"CVE-2021-39629","published":"2022-01-14T19:11:03.000Z","updated":"2024-08-04T02:13:37.332Z","title":"In phTmlNfc_Init and phTmlNfc_CleanUp of phTmlNfc.cc, there is a possible use after free due to a race condition. This could lead to local escalation of…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2021-39628","published":"2022-01-14T19:11:02.000Z","updated":"2024-08-04T02:13:37.277Z","title":"In StatusBar.java, there is a possible disclosure of notification content on the lockscreen due to a logic error in the code. This could lead to local…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2021-39627","published":"2022-01-14T19:11:00.000Z","updated":"2024-08-04T02:13:37.762Z","title":"In sendLegacyVoicemailNotification of LegacyModeSmsHandler.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00128,"kevAdded":null},{"id":"CVE-2021-39626","published":"2022-01-14T19:10:59.000Z","updated":"2024-08-04T02:13:37.299Z","title":"In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00162,"kevAdded":null},{"id":"CVE-2021-39625","published":"2022-01-14T19:10:57.000Z","updated":"2024-08-04T02:13:37.302Z","title":"In showCarrierAppInstallationNotification of EuiccNotificationManager.java, there is a possible way to gain an access to MediaProvider content due to an unsafe…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.0013,"kevAdded":null},{"id":"CVE-2021-39623","published":"2022-01-14T19:10:56.000Z","updated":"2024-08-04T02:13:37.343Z","title":"In doRead of SimpleDecodingSource.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.02041,"kevAdded":null},{"id":"CVE-2021-39622","published":"2022-01-14T19:10:55.000Z","updated":"2024-08-04T02:13:37.261Z","title":"In GBoard, there is a possible way to bypass Factory Reset Protection due to a missing permission check. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2021-39621","published":"2022-01-14T19:10:53.000Z","updated":"2024-08-04T02:13:37.381Z","title":"In sendLegacyVoicemailNotification of LegacyModeSmsHandler.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00128,"kevAdded":null},{"id":"CVE-2021-39620","published":"2022-01-14T19:10:52.000Z","updated":"2024-08-04T02:13:37.368Z","title":"In ipcSetDataReference of Parcel.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2021-39618","published":"2022-01-14T19:10:51.000Z","updated":"2024-08-04T02:13:37.417Z","title":"In multiple methods of EuiccNotificationManager.java, there is a possible way to install existing packages without user consent due to an unsafe PendingIntent.…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00122,"kevAdded":null},{"id":"CVE-2021-1049","published":"2022-01-14T19:10:50.000Z","updated":"2024-08-03T15:55:18.449Z","title":"Hacker one bug ID: 1343975Product: AndroidVersions: Android SoCAndroid ID: A-204256722","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00666,"kevAdded":null},{"id":"CVE-2021-0959","published":"2022-01-14T19:10:49.000Z","updated":"2024-08-03T15:55:18.226Z","title":"In jit_memory_region.cc, there is a possible bypass of memory restrictions due to a logic error in the code. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00146,"kevAdded":null},{"id":"CVE-2021-0674","published":"2021-12-17T16:10:17.000Z","updated":"2024-08-03T15:47:28.249Z","title":"In alac decoder, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"MT6570, MT6580, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6883, MT6885, MT6889, MT6893, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8176, MT8183, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797","kev":false,"epss":0.00511,"kevAdded":null},{"id":"CVE-2021-0903","published":"2021-12-17T16:10:16.000Z","updated":"2024-08-03T15:47:28.417Z","title":"In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2021-0673","published":"2021-12-17T16:10:16.000Z","updated":"2024-08-03T15:47:28.334Z","title":"In Audio Aurisys HAL, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"MT6779, MT6781, MT6785, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8183, MT8185, MT8195, MT8321, MT8385, MT8765, MT8766, MT8768, MT8771, MT8786, MT8788, MT8789, MT8791, MT8797","kev":false,"epss":0.00671,"kevAdded":null},{"id":"CVE-2021-0902","published":"2021-12-17T16:10:15.000Z","updated":"2024-08-03T15:47:28.420Z","title":"In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2021-0901","published":"2021-12-17T16:10:14.000Z","updated":"2024-08-03T15:47:28.432Z","title":"In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2021-0900","published":"2021-12-17T16:10:13.000Z","updated":"2024-08-03T15:47:28.296Z","title":"In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2021-0899","published":"2021-12-17T16:10:13.000Z","updated":"2024-08-03T15:47:28.423Z","title":"In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2021-0898","published":"2021-12-17T16:10:12.000Z","updated":"2024-08-03T15:47:28.335Z","title":"In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2021-0897","published":"2021-12-17T16:10:11.000Z","updated":"2024-08-03T15:47:28.289Z","title":"In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2021-0896","published":"2021-12-17T16:10:11.000Z","updated":"2024-08-03T15:47:28.618Z","title":"In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2021-0895","published":"2021-12-17T16:10:10.000Z","updated":"2024-08-03T15:47:28.581Z","title":"In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2021-0894","published":"2021-12-17T16:10:09.000Z","updated":"2024-08-03T15:47:28.254Z","title":"In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2021-0893","published":"2021-12-17T16:10:08.000Z","updated":"2024-08-03T15:47:28.442Z","title":"In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2021-0679","published":"2021-12-17T16:10:08.000Z","updated":"2024-08-03T15:47:28.405Z","title":"In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2021-0678","published":"2021-12-17T16:10:07.000Z","updated":"2024-08-03T15:47:28.257Z","title":"In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2021-0677","published":"2021-12-17T16:10:06.000Z","updated":"2024-08-03T15:47:28.231Z","title":"In ccu driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"MT6833, MT6853, MT6873, MT6877, MT6885, MT6889, MT8771, MT8791","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2021-0676","published":"2021-12-17T16:10:06.000Z","updated":"2024-08-03T15:47:28.289Z","title":"In geniezone driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"MT6762, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8735A, MT8735B, MT8765, MT8766, MT8768, MT8771, MT8786, MT8788, MT8789, MT8791, MT8797","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2021-1038","published":"2021-12-15T18:06:57.000Z","updated":"2024-08-03T15:55:18.485Z","title":"In UserDetailsActivity of AndroidManifest.xml, there is a possible DoS due to a tapjacking/overlay attack. This could lead to local denial of service with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2021-1040","published":"2021-12-15T18:06:56.000Z","updated":"2024-08-03T15:55:18.446Z","title":"In onCreate of BluetoothPairingSelectionFragment.java, there is a possible EoP due to a tapjacking/overlay attack. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2021-1039","published":"2021-12-15T18:06:56.000Z","updated":"2024-08-03T15:55:18.447Z","title":"In NotificationAccessActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking/overlay attack. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2021-39646","published":"2021-12-15T18:06:55.000Z","updated":"2024-08-04T02:13:37.663Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-201537251References: N/A","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00425,"kevAdded":null},{"id":"CVE-2021-39644","published":"2021-12-15T18:06:54.000Z","updated":"2024-08-04T02:13:37.347Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-199809304References: N/A","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00468,"kevAdded":null},{"id":"CVE-2021-39645","published":"2021-12-15T18:06:53.000Z","updated":"2024-08-04T02:13:37.771Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-199805112References: N/A","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00561,"kevAdded":null},{"id":"CVE-2021-0976","published":"2021-12-15T18:06:53.000Z","updated":"2024-08-03T15:55:18.023Z","title":"In toBARK of floor0.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00671,"kevAdded":null},{"id":"CVE-2021-39647","published":"2021-12-15T18:06:52.000Z","updated":"2024-08-04T02:13:37.381Z","title":"In mon_smc_load_sp of gs101-sc/plat/samsung/exynos/soc/exynos9845/smc_booting.S, there is a possible reinitialization of TEE due to improper locking. This…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2021-39639","published":"2021-12-15T18:06:51.000Z","updated":"2024-08-04T02:13:37.729Z","title":"In TBD of fvp.c, there is a possible way to glitch CPU behavior due to a missing permission check. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":6.8,"vendor":null,"product":"Android","kev":false,"epss":0.00129,"kevAdded":null},{"id":"CVE-2021-1047","published":"2021-12-15T18:06:50.000Z","updated":"2024-08-03T15:55:18.497Z","title":"In valid_ipc_dram_addr of cm_access_control.c, there is a possible out of bounds read due to an integer overflow. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00126,"kevAdded":null},{"id":"CVE-2021-1004","published":"2021-12-15T18:06:49.000Z","updated":"2024-08-03T15:55:18.450Z","title":"In getConfiguredNetworks of WifiServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due to a missing…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00107,"kevAdded":null},{"id":"CVE-2021-0995","published":"2021-12-15T18:06:49.000Z","updated":"2024-08-03T15:55:18.421Z","title":"In registerSuggestionConnectionStatusListener of WifiServiceImpl.java, there is a possible way to determine whether an app is installed, without query…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2021-0973","published":"2021-12-15T18:06:48.000Z","updated":"2024-08-03T15:55:17.951Z","title":"In isFileUri of UriUtil.java, there is a possible way to bypass ignoring file://URI attachment due to improper handling of case sensitivity. This could lead to…","severity":"MEDIUM","score":5,"vendor":null,"product":"Android","kev":false,"epss":0.00137,"kevAdded":null},{"id":"CVE-2021-1008","published":"2021-12-15T18:06:47.000Z","updated":"2024-08-03T15:55:18.152Z","title":"In addSubInfo of SubscriptionController.java, there is a possible way to force the user to make a factory reset due to a logic error in the code. This could…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2021-1023","published":"2021-12-15T18:06:46.000Z","updated":"2024-08-03T15:55:18.397Z","title":"In onCreate of RequestIgnoreBatteryOptimizations.java, there is a possible way to determine whether an app is installed, without query permissions, due to side…","severity":"MEDIUM","score":5,"vendor":null,"product":"Android","kev":false,"epss":0.00121,"kevAdded":null},{"id":"CVE-2021-0999","published":"2021-12-15T18:06:46.000Z","updated":"2024-08-03T15:55:18.035Z","title":"In the broadcast definition in AndroidManifest.xml, there is a possible way to set the A2DP bluetooth device connection state due to a missing permission…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2021-39642","published":"2021-12-15T18:06:45.000Z","updated":"2024-08-04T02:13:37.410Z","title":"In synchronous_process_io_entries of lwis_ioctl.c, there is a possible out of bounds write due to a race condition. This could lead to local escalation of…","severity":"MEDIUM","score":6.4,"vendor":null,"product":"Android","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2021-1046","published":"2021-12-15T18:06:44.000Z","updated":"2024-08-03T15:55:18.529Z","title":"In lwis_dpm_update_clock of lwis_device_dpm.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00123,"kevAdded":null},{"id":"CVE-2021-39643","published":"2021-12-15T18:06:43.000Z","updated":"2024-08-04T02:13:37.329Z","title":"In ic_startRetrieveEntryValue of acropora/app/identity/ic.c, there is a possible bypass of defense-in-depth due to missing validation of the return value. This…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00123,"kevAdded":null},{"id":"CVE-2021-39638","published":"2021-12-15T18:06:43.000Z","updated":"2024-08-04T02:13:37.350Z","title":"In periodic_io_work_func of lwis_periodic_io.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00122,"kevAdded":null},{"id":"CVE-2021-1012","published":"2021-12-15T18:06:42.000Z","updated":"2024-08-03T15:55:18.326Z","title":"In onResume of NotificationAccessDetails.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2021-1021","published":"2021-12-15T18:06:41.000Z","updated":"2024-08-03T15:55:18.570Z","title":"In snoozeNotificationInt of NotificationManagerService.java, there is a possible way to disable notification for an arbitrary user due to improper input…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00125,"kevAdded":null},{"id":"CVE-2021-1020","published":"2021-12-15T18:06:41.000Z","updated":"2024-08-03T15:55:18.421Z","title":"In snoozeNotification of NotificationListenerService.java, there is a possible way to disable notification for an arbitrary user due to improper input…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00125,"kevAdded":null},{"id":"CVE-2021-1019","published":"2021-12-15T18:06:40.000Z","updated":"2024-08-03T15:55:18.521Z","title":"In snoozeNotification of NotificationListenerService.java, there is a possible permission confusion due to a misleading user consent dialog. This could lead to…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00125,"kevAdded":null},{"id":"CVE-2021-1026","published":"2021-12-15T18:06:39.000Z","updated":"2024-08-03T15:55:18.189Z","title":"In startRanging of RttServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2021-1031","published":"2021-12-15T18:06:38.000Z","updated":"2024-08-03T15:55:18.542Z","title":"In cancelNotificationsFromListener of NotificationManagerService.java, there is a possible way to determine whether an app is installed, without query…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2021-39657","published":"2021-12-15T18:06:37.000Z","updated":"2024-08-04T02:13:37.755Z","title":"In ufshcd_eh_device_reset_handler of ufshcd.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00159,"kevAdded":null},{"id":"CVE-2021-1030","published":"2021-12-15T18:06:37.000Z","updated":"2024-08-03T15:55:18.528Z","title":"In setNotificationsShownFromListener of NotificationManagerService.java, there is a possible way to determine whether an app is installed, without query…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2021-1002","published":"2021-12-15T18:06:36.000Z","updated":"2024-08-03T15:55:18.491Z","title":"In WT_Interpolate of eas_wtengine.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.0078,"kevAdded":null},{"id":"CVE-2021-39652","published":"2021-12-15T18:06:35.000Z","updated":"2024-08-04T02:13:37.965Z","title":"In sec_ts_parsing_cmds of (TBD), there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00127,"kevAdded":null},{"id":"CVE-2021-1018","published":"2021-12-15T18:06:34.000Z","updated":"2024-08-03T15:55:18.307Z","title":"In adjustStreamVolume of AudioService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2021-0989","published":"2021-12-15T18:06:34.000Z","updated":"2024-08-03T15:55:18.402Z","title":"In hasManageOngoingCallsPermission of TelecomServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2021-0993","published":"2021-12-15T18:06:33.000Z","updated":"2024-08-03T15:55:18.492Z","title":"In getOffsetBeforeAfter of TextLine.java, there is a possible denial of service due to resource exhaustion. This could lead to remote denial of service with no…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00582,"kevAdded":null},{"id":"CVE-2021-0994","published":"2021-12-15T18:06:32.000Z","updated":"2024-08-03T15:55:18.159Z","title":"In requestRouteToHostAddress of ConnectivityService.java, there is a possible way to determine whether an app is installed, without query permissions, due to a…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00107,"kevAdded":null},{"id":"CVE-2021-1025","published":"2021-12-15T18:06:31.000Z","updated":"2024-08-03T15:55:18.489Z","title":"In hasNamedWallpaper of WallpaperManagerService.java, there is a possible way to determine whether an app is installed, without query permissions, due to a…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2021-39653","published":"2021-12-15T18:06:30.000Z","updated":"2024-08-04T02:13:37.340Z","title":"In (TBD) of (TBD), there is a possible way to boot with a hidden debug policy due to a missing warning to the user. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00123,"kevAdded":null},{"id":"CVE-2021-39637","published":"2021-12-15T18:06:30.000Z","updated":"2024-08-04T02:13:37.430Z","title":"In CreateDeviceInfo of trusty_remote_provisioning_context.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00123,"kevAdded":null},{"id":"CVE-2021-0998","published":"2021-12-15T18:06:29.000Z","updated":"2024-08-03T15:55:18.031Z","title":"In 'ih264e_find_bskip_params()' of ih264e_me.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00121,"kevAdded":null},{"id":"CVE-2021-1034","published":"2021-12-15T18:06:28.000Z","updated":"2024-08-03T15:55:18.526Z","title":"In getLine1NumberForDisplay of PhoneInterfaceManager.java, there is apossible way to determine whether an app is installed, without querypermissions due to a…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2021-39651","published":"2021-12-15T18:06:27.000Z","updated":"2024-08-04T02:13:37.373Z","title":"In TBD of TBD, there is a possible way to access PIN protected settings bypassing PIN confirmation due to a missing permission check. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2021-1028","published":"2021-12-15T18:06:27.000Z","updated":"2024-08-03T15:55:18.586Z","title":"In setClientStateLocked of SurfaceFlinger.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2021-1029","published":"2021-12-15T18:06:26.000Z","updated":"2024-08-03T15:55:18.207Z","title":"In setClientStateLocked of SurfaceFlinger.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2021-39655","published":"2021-12-15T18:06:25.000Z","updated":"2024-08-04T02:13:37.438Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-192641593References: N/A","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00468,"kevAdded":null},{"id":"CVE-2021-1027","published":"2021-12-15T18:06:25.000Z","updated":"2024-08-03T15:55:18.426Z","title":"In setTransactionState of SurfaceFlinger, there is possible arbitrary code execution in a privileged process due to improper casting. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2021-0978","published":"2021-12-15T18:06:24.000Z","updated":"2024-08-03T15:55:18.092Z","title":"In getSerialForPackage of DeviceIdentifiersPolicyService.java, there is a possible way to determine whether an app is installed, without query permissions, due…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00107,"kevAdded":null},{"id":"CVE-2021-0984","published":"2021-12-15T18:06:23.000Z","updated":"2024-08-03T15:55:18.145Z","title":"In onNullBinding of ManagedServices.java, there is a possible permission bypass due to an incorrectly unbound service. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2021-0986","published":"2021-12-15T18:06:22.000Z","updated":"2024-08-03T15:55:18.227Z","title":"In hasGrantedPolicy of DevicePolicyManagerService.java, there is a possible information disclosure about the device owner, profile owner, or device admin due…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2021-0982","published":"2021-12-15T18:06:22.000Z","updated":"2024-08-03T15:55:18.454Z","title":"In getOrganizationNameForUser of DevicePolicyManagerService.java, there is a possible organization name disclosure due to a missing permission check. This…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00107,"kevAdded":null},{"id":"CVE-2021-0983","published":"2021-12-15T18:06:21.000Z","updated":"2024-08-03T15:55:18.113Z","title":"In createAdminSupportIntent of DevicePolicyManagerService.java, there is a possible disclosure of information about installed device/profile owner package name…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2021-0988","published":"2021-12-15T18:06:20.000Z","updated":"2024-08-03T15:55:18.361Z","title":"In getLaunchedFromUid and getLaunchedFromPackage of ActivityClientController.java, there is a possible way to determine whether an app is installed, without…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2021-0981","published":"2021-12-15T18:06:20.000Z","updated":"2024-08-03T15:55:18.139Z","title":"In enqueueNotificationInternal of NotificationManagerService.java, there is a possible way to run a foreground service without showing a notification due to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2021-0979","published":"2021-12-15T18:06:19.000Z","updated":"2024-08-03T15:55:17.958Z","title":"In isRequestPinItemSupported of ShortcutService.java, there is a possible cross-user leak of packages in which the default launcher supports requests to create…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2021-1024","published":"2021-12-15T18:06:18.000Z","updated":"2024-08-03T15:55:18.395Z","title":"In onEventReceived of EventResultPersister.java, there is a possible intent redirection due to a confused deputy. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2021-0997","published":"2021-12-15T18:06:17.000Z","updated":"2024-08-03T15:55:18.229Z","title":"In handleUpdateNetworkState of GnssNetworkConnectivityHandler.java , there is a possible APN disclosure due to log information disclosure. This could lead to…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2021-0987","published":"2021-12-15T18:06:17.000Z","updated":"2024-08-03T15:55:18.454Z","title":"In getNeighboringCellInfo of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2021-1001","published":"2021-12-15T18:06:16.000Z","updated":"2024-08-03T15:55:18.466Z","title":"In PVInitVideoEncoder of mp4enc_api.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00121,"kevAdded":null},{"id":"CVE-2021-1009","published":"2021-12-15T18:06:15.000Z","updated":"2024-08-03T15:55:18.434Z","title":"In setApplicationCategoryHint of PackageManagerService.java, there is a possible way to determine whether an app is installed, without query permissions, due…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2021-0985","published":"2021-12-15T18:06:15.000Z","updated":"2024-08-03T15:55:18.079Z","title":"In onReceive of AlertReceiver.java, there is a possible way to dismiss system dialog due to a missing permission check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00107,"kevAdded":null},{"id":"CVE-2021-1010","published":"2021-12-15T18:06:14.000Z","updated":"2024-08-03T15:55:18.486Z","title":"In getSigningKeySet of PackageManagerService.java, there is a missing permission check. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2021-1003","published":"2021-12-15T18:06:13.000Z","updated":"2024-08-03T15:55:18.206Z","title":"In adjustStreamVolume of AudioService.java, there is a possible way for unprivileged app to change audio stream volume due to a confused deputy. This could…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2021-1014","published":"2021-12-15T18:06:12.000Z","updated":"2024-08-03T15:55:18.141Z","title":"In getNetworkTypeForSubscriber of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions, due…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2021-1011","published":"2021-12-15T18:06:12.000Z","updated":"2024-08-03T15:55:18.211Z","title":"In setPackageStoppedState of PackageManagerService.java, there is a missing permission check. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2021-1005","published":"2021-12-15T18:06:11.000Z","updated":"2024-08-03T15:55:18.358Z","title":"In getDeviceIdWithFeature of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2021-1015","published":"2021-12-15T18:06:10.000Z","updated":"2024-08-03T15:55:18.365Z","title":"In getMeidForSlot of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to side…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2021-1013","published":"2021-12-15T18:06:09.000Z","updated":"2024-08-03T15:55:18.323Z","title":"In checkExistsAndEnforceCannotModifyImmutablyRestrictedPermission of PermissionManagerService.java, there is a possible way to determine whether an app is…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2021-0990","published":"2021-12-15T18:06:09.000Z","updated":"2024-08-03T15:55:17.983Z","title":"In getDeviceId of PhoneSubInfoController.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2021-1032","published":"2021-12-15T18:06:08.000Z","updated":"2024-08-03T15:55:18.467Z","title":"In getMimeGroup of PackageManagerService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2021-0769","published":"2021-12-15T18:06:07.000Z","updated":"2024-08-03T15:47:28.372Z","title":"In onCreate of AllowBindAppWidgetActivity.java, there is a possible bypass of user interaction requirements due to unclear UI. This could lead to local…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00126,"kevAdded":null},{"id":"CVE-2021-1016","published":"2021-12-15T18:06:06.000Z","updated":"2024-08-03T15:55:18.438Z","title":"In onCreate of UsbPermissionActivity.java, there is a possible way to grant an app access to USB without informed user consent due to a tapjacking/overlay…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2021-1006","published":"2021-12-15T18:06:06.000Z","updated":"2024-08-03T15:55:18.460Z","title":"In several functions of DatabaseManager.java, there is a possible leak of Bluetooth MAC addresses due to log information disclosure. This could lead to local…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2021-0977","published":"2021-12-15T18:06:05.000Z","updated":"2024-08-03T15:55:18.041Z","title":"In phNxpNHal_DtaUpdate of phNxpNciHal_dta.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2021-1017","published":"2021-12-15T18:06:04.000Z","updated":"2024-08-03T15:55:18.161Z","title":"In AdapterService and GattService definition of AndroidManifest.xml, there is a possible way to disable bluetooth connection due to a missing permission check.…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2021-0991","published":"2021-12-15T18:06:03.000Z","updated":"2024-08-03T15:55:18.363Z","title":"In OnMetadataChangedListener of AdvancedBluetoothDetailsHeaderController.java, there is a possible leak of Bluetooth MAC addresses due to log information…","severity":"LOW","score":2.4,"vendor":null,"product":"Android","kev":false,"epss":0.0016,"kevAdded":null},{"id":"CVE-2021-1022","published":"2021-12-15T18:06:00.000Z","updated":"2024-08-03T15:55:18.406Z","title":"In btif_in_hf_client_generic_evt of btif_hf_client.cc, there is a possible Bluetooth service crash due to a missing null check. This could lead to remote…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00773,"kevAdded":null},{"id":"CVE-2021-0996","published":"2021-12-15T18:06:00.000Z","updated":"2024-08-03T15:55:18.493Z","title":"In nfaHciCallback of HciEventManager.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":4.5,"vendor":null,"product":"Android","kev":false,"epss":0.00166,"kevAdded":null},{"id":"CVE-2021-0992","published":"2021-12-15T18:05:59.000Z","updated":"2024-08-03T15:55:18.399Z","title":"In onCreate of PaymentDefaultDialog.java, there is a possible way to change a default payment app without user consent due to tapjack overlay. This could lead…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2021-39656","published":"2021-12-15T18:05:58.000Z","updated":"2024-08-04T02:13:37.837Z","title":"In __configfs_open_file of file.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2021-39650","published":"2021-12-15T18:05:57.000Z","updated":"2024-08-04T02:13:37.328Z","title":"In (TBD) of (TBD), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00122,"kevAdded":null},{"id":"CVE-2021-39649","published":"2021-12-15T18:05:57.000Z","updated":"2024-08-04T02:13:37.373Z","title":"In regmap_exit of regmap.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2021-1007","published":"2021-12-15T18:05:56.000Z","updated":"2024-08-03T15:55:18.200Z","title":"In btu_hcif_process_event of btu_hcif.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2021-39648","published":"2021-12-15T18:05:55.000Z","updated":"2024-08-04T02:13:37.668Z","title":"In gadget_dev_desc_UDC_show of configfs.c, there is a possible disclosure of kernel heap memory due to a race condition. This could lead to local information…","severity":"MEDIUM","score":4.1,"vendor":null,"product":"Android","kev":false,"epss":0.00167,"kevAdded":null},{"id":"CVE-2021-39641","published":"2021-12-15T18:05:54.000Z","updated":"2024-08-04T02:13:37.328Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-126949257References: N/A","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00468,"kevAdded":null},{"id":"CVE-2021-39640","published":"2021-12-15T18:05:54.000Z","updated":"2024-08-04T02:13:37.422Z","title":"In __dwc3_gadget_ep0_queue of ep0.c, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2021-39636","published":"2021-12-15T18:05:53.000Z","updated":"2024-08-04T02:13:37.313Z","title":"In do_ipt_get_ctl and do_ipt_set_ctl of ip_tables.c, there is a possible way to leak kernel information due to uninitialized data. This could lead to local…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00227,"kevAdded":null},{"id":"CVE-2021-0904","published":"2021-12-15T18:05:52.000Z","updated":"2024-08-03T15:55:16.846Z","title":"In SRAMROM, there is a possible permission bypass due to an insecure permission setting. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6771, MT8183, MT8385, MT8788","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2021-0675","published":"2021-12-15T18:05:52.000Z","updated":"2024-08-03T15:47:28.238Z","title":"In alac decoder, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"MT6570, MT6580, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6883, MT6885, MT6889, MT6893, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8176, MT8183, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797","kev":false,"epss":0.00538,"kevAdded":null},{"id":"CVE-2021-0958","published":"2021-12-15T18:05:51.000Z","updated":"2024-08-03T15:55:18.074Z","title":"In update of km_compat.cpp, there is a possible loss of potentially sensitive data due to a logic error in the code. This could lead to local denial of service…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2021-0969","published":"2021-12-15T18:05:50.000Z","updated":"2024-08-03T15:55:18.241Z","title":"In getTitle of AccessPoint.java, there is a possible unhandled exception due to a missing null check. This could lead to remote denial of service if a proximal…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00582,"kevAdded":null},{"id":"CVE-2021-0967","published":"2021-12-15T18:05:49.000Z","updated":"2024-08-03T15:55:18.070Z","title":"In vorbis_book_decodev_set of codebook.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.01046,"kevAdded":null},{"id":"CVE-2021-0963","published":"2021-12-15T18:05:49.000Z","updated":"2024-08-03T15:55:17.973Z","title":"In onCreate of KeyChainActivity.java, there is a possible way to use an app certificate stored in keychain due to a tapjacking/overlay attack. This could lead…","severity":"HIGH","score":7.1,"vendor":null,"product":"Android","kev":false,"epss":0.00204,"kevAdded":null},{"id":"CVE-2021-0966","published":"2021-12-15T18:05:48.000Z","updated":"2024-08-03T15:55:17.941Z","title":"In code generated by BuildParcelFields of generate_cpp.cpp, there is a possible way for a crafted parcelable to reveal uninitialized memory of a target process…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2021-0968","published":"2021-12-15T18:05:47.000Z","updated":"2024-08-03T15:55:17.960Z","title":"In osi_malloc and osi_calloc of allocator.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00673,"kevAdded":null},{"id":"CVE-2021-0970","published":"2021-12-15T18:05:46.000Z","updated":"2024-08-03T15:55:18.098Z","title":"In createFromParcel of GpsNavigationMessage.java, there is a possible Parcel serialization/deserialization mismatch. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00209,"kevAdded":null},{"id":"CVE-2021-0961","published":"2021-12-15T18:05:46.000Z","updated":"2024-08-03T15:55:18.209Z","title":"In quota_proc_write of xt_quota2.c, there is a possible way to read kernel memory due to uninitialized data. This could lead to local information disclosure…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00149,"kevAdded":null},{"id":"CVE-2021-0952","published":"2021-12-15T18:05:45.000Z","updated":"2024-08-03T15:55:18.142Z","title":"In doCropPhoto of PhotoSelectionHandler.java, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure…","severity":"MEDIUM","score":5,"vendor":null,"product":"Android","kev":false,"epss":0.00142,"kevAdded":null},{"id":"CVE-2021-0965","published":"2021-12-15T18:05:44.000Z","updated":"2024-08-03T15:55:18.284Z","title":"In AndroidManifest.xml of Settings, there is a possible pairing of a Bluetooth device without user's consent due to a missing permission check. This could lead…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00211,"kevAdded":null},{"id":"CVE-2021-0964","published":"2021-12-15T18:05:43.000Z","updated":"2024-08-03T15:55:18.139Z","title":"In C2SoftMP3::process() of C2SoftMp3Dec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00934,"kevAdded":null},{"id":"CVE-2021-0955","published":"2021-12-15T18:05:43.000Z","updated":"2024-08-03T15:55:18.014Z","title":"In pf_write_buf of FuseDaemon.cpp, there is possible memory corruption due to a race condition. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00091,"kevAdded":null},{"id":"CVE-2021-0956","published":"2021-12-15T18:05:42.000Z","updated":"2024-08-03T15:55:18.532Z","title":"In NfcTag::discoverTechnologies (activation) of NfcTag.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.01271,"kevAdded":null},{"id":"CVE-2021-0971","published":"2021-12-15T18:05:41.000Z","updated":"2024-08-03T15:55:18.418Z","title":"In MPEG4Source::read of MPEG4Extractor.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00671,"kevAdded":null},{"id":"CVE-2021-0953","published":"2021-12-15T18:05:41.000Z","updated":"2024-08-03T15:55:18.199Z","title":"In setOnClickActivityIntent of SearchWidgetProvider.java, there is a possible way to access contacts and history bookmarks without permission due to an unsafe…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2021-0704","published":"2021-12-15T18:05:40.000Z","updated":"2024-08-03T15:47:28.422Z","title":"In createNoCredentialsPermissionNotification and related functions of AccountManagerService.java, there is a possible way to retrieve accounts from the device…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00132,"kevAdded":null},{"id":"CVE-2021-0954","published":"2021-12-15T18:05:39.000Z","updated":"2024-08-03T15:55:18.270Z","title":"In ResolverActivity, there is a possible user interaction bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.0027,"kevAdded":null},{"id":"CVE-2021-1045","published":"2021-12-15T18:05:38.000Z","updated":"2024-08-03T15:55:18.554Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-195580473References: N/A","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2021-1044","published":"2021-12-15T18:05:38.000Z","updated":"2024-08-03T15:55:18.457Z","title":"In eicOpsDecryptAes128Gcm of acropora/app/identity/identity_support.c, there is a possible out of bounds write due to a missing bounds check. This could lead…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0013,"kevAdded":null},{"id":"CVE-2021-1043","published":"2021-12-15T18:05:37.000Z","updated":"2024-08-03T15:55:18.557Z","title":"In TBD of TBD, there is a possible downgrade attack due to under utilized anti-rollback protections. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2021-1042","published":"2021-12-15T18:05:36.000Z","updated":"2024-08-03T15:55:18.533Z","title":"In dsi_panel_debugfs_read_cmdset of dsi_panel.c, there is a possible disclosure of freed kernel heap memory due to a use after free. This could lead to local…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00123,"kevAdded":null},{"id":"CVE-2021-1048","published":"2021-12-15T18:05:35.000Z","updated":"2025-10-21T23:15:50.344Z","title":"In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":true,"epss":0.01058,"kevAdded":"2022-05-23"},{"id":"CVE-2021-1041","published":"2021-12-15T18:05:35.000Z","updated":"2024-08-03T15:55:18.505Z","title":"In (TBD) of (TBD), there is a possible out of bounds read due to memory corruption. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2021-0799","published":"2021-12-15T18:05:33.000Z","updated":"2024-08-03T15:47:28.634Z","title":"In ActivityThread.java, there is a possible way to collide the content provider's authorities. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2021-0919","published":"2021-12-15T18:05:32.000Z","updated":"2024-08-03T15:55:16.876Z","title":"In getService of IServiceManager.cpp, there is a possible unhandled exception due to an integer overflow. This could lead to local denial of service making the…","severity":"MEDIUM","score":5,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2021-0918","published":"2021-12-15T18:05:32.000Z","updated":"2024-08-03T15:55:16.885Z","title":"In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00464,"kevAdded":null},{"id":"CVE-2021-0920","published":"2021-12-15T18:05:31.000Z","updated":"2025-10-21T23:15:50.498Z","title":"In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.4,"vendor":null,"product":"Android","kev":true,"epss":0.00867,"kevAdded":"2022-05-23"},{"id":"CVE-2021-0921","published":"2021-12-15T18:05:30.000Z","updated":"2024-08-03T15:55:16.886Z","title":"In ParsingPackageImpl of ParsingPackageImpl.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00131,"kevAdded":null},{"id":"CVE-2021-0922","published":"2021-12-15T18:05:29.000Z","updated":"2024-08-03T15:55:16.863Z","title":"In enforceCrossUserOrProfilePermission of PackageManagerService.java, there is a possible bypass of INTERACT_ACROSS_PROFILES permission due to a missing…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2021-0924","published":"2021-12-15T18:05:28.000Z","updated":"2024-08-03T15:55:17.914Z","title":"In xhci_vendor_get_ops of xhci.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00159,"kevAdded":null},{"id":"CVE-2021-0923","published":"2021-12-15T18:05:28.000Z","updated":"2024-08-03T15:55:16.864Z","title":"In createOrUpdate of Permission.java, there is a possible way to gain internal permissions due to a missing permission check. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2021-0925","published":"2021-12-15T18:05:27.000Z","updated":"2024-08-03T15:55:16.906Z","title":"In rw_t4t_sm_detect_ndef of rw_t4t.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00988,"kevAdded":null},{"id":"CVE-2021-0649","published":"2021-12-15T18:05:26.000Z","updated":"2024-08-03T15:47:28.269Z","title":"In stopVpnProfile of Vpn.java, there is a possible VPN profile reset due to a permissions bypass. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00126,"kevAdded":null},{"id":"CVE-2021-0926","published":"2021-12-15T18:05:25.000Z","updated":"2024-08-03T15:55:16.905Z","title":"In onCreate of NfcImportVCardActivity.java, there is a possible way to add a contact without user's consent due to a missing permission check. This could lead…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00118,"kevAdded":null},{"id":"CVE-2021-0650","published":"2021-12-15T18:05:25.000Z","updated":"2024-08-03T15:47:28.226Z","title":"In WT_InterpolateNoLoop of eas_wtengine.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00996,"kevAdded":null},{"id":"CVE-2021-0927","published":"2021-12-15T18:05:24.000Z","updated":"2024-08-03T15:55:16.905Z","title":"In requestChannelBrowsable of TvInputManagerService.java, there is a possible permission bypass due to a logic error in the code. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00132,"kevAdded":null},{"id":"CVE-2021-0928","published":"2021-12-15T18:05:23.000Z","updated":"2024-08-03T15:55:17.421Z","title":"In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00376,"kevAdded":null},{"id":"CVE-2021-0930","published":"2021-12-15T18:05:22.000Z","updated":"2024-08-03T15:55:16.883Z","title":"In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00547,"kevAdded":null},{"id":"CVE-2021-0929","published":"2021-12-15T18:05:22.000Z","updated":"2024-08-03T15:55:16.897Z","title":"In ion_dma_buf_end_cpu_access and related functions of ion.c, there is a possible way to corrupt memory due to a use after free. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00163,"kevAdded":null},{"id":"CVE-2021-0931","published":"2021-12-15T18:05:21.000Z","updated":"2024-08-03T15:55:17.673Z","title":"In getAlias of BluetoothDevice.java, there is a possible way to create misleading permission dialogs due to missing data filtering. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00145,"kevAdded":null},{"id":"CVE-2021-0889","published":"2021-12-15T18:05:20.000Z","updated":"2024-08-03T15:47:28.418Z","title":"In Android TV , there is a possible silent pairing due to lack of rate limiting in the pairing flow. This could lead to remote code execution with no…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.01722,"kevAdded":null},{"id":"CVE-2021-0932","published":"2021-12-15T18:05:19.000Z","updated":"2024-08-03T15:55:17.571Z","title":"In showNotification of NavigationModeController.java, there is a possible confused deputy due to an unsafe PendingIntent. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00125,"kevAdded":null},{"id":"CVE-2021-0653","published":"2021-12-15T18:05:19.000Z","updated":"2024-08-03T15:47:28.240Z","title":"In enqueueNotification of NetworkPolicyManagerService.java, there is a possible way to retrieve a trackable identifier due to a missing permission check. This…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2021-0933","published":"2021-12-15T18:05:18.000Z","updated":"2024-08-03T15:55:17.593Z","title":"In onCreate of CompanionDeviceActivity.java or DeviceChooserActivity.java, there is a possible way for HTML tags to interfere with a consent dialog due to…","severity":"HIGH","score":8,"vendor":null,"product":"Android","kev":false,"epss":0.00389,"kevAdded":null},{"id":"CVE-2021-0434","published":"2021-12-15T18:05:17.000Z","updated":"2024-08-03T15:40:01.248Z","title":"In onReceive of BluetoothPermissionRequest.java, there is a possible phishing attack allowing a malicious Bluetooth device to acquire permissions based on…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00187,"kevAdded":null},{"id":"CVE-2021-0671","published":"2021-11-18T14:58:55.000Z","updated":"2024-08-03T15:47:28.261Z","title":"In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2021-0670","published":"2021-11-18T14:58:46.000Z","updated":"2024-08-03T15:47:28.240Z","title":"In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2021-0669","published":"2021-11-18T14:58:38.000Z","updated":"2024-08-03T15:47:28.206Z","title":"In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797, MT9636, MT9638, MT9639, MT9650, MT9652, MT9669, MT9686, MT9970, MT9980, MT9981","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2021-0668","published":"2021-11-18T14:58:28.000Z","updated":"2024-08-03T15:47:28.248Z","title":"In apusys, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT9636, MT9638, MT9639, MT9650, MT9652, MT9669, MT9686, MT9970, MT9980, MT9981","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2021-0667","published":"2021-11-18T14:58:21.000Z","updated":"2024-08-03T15:47:28.300Z","title":"In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT9636, MT9638, MT9639, MT9650, MT9652, MT9669, MT9686, MT9970, MT9980, MT9981","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2021-0666","published":"2021-11-18T14:58:13.000Z","updated":"2024-08-03T15:47:28.204Z","title":"In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797, MT9636, MT9638, MT9639, MT9650, MT9652, MT9669, MT9686, MT9970, MT9980, MT9981","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2021-0665","published":"2021-11-18T14:58:04.000Z","updated":"2024-08-03T15:47:28.229Z","title":"In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797, MT9636, MT9638, MT9639, MT9650, MT9652, MT9669, MT9686, MT9970, MT9980, MT9981","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2021-0664","published":"2021-11-18T14:57:55.000Z","updated":"2024-08-03T15:47:28.263Z","title":"In ccu, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6765, MT6768, MT6771, MT6779, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6889, MT8183, MT8385, MT8768, MT8788","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2021-0659","published":"2021-11-18T14:57:44.000Z","updated":"2024-08-03T15:47:28.246Z","title":"In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2021-0658","published":"2021-11-18T14:57:36.000Z","updated":"2024-08-03T15:47:28.306Z","title":"In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2021-0657","published":"2021-11-18T14:57:28.000Z","updated":"2024-08-03T15:47:28.218Z","title":"In apusys, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797","kev":false,"epss":0.00129,"kevAdded":null},{"id":"CVE-2021-0656","published":"2021-11-18T14:57:18.000Z","updated":"2024-08-03T15:47:28.221Z","title":"In edma driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6853, MT6853T, MT6873, MT6877, MT6883, MT6885, MT6889, MT6893, MT8195, MT8791, MT8797","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2021-0655","published":"2021-11-18T14:57:08.000Z","updated":"2024-08-03T15:47:28.249Z","title":"In mdlactl driver, there is a possible memory corruption due to an incorrect bounds check. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6873, MT6875, MT6883, MT6885, MT6889, MT6891, MT6893","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2021-0629","published":"2021-11-18T14:56:02.000Z","updated":"2024-08-03T15:47:28.324Z","title":"In mdlactl driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6873, MT6875, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797, MT9636, MT9638, MT9639, MT9650, MT9652, MT9669, MT9686, MT9970, MT9980, MT9981","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2021-0624","published":"2021-11-18T14:55:53.000Z","updated":"2024-08-03T15:47:28.237Z","title":"In flv extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"MT6580, MT6735, MT6737, MT6739, MT6750S, MT6753, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6885, MT6889, MT6893, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8735A, MT8735B, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797","kev":false,"epss":0.00126,"kevAdded":null},{"id":"CVE-2021-0623","published":"2021-11-18T14:55:44.000Z","updated":"2024-08-03T15:47:28.200Z","title":"In asf extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"MT5522, MT5527, MT5597, MT5598, MT5599, MT6580, MT6735, MT6737, MT6739, MT6750S, MT6753, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6885, MT6889, MT6893, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8186, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797, MT9256, MT9285, MT9286, MT9288, MT9629, MT9631, MT9632, MT9636, MT9638, MT9639, MT9650, MT9652, MT9669, MT9670, MT9675, MT9685, MT9686, MT9688, MT9931, MT9950, MT9970, MT9980, MT9981","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2021-0622","published":"2021-11-18T14:55:30.000Z","updated":"2024-08-03T15:47:28.181Z","title":"In asf extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"MT5522, MT5527, MT5597, MT5598, MT5599, MT6580, MT6735, MT6737, MT6739, MT6750S, MT6753, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6885, MT6889, MT6893, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797, MT9256, MT9285, MT9286, MT9288, MT9629, MT9631, MT9632, MT9636, MT9638, MT9639, MT9650, MT9652, MT9669, MT9670, MT9675, MT9685, MT9686, MT9688, MT9931, MT9950, MT9970, MT9980, MT9981","kev":false,"epss":0.00126,"kevAdded":null},{"id":"CVE-2021-0621","published":"2021-11-18T14:55:03.000Z","updated":"2024-08-03T15:47:28.224Z","title":"In asf extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"MT5522, MT5527, MT5597, MT5598, MT5599, MT6580, MT6735, MT6737, MT6739, MT6750S, MT6753, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6885, MT6889, MT6893, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8184, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797, MT9256, MT9285, MT9286, MT9288, MT9629, MT9631, MT9632, MT9636, MT9638, MT9639, MT9650, MT9652, MT9669, MT9670, MT9675, MT9685, MT9686, MT9688, MT9931, MT9950, MT9970, MT9980, MT9981","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2021-0620","published":"2021-11-18T14:54:52.000Z","updated":"2024-08-03T15:47:28.225Z","title":"In asf extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"MT5522, MT5527, MT5597, MT5598, MT5599, MT6580, MT6735, MT6737, MT6739, MT6750S, MT6753, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6885, MT6889, MT6893, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797, MT9256, MT9285, MT9286, MT9288, MT9629, MT9631, MT9632, MT9636, MT9638, MT9639, MT9650, MT9652, MT9669, MT9670, MT9675, MT9685, MT9686, MT9688, MT9931, MT9950, MT9970, MT9980, MT9981","kev":false,"epss":0.00126,"kevAdded":null},{"id":"CVE-2021-0619","published":"2021-11-18T14:54:43.000Z","updated":"2024-08-03T15:47:28.228Z","title":"In ape extractor, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"MT6739, MT6758, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6785, MT6795, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2021-0672","published":"2021-11-18T14:54:11.000Z","updated":"2024-08-03T15:47:28.235Z","title":"In Browser app, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2021-0939","published":"2021-10-25T13:20:51.000Z","updated":"2024-08-03T15:55:17.999Z","title":"In set_default_passthru_cfg of passthru.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2021-0936","published":"2021-10-25T13:20:45.000Z","updated":"2024-08-03T15:55:17.848Z","title":"In acc_read of f_accessory.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00145,"kevAdded":null},{"id":"CVE-2021-0938","published":"2021-10-25T13:20:39.000Z","updated":"2024-08-03T15:55:18.271Z","title":"In memzero_explicit of compiler-clang.h, there is a possible bypass of defense in depth due to uninitialized data. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00155,"kevAdded":null},{"id":"CVE-2021-0940","published":"2021-10-25T13:20:31.000Z","updated":"2024-08-03T15:55:18.130Z","title":"In TBD of TBD, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege in the kernel with System…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2021-0935","published":"2021-10-25T13:20:25.000Z","updated":"2024-08-03T15:55:18.050Z","title":"In ip6_xmit of ip6_output.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00195,"kevAdded":null},{"id":"CVE-2021-0941","published":"2021-10-25T13:20:17.000Z","updated":"2024-08-03T15:55:18.052Z","title":"In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00169,"kevAdded":null},{"id":"CVE-2021-0663","published":"2021-10-25T13:18:19.000Z","updated":"2024-08-03T15:47:28.247Z","title":"In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6779, MT6781, MT6785, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8797","kev":false,"epss":0.00559,"kevAdded":null},{"id":"CVE-2021-0662","published":"2021-10-25T13:18:12.000Z","updated":"2024-08-03T15:47:28.265Z","title":"In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6779, MT6781, MT6785, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8797","kev":false,"epss":0.00576,"kevAdded":null},{"id":"CVE-2021-0661","published":"2021-10-25T13:18:06.000Z","updated":"2024-08-03T15:47:28.225Z","title":"In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6779, MT6781, MT6785, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8797","kev":false,"epss":0.00576,"kevAdded":null},{"id":"CVE-2021-0634","published":"2021-10-25T13:17:59.000Z","updated":"2024-08-03T15:47:28.129Z","title":"In display driver, there is a possible memory corruption due to uninitialized data. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6735, MT6739, MT6761, MT6765, MT6771, MT6779, MT6785, MT8168, MT8175, MT8365, MT8788","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2021-0633","published":"2021-10-25T13:17:52.000Z","updated":"2024-08-03T15:47:28.265Z","title":"In display driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6580, MT6735, MT6737, MT6739, MT6753, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6893, MT8168, MT8175, MT8195, MT8321, MT8365, MT8765","kev":false,"epss":0.00126,"kevAdded":null},{"id":"CVE-2021-0632","published":"2021-10-25T13:17:46.000Z","updated":"2024-08-03T15:47:28.187Z","title":"In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal attacker…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"MT6739, MT6761, MT6762, MT6765, MT6768, MT6771, MT6779, MT6785, MT6833, MT6853, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8735A, MT8735B, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797","kev":false,"epss":0.00297,"kevAdded":null},{"id":"CVE-2021-0631","published":"2021-10-25T13:17:40.000Z","updated":"2024-08-03T15:47:28.085Z","title":"In wifi driver, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution…","severity":"HIGH","score":7.5,"vendor":null,"product":"MT6761, MT6762, MT6765, MT6768, MT6779, MT6785, MT6833, MT6853, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8735A, MT8735B, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797","kev":false,"epss":0.00885,"kevAdded":null},{"id":"CVE-2021-0630","published":"2021-10-25T13:17:33.000Z","updated":"2024-08-03T15:47:27.940Z","title":"In wifi driver, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution…","severity":"HIGH","score":7.5,"vendor":null,"product":"MT6761, MT6762, MT6765, MT6768, MT6779, MT6785, MT6833, MT6853, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8735A, MT8735B, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797","kev":false,"epss":0.00923,"kevAdded":null},{"id":"CVE-2021-0625","published":"2021-10-25T13:17:26.000Z","updated":"2024-08-03T15:47:28.191Z","title":"In ccu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6762, MT6765, MT6768, MT6771, MT6779, MT6785, MT8183, MT8385, MT8768, MT8788","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2021-0618","published":"2021-10-25T13:17:20.000Z","updated":"2024-08-03T15:47:28.239Z","title":"In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"MT6739, MT6758, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6785, MT6795, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797","kev":false,"epss":0.00126,"kevAdded":null},{"id":"CVE-2021-0617","published":"2021-10-25T13:17:13.000Z","updated":"2024-08-03T15:47:28.043Z","title":"In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"MT5522, MT5527, MT5597, MT5598, MT5599, MT6739, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6785, MT6795, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797, MT9256, MT9285, MT9286, MT9288, MT9629, MT9631, MT9632, MT9636, MT9638, MT9639, MT9650, MT9652, MT9669, MT9670, MT9675, MT9685, MT9686, MT9688, MT9931, MT9950, MT9970, MT9980, MT9981","kev":false,"epss":0.00126,"kevAdded":null},{"id":"CVE-2021-0616","published":"2021-10-25T13:17:07.000Z","updated":"2024-08-03T15:47:28.233Z","title":"In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"MT5522, MT5527, MT5597, MT5598, MT5599, MT6739, MT6758, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6785, MT6795, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797, MT9256, MT9285, MT9286, MT9288, MT9629, MT9631, MT9632, MT9636, MT9638, MT9639, MT9650, MT9652, MT9669, MT9670, MT9675, MT9685, MT9686, MT9688, MT9931, MT9950, MT9970, MT9980, MT9981","kev":false,"epss":0.00126,"kevAdded":null},{"id":"CVE-2021-0615","published":"2021-10-25T13:17:02.000Z","updated":"2024-08-03T15:47:28.015Z","title":"In flv extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"MT5522, MT5527, MT5597, MT5598, MT5599, MT6580, MT6735, MT6737, MT6739, MT6750S, MT6753, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6885, MT6889, MT6893, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8735A, MT8735B, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797, MT9256, MT9285, MT9286, MT9288, MT9629, MT9631, MT9632, MT9636, MT9638, MT9639, MT9650, MT9652, MT9669, MT9670, MT9675, MT9685, MT9686, MT9688, MT9931, MT9950, MT9970, MT9980, MT9981","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2021-0614","published":"2021-10-25T13:16:56.000Z","updated":"2024-08-03T15:47:28.228Z","title":"In asf extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"MT5522, MT5527, MT5597, MT5598, MT5599, MT6580, MT6735, MT6737, MT6739, MT6750S, MT6753, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6885, MT6889, MT6893, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797, MT9256, MT9285, MT9286, MT9288, MT9629, MT9631, MT9632, MT9636, MT9638, MT9639, MT9650, MT9652, MT9669, MT9670, MT9675, MT9685, MT9686, MT9688, MT9931, MT9950, MT9970, MT9980, MT9981","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2021-0613","published":"2021-10-25T13:16:50.000Z","updated":"2024-08-03T15:47:28.053Z","title":"In asf extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"MT5522, MT5527, MT5597, MT5598, MT5599, MT6580, MT6735, MT6737, MT6739, MT6750S, MT6753, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6885, MT6889, MT6893, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797, MT9256, MT9285, MT9286, MT9288, MT9629, MT9631, MT9632, MT9636, MT9638, MT9639, MT9650, MT9652, MT9669, MT9670, MT9675, MT9685, MT9686, MT9688, MT9931, MT9950, MT9970, MT9980, MT9981","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2021-0414","published":"2021-10-25T13:16:44.000Z","updated":"2024-08-03T15:40:01.128Z","title":"In flv extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"MT5522, MT5527, MT5597, MT5598, MT5599, MT6580, MT6735, MT6737, MT6739, MT6750S, MT6753, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6885, MT6889, MT6898, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8735A, MT8735B, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797, MT9256, MT9285, MT9286, MT9288, MT9629, MT9631, MT9632, MT9636, MT9638, MT9639, MT9650, MT9652, MT9669, MT9670, MT9675, MT9685, MT9686, MT9688, MT9931, MT9950, MT9970, MT9980, MT9981","kev":false,"epss":0.00126,"kevAdded":null},{"id":"CVE-2021-0413","published":"2021-10-25T13:16:37.000Z","updated":"2024-08-03T15:40:01.109Z","title":"In flv extractor, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"MT5522, MT5527, MT5597, MT5598, MT5599, MT6580, MT6735, MT6737, MT6739, MT6750S, MT6753, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6885, MT6889, MT6897, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8735A, MT8735B, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797, MT9256, MT9285, MT9286, MT9288, MT9629, MT9631, MT9632, MT9636, MT9638, MT9639, MT9650, MT9652, MT9669, MT9670, MT9675, MT9685, MT9686, MT9688, MT9931, MT9950, MT9970, MT9980, MT9981","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2021-0412","published":"2021-10-25T13:16:27.000Z","updated":"2024-08-03T15:40:01.280Z","title":"In flv extractor, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"MT5522, MT5527, MT5597, MT5598, MT5599, MT6580, MT6735, MT6737, MT6739, MT6750S, MT6753, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6885, MT6889, MT6896, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8735A, MT8735B, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797, MT9256, MT9285, MT9286, MT9288, MT9629, MT9631, MT9632, MT9636, MT9638, MT9639, MT9650, MT9652, MT9669, MT9670, MT9675, MT9685, MT9686, MT9688, MT9931, MT9950, MT9970, MT9980, MT9981","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2021-0411","published":"2021-10-25T13:16:18.000Z","updated":"2024-08-03T15:40:01.236Z","title":"In flv extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"MT5522, MT5527, MT5597, MT5598, MT5599, MT6580, MT6735, MT6737, MT6739, MT6750S, MT6753, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6885, MT6889, MT6895, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8735A, MT8735B, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797, MT9256, MT9285, MT9286, MT9288, MT9629, MT9631, MT9632, MT9636, MT9638, MT9639, MT9650, MT9652, MT9669, MT9670, MT9675, MT9685, MT9686, MT9688, MT9931, MT9950, MT9970, MT9980, MT9981","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2021-0410","published":"2021-10-25T13:16:12.000Z","updated":"2024-08-03T15:40:01.261Z","title":"In flv extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"MT5522, MT5527, MT5597, MT5598, MT5599, MT6580, MT6735, MT6737, MT6739, MT6750S, MT6753, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6885, MT6889, MT6894, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8735A, MT8735B, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797, MT9256, MT9285, MT9286, MT9288, MT9629, MT9631, MT9632, MT9636, MT9638, MT9639, MT9650, MT9652, MT9669, MT9670, MT9675, MT9685, MT9686, MT9688, MT9931, MT9950, MT9970, MT9980, MT9981","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2021-0409","published":"2021-10-25T13:16:05.000Z","updated":"2024-08-03T15:40:01.043Z","title":"In flv extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"MT5522, MT5527, MT5597, MT5598, MT5599, MT6580, MT6735, MT6737, MT6739, MT6750S, MT6753, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6885, MT6889, MT6893, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8735A, MT8735B, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797, MT9256, MT9285, MT9286, MT9288, MT9629, MT9631, MT9632, MT9636, MT9638, MT9639, MT9650, MT9652, MT9669, MT9670, MT9675, MT9685, MT9686, MT9688, MT9931, MT9950, MT9970, MT9980, MT9981","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2021-0702","published":"2021-10-22T13:27:42.000Z","updated":"2024-08-03T15:47:28.429Z","title":"In RevertActiveSessions of apexd.cpp, there is a possible way to share the wrong file due to an unintentional MediaStore downgrade. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00128,"kevAdded":null},{"id":"CVE-2021-0706","published":"2021-10-22T13:27:35.000Z","updated":"2024-08-03T15:47:28.327Z","title":"In startListening of PluginManagerImpl.java, there is a possible way to disable arbitrary app components due to a missing permission check. This could lead to…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00106,"kevAdded":null},{"id":"CVE-2021-0870","published":"2021-10-22T13:27:28.000Z","updated":"2024-08-03T15:47:28.376Z","title":"In RW_SetActivatedTagType of rw_main.cc, there is possible memory corruption due to a race condition. This could lead to remote code execution with no…","severity":"HIGH","score":8.1,"vendor":null,"product":"Android","kev":false,"epss":0.07014,"kevAdded":null},{"id":"CVE-2021-0705","published":"2021-10-22T13:27:22.000Z","updated":"2024-08-03T15:47:28.261Z","title":"In sanitizeSbn of NotificationManagerService.java, there is a possible way to keep service running in foreground and keep granted permissions due to Bypass of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00259,"kevAdded":null},{"id":"CVE-2021-0652","published":"2021-10-22T13:27:16.000Z","updated":"2024-08-03T15:47:28.261Z","title":"In VectorDrawable::VectorDrawable of VectorDrawable.java, there is a possible way to introduce a memory corruption due to sharing of not thread-safe objects.…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00188,"kevAdded":null},{"id":"CVE-2021-0703","published":"2021-10-22T13:27:09.000Z","updated":"2024-08-03T15:47:28.308Z","title":"In SecondStageMain of init.cpp, there is a possible use after free due to incorrect shared_ptr usage. This could lead to local escalation of privilege if the…","severity":"MEDIUM","score":6.8,"vendor":null,"product":"Android","kev":false,"epss":0.00128,"kevAdded":null},{"id":"CVE-2021-0643","published":"2021-10-22T13:27:01.000Z","updated":"2024-08-03T15:47:28.164Z","title":"In getAllSubInfoList of SubscriptionController.java, there is a possible way to retrieve a long term identifier without the correct permissions due to a…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2021-0708","published":"2021-10-22T13:26:54.000Z","updated":"2024-08-03T15:47:28.321Z","title":"In runDumpHeap of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0015,"kevAdded":null},{"id":"CVE-2021-0483","published":"2021-10-22T13:26:49.000Z","updated":"2024-08-03T15:40:01.391Z","title":"In multiple methods of AAudioService, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with User…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2021-0651","published":"2021-10-22T13:26:44.000Z","updated":"2024-08-03T15:47:28.228Z","title":"In loadLabel of PackageItemInfo.java, there is a possible way to DoS a device by having a long label in an app due to incorrect input validation. This could…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00129,"kevAdded":null},{"id":"CVE-2021-0583","published":"2021-10-11T15:51:43.000Z","updated":"2024-08-03T15:47:28.213Z","title":"In onCreate of BluetoothPairingDialog, there is a possible way to enable Bluetooth without user consent due to a tapjacking/overlay attack. This could lead to…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2021-0680","published":"2021-10-06T14:12:34.000Z","updated":"2024-08-03T15:47:28.247Z","title":"In system properties, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2021-0681","published":"2021-10-06T14:12:29.000Z","updated":"2024-08-03T15:47:28.324Z","title":"In system properties, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2021-0685","published":"2021-10-06T14:12:22.000Z","updated":"2024-08-03T15:47:28.270Z","title":"In ParsedIntentInfo of ParsedIntentInfo.java, there is a possible parcel serialization/deserialization mismatch due to unsafe deserialization. This could lead…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00197,"kevAdded":null},{"id":"CVE-2021-0689","published":"2021-10-06T14:12:16.000Z","updated":"2024-08-03T15:47:28.283Z","title":"In RGB_to_BGR1_portable of SkSwizzler_opts.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2021-0635","published":"2021-10-06T14:12:10.000Z","updated":"2024-08-03T15:47:28.221Z","title":"When extracting the incorrectly formatted flv file, the memory is damaged, the playback interface shows that the video cannot be played, and the log is found…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00311,"kevAdded":null},{"id":"CVE-2021-0636","published":"2021-10-06T14:12:04.000Z","updated":"2024-08-03T15:47:28.201Z","title":"When extracting the incorrectly formatted avi file, the memory is damaged, the playback interface shows that the video cannot be played, and the log is found…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00311,"kevAdded":null},{"id":"CVE-2021-0687","published":"2021-10-06T14:11:57.000Z","updated":"2024-08-03T15:47:28.251Z","title":"In ellipsize of Layout.java, there is a possible ANR due to improper input validation. This could lead to local denial of service with no additional execution…","severity":"MEDIUM","score":5,"vendor":null,"product":"Android","kev":false,"epss":0.00122,"kevAdded":null},{"id":"CVE-2021-0691","published":"2021-10-06T14:11:51.000Z","updated":"2024-08-03T15:47:28.553Z","title":"In the SELinux policy configured in system_app.te, there is a possible way for system_app to gain code execution in other processes due to an overly-permissive…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00112,"kevAdded":null},{"id":"CVE-2021-0683","published":"2021-10-06T14:11:45.000Z","updated":"2024-08-03T15:47:28.285Z","title":"In runTraceIpcStop of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00235,"kevAdded":null},{"id":"CVE-2021-0693","published":"2021-10-06T14:11:39.000Z","updated":"2024-08-03T15:47:28.309Z","title":"In openFile of HeapDumpProvider.java, there is a possible way to retrieve generated heap dumps from debuggable apps due to an unprotected provider. This could…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2021-0695","published":"2021-10-06T14:11:33.000Z","updated":"2024-08-03T15:47:28.306Z","title":"In get_sock_stat of xt_qtaguid.c, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with User…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00123,"kevAdded":null},{"id":"CVE-2021-0690","published":"2021-10-06T14:11:27.000Z","updated":"2024-08-03T15:47:28.288Z","title":"In ih264d_mark_err_slice_skip of ih264d_parse_pslice.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2021-0644","published":"2021-10-06T14:11:21.000Z","updated":"2024-08-03T15:47:28.192Z","title":"In conditionallyRemoveIdentifiers of SubscriptionController.java, there is a possible way to retrieve a trackable identifier due to a missing permission check.…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2021-0598","published":"2021-10-06T14:11:16.000Z","updated":"2024-08-03T15:47:27.939Z","title":"In onCreate of ConfirmConnectActivity.java, there is a possible pairing of untrusted Bluetooth devices due to a tapjacking/overlay attack. This could lead to…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2021-0684","published":"2021-10-06T14:11:11.000Z","updated":"2024-08-03T15:47:28.305Z","title":"In TouchInputMapper::sync of TouchInputMapper.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00127,"kevAdded":null},{"id":"CVE-2021-0692","published":"2021-10-06T14:11:05.000Z","updated":"2024-08-03T15:47:28.302Z","title":"In sendBroadcastToInstaller of FirstScreenBroadcast.java, there is a possible activity launch due to an unsafe PendingIntent. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00112,"kevAdded":null},{"id":"CVE-2021-0686","published":"2021-10-06T14:10:58.000Z","updated":"2024-08-03T15:47:28.545Z","title":"In getDefaultSmsPackage of RoleManagerService.java, there is a possible way to get information about the default sms app of a different device user due to a…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2021-0595","published":"2021-10-06T14:10:52.000Z","updated":"2024-08-03T15:47:28.198Z","title":"In lockAllProfileTasks of RootWindowContainer.java, there is a possible way to access the work profile without the profile PIN, after logging in. This could…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00205,"kevAdded":null},{"id":"CVE-2021-0688","published":"2021-10-06T14:10:40.000Z","updated":"2024-08-03T15:47:28.307Z","title":"In lockNow of PhoneWindowManager.java, there is a possible lock screen bypass due to a race condition. This could lead to local escalation of privilege with…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00161,"kevAdded":null},{"id":"CVE-2021-0682","published":"2021-10-06T14:10:35.000Z","updated":"2024-08-03T15:47:28.256Z","title":"In sendAccessibilityEvent of NotificationManagerService.java, there is a possible disclosure of notification data due to a missing permission check. This could…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00118,"kevAdded":null},{"id":"CVE-2021-0660","published":"2021-09-27T11:21:11.000Z","updated":"2024-08-03T15:47:28.227Z","title":"In ccu, there is a possible out of bounds read due to incorrect error handling. This could lead to information disclosure with System execution privileges…","severity":"MEDIUM","score":4.9,"vendor":null,"product":"MT6779, MT6853, MT6873, MT6885","kev":false,"epss":0.0047,"kevAdded":null},{"id":"CVE-2021-0612","published":"2021-09-27T11:21:03.000Z","updated":"2024-08-03T15:47:27.962Z","title":"In m4u, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges…","severity":"HIGH","score":7.8,"vendor":null,"product":"MT6580, MT6582E, MT6582H, MT6582T, MT6582W, MT6582_90, MT6589, MT6589TD, MT6592E, MT6592H, MT6592T, MT6592W, MT6592_90, MT6595, MT6731, MT6732, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6752, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6785, MT6795, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2021-0611","published":"2021-09-27T11:20:56.000Z","updated":"2024-08-03T15:47:28.038Z","title":"In m4u, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges…","severity":"HIGH","score":7.8,"vendor":null,"product":"MT6580, MT6582E, MT6582H, MT6582T, MT6582W, MT6582_90, MT6589, MT6589TD, MT6592E, MT6592H, MT6592T, MT6592W, MT6592_90, MT6595, MT6731, MT6732, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6752, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6785, MT6795, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2021-0610","published":"2021-09-27T11:20:50.000Z","updated":"2024-08-03T15:47:27.924Z","title":"In memory management driver, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"MT6580, MT6582E, MT6582H, MT6582T, MT6582W, MT6582_90, MT6589, MT6589TD, MT6592E, MT6592H, MT6592T, MT6592W, MT6592_90, MT6595, MT6731, MT6732, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6752, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6785, MT6795, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2021-0425","published":"2021-09-27T11:20:45.000Z","updated":"2024-08-03T15:40:01.056Z","title":"In memory management driver, there is a possible side channel information disclosure. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"MT6580, MT6582E, MT6582H, MT6582T, MT6582W, MT6582_90, MT6589, MT6589TD, MT6592E, MT6592H, MT6592T, MT6592W, MT6592_90, MT6595, MT6731, MT6732, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6752, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6785, MT6795, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2021-0424","published":"2021-09-27T11:20:39.000Z","updated":"2024-08-03T15:40:01.167Z","title":"In memory management driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"MT6580, MT6582E, MT6582H, MT6582T, MT6582W, MT6582_90, MT6589, MT6589TD, MT6592E, MT6592H, MT6592T, MT6592W, MT6592_90, MT6595, MT6731, MT6732, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6752, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6785, MT6795, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2021-0423","published":"2021-09-27T11:20:33.000Z","updated":"2024-08-03T15:40:01.118Z","title":"In memory management driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"MT6580, MT6582E, MT6582H, MT6582T, MT6582W, MT6582_90, MT6589, MT6589TD, MT6592E, MT6592H, MT6592T, MT6592W, MT6592_90, MT6595, MT6731, MT6732, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6752, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6785, MT6795, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2021-0422","published":"2021-09-27T11:20:27.000Z","updated":"2024-08-03T15:40:01.116Z","title":"In memory management driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"MT6580, MT6582E, MT6582H, MT6582T, MT6582W, MT6582_90, MT6589, MT6589TD, MT6592E, MT6592H, MT6592T, MT6592W, MT6592_90, MT6595, MT6731, MT6732, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6752, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6785, MT6795, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2021-0421","published":"2021-09-27T11:20:21.000Z","updated":"2024-08-03T15:40:01.266Z","title":"In memory management driver, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"MT6580, MT6582E, MT6582H, MT6582T, MT6582W, MT6582_90, MT6589, MT6589TD, MT6592E, MT6592H, MT6592T, MT6592W, MT6592_90, MT6595, MT6731, MT6732, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6752, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6785, MT6795, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2021-0869","published":"2021-09-21T12:11:47.000Z","updated":"2024-08-03T15:47:28.418Z","title":"In GetTimeStampAndPkt of DumpstateDevice.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00842,"kevAdded":null},{"id":"CVE-2021-0628","published":"2021-08-18T14:44:40.000Z","updated":"2024-08-03T15:47:28.161Z","title":"In OMA DRM, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6580, MT6735, MT6739, MT6755S, MT6757, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2021-0627","published":"2021-08-18T14:44:24.000Z","updated":"2024-08-03T15:47:28.181Z","title":"In OMA DRM, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with System execution privileges…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6580, MT6735, MT6739, MT6755S, MT6757, MT6761, MT6763, MT6765, MT6768, MT6771, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2021-0626","published":"2021-08-18T14:44:13.000Z","updated":"2024-08-03T15:47:28.226Z","title":"In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6768, MT6771, MT6779, MT6785","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2021-0420","published":"2021-08-18T14:44:08.000Z","updated":"2024-08-03T15:40:01.123Z","title":"In memory management driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"MT6580, MT6582E, MT6582H, MT6582T, MT6582W, MT6582_90, MT6589, MT6589TD, MT6592E, MT6592H, MT6592T, MT6592W, MT6592_90, MT6595, MT6731, MT6732, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6752, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6785, MT6795, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2021-0419","published":"2021-08-18T14:44:03.000Z","updated":"2024-08-03T15:40:01.238Z","title":"In memory management driver, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"MT6580, MT6582E, MT6582H, MT6582T, MT6582W, MT6582_90, MT6589, MT6589TD, MT6592E, MT6592H, MT6592T, MT6592W, MT6592_90, MT6595, MT6731, MT6732, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6752, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6785, MT6795, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2021-0418","published":"2021-08-18T14:43:53.000Z","updated":"2024-08-03T15:40:01.051Z","title":"In memory management driver, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"MT6580, MT6582E, MT6582H, MT6582T, MT6582W, MT6582_90, MT6589, MT6589TD, MT6592E, MT6592H, MT6592T, MT6592W, MT6592_90, MT6595, MT6731, MT6732, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6752, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6785, MT6795, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2021-0417","published":"2021-08-18T14:43:47.000Z","updated":"2024-08-03T15:40:01.141Z","title":"In memory management driver, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"MT6580, MT6582E, MT6582H, MT6582T, MT6582W, MT6582_90, MT6589, MT6589TD, MT6592E, MT6592H, MT6592T, MT6592W, MT6592_90, MT6595, MT6731, MT6732, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6752, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6785, MT6795, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2021-0416","published":"2021-08-18T14:43:42.000Z","updated":"2024-08-03T15:40:01.063Z","title":"In memory management driver, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"MT6580, MT6582E, MT6582H, MT6582T, MT6582W, MT6582_90, MT6589, MT6589TD, MT6592E, MT6592H, MT6592T, MT6592W, MT6592_90, MT6595, MT6731, MT6732, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6752, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6785, MT6795, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2021-0415","published":"2021-08-18T14:43:37.000Z","updated":"2024-08-03T15:40:01.262Z","title":"In memory management driver, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"MT6580, MT6582E, MT6582H, MT6582T, MT6582W, MT6582_90, MT6589, MT6589TD, MT6592E, MT6592H, MT6592T, MT6592W, MT6592_90, MT6595, MT6731, MT6732, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6752, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6785, MT6795, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2021-0408","published":"2021-08-18T14:43:31.000Z","updated":"2024-08-03T15:40:01.171Z","title":"In asf extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"MT6570, MT6580, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6762, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6885, MT6889, MT6893","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2021-0407","published":"2021-08-18T14:43:24.000Z","updated":"2024-08-03T15:40:01.268Z","title":"In clk driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"MT6739, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6833, MT6853, MT6853T, MT6873, MT6885, MT6889, MT6893","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2021-0639","published":"2021-08-17T18:29:27.000Z","updated":"2024-08-03T15:47:28.220Z","title":"In multiple functions of libl3oemcrypto.cpp, there is a possible weakness in the existing obfuscation mechanism due to the way sensitive data is handled. This…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00118,"kevAdded":null},{"id":"CVE-2021-0640","published":"2021-08-17T18:28:56.000Z","updated":"2024-08-03T15:47:28.206Z","title":"In noteAtomLogged of StatsdStats.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00217,"kevAdded":null},{"id":"CVE-2021-0576","published":"2021-08-17T18:28:54.000Z","updated":"2024-08-03T15:47:27.880Z","title":"In flv extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00118,"kevAdded":null},{"id":"CVE-2021-0574","published":"2021-08-17T18:28:25.000Z","updated":"2024-08-03T15:47:28.218Z","title":"In asf extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00118,"kevAdded":null},{"id":"CVE-2021-0581","published":"2021-08-17T18:28:24.000Z","updated":"2024-08-03T15:47:27.900Z","title":"In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal attacker…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00297,"kevAdded":null},{"id":"CVE-2021-0580","published":"2021-08-17T18:28:23.000Z","updated":"2024-08-03T15:47:28.321Z","title":"In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal attacker…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00297,"kevAdded":null},{"id":"CVE-2021-0579","published":"2021-08-17T18:28:21.000Z","updated":"2024-08-03T15:47:28.229Z","title":"In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal attacker…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00297,"kevAdded":null},{"id":"CVE-2021-0573","published":"2021-08-17T18:28:20.000Z","updated":"2024-08-03T15:47:28.158Z","title":"In asf extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00118,"kevAdded":null},{"id":"CVE-2021-0578","published":"2021-08-17T18:28:18.000Z","updated":"2024-08-03T15:47:27.926Z","title":"In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal attacker…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00297,"kevAdded":null},{"id":"CVE-2021-0582","published":"2021-08-17T18:28:17.000Z","updated":"2024-08-03T15:47:27.903Z","title":"In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal attacker…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00297,"kevAdded":null},{"id":"CVE-2021-0641","published":"2021-08-17T18:28:15.000Z","updated":"2026-02-25T17:20:11.413Z","title":"In getAvailableSubscriptionInfoList of SubscriptionController.java, there is a possible disclosure of unique identifiers due to a missing permission check.…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2021-0642","published":"2021-08-17T18:28:14.000Z","updated":"2026-02-25T17:20:11.236Z","title":"In onResume of VoicemailSettingsFragment.java, there is a possible way to retrieve a trackable identifier without permissions due to a missing permission…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00327,"kevAdded":null},{"id":"CVE-2021-0591","published":"2021-08-17T18:28:13.000Z","updated":"2024-08-03T15:47:28.227Z","title":"In sendReplyIntentToReceiver of BluetoothPermissionActivity.java, there is a possible way to invoke privileged broadcast receivers due to a confused deputy.…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00399,"kevAdded":null},{"id":"CVE-2021-0593","published":"2021-08-17T18:28:11.000Z","updated":"2024-08-03T15:47:27.772Z","title":"In sendDevicePickedIntent of DevicePickerFragment.java, there is a possible way to invoke a privileged broadcast receiver due to a confused deputy. This could…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00118,"kevAdded":null},{"id":"CVE-2021-0584","published":"2021-08-17T18:28:10.000Z","updated":"2026-02-25T17:20:11.040Z","title":"In verifyBufferObject of Parcel.cpp, there is a possible out of bounds read due to an improper input validation. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2021-0519","published":"2021-08-17T18:28:07.000Z","updated":"2024-08-03T15:40:01.132Z","title":"In BITSTREAM_FLUSH of ih264e_bitstream.h, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local information…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00241,"kevAdded":null},{"id":"CVE-2021-0645","published":"2021-08-17T18:28:06.000Z","updated":"2024-08-03T15:47:28.182Z","title":"In shouldBlockFromTree of ExternalStorageProvider.java, there is a possible permissions bypass. This could lead to local escalation of privilege, allowing an…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0033,"kevAdded":null},{"id":"CVE-2021-0646","published":"2021-08-17T18:28:05.000Z","updated":"2024-08-03T15:47:28.248Z","title":"In sqlite3_str_vappendf of sqlite3.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2021-0654","published":"2021-07-14T13:55:58.000Z","updated":"2024-08-03T15:47:28.230Z","title":"In isRealSnapshot of TaskThumbnailView.java, there is possible data exposure due to a missing permission check. This could lead to local information disclosure…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00327,"kevAdded":null},{"id":"CVE-2021-0592","published":"2021-07-14T13:50:29.000Z","updated":"2024-08-03T15:47:27.880Z","title":"In various functions in WideVine, there are possible out of bounds writes due to improper input validation. This could lead to remote code execution with no…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.01065,"kevAdded":null},{"id":"CVE-2021-0577","published":"2021-07-14T13:46:47.000Z","updated":"2024-08-03T15:47:28.163Z","title":"In flv extractor, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00137,"kevAdded":null},{"id":"CVE-2021-0587","published":"2021-07-14T13:46:42.000Z","updated":"2024-08-03T15:47:28.030Z","title":"In StreamOut::prepareForWriting of StreamOut.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0014,"kevAdded":null},{"id":"CVE-2021-0585","published":"2021-07-14T13:46:36.000Z","updated":"2024-08-03T15:47:28.031Z","title":"In beginWrite and beginRead of MessageQueueBase.h, there is a possible out of bounds write due to improper input validation. This could lead to local…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00134,"kevAdded":null},{"id":"CVE-2021-0603","published":"2021-07-14T13:46:29.000Z","updated":"2024-08-03T15:47:28.184Z","title":"In onCreate of ContactSelectionActivity.java, there is a possible way to get access to contacts without permission due to a tapjacking/overlay attack. This…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2021-0586","published":"2021-07-14T13:46:21.000Z","updated":"2024-08-03T15:47:27.959Z","title":"In onCreate of DevicePickerFragment.java, there is a possible way to trick the user to select an unwanted bluetooth device due to a tapjacking/overlay attack.…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00298,"kevAdded":null},{"id":"CVE-2021-0596","published":"2021-07-14T13:45:59.000Z","updated":"2024-08-03T15:47:27.912Z","title":"In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.01117,"kevAdded":null},{"id":"CVE-2021-0589","published":"2021-07-14T13:45:53.000Z","updated":"2024-08-03T15:47:27.963Z","title":"In BTM_TryAllocateSCN of btm_scn.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00265,"kevAdded":null},{"id":"CVE-2021-0601","published":"2021-07-14T13:45:48.000Z","updated":"2024-08-03T15:47:28.062Z","title":"In encodeFrames of avc_enc_fuzzer.cpp, there is a possible out of bounds write due to a double free. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00131,"kevAdded":null},{"id":"CVE-2021-0604","published":"2021-07-14T13:45:42.000Z","updated":"2024-08-03T15:47:27.828Z","title":"In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible way to share private files over Bluetooth due to a confused deputy. This could lead…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00142,"kevAdded":null},{"id":"CVE-2021-0600","published":"2021-07-14T13:45:37.000Z","updated":"2024-08-03T15:47:28.188Z","title":"In onCreate of DeviceAdminAdd.java, there is a possible way to mislead a user to activate a device admin app due to improper input validation. This could lead…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00362,"kevAdded":null},{"id":"CVE-2021-0602","published":"2021-07-14T13:45:32.000Z","updated":"2024-08-03T15:47:28.215Z","title":"In onCreateOptionsMenu of WifiNetworkDetailsFragment.java, there is a possible way for guest users to view and modify Wi-Fi settings for all configured APs due…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2021-0588","published":"2021-07-14T13:44:33.000Z","updated":"2024-08-03T15:47:27.825Z","title":"In processInboundMessage of MceStateMachine.java, there is a possible SMS disclosure due to a missing permission check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00131,"kevAdded":null},{"id":"CVE-2021-0518","published":"2021-07-14T13:44:28.000Z","updated":"2024-08-03T15:40:01.267Z","title":"In Wi-Fi, there is a possible leak of location-sensitive data due to a missing permission check. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00118,"kevAdded":null},{"id":"CVE-2021-0597","published":"2021-07-14T13:44:22.000Z","updated":"2024-08-03T15:47:27.783Z","title":"In notifyProfileAdded and notifyProfileRemoved of SipService.java, there is a possible way to retrieve SIP account names due to a missing permission check.…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00127,"kevAdded":null},{"id":"CVE-2021-0594","published":"2021-07-14T13:44:16.000Z","updated":"2024-08-03T15:47:28.126Z","title":"In onCreate of ConfirmConnectActivity, there is a possible remote bypass of user consent due to improper input validation. This could lead to remote (proximal,…","severity":"HIGH","score":8,"vendor":null,"product":"Android","kev":false,"epss":0.01396,"kevAdded":null},{"id":"CVE-2021-0599","published":"2021-07-14T13:44:10.000Z","updated":"2024-08-03T15:47:28.191Z","title":"In scheduleTimeoutLocked of NotificationRecord.java, there is a possible disclosure of a sensitive identifier via broadcasted intent due to a confused deputy.…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00131,"kevAdded":null},{"id":"CVE-2021-0590","published":"2021-07-14T13:44:05.000Z","updated":"2024-08-03T15:47:28.192Z","title":"In sendNetworkConditionsBroadcast of NetworkMonitor.java, there is a possible way for a privileged app to receive WiFi BSSID and SSID without location…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2021-0441","published":"2021-07-14T13:43:32.000Z","updated":"2024-08-03T15:40:01.243Z","title":"In onCreate of PermissionActivity.java, there is a possible permission bypass due to Confusing UI. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2021-0486","published":"2021-07-14T13:43:26.000Z","updated":"2024-08-03T15:40:01.171Z","title":"In onPackageAddedInternal of PermissionManagerService.java, there is possible access to external storage due to a permissions bypass. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2021-0515","published":"2021-07-14T13:43:19.000Z","updated":"2024-08-03T15:40:01.431Z","title":"In Factory::CreateStrictFunctionMap of factory.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.01436,"kevAdded":null},{"id":"CVE-2021-0514","published":"2021-07-14T13:43:13.000Z","updated":"2024-08-03T15:40:01.158Z","title":"In several functions of the V8 library, there is a possible use after free due to a race condition. This could lead to remote code execution in an unprivileged…","severity":"HIGH","score":8.1,"vendor":null,"product":"Android","kev":false,"epss":0.011,"kevAdded":null},{"id":"CVE-2020-0417","published":"2021-07-14T13:43:07.000Z","updated":"2024-08-04T06:02:52.041Z","title":"In setNiNotification of GpsNetInitiatedHandler.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00137,"kevAdded":null},{"id":"CVE-2021-0608","published":"2021-06-22T11:14:04.000Z","updated":"2024-08-03T15:47:28.199Z","title":"In handleAppLaunch of AppLaunchActivity.java, there is a possible arbitrary activity launch due to a confused deputy. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2021-0607","published":"2021-06-22T11:13:56.000Z","updated":"2024-08-03T15:47:28.191Z","title":"In iaxxx_calc_i2s_div of iaxxx-codec.c, there is a possible hardware port write with user controlled data due to a missing bounds check. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2021-0606","published":"2021-06-22T11:13:50.000Z","updated":"2024-08-03T15:47:28.187Z","title":"In drm_syncobj_handle_to_fd of drm_syncobj.c, there is a possible use after free due to incorrect refcounting. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2021-0605","published":"2021-06-22T11:13:42.000Z","updated":"2024-08-03T15:47:28.213Z","title":"In pfkey_dump of af_key.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure in the kernel…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00199,"kevAdded":null},{"id":"CVE-2021-0551","published":"2021-06-22T11:13:35.000Z","updated":"2024-08-03T15:47:26.812Z","title":"In bind of MediaControlPanel.java, there is a possible way to lock up the system UI using a malicious media file due to improper input validation. This could…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00588,"kevAdded":null},{"id":"CVE-2021-0552","published":"2021-06-22T11:13:29.000Z","updated":"2024-08-03T15:47:27.880Z","title":"In getEndItemSliceAction of MediaOutputSlice.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2021-0549","published":"2021-06-22T11:12:34.000Z","updated":"2024-08-03T15:47:27.713Z","title":"In sspRequestCallback of BondStateMachine.java, there is a possible leak of Bluetooth MAC addresses due to log information disclosure. This could lead to local…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2021-0542","published":"2021-06-22T11:12:26.000Z","updated":"2024-08-03T15:47:27.976Z","title":"In updateNotification of BeamTransferManager.java, there is a missing permission check. This could lead to local information disclosure of paired Bluetooth…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2021-0541","published":"2021-06-22T11:12:21.000Z","updated":"2024-08-03T15:47:27.883Z","title":"In phNxpNciHal_ext_process_nfc_init_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2021-0553","published":"2021-06-22T11:12:14.000Z","updated":"2024-08-03T15:47:27.835Z","title":"In onBindViewHolder of AppSwitchPreference.java, there is a possible bypass of device admin setttings due to unclear UI. This could lead to local escalation of…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00147,"kevAdded":null},{"id":"CVE-2021-0550","published":"2021-06-22T11:11:48.000Z","updated":"2024-08-03T15:47:26.842Z","title":"In onLoadFailed of AnnotateActivity.java, there is a possible way to gain WRITE_EXTERNAL_STORAGE permissions without user consent due to a confused deputy.…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2021-0548","published":"2021-06-22T11:11:39.000Z","updated":"2024-08-03T15:47:27.361Z","title":"In rw_i93_send_to_lower of rw_i93.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2021-0547","published":"2021-06-22T11:11:32.000Z","updated":"2024-08-03T15:47:27.916Z","title":"In onReceive of NetInitiatedActivity.java, there is a possible way to supply an attacker-controlled value to a GPS HAL handler due to a missing permission…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2021-0546","published":"2021-06-22T11:11:22.000Z","updated":"2024-08-03T15:47:26.840Z","title":"In phNxpNciHal_print_res_status of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2021-0545","published":"2021-06-22T11:03:08.000Z","updated":"2024-08-03T15:47:26.842Z","title":"In phNxpNciHal_print_res_status of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2021-0544","published":"2021-06-22T11:02:57.000Z","updated":"2024-08-03T15:47:27.320Z","title":"In phNxpNciHal_print_res_status of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2021-0543","published":"2021-06-22T11:02:50.000Z","updated":"2024-08-03T15:47:26.823Z","title":"In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2021-0540","published":"2021-06-22T11:02:42.000Z","updated":"2024-08-03T15:47:26.780Z","title":"In halWrapperDataCallback of hal_wrapper.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2021-0539","published":"2021-06-22T11:02:17.000Z","updated":"2024-08-03T15:47:26.776Z","title":"In archiveStoredConversation of MmsService.java, there is a possible way to archive message conversation without user consent due to a missing permission…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00107,"kevAdded":null},{"id":"CVE-2021-0538","published":"2021-06-22T11:02:11.000Z","updated":"2024-08-03T15:47:26.831Z","title":"In onCreate of EmergencyCallbackModeExitDialog.java, there is a possible exit of emergency callback mode due to a tapjacking/overlay attack. This could lead to…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2021-0537","published":"2021-06-22T11:02:04.000Z","updated":"2024-08-03T15:47:26.829Z","title":"In onCreate of WiFiInstaller.java, there is a possible way to install a malicious Hotspot 2.0 configuration due to a tapjacking/overlay attack. This could lead…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2021-0536","published":"2021-06-22T11:01:57.000Z","updated":"2024-08-03T15:47:26.782Z","title":"In dropFile of WiFiInstaller, there is a way to delete files accessible to CertInstaller due to a confused deputy. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2021-0535","published":"2021-06-22T11:01:13.000Z","updated":"2024-08-03T15:40:01.190Z","title":"In wpas_ctrl_msg_queue_timeout of ctrl_iface_unix.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2021-0566","published":"2021-06-22T11:01:07.000Z","updated":"2024-08-03T15:47:27.579Z","title":"In accessAudioHalPidscpp of TimeCheck.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2021-0563","published":"2021-06-22T11:01:00.000Z","updated":"2024-08-03T15:47:27.781Z","title":"In ih264e_fmt_conv_422i_to_420sp of ih264e_fmt_conv.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00121,"kevAdded":null},{"id":"CVE-2021-0562","published":"2021-06-22T11:00:52.000Z","updated":"2024-08-03T15:47:27.791Z","title":"In RasterIntraUpdate of motion_est.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2021-0561","published":"2021-06-22T11:00:12.000Z","updated":"2024-08-03T15:47:27.927Z","title":"In append_to_verify_fifo_interleaved_ of stream_encoder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00465,"kevAdded":null},{"id":"CVE-2021-0559","published":"2021-06-22T11:00:04.000Z","updated":"2024-08-03T15:47:27.989Z","title":"In Lag_max of p_ol_wgh.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00671,"kevAdded":null},{"id":"CVE-2021-0558","published":"2021-06-22T10:59:57.000Z","updated":"2024-08-03T15:47:27.802Z","title":"In fillMainDataBuf of pvmp3_framedecoder.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00716,"kevAdded":null},{"id":"CVE-2021-0556","published":"2021-06-22T10:59:51.000Z","updated":"2024-08-03T15:47:27.842Z","title":"In getBlockSum of fastcodemb.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00121,"kevAdded":null},{"id":"CVE-2021-0564","published":"2021-06-22T10:59:05.000Z","updated":"2024-08-03T15:47:27.920Z","title":"In decrypt of CryptoPlugin.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.4,"vendor":null,"product":"Android","kev":false,"epss":0.00086,"kevAdded":null},{"id":"CVE-2021-0557","published":"2021-06-22T10:58:57.000Z","updated":"2024-08-03T15:47:27.834Z","title":"In setRange of ABuffer.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00673,"kevAdded":null},{"id":"CVE-2021-0565","published":"2021-06-22T10:58:51.000Z","updated":"2024-08-03T15:47:27.800Z","title":"In wrapUserThread of AudioStream.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00093,"kevAdded":null},{"id":"CVE-2021-0572","published":"2021-06-22T10:58:45.000Z","updated":"2024-08-03T15:47:27.997Z","title":"In doNotification of AccountManagerService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2021-0569","published":"2021-06-22T10:58:06.000Z","updated":"2024-08-03T15:47:27.919Z","title":"In onStart of ContactsDumpActivity.java, there is possible access to contacts due to a tapjacking/overlay attack. This could lead to local information…","severity":"MEDIUM","score":5,"vendor":null,"product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2021-0554","published":"2021-06-22T10:57:59.000Z","updated":"2024-08-03T15:47:27.699Z","title":"In isBackupServiceActive of BackupManagerService.java, there is a missing permission check. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2021-0570","published":"2021-06-22T10:57:52.000Z","updated":"2024-08-03T15:47:28.192Z","title":"In sendBugreportNotification of BugreportProgressService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2021-0568","published":"2021-06-22T10:57:45.000Z","updated":"2024-08-03T15:47:27.888Z","title":"In onReceive of DevicePolicyManagerService.java, there is a possible enabling of disabled profiles due to a missing permission check. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00107,"kevAdded":null},{"id":"CVE-2021-0567","published":"2021-06-22T10:56:58.000Z","updated":"2024-08-03T15:47:27.792Z","title":"In isRestricted of RemoteViews.java, there is a possible way to inject font files due to a permissions bypass. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2021-0534","published":"2021-06-22T10:56:44.000Z","updated":"2024-08-03T15:40:01.271Z","title":"In permission declarations of DeviceAdminReceiver.java, there is a possible lack of broadcast protection due to an insecure default value. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2021-0571","published":"2021-06-22T10:56:29.000Z","updated":"2024-08-03T15:47:28.131Z","title":"In ActivityTaskManagerService.startActivity() and AppTaskImpl.startActivity() of ActivityTaskManagerService.java and AppTaskImpl.java, there is possible access…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2021-0555","published":"2021-06-22T10:56:16.000Z","updated":"2024-08-03T15:47:27.735Z","title":"In RenderStruct of protostream_objectsource.cc, there is a possible crash due to a missing null check. This could lead to remote denial of service with no…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00773,"kevAdded":null},{"id":"CVE-2021-0532","published":"2021-06-21T16:01:48.000Z","updated":"2024-08-03T15:40:01.397Z","title":"In memory management driver, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00085,"kevAdded":null},{"id":"CVE-2021-0530","published":"2021-06-21T16:01:47.000Z","updated":"2024-08-03T15:40:01.398Z","title":"In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00118,"kevAdded":null},{"id":"CVE-2021-0531","published":"2021-06-21T16:01:46.000Z","updated":"2024-08-03T15:40:01.161Z","title":"In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2021-0529","published":"2021-06-21T16:01:45.000Z","updated":"2024-08-03T15:40:01.278Z","title":"In memory management driver, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2021-0528","published":"2021-06-21T16:01:44.000Z","updated":"2024-08-03T15:40:01.398Z","title":"In memory management driver, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2021-0526","published":"2021-06-21T16:01:43.000Z","updated":"2024-08-03T15:40:01.272Z","title":"In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00118,"kevAdded":null},{"id":"CVE-2021-0533","published":"2021-06-21T16:01:42.000Z","updated":"2024-08-03T15:40:01.166Z","title":"In memory management driver, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00085,"kevAdded":null},{"id":"CVE-2021-0527","published":"2021-06-21T16:01:41.000Z","updated":"2024-08-03T15:40:01.279Z","title":"In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2021-0525","published":"2021-06-21T16:01:41.000Z","updated":"2024-08-03T15:40:01.280Z","title":"In memory management driver, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00118,"kevAdded":null},{"id":"CVE-2021-0506","published":"2021-06-21T16:01:40.000Z","updated":"2024-08-03T15:40:01.283Z","title":"In ActivityPicker.java, there is a possible bypass of user interaction in intent resolution due to a tapjacking/overlay attack. This could lead to local…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00271,"kevAdded":null},{"id":"CVE-2021-0507","published":"2021-06-21T16:01:39.000Z","updated":"2024-08-03T15:40:01.190Z","title":"In handle_rc_metamsg_cmd of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.01008,"kevAdded":null},{"id":"CVE-2021-0516","published":"2021-06-21T16:01:38.000Z","updated":"2024-08-03T15:40:01.333Z","title":"In p2p_process_prov_disc_req of p2p_pd.c, there is a possible out of bounds read and write due to a use after free. This could lead to remote escalation of…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.01556,"kevAdded":null},{"id":"CVE-2021-0505","published":"2021-06-21T16:01:37.000Z","updated":"2024-08-03T15:40:01.161Z","title":"In the Settings app, there is a possible way to disable an always-on VPN due to a missing permission check. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2021-0504","published":"2021-06-21T16:01:36.000Z","updated":"2024-08-03T15:40:01.299Z","title":"In avrc_pars_browse_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00281,"kevAdded":null},{"id":"CVE-2021-0517","published":"2021-06-21T16:01:35.000Z","updated":"2024-08-03T15:40:01.402Z","title":"In updateCapabilities of ConnectivityService.java, there is a possible incorrect network state determination due to a logic error in the code. This could lead…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00802,"kevAdded":null},{"id":"CVE-2021-0511","published":"2021-06-21T16:01:34.000Z","updated":"2024-08-03T15:40:01.266Z","title":"In Dex2oat of dex2oat.cc, there is a possible way to inject bytecode into an app due to improper input validation. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00217,"kevAdded":null},{"id":"CVE-2021-0510","published":"2021-06-21T16:01:33.000Z","updated":"2024-08-03T15:40:01.286Z","title":"In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00218,"kevAdded":null},{"id":"CVE-2021-0509","published":"2021-06-21T16:01:32.000Z","updated":"2024-08-03T15:40:01.122Z","title":"In various functions of CryptoPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00168,"kevAdded":null},{"id":"CVE-2021-0508","published":"2021-06-21T16:01:32.000Z","updated":"2024-08-03T15:40:01.186Z","title":"In various functions of DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00178,"kevAdded":null},{"id":"CVE-2021-0520","published":"2021-06-21T16:01:31.000Z","updated":"2024-08-03T15:40:01.272Z","title":"In several functions of MemoryFileSystem.cpp and related files, there is a possible use after free due to a race condition. This could lead to local escalation…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2021-0521","published":"2021-06-21T16:01:30.000Z","updated":"2024-08-03T15:40:01.208Z","title":"In getAllPackages of PackageManagerService, there is a possible information disclosure due to a missing permission check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2021-0522","published":"2021-06-21T16:01:29.000Z","updated":"2024-08-03T15:40:01.261Z","title":"In ConnectionHandler::SdpCb of connection_handler.cc, there is a possible out of bounds read due to a use after free. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.01383,"kevAdded":null},{"id":"CVE-2021-0523","published":"2021-06-21T16:01:28.000Z","updated":"2024-08-03T15:40:01.226Z","title":"In onCreate of WifiScanModeActivity.java, there is a possible way to enable Wi-Fi scanning without user consent due to a tapjacking/overlay attack. This could…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00118,"kevAdded":null},{"id":"CVE-2021-0512","published":"2021-06-21T16:01:27.000Z","updated":"2024-08-03T15:40:01.188Z","title":"In __hidinput_change_resolution_multipliers of hid-input.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00282,"kevAdded":null},{"id":"CVE-2021-0478","published":"2021-06-21T16:01:26.000Z","updated":"2024-08-03T15:40:01.118Z","title":"In updateDrawable of StatusBarIconView.java, there is a possible permission bypass due to an uncaught exception. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00253,"kevAdded":null},{"id":"CVE-2021-0513","published":"2021-06-21T16:01:25.000Z","updated":"2024-08-03T15:40:01.396Z","title":"In deleteNotificationChannel and related functions of NotificationManagerService.java, there is a possible permission bypass due to improper state validation.…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00199,"kevAdded":null},{"id":"CVE-2021-0467","published":"2021-06-14T19:35:54.000Z","updated":"2024-08-03T15:40:01.265Z","title":"In Chromecast bootROM, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege in the…","severity":"MEDIUM","score":6.8,"vendor":null,"product":"Android","kev":false,"epss":0.0013,"kevAdded":null},{"id":"CVE-2021-0324","published":"2021-06-14T19:35:54.000Z","updated":"2024-08-03T15:39:59.576Z","title":"Product: AndroidVersions: Android SoCAndroid ID: A-175402462","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00535,"kevAdded":null},{"id":"CVE-2021-0498","published":"2021-06-11T16:42:57.000Z","updated":"2024-08-03T15:40:01.273Z","title":"In memory management driver, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00129,"kevAdded":null},{"id":"CVE-2021-0497","published":"2021-06-11T16:42:57.000Z","updated":"2024-08-03T15:40:01.287Z","title":"In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00129,"kevAdded":null},{"id":"CVE-2021-0496","published":"2021-06-11T16:42:57.000Z","updated":"2024-08-03T15:40:01.267Z","title":"In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00129,"kevAdded":null},{"id":"CVE-2021-0495","published":"2021-06-11T16:42:57.000Z","updated":"2024-08-03T15:40:01.280Z","title":"In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00132,"kevAdded":null},{"id":"CVE-2021-0494","published":"2021-06-11T16:42:57.000Z","updated":"2024-08-03T15:40:01.182Z","title":"In memory management driver, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00131,"kevAdded":null},{"id":"CVE-2021-0493","published":"2021-06-11T16:42:57.000Z","updated":"2024-08-03T15:40:01.281Z","title":"In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00132,"kevAdded":null},{"id":"CVE-2021-0491","published":"2021-06-11T16:42:57.000Z","updated":"2024-08-03T15:40:01.165Z","title":"In memory management driver, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00121,"kevAdded":null},{"id":"CVE-2021-0490","published":"2021-06-11T16:42:57.000Z","updated":"2024-08-03T15:40:01.432Z","title":"In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00135,"kevAdded":null},{"id":"CVE-2021-0489","published":"2021-06-11T16:42:57.000Z","updated":"2024-08-03T15:40:01.241Z","title":"In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00131,"kevAdded":null},{"id":"CVE-2021-0492","published":"2021-06-11T16:42:56.000Z","updated":"2024-08-03T15:40:01.165Z","title":"In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00132,"kevAdded":null},{"id":"CVE-2021-0487","published":"2021-06-11T16:42:56.000Z","updated":"2024-08-03T15:40:01.144Z","title":"In onCreate of CalendarDebugActivity.java, there is a possible way to export calendar data to the sdcard without user consent due to a tapjacking/overlay…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2021-0485","published":"2021-06-11T16:42:56.000Z","updated":"2024-08-03T15:40:01.188Z","title":"In getMinimalSize of PipBoundsAlgorithm.java, there is a possible bypass of restrictions on background processes due to a permissions bypass. This could lead…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00183,"kevAdded":null},{"id":"CVE-2021-0480","published":"2021-06-11T16:42:56.000Z","updated":"2024-08-03T15:40:01.186Z","title":"In createPendingIntent of SnoozeHelper.java, there is a possible broadcast intent containing a sensitive identifier. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00404,"kevAdded":null},{"id":"CVE-2021-0477","published":"2021-06-11T16:42:56.000Z","updated":"2024-08-03T15:40:01.156Z","title":"In notifyScreenshotError of ScreenshotNotificationsController.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00135,"kevAdded":null},{"id":"CVE-2021-0475","published":"2021-06-11T16:42:56.000Z","updated":"2024-08-03T15:40:01.155Z","title":"In on_l2cap_data_ind of btif_sock_l2cap.cc, there is possible memory corruption due to a use after free. This could lead to remote code execution over…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00976,"kevAdded":null},{"id":"CVE-2021-0474","published":"2021-06-11T16:42:56.000Z","updated":"2024-08-03T15:40:01.160Z","title":"In avrc_msg_cback of avrc_api.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.03357,"kevAdded":null},{"id":"CVE-2021-0473","published":"2021-06-11T16:42:56.000Z","updated":"2024-08-03T15:40:01.065Z","title":"In rw_t3t_process_error of rw_t3t.cc, there is a possible double free due to uninitialized data. This could lead to remote code execution over NFC with no…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00486,"kevAdded":null},{"id":"CVE-2021-0472","published":"2021-06-11T16:42:56.000Z","updated":"2024-08-03T15:40:01.285Z","title":"In shouldLockKeyguard of LockTaskController.java, there is a possible way to exit App Pinning without a PIN due to a permissions bypass. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00204,"kevAdded":null},{"id":"CVE-2021-0484","published":"2021-06-11T16:42:55.000Z","updated":"2024-08-03T15:40:01.247Z","title":"In readVector of IMediaPlayer.cpp, there is a possible read of uninitialized heap data due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2021-0482","published":"2021-06-11T16:42:55.000Z","updated":"2024-08-03T15:40:01.288Z","title":"In BinderDiedCallback of MediaCodec.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2021-0481","published":"2021-06-11T16:42:55.000Z","updated":"2024-08-03T15:40:01.242Z","title":"In onActivityResult of EditUserPhotoController.java, there is a possible access of unauthorized files due to an unexpected URI handler. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00754,"kevAdded":null},{"id":"CVE-2021-0476","published":"2021-06-11T16:42:55.000Z","updated":"2024-08-03T15:40:01.333Z","title":"In FindOrCreatePeer of btif_av.cc, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00183,"kevAdded":null},{"id":"CVE-2021-0466","published":"2021-06-11T16:42:55.000Z","updated":"2024-08-03T15:40:01.175Z","title":"In startIpClient of ClientModeImpl.java, there is a possible identifier which could be used to track a device. This could lead to remote information disclosure…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.01441,"kevAdded":null},{"id":"CVE-2019-9475","published":"2021-06-11T16:36:52.000Z","updated":"2024-08-04T21:54:44.181Z","title":"In /proc/net of the kernel filesystem, there is a possible information leak due to a permissions bypass. This could lead to local information disclosure with…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00121,"kevAdded":null},{"id":"CVE-2021-0488","published":"2021-04-15T12:53:37.000Z","updated":"2024-08-03T15:40:01.274Z","title":"In pb_write of pb_encode.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00137,"kevAdded":null},{"id":"CVE-2021-0468","published":"2021-04-13T18:26:23.000Z","updated":"2024-08-03T15:40:01.139Z","title":"In LK, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege for an attacker who has…","severity":"MEDIUM","score":6.6,"vendor":null,"product":"Android","kev":false,"epss":0.00135,"kevAdded":null},{"id":"CVE-2021-0444","published":"2021-04-13T18:26:18.000Z","updated":"2024-08-03T15:40:01.260Z","title":"In onActivityResult of QuickContactActivity.java, there is an unnecessary return of an intent. This could lead to local information disclosure of contact data…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00157,"kevAdded":null},{"id":"CVE-2021-0430","published":"2021-04-13T18:25:42.000Z","updated":"2024-08-03T15:40:01.250Z","title":"In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution via a…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.02842,"kevAdded":null},{"id":"CVE-2021-0400","published":"2021-04-13T18:25:36.000Z","updated":"2024-08-03T15:40:01.090Z","title":"In injectBestLocation and handleUpdateLocation of GnssLocationProvider.java, there is a possible incorrect reporting of location data to emergency services due…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2021-0436","published":"2021-04-13T18:25:27.000Z","updated":"2024-08-03T15:40:01.244Z","title":"In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds read due to integer overflow. This could lead to local information disclosure…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00137,"kevAdded":null},{"id":"CVE-2021-0471","published":"2021-04-13T18:24:45.000Z","updated":"2024-08-03T15:40:01.167Z","title":"In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00137,"kevAdded":null},{"id":"CVE-2021-0437","published":"2021-04-13T18:23:46.000Z","updated":"2024-08-03T15:40:01.155Z","title":"In setPlayPolicy of DrmPlugin.cpp, there is a possible double free. This could lead to local escalation of privilege in a privileged process with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00242,"kevAdded":null},{"id":"CVE-2021-0429","published":"2021-04-13T18:23:41.000Z","updated":"2024-08-03T15:40:01.068Z","title":"In pollOnce of ALooper.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2021-0442","published":"2021-04-13T18:23:35.000Z","updated":"2024-08-03T15:40:01.110Z","title":"In updateInfo of android_hardware_input_InputApplicationHandle.cpp, there is a possible control of code flow due to a use after free. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00132,"kevAdded":null},{"id":"CVE-2021-0427","published":"2021-04-13T18:23:14.000Z","updated":"2024-08-03T15:40:01.030Z","title":"In parseExclusiveStateAnnotation of LogEvent.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2021-0426","published":"2021-04-13T18:22:52.000Z","updated":"2024-08-03T15:40:01.172Z","title":"In parsePrimaryFieldFirstUidAnnotation of LogEvent.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00137,"kevAdded":null},{"id":"CVE-2021-0439","published":"2021-04-13T18:22:44.000Z","updated":"2024-08-03T15:40:01.309Z","title":"In setPowerModeWithHandle of com_android_server_power_PowerManagerService.cpp, there is a possible out of bounds write due to a missing bounds check. This…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00132,"kevAdded":null},{"id":"CVE-2021-0435","published":"2021-04-13T18:22:06.000Z","updated":"2024-08-03T15:40:01.261Z","title":"In avrc_proc_vendor_command of avrc_api.cc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.01712,"kevAdded":null},{"id":"CVE-2021-0431","published":"2021-04-13T18:22:00.000Z","updated":"2024-08-03T15:40:01.181Z","title":"In avrc_msg_cback of avrc_api.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.01712,"kevAdded":null},{"id":"CVE-2021-0432","published":"2021-04-13T18:21:52.000Z","updated":"2024-08-03T15:40:01.060Z","title":"In ClearPullerCacheIfNecessary and ForceClearPullerCache of StatsPullerManager.cpp, there is a possible use-after-free due to a race condition. This could lead…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2021-0428","published":"2021-04-13T18:20:49.000Z","updated":"2024-08-03T15:40:01.259Z","title":"In getSimSerialNumber of TelephonyManager.java, there is a possible way to read a trackable identifier due to a missing permission check. This could lead to…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2021-0445","published":"2021-04-13T18:20:19.000Z","updated":"2024-08-03T15:40:01.123Z","title":"In start of WelcomeActivity.java, there is a possible residual profile due to a confused deputy. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00123,"kevAdded":null},{"id":"CVE-2021-0446","published":"2021-04-13T18:19:27.000Z","updated":"2024-08-03T15:40:01.153Z","title":"In ImportVCardActivity, there is a possible way to bypass user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.0013,"kevAdded":null},{"id":"CVE-2021-0433","published":"2021-04-13T18:18:49.000Z","updated":"2024-08-03T15:40:01.143Z","title":"In onCreate of DeviceChooserActivity.java, there is a possible way to bypass user consent when pairing a Bluetooth device due to a tapjacking/overlay attack.…","severity":"HIGH","score":8,"vendor":null,"product":"Android","kev":false,"epss":0.00551,"kevAdded":null},{"id":"CVE-2021-0443","published":"2021-04-13T18:17:58.000Z","updated":"2024-08-03T15:40:01.289Z","title":"In several functions of ScreenshotHelper.java and related files, there is a possible incorrectly saved screenshot due to a race condition. This could lead to…","severity":"MEDIUM","score":4.7,"vendor":null,"product":"Android","kev":false,"epss":0.00132,"kevAdded":null},{"id":"CVE-2021-0438","published":"2021-04-13T18:17:25.000Z","updated":"2024-08-03T15:40:01.152Z","title":"In several functions of InputDispatcher.cpp, WindowManagerService.java, and related files, there is a possible tapjacking attack due to an incorrect…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00149,"kevAdded":null},{"id":"CVE-2021-0465","published":"2021-03-10T16:18:58.000Z","updated":"2024-08-03T15:40:01.432Z","title":"In GenerateFaceMask of face.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00129,"kevAdded":null},{"id":"CVE-2021-0464","published":"2021-03-10T16:18:47.000Z","updated":"2024-08-03T15:40:01.258Z","title":"In sound_trigger_event_alloc of platform.h, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00136,"kevAdded":null},{"id":"CVE-2021-0463","published":"2021-03-10T16:18:35.000Z","updated":"2024-08-03T15:40:01.278Z","title":"In convertToHidl of convert.cpp, there is a possible out of bounds read due to uninitialized data from ReturnFrameworkMessage. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0014,"kevAdded":null},{"id":"CVE-2021-0462","published":"2021-03-10T16:18:15.000Z","updated":"2024-08-03T15:40:01.284Z","title":"In the NXP NFC firmware, there is a possible insecure firmware update due to a logic error. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00144,"kevAdded":null},{"id":"CVE-2021-0461","published":"2021-03-10T16:18:03.000Z","updated":"2024-08-03T15:40:01.166Z","title":"In iaxxx_core_sensor_change_state of iaxxx-module.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00128,"kevAdded":null},{"id":"CVE-2021-0460","published":"2021-03-10T16:17:43.000Z","updated":"2024-08-03T15:40:01.091Z","title":"In the FingerTipS touch screen driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00129,"kevAdded":null},{"id":"CVE-2021-0459","published":"2021-03-10T16:17:30.000Z","updated":"2024-08-03T15:40:01.431Z","title":"In fts_driver_test_write of fts_proc.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00211,"kevAdded":null},{"id":"CVE-2021-0458","published":"2021-03-10T16:17:15.000Z","updated":"2024-08-03T15:40:01.270Z","title":"In the FingerTipS touch screen driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00204,"kevAdded":null},{"id":"CVE-2021-0457","published":"2021-03-10T16:15:58.000Z","updated":"2024-08-03T15:40:01.117Z","title":"In the FingerTipS touch screen driver, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00225,"kevAdded":null},{"id":"CVE-2021-0456","published":"2021-03-10T16:15:40.000Z","updated":"2024-08-03T15:40:01.173Z","title":"In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00128,"kevAdded":null},{"id":"CVE-2021-0455","published":"2021-03-10T16:15:25.000Z","updated":"2024-08-03T15:40:01.172Z","title":"In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00136,"kevAdded":null},{"id":"CVE-2021-0454","published":"2021-03-10T16:15:11.000Z","updated":"2024-08-03T15:40:01.188Z","title":"In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00136,"kevAdded":null},{"id":"CVE-2021-0453","published":"2021-03-10T16:14:53.000Z","updated":"2024-08-03T15:40:01.174Z","title":"In the Titan-M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00129,"kevAdded":null},{"id":"CVE-2021-0452","published":"2021-03-10T16:14:37.000Z","updated":"2024-08-03T15:40:01.265Z","title":"In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00129,"kevAdded":null},{"id":"CVE-2021-0451","published":"2021-03-10T16:14:17.000Z","updated":"2024-08-03T15:40:01.311Z","title":"In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00129,"kevAdded":null},{"id":"CVE-2021-0450","published":"2021-03-10T16:13:50.000Z","updated":"2024-08-03T15:40:01.116Z","title":"In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00129,"kevAdded":null},{"id":"CVE-2021-0449","published":"2021-03-10T16:13:36.000Z","updated":"2024-08-03T15:40:01.063Z","title":"In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00129,"kevAdded":null},{"id":"CVE-2021-0389","published":"2021-03-10T16:13:01.000Z","updated":"2024-08-03T15:40:00.925Z","title":"In setNightModeActivated of UiModeManagerService.java, there is a missing permission check. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00127,"kevAdded":null},{"id":"CVE-2021-0388","published":"2021-03-10T16:12:44.000Z","updated":"2024-08-03T15:40:01.041Z","title":"In onReceive of ImsPhoneCallTracker.java, there is a possible misattribution of data usage due to an incorrect broadcast handler. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00126,"kevAdded":null},{"id":"CVE-2021-0387","published":"2021-03-10T16:12:27.000Z","updated":"2024-08-03T15:40:00.517Z","title":"In FindQuotaDeviceForUuid of QuotaUtils.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":6.4,"vendor":null,"product":"Android","kev":false,"epss":0.00107,"kevAdded":null},{"id":"CVE-2021-0386","published":"2021-03-10T16:11:33.000Z","updated":"2024-08-03T15:40:01.087Z","title":"In onCreate of UsbConfirmActivity, there is a possible tapjacking vector due to an insecure default value. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00385,"kevAdded":null},{"id":"CVE-2021-0385","published":"2021-03-10T16:11:07.000Z","updated":"2024-08-03T15:40:01.279Z","title":"In createConnectToAvailableNetworkNotification of ConnectToNetworkNotificationBuilder.java, there is a possible connection to untrusted WiFi networks due to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00127,"kevAdded":null},{"id":"CVE-2021-0383","published":"2021-03-10T16:10:22.000Z","updated":"2024-08-03T15:40:00.814Z","title":"In done of CaptivePortalLoginActivity.java, there is a confused deputy. This could lead to local escalation of privilege in carrier settings with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2021-0382","published":"2021-03-10T16:09:52.000Z","updated":"2024-08-03T15:40:00.895Z","title":"In checkSlicePermission of SliceManagerService.java, there is a possible resource exposure due to an incorrect permission check. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00127,"kevAdded":null},{"id":"CVE-2021-0381","published":"2021-03-10T16:09:34.000Z","updated":"2024-08-03T15:40:01.153Z","title":"In updateNotifications of DeviceStorageMonitorService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00128,"kevAdded":null},{"id":"CVE-2021-0380","published":"2021-03-10T16:02:07.000Z","updated":"2024-08-03T15:40:01.244Z","title":"In onReceive of DcTracker.java, there is a possible way to trigger a provisioning URL and modify other telephony settings due to a missing permission check.…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00127,"kevAdded":null},{"id":"CVE-2021-0379","published":"2021-03-10T16:01:13.000Z","updated":"2024-08-03T15:40:00.601Z","title":"In getUpTo17bits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00843,"kevAdded":null},{"id":"CVE-2021-0378","published":"2021-03-10T16:00:46.000Z","updated":"2024-08-03T15:40:00.905Z","title":"In getNbits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00786,"kevAdded":null},{"id":"CVE-2021-0377","published":"2021-03-10T15:59:29.000Z","updated":"2024-08-03T15:40:01.446Z","title":"In DeltaPerformer::Write of delta_performer.cc, there is a possible use of untrusted input due to improper input validation. This could lead to a local bypass…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2021-0376","published":"2021-03-10T15:57:41.000Z","updated":"2024-08-03T15:40:01.109Z","title":"In checkUriPermission and related functions of MediaProvider.java, there is a possible way to access external files due to a permissions bypass. This could…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2021-0375","published":"2021-03-10T15:57:20.000Z","updated":"2024-08-03T15:40:01.250Z","title":"In onPackageModified of VoiceInteractionManagerService.java, there is a possible change of default applications due to an insecure default value. This could…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00123,"kevAdded":null},{"id":"CVE-2021-0374","published":"2021-03-10T15:56:32.000Z","updated":"2024-08-03T15:40:01.264Z","title":"In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00129,"kevAdded":null},{"id":"CVE-2021-0372","published":"2021-03-10T15:55:54.000Z","updated":"2024-08-03T15:40:01.162Z","title":"In getMediaOutputSliceAction of RemoteMediaSlice.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2021-0371","published":"2021-03-10T15:55:17.000Z","updated":"2024-08-03T15:40:01.222Z","title":"In nci_proc_rf_management_ntf of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00128,"kevAdded":null},{"id":"CVE-2021-0370","published":"2021-03-10T15:54:01.000Z","updated":"2024-08-03T15:40:01.237Z","title":"In Write of NxpMfcReader.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00137,"kevAdded":null},{"id":"CVE-2021-0369","published":"2021-03-10T15:53:36.000Z","updated":"2024-08-03T15:40:00.877Z","title":"In CrossProfileAppsServiceImpl.java, there is the possibility of an application's INTERACT_ACROSS_PROFILES grant state not displaying properly in the setting…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00159,"kevAdded":null},{"id":"CVE-2021-0368","published":"2021-03-10T15:52:59.000Z","updated":"2024-08-03T15:40:00.892Z","title":"In oggpack_look of bitwise.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00737,"kevAdded":null},{"id":"CVE-2020-0025","published":"2021-03-10T15:52:13.000Z","updated":"2024-08-04T05:47:39.499Z","title":"In deletePackageVersionedInternal of PackageManagerService.java, there is a possible way to exit Screen Pinning due to a permissions bypass. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2021-0399","published":"2021-03-10T15:41:26.000Z","updated":"2024-08-03T15:40:01.290Z","title":"In qtaguid_untag of xt_qtaguid.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00382,"kevAdded":null},{"id":"CVE-2021-0392","published":"2021-03-10T15:41:02.000Z","updated":"2024-08-03T15:40:00.381Z","title":"In main of main.cpp, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with User execution…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00245,"kevAdded":null},{"id":"CVE-2021-0390","published":"2021-03-10T15:40:46.000Z","updated":"2024-08-03T15:40:00.976Z","title":"In various methods of WifiNetworkSuggestionsManager.java, there is a possible modification of suggested networks due to a missing permission check. This could…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00238,"kevAdded":null},{"id":"CVE-2021-0397","published":"2021-03-10T15:40:28.000Z","updated":"2024-08-03T15:40:01.145Z","title":"In sdp_copy_raw_data of sdp_discovery.cc, there is a possible system compromise due to a double free. This could lead to remote code execution with no…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.0567,"kevAdded":null},{"id":"CVE-2021-0398","published":"2021-03-10T15:40:12.000Z","updated":"2024-08-03T15:40:00.979Z","title":"In bindServiceLocked of ActiveServices.java, there is a possible foreground service launch due to a confused deputy. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00132,"kevAdded":null},{"id":"CVE-2021-0391","published":"2021-03-10T15:39:34.000Z","updated":"2024-08-03T15:40:01.274Z","title":"In onCreate() of ChooseTypeAndAccountActivity.java, there is a possible way to learn the existence of an account, without permissions, due to a…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00657,"kevAdded":null},{"id":"CVE-2021-0394","published":"2021-03-10T15:38:06.000Z","updated":"2024-08-03T15:40:00.978Z","title":"In android_os_Parcel_readString8 of android_os_Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00264,"kevAdded":null},{"id":"CVE-2021-0395","published":"2021-03-10T15:37:38.000Z","updated":"2024-08-03T15:40:00.550Z","title":"In StopServicesAndLogViolations of reboot.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00129,"kevAdded":null},{"id":"CVE-2021-0393","published":"2021-03-10T15:37:06.000Z","updated":"2024-08-03T15:40:01.223Z","title":"In Scanner::LiteralBuffer::NewCapacity of scanner.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00961,"kevAdded":null},{"id":"CVE-2021-0396","published":"2021-03-10T15:36:08.000Z","updated":"2024-08-03T15:40:00.641Z","title":"In Builtins::Generate_ArgumentsAdaptorTrampoline of builtins-arm.cc and related files, there is a possible out of bounds write due to an incorrect bounds…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.01946,"kevAdded":null},{"id":"CVE-2021-0366","published":"2021-02-26T20:19:44.000Z","updated":"2024-08-03T15:40:01.163Z","title":"In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges…","severity":"MEDIUM","score":6.4,"vendor":null,"product":"Android","kev":false,"epss":0.00171,"kevAdded":null},{"id":"CVE-2021-0367","published":"2021-02-26T20:19:39.000Z","updated":"2024-08-03T15:40:00.910Z","title":"In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges…","severity":"MEDIUM","score":6.4,"vendor":null,"product":"Android","kev":false,"epss":0.00171,"kevAdded":null},{"id":"CVE-2021-0401","published":"2021-02-26T20:19:34.000Z","updated":"2024-08-03T15:40:01.182Z","title":"In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges…","severity":"MEDIUM","score":6.4,"vendor":null,"product":"Android","kev":false,"epss":0.00171,"kevAdded":null},{"id":"CVE-2021-0402","published":"2021-02-26T20:19:28.000Z","updated":"2024-08-03T15:40:01.227Z","title":"In jpeg, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00237,"kevAdded":null},{"id":"CVE-2021-0403","published":"2021-02-26T20:19:23.000Z","updated":"2024-08-03T15:40:01.242Z","title":"In netdiag, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with System execution…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00129,"kevAdded":null},{"id":"CVE-2021-0404","published":"2021-02-26T20:19:17.000Z","updated":"2024-08-03T15:40:01.132Z","title":"In mobile_log_d, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00135,"kevAdded":null},{"id":"CVE-2021-0405","published":"2021-02-26T20:19:12.000Z","updated":"2024-08-03T15:40:01.224Z","title":"In performance driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00237,"kevAdded":null},{"id":"CVE-2021-0406","published":"2021-02-26T20:19:08.000Z","updated":"2024-08-03T15:40:01.434Z","title":"In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00237,"kevAdded":null},{"id":"CVE-2021-0325","published":"2021-02-10T16:50:50.000Z","updated":"2024-08-03T15:39:59.619Z","title":"In ih264d_parse_pslice of ih264d_parse_pslice.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.02291,"kevAdded":null},{"id":"CVE-2021-0326","published":"2021-02-10T16:50:40.000Z","updated":"2024-08-03T15:39:59.563Z","title":"In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.04932,"kevAdded":null},{"id":"CVE-2021-0327","published":"2021-02-10T16:50:30.000Z","updated":"2024-08-03T15:39:59.569Z","title":"In getContentProviderImpl of ActivityManagerService.java, there is a possible permission bypass due to non-restored binder identities. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00271,"kevAdded":null},{"id":"CVE-2021-0328","published":"2021-02-10T16:50:22.000Z","updated":"2024-08-03T15:39:59.528Z","title":"In onBatchScanReports and deliverBatchScan of GattService.java, there is a possible way to retrieve Bluetooth scan results without permissions due to a missing…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00246,"kevAdded":null},{"id":"CVE-2021-0341","published":"2021-02-10T16:50:15.000Z","updated":"2024-08-03T15:40:00.192Z","title":"In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crypto. This could…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00915,"kevAdded":null},{"id":"CVE-2021-0329","published":"2021-02-10T16:50:08.000Z","updated":"2024-08-03T15:39:59.569Z","title":"In several native functions called by AdvertiseManager.java, there is a possible out of bounds write due to a missing bounds check. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00268,"kevAdded":null},{"id":"CVE-2021-0314","published":"2021-02-10T16:50:02.000Z","updated":"2024-08-03T15:32:10.611Z","title":"In onCreate of UninstallerActivity, there is a possible way to uninstall an all without informed user consent due to a tapjacking/overlay attack. This could…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00286,"kevAdded":null},{"id":"CVE-2021-0330","published":"2021-02-10T16:49:53.000Z","updated":"2024-08-03T15:39:59.570Z","title":"In add_user_ce and remove_user_ce of storaged.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00268,"kevAdded":null},{"id":"CVE-2021-0331","published":"2021-02-10T16:49:45.000Z","updated":"2024-08-03T15:39:59.544Z","title":"In onCreate of NotificationAccessConfirmationActivity.java, there is a possible overlay attack due to an insecure default value. This could lead to local…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00287,"kevAdded":null},{"id":"CVE-2021-0332","published":"2021-02-10T16:49:38.000Z","updated":"2024-08-03T15:40:00.190Z","title":"In bootFinished of SurfaceFlinger.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00253,"kevAdded":null},{"id":"CVE-2021-0333","published":"2021-02-10T16:49:28.000Z","updated":"2024-08-03T15:39:59.554Z","title":"In onCreate of BluetoothPermissionActivity.java, there is a possible permissions bypass due to a tapjacking overlay that obscures the phonebook permissions…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00315,"kevAdded":null},{"id":"CVE-2021-0334","published":"2021-02-10T16:49:21.000Z","updated":"2024-08-03T15:39:59.570Z","title":"In onTargetSelected of ResolverActivity.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00302,"kevAdded":null},{"id":"CVE-2021-0335","published":"2021-02-10T16:49:13.000Z","updated":"2024-08-03T15:39:59.563Z","title":"In process of C2SoftHevcDec.cpp, there is a possible out of bounds write due to a use after free. This could lead to remote information disclosure with no…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00879,"kevAdded":null},{"id":"CVE-2021-0336","published":"2021-02-10T16:49:06.000Z","updated":"2024-08-03T15:40:00.342Z","title":"In onReceive of BluetoothPermissionRequest.java, there is a possible permissions bypass due to a mutable PendingIntent. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0027,"kevAdded":null},{"id":"CVE-2021-0337","published":"2021-02-10T16:48:59.000Z","updated":"2024-08-03T15:40:01.121Z","title":"In moveInMediaStore of FileSystemProvider.java, there is a possible file exposure due to stale metadata. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00177,"kevAdded":null},{"id":"CVE-2021-0338","published":"2021-02-10T16:48:43.000Z","updated":"2024-08-03T15:39:59.574Z","title":"In SystemSettingsValidators, there is a possible permanent denial of service due to missing bounds checks on UI settings. This could lead to local denial of…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00151,"kevAdded":null},{"id":"CVE-2021-0302","published":"2021-02-10T16:48:35.000Z","updated":"2024-08-03T15:32:10.557Z","title":"In PackageInstaller, there is a possible tapjacking attack due to an insecure default value. This could lead to local escalation of privilege and permissions…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00736,"kevAdded":null},{"id":"CVE-2021-0305","published":"2021-02-10T16:48:27.000Z","updated":"2024-08-03T15:32:10.619Z","title":"In PackageInstaller, there is a possible tapjacking attack due to an insecure default value. This could lead to local escalation of privilege and permissions…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0054,"kevAdded":null},{"id":"CVE-2021-0339","published":"2021-02-10T16:48:14.000Z","updated":"2024-08-03T15:40:00.829Z","title":"In loadAnimation of WindowContainer.java, there is a possible way to keep displaying a malicious app while a target app is brought to the foreground. This…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00764,"kevAdded":null},{"id":"CVE-2021-0340","published":"2021-02-10T16:47:54.000Z","updated":"2024-08-03T15:39:59.980Z","title":"In parseNextBox of IsoInterface.java, there is a possible leak of unredacted location information due to improper input validation. This could lead to remote…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.02152,"kevAdded":null},{"id":"CVE-2021-0351","published":"2021-02-04T17:10:51.000Z","updated":"2024-08-03T15:40:01.111Z","title":"In wlan driver, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.01105,"kevAdded":null},{"id":"CVE-2021-0350","published":"2021-02-04T17:10:43.000Z","updated":"2024-08-03T15:40:00.528Z","title":"In ged, there is a possible system crash due to an improper input validation. This could lead to local denial of service with System execution privileges…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2021-0349","published":"2021-02-04T17:10:35.000Z","updated":"2024-08-03T15:40:01.055Z","title":"In display driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.0017,"kevAdded":null},{"id":"CVE-2021-0348","published":"2021-02-04T17:10:26.000Z","updated":"2024-08-03T15:39:59.606Z","title":"In vpu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2021-0347","published":"2021-02-04T17:10:17.000Z","updated":"2024-08-03T15:40:00.376Z","title":"In ccu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00162,"kevAdded":null},{"id":"CVE-2021-0346","published":"2021-02-04T17:10:07.000Z","updated":"2024-08-03T15:40:00.368Z","title":"In vpu, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2021-0345","published":"2021-02-04T17:09:52.000Z","updated":"2024-08-03T15:40:00.505Z","title":"In mobile_log_d, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2021-0344","published":"2021-02-04T17:09:33.000Z","updated":"2024-08-03T15:40:00.345Z","title":"In mtkpower, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.0017,"kevAdded":null},{"id":"CVE-2021-0343","published":"2021-02-04T17:09:15.000Z","updated":"2024-08-03T15:40:00.438Z","title":"In kisd, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00166,"kevAdded":null},{"id":"CVE-2021-0352","published":"2021-02-02T23:01:39.000Z","updated":"2024-08-03T15:39:59.987Z","title":"In RT regmap driver, there is a possible memory corruption due to type confusion. This could lead to local denial of service with System execution privileges…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00149,"kevAdded":null},{"id":"CVE-2021-0353","published":"2021-02-02T23:01:35.000Z","updated":"2024-08-03T15:40:00.303Z","title":"In kisd, there is a possible memory corruption due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00165,"kevAdded":null},{"id":"CVE-2021-0354","published":"2021-02-02T23:01:33.000Z","updated":"2024-08-03T15:40:00.491Z","title":"In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00162,"kevAdded":null},{"id":"CVE-2021-0355","published":"2021-02-02T23:01:30.000Z","updated":"2024-08-03T15:40:00.779Z","title":"In kisd, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00158,"kevAdded":null},{"id":"CVE-2021-0356","published":"2021-02-02T23:01:27.000Z","updated":"2024-08-03T15:40:01.061Z","title":"In netdiag, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00339,"kevAdded":null},{"id":"CVE-2021-0357","published":"2021-02-02T23:01:24.000Z","updated":"2024-08-03T15:40:01.189Z","title":"In netdiag, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00162,"kevAdded":null},{"id":"CVE-2021-0358","published":"2021-02-02T23:01:21.000Z","updated":"2024-08-03T15:40:00.954Z","title":"In netdiag, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00339,"kevAdded":null},{"id":"CVE-2021-0359","published":"2021-02-02T23:01:18.000Z","updated":"2024-08-03T15:40:01.224Z","title":"In netdiag, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00162,"kevAdded":null},{"id":"CVE-2021-0360","published":"2021-02-02T23:01:15.000Z","updated":"2024-08-03T15:40:00.930Z","title":"In netdiag, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00162,"kevAdded":null},{"id":"CVE-2021-0361","published":"2021-02-02T23:01:11.000Z","updated":"2024-08-03T15:40:00.519Z","title":"In kisd, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2021-0362","published":"2021-02-02T23:01:08.000Z","updated":"2024-08-03T15:40:00.953Z","title":"In aee, there is a possible memory corruption due to a stack buffer overflow. This could lead to local escalation of privilege with System execution privileges…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00161,"kevAdded":null},{"id":"CVE-2021-0363","published":"2021-02-02T23:01:02.000Z","updated":"2024-08-03T15:40:00.509Z","title":"In mobile_log_d, there is a possible command injection due to a missing bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00335,"kevAdded":null},{"id":"CVE-2021-0364","published":"2021-02-02T23:00:59.000Z","updated":"2024-08-03T15:40:00.553Z","title":"In mobile_log_d, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00344,"kevAdded":null},{"id":"CVE-2021-0365","published":"2021-02-02T23:00:57.000Z","updated":"2024-08-03T15:40:01.108Z","title":"In display driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00159,"kevAdded":null},{"id":"CVE-2020-0236","published":"2021-01-25T16:40:31.000Z","updated":"2024-08-04T05:55:12.447Z","title":"In A2DP_GetCodecType of a2dp_codec_config, there is a possible out-of-bounds read due to improper input validation. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2020-27098","published":"2021-01-22T19:16:05.000Z","updated":"2024-08-04T16:11:35.377Z","title":"In checkGrantUriPermission of UriGrantsManagerService.java, there is a possible way to access contacts due to a permissions bypass. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00149,"kevAdded":null},{"id":"CVE-2020-27097","published":"2021-01-22T19:15:53.000Z","updated":"2024-08-04T16:11:35.435Z","title":"In checkGrantUriPermission of UriGrantsManagerService.java, there is a possible permissions bypass. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2021-0301","published":"2021-01-11T21:48:34.000Z","updated":"2024-08-03T15:32:10.596Z","title":"In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00164,"kevAdded":null},{"id":"CVE-2021-0313","published":"2021-01-11T21:48:30.000Z","updated":"2024-08-03T15:32:10.651Z","title":"In isWordBreakAfter of LayoutUtils.cpp, there is a possible way to slow or crash a TextView due to improper input validation. This could lead to remote denial…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.01682,"kevAdded":null},{"id":"CVE-2021-0312","published":"2021-01-11T21:48:24.000Z","updated":"2024-08-03T15:32:10.583Z","title":"In WAVSource::read of WAVExtractor.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote information disclosure…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.01146,"kevAdded":null},{"id":"CVE-2021-0303","published":"2021-01-11T21:48:20.000Z","updated":"2024-08-03T15:32:10.581Z","title":"In dispatchGraphTerminationMessage() of packages/services/Car/computepipe/runner/graph/StreamSetObserver.cpp, there is a possible use after free due to a race…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2021-0311","published":"2021-01-11T21:48:15.000Z","updated":"2024-08-03T15:32:10.632Z","title":"In ElementaryStreamQueue::dequeueAccessUnitH264() of ESQueue.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.01146,"kevAdded":null},{"id":"CVE-2021-0310","published":"2021-01-11T21:48:10.000Z","updated":"2024-08-03T15:32:10.686Z","title":"In LazyServiceRegistrar of LazyServiceRegistrar.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0017,"kevAdded":null},{"id":"CVE-2021-0320","published":"2021-01-11T21:48:05.000Z","updated":"2024-08-03T15:32:10.627Z","title":"In is_device_locked and set_device_locked of keystore_keymaster_enforcement.h, there is a possible bypass of lockscreen requirements for keyguard bound keys…","severity":"MEDIUM","score":4.7,"vendor":null,"product":"Android","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2021-0315","published":"2021-01-11T21:48:00.000Z","updated":"2024-08-03T15:32:10.680Z","title":"In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to convince the user to grant an app access to an account due to a…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00294,"kevAdded":null},{"id":"CVE-2020-0471","published":"2021-01-11T21:47:56.000Z","updated":"2024-08-04T06:02:51.695Z","title":"In reassemble_and_dispatch of packet_fragmenter.cc, there is a possible way to inject packets into an encrypted Bluetooth connection due to improper input…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.01659,"kevAdded":null},{"id":"CVE-2021-0316","published":"2021-01-11T21:47:50.000Z","updated":"2024-08-03T15:32:10.643Z","title":"In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.0319,"kevAdded":null},{"id":"CVE-2021-0317","published":"2021-01-11T21:47:38.000Z","updated":"2024-08-03T15:32:10.678Z","title":"In createOrUpdate of Permission.java and related code, there is possible permission escalation due to a logic error. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00209,"kevAdded":null},{"id":"CVE-2021-0318","published":"2021-01-11T21:47:31.000Z","updated":"2024-08-03T15:32:10.680Z","title":"In appendEventsToCacheLocked of SensorEventConnection.cpp, there is a possible out of bounds write due to a use-after-free. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00268,"kevAdded":null},{"id":"CVE-2021-0319","published":"2021-01-11T21:47:25.000Z","updated":"2024-08-03T15:32:10.685Z","title":"In checkCallerIsSystemOr of CompanionDeviceManagerService.java, there is a possible way to get a nearby Bluetooth device's MAC address without appropriate…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00269,"kevAdded":null},{"id":"CVE-2021-0321","published":"2021-01-11T21:47:19.000Z","updated":"2024-08-03T15:32:10.796Z","title":"In enforceDumpPermissionForPackage of ActivityManagerService.java, there is a possible way to determine if a package is installed due to side channel…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00159,"kevAdded":null},{"id":"CVE-2021-0304","published":"2021-01-11T21:47:14.000Z","updated":"2024-08-03T15:32:10.672Z","title":"In several functions of GlobalScreenshot.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00177,"kevAdded":null},{"id":"CVE-2021-0322","published":"2021-01-11T21:47:08.000Z","updated":"2024-08-03T15:39:59.545Z","title":"In onCreate of SlicePermissionActivity.java, there is a possible misleading string displayed due to improper input validation. This could lead to local…","severity":"MEDIUM","score":5,"vendor":null,"product":"Android","kev":false,"epss":0.00168,"kevAdded":null},{"id":"CVE-2021-0309","published":"2021-01-11T21:47:03.000Z","updated":"2024-08-03T15:32:10.575Z","title":"In onCreate of grantCredentialsPermissionActivity, there is a confused deputy. This could lead to local information disclosure and account access with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00169,"kevAdded":null},{"id":"CVE-2021-0308","published":"2021-01-11T21:46:58.000Z","updated":"2024-08-03T15:32:10.683Z","title":"In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.8,"vendor":null,"product":"Android","kev":false,"epss":0.00449,"kevAdded":null},{"id":"CVE-2021-0307","published":"2021-01-11T21:46:52.000Z","updated":"2024-08-03T15:32:10.645Z","title":"In updatePermissionSourcePackage of PermissionManagerService.java, there is a possible automatic runtime permission grant due to a confused deputy. This could…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2021-0306","published":"2021-01-11T21:46:47.000Z","updated":"2024-08-03T15:32:10.599Z","title":"In addAllPermissions of PermissionManagerService.java, there is a possible permissions bypass when upgrading major Android versions which allows an app to gain…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0027,"kevAdded":null},{"id":"CVE-2020-27059","published":"2021-01-11T20:28:56.000Z","updated":"2024-08-04T16:11:35.475Z","title":"In onAuthenticated of AuthenticationClient.java, there is a possible tapjacking attack when requesting the user's fingerprint due to an overlaid window. This…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00219,"kevAdded":null},{"id":"CVE-2021-0342","published":"2021-01-11T20:28:52.000Z","updated":"2024-08-03T15:40:00.841Z","title":"In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00179,"kevAdded":null},{"id":"CVE-2020-27068","published":"2020-12-15T16:17:26.000Z","updated":"2024-08-04T16:11:35.394Z","title":"Product: AndroidVersions: Android kernelAndroid ID: A-127973231References: Upstream kernel","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00728,"kevAdded":null},{"id":"CVE-2020-27067","published":"2020-12-15T16:17:19.000Z","updated":"2024-08-04T16:11:35.535Z","title":"In the l2tp subsystem, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.4,"vendor":null,"product":"Android","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2020-27066","published":"2020-12-15T16:17:13.000Z","updated":"2024-08-04T16:11:35.932Z","title":"In xfrm6_tunnel_free_spi of net/ipv6/xfrm6_tunnel.c, there is a possible use after free due to improper locking. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00163,"kevAdded":null},{"id":"CVE-2020-27057","published":"2020-12-15T16:17:06.000Z","updated":"2024-08-04T16:11:35.387Z","title":"In getGpuStatsGlobalInfo and getGpuStatsAppInfo of GpuService.cpp, there is a possible permission bypass due to a missing permission check. This could lead to…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00132,"kevAdded":null},{"id":"CVE-2020-27056","published":"2020-12-15T16:17:00.000Z","updated":"2024-08-04T16:11:35.624Z","title":"In SELinux policies of mls, there is a missing permission check. This could lead to local information disclosure of package metadata with no additional…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2020-27055","published":"2020-12-15T16:07:36.000Z","updated":"2024-08-04T16:11:35.398Z","title":"In isSubmittable and showWarningMessagesIfAppropriate of WifiConfigController.java and WifiConfigController2.java, there is a possible insecure WiFi…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00615,"kevAdded":null},{"id":"CVE-2020-27054","published":"2020-12-15T16:06:51.000Z","updated":"2024-08-04T16:11:35.397Z","title":"In onFactoryReset of BluetoothManagerService.java, there is a missing permission check. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00145,"kevAdded":null},{"id":"CVE-2020-27053","published":"2020-12-15T16:06:44.000Z","updated":"2024-08-04T16:11:35.707Z","title":"In broadcastWifiCredentialChanged of ClientModeImpl.java, there is a possible location permission bypass due to a missing permission check. This could lead to…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2020-27052","published":"2020-12-15T16:06:37.000Z","updated":"2024-08-04T16:11:35.552Z","title":"In getLockTaskLaunchMode of ActivityRecord.java, there is a possible way for any app to start in Lock Task Mode due to a permissions bypass. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0014,"kevAdded":null},{"id":"CVE-2020-27051","published":"2020-12-15T16:06:28.000Z","updated":"2024-08-04T16:11:35.786Z","title":"In NFA_RwI93WriteMultipleBlocks of nfa_rw_api.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00423,"kevAdded":null},{"id":"CVE-2020-27050","published":"2020-12-15T16:06:21.000Z","updated":"2024-08-04T16:11:35.471Z","title":"In rw_i93_send_cmd_write_multi_blocks of rw_i93.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00442,"kevAdded":null},{"id":"CVE-2020-27049","published":"2020-12-15T16:06:15.000Z","updated":"2024-08-04T16:11:35.422Z","title":"In rw_t3t_send_raw_frame of rw_t3t.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00423,"kevAdded":null},{"id":"CVE-2020-27048","published":"2020-12-15T16:05:54.000Z","updated":"2024-08-04T16:11:35.371Z","title":"In RW_SendRawFrame of rw_main.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00434,"kevAdded":null},{"id":"CVE-2020-27047","published":"2020-12-15T16:05:45.000Z","updated":"2024-08-04T16:11:35.339Z","title":"In ce_t4t_update_binary of ce_t4t.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00423,"kevAdded":null},{"id":"CVE-2020-27046","published":"2020-12-15T16:05:38.000Z","updated":"2024-08-04T16:11:35.397Z","title":"In nfc_ncif_proc_ee_action of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00163,"kevAdded":null},{"id":"CVE-2020-27045","published":"2020-12-15T16:05:32.000Z","updated":"2024-08-04T16:11:35.492Z","title":"In CE_SendRawFrame of ce_main.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00442,"kevAdded":null},{"id":"CVE-2020-27044","published":"2020-12-15T16:05:25.000Z","updated":"2024-08-04T16:11:35.414Z","title":"In restartWrite of Parcel.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00148,"kevAdded":null},{"id":"CVE-2020-27043","published":"2020-12-15T16:05:18.000Z","updated":"2024-08-04T16:11:35.575Z","title":"In nfc_enabled of nfc_main.cc, there is a possible out of bounds read due to an incorrect increment. This could lead to local information disclosure via…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2020-27041","published":"2020-12-15T16:05:10.000Z","updated":"2024-08-04T16:11:35.314Z","title":"In showProvisioningNotification of ConnectivityService.java, there is an unsafe PendingIntent. This could lead to local information disclosure of notification…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0014,"kevAdded":null},{"id":"CVE-2020-27040","published":"2020-12-15T16:04:05.000Z","updated":"2024-08-04T16:11:35.579Z","title":"In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00155,"kevAdded":null},{"id":"CVE-2020-27039","published":"2020-12-15T16:03:59.000Z","updated":"2024-08-04T16:11:35.370Z","title":"In postNotification of ServiceRecord.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00149,"kevAdded":null},{"id":"CVE-2020-27038","published":"2020-12-15T16:03:48.000Z","updated":"2024-08-04T16:11:35.337Z","title":"In process of C2SoftVorbisDec.cpp, there is a possible resource exhaustion due to a memory leak. This could lead to remote denial of service with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00724,"kevAdded":null},{"id":"CVE-2020-27037","published":"2020-12-15T16:03:29.000Z","updated":"2024-08-04T16:11:35.402Z","title":"In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00155,"kevAdded":null},{"id":"CVE-2020-27036","published":"2020-12-15T16:03:21.000Z","updated":"2024-08-04T16:03:23.230Z","title":"In phNxpNciHal_send_ext_cmd of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.0015,"kevAdded":null},{"id":"CVE-2020-27035","published":"2020-12-15T16:02:15.000Z","updated":"2024-08-04T16:03:23.266Z","title":"In priorLinearAllocation of C2AllocatorIon.cpp, there is a possible use-after-free due to improper locking. This could lead to local information disclosure in…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2020-27034","published":"2020-12-15T16:02:08.000Z","updated":"2024-08-04T16:03:23.265Z","title":"In createSimSelectNotification of SimSelectNotification.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00149,"kevAdded":null},{"id":"CVE-2020-27033","published":"2020-12-15T16:02:00.000Z","updated":"2024-08-04T16:03:23.304Z","title":"In nfc_ncif_proc_get_routing of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00151,"kevAdded":null},{"id":"CVE-2020-27032","published":"2020-12-15T16:01:52.000Z","updated":"2024-08-04T16:03:23.223Z","title":"In getRadioAccessFamily of PhoneInterfaceManager.java, there is a possible read of privileged data due to a missing permission check. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2020-27031","published":"2020-12-15T16:01:43.000Z","updated":"2024-08-04T16:03:23.205Z","title":"In nfc_data_event of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00151,"kevAdded":null},{"id":"CVE-2020-27030","published":"2020-12-15T16:01:36.000Z","updated":"2024-08-04T16:03:23.266Z","title":"In onCreate of HandleApiCalls.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege that…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2020-27029","published":"2020-12-15T16:01:28.000Z","updated":"2024-08-04T16:03:23.263Z","title":"In TextView of TextView.java, there is a possible app hang due to improper input validation. This could lead to remote denial of service with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00724,"kevAdded":null},{"id":"CVE-2020-27028","published":"2020-12-15T16:01:07.000Z","updated":"2024-08-04T16:03:23.263Z","title":"In filter_incoming_event of hci_layer.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00157,"kevAdded":null},{"id":"CVE-2020-27027","published":"2020-12-15T16:00:57.000Z","updated":"2024-08-04T16:03:23.212Z","title":"In nfc_ncif_proc_get_routing of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00148,"kevAdded":null},{"id":"CVE-2020-27026","published":"2020-12-15T16:00:47.000Z","updated":"2024-08-04T16:03:23.299Z","title":"During boot, the device unlock interface behaves differently depending on if a fingerprint registered to the device is present. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00411,"kevAdded":null},{"id":"CVE-2020-27025","published":"2020-12-15T16:00:39.000Z","updated":"2024-08-04T16:03:23.208Z","title":"In EapFailureNotifier.java and SimRequiredNotifier.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2020-27024","published":"2020-12-15T16:00:33.000Z","updated":"2024-08-04T16:03:23.199Z","title":"In smp_br_state_machine_event of smp_br_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00971,"kevAdded":null},{"id":"CVE-2020-27023","published":"2020-12-15T15:58:46.000Z","updated":"2024-08-04T16:03:23.227Z","title":"In setErrorPlaybackState of BluetoothMediaBrowserService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2020-27021","published":"2020-12-15T15:58:35.000Z","updated":"2024-08-04T16:03:23.283Z","title":"In avrc_ctrl_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00151,"kevAdded":null},{"id":"CVE-2020-0500","published":"2020-12-15T15:58:27.000Z","updated":"2024-08-04T06:02:52.182Z","title":"In startInputUncheckedLocked of InputMethodManager.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00157,"kevAdded":null},{"id":"CVE-2020-0499","published":"2020-12-15T15:58:18.000Z","updated":"2024-08-04T06:02:52.316Z","title":"In FLAC__bitreader_read_rice_signed_block of bitreader.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote…","severity":"MEDIUM","score":4.3,"vendor":null,"product":"Android","kev":false,"epss":0.04075,"kevAdded":null},{"id":"CVE-2020-0498","published":"2020-12-15T15:57:38.000Z","updated":"2024-08-04T06:02:52.326Z","title":"In decode_packed_entry_number of codebook.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00606,"kevAdded":null},{"id":"CVE-2020-0497","published":"2020-12-15T15:57:29.000Z","updated":"2024-08-04T06:02:52.059Z","title":"In canUseBiometric of BiometricServiceBase, there is a missing permission check. This could lead to local information disclosure with no additional execution…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00132,"kevAdded":null},{"id":"CVE-2020-0496","published":"2020-12-15T15:57:09.000Z","updated":"2024-08-04T06:02:51.851Z","title":"In CPDF_RenderStatus::LoadSMask of cpdf_renderstatus.cpp, there is a possible memory corruption due to a use-after free. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00137,"kevAdded":null},{"id":"CVE-2020-0495","published":"2020-12-15T15:57:02.000Z","updated":"2024-08-04T06:02:52.042Z","title":"In decode_Huffman of JBig2_SddProc.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local information disclosure…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0014,"kevAdded":null},{"id":"CVE-2020-0494","published":"2020-12-15T15:56:53.000Z","updated":"2024-08-04T06:02:51.922Z","title":"In ih264d_parse_ave of ih264d_sei.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00873,"kevAdded":null},{"id":"CVE-2020-0493","published":"2020-12-15T15:56:46.000Z","updated":"2024-08-04T06:02:51.789Z","title":"In CPDF_SampledFunc::v_Call of cpdf_sampledfunc.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0014,"kevAdded":null},{"id":"CVE-2020-0492","published":"2020-12-15T15:56:38.000Z","updated":"2024-08-04T06:02:51.998Z","title":"In BitstreamFillCache of bitstream.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00873,"kevAdded":null},{"id":"CVE-2020-0491","published":"2020-12-15T15:56:28.000Z","updated":"2024-08-04T06:02:52.054Z","title":"In readBlock of MatroskaExtractor.cpp, there is a possible denial of service due to resource exhaustion. This could lead to remote denial of service with no…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00724,"kevAdded":null},{"id":"CVE-2020-0490","published":"2020-12-15T15:56:22.000Z","updated":"2024-08-04T06:02:52.043Z","title":"In floor1_info_unpack of floor1.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2020-0489","published":"2020-12-15T15:56:15.000Z","updated":"2024-08-04T06:02:52.317Z","title":"In Parse_data of eas_mdls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution in the media…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2020-0488","published":"2020-12-15T15:56:05.000Z","updated":"2024-08-04T06:02:52.064Z","title":"In ihevc_inter_pred_chroma_copy_ssse3 of ihevc_inter_pred_filters_ssse3_intr.c, there is a possible information disclosure due to uninitialized data. This…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2020-0486","published":"2020-12-15T15:55:47.000Z","updated":"2024-08-04T06:02:52.329Z","title":"In openAssetFileListener of ContactsProvider2.java, there is a possible permission bypass due to an insecure default value. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0014,"kevAdded":null},{"id":"CVE-2020-0485","published":"2020-12-15T15:55:27.000Z","updated":"2024-08-04T06:02:52.023Z","title":"In areFunctionsSupported of UsbBackend.java, there is a possible access to tethering from a guest account due to a missing permission check. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2020-0484","published":"2020-12-15T15:55:20.000Z","updated":"2024-08-04T06:02:52.044Z","title":"In destroyResources of ComposerClient.h, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00146,"kevAdded":null},{"id":"CVE-2020-0483","published":"2020-12-15T15:55:12.000Z","updated":"2024-08-04T06:02:51.980Z","title":"In DrmManagerService::~DrmManagerService() of DrmManagerService.cpp, there is a possible memory corruption due to a use after free. This could lead to local…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00147,"kevAdded":null},{"id":"CVE-2020-0482","published":"2020-12-15T15:55:05.000Z","updated":"2024-08-04T06:02:52.003Z","title":"In command of IncidentService.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.0017,"kevAdded":null},{"id":"CVE-2020-0481","published":"2020-12-15T15:54:56.000Z","updated":"2024-08-04T06:02:52.041Z","title":"In AndroidManifest.xml, there is a possible permissions bypass. This could lead to local escalation of privilege allowing a non-system app to send a broadcast…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00132,"kevAdded":null},{"id":"CVE-2020-0480","published":"2020-12-15T15:54:49.000Z","updated":"2024-08-04T06:02:51.951Z","title":"In callUnchecked of DocumentsProvider.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00411,"kevAdded":null},{"id":"CVE-2020-0479","published":"2020-12-15T15:54:41.000Z","updated":"2024-08-04T06:02:51.993Z","title":"In callUnchecked of DocumentsProvider.java, there is a possible permissions bypass. This could lead to local escalation of privilege allowing a malicious app…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00411,"kevAdded":null},{"id":"CVE-2020-0478","published":"2020-12-15T15:54:33.000Z","updated":"2024-08-04T06:02:52.069Z","title":"In extend_frame_lowbd of restoration.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00481,"kevAdded":null},{"id":"CVE-2020-0477","published":"2020-12-15T15:54:24.000Z","updated":"2024-08-04T06:02:51.977Z","title":"In sendLinkConfigurationChangedBroadcast of ClientModeImpl.java, there is a possible information disclosure due to a missing permission check. This could lead…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00132,"kevAdded":null},{"id":"CVE-2020-0476","published":"2020-12-15T15:54:15.000Z","updated":"2024-08-04T06:02:51.912Z","title":"In onNotificationRemoved of Assistant.java, there is a possible leak of sensitive information to logs. This could lead to local information disclosure with…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00151,"kevAdded":null},{"id":"CVE-2020-0475","published":"2020-12-15T15:54:06.000Z","updated":"2024-08-04T06:02:52.050Z","title":"In createInputConsumer of WindowManagerService.java, there is a possible way to block and intercept input events due to a missing permission check. This could…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2020-0474","published":"2020-12-15T15:53:48.000Z","updated":"2024-08-04T06:02:51.696Z","title":"In HalCamera::requestNewFrame of HalCamera.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2020-0473","published":"2020-12-15T15:53:42.000Z","updated":"2024-08-04T06:02:51.974Z","title":"In updateIncomingFileConfirmNotification of BluetoothOppNotification.java, there is a possible permissions bypass. This could lead to local escalation of…","severity":"MEDIUM","score":4.6,"vendor":null,"product":"Android","kev":false,"epss":0.00151,"kevAdded":null},{"id":"CVE-2020-0368","published":"2020-12-15T15:53:35.000Z","updated":"2024-08-04T05:55:12.853Z","title":"In queryInternal of CallLogProvider.java, there is a possible permission bypass due to improper input validation. This could lead to local information…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00155,"kevAdded":null},{"id":"CVE-2020-0280","published":"2020-12-15T15:53:25.000Z","updated":"2024-08-04T05:55:12.557Z","title":"In nci_proc_ee_management_rsp of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00165,"kevAdded":null},{"id":"CVE-2020-0244","published":"2020-12-15T15:53:09.000Z","updated":"2024-08-04T05:55:12.499Z","title":"In writeBurstBufferBytes of SPDIFEncoder.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00411,"kevAdded":null},{"id":"CVE-2020-0019","published":"2020-12-14T22:07:25.000Z","updated":"2024-08-04T05:47:40.324Z","title":"In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local information disclosure in the kernel with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00174,"kevAdded":null},{"id":"CVE-2020-0016","published":"2020-12-14T22:07:14.000Z","updated":"2024-08-04T05:47:40.623Z","title":"In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local escalation of privilege in the kernel with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2020-0456","published":"2020-12-14T22:05:37.000Z","updated":"2024-08-04T06:02:51.290Z","title":"There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170378843","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00662,"kevAdded":null},{"id":"CVE-2020-0455","published":"2020-12-14T21:53:13.000Z","updated":"2024-08-04T06:02:52.142Z","title":"There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170372514","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00662,"kevAdded":null},{"id":"CVE-2020-0457","published":"2020-12-14T21:53:01.000Z","updated":"2024-08-04T06:02:51.817Z","title":"There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170367562","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00662,"kevAdded":null},{"id":"CVE-2020-0463","published":"2020-12-14T21:52:45.000Z","updated":"2024-08-04T06:02:52.301Z","title":"In sdp_server_handle_client_req of sdp_server.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.01457,"kevAdded":null},{"id":"CVE-2020-0469","published":"2020-12-14T21:52:31.000Z","updated":"2024-08-04T06:02:52.049Z","title":"In addEscrowToken of LockSettingsService.java, there is a possible loss of the synthetic password due to logic error. This could lead to local denial of…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00144,"kevAdded":null},{"id":"CVE-2020-0467","published":"2020-12-14T21:52:20.000Z","updated":"2024-08-04T06:02:52.131Z","title":"In onUserStopped of Vpn.java, there is a possible resetting of user preferences due to a logic issue. This could lead to local information disclosure of secure…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2020-0470","published":"2020-12-14T21:52:10.000Z","updated":"2024-08-04T06:02:52.263Z","title":"In extend_frame_highbd of restoration.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00728,"kevAdded":null},{"id":"CVE-2020-0460","published":"2020-12-14T21:52:01.000Z","updated":"2024-08-04T06:02:51.933Z","title":"In createNameCredentialDialog of CertInstaller.java, there exists the possibility of improperly installed certificates due to a logic error. This could lead to…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.0077,"kevAdded":null},{"id":"CVE-2020-0465","published":"2020-12-14T21:51:48.000Z","updated":"2024-08-04T06:02:51.875Z","title":"In various methods of hid-multitouch.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.8,"vendor":null,"product":"Android","kev":false,"epss":0.00276,"kevAdded":null},{"id":"CVE-2020-0440","published":"2020-12-14T21:51:38.000Z","updated":"2024-08-04T06:02:51.831Z","title":"In createVirtualDisplay of DisplayManagerService.java, there is a possible way to create a trusted virtual display due to a missing permission check. This…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2020-0458","published":"2020-12-14T21:51:26.000Z","updated":"2024-08-04T06:02:52.039Z","title":"In SPDIFEncoder::writeBurstBufferBytes and related methods of SPDIFEncoder.cpp, there is a possible out of bounds write due to an integer overflow. This could…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.01524,"kevAdded":null},{"id":"CVE-2020-0459","published":"2020-12-14T21:51:14.000Z","updated":"2024-08-04T06:02:52.012Z","title":"In sendConfiguredNetworkChangedBroadcast of WifiConfigManager.java, there is a possible leak of sensitive WiFi configuration data due to a missing permission…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00158,"kevAdded":null},{"id":"CVE-2020-0468","published":"2020-12-14T21:51:06.000Z","updated":"2024-08-04T06:02:52.014Z","title":"In listen() and related functions of TelephonyRegistry.java, there is a possible permissions bypass of location permissions due to a missing permission check.…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0015,"kevAdded":null},{"id":"CVE-2020-0444","published":"2020-12-14T21:50:56.000Z","updated":"2024-08-04T06:02:52.012Z","title":"In audit_free_lsm_field of auditfilter.c, there is a possible bad kfree due to a logic error in audit_data_to_entry. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00219,"kevAdded":null},{"id":"CVE-2020-0464","published":"2020-12-14T21:50:44.000Z","updated":"2024-08-04T06:02:51.924Z","title":"In resolv_cache_lookup of res_cache.cpp, there is a possible side channel information disclosure. This could lead to local information disclosure of accessed…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00168,"kevAdded":null},{"id":"CVE-2020-0466","published":"2020-12-14T21:50:04.000Z","updated":"2024-08-04T06:02:51.841Z","title":"In do_epoll_ctl and ep_loop_check_proc of eventpoll.c, there is a possible use after free due to a logic error. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00278,"kevAdded":null},{"id":"CVE-2020-0099","published":"2020-12-14T21:49:26.000Z","updated":"2024-08-04T05:47:40.571Z","title":"In addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00549,"kevAdded":null},{"id":"CVE-2020-0446","published":"2020-11-10T12:53:43.000Z","updated":"2024-08-04T06:02:51.985Z","title":"There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168264528","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00536,"kevAdded":null},{"id":"CVE-2020-0445","published":"2020-11-10T12:53:18.000Z","updated":"2024-08-04T06:02:51.881Z","title":"There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168264527","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00547,"kevAdded":null},{"id":"CVE-2020-0447","published":"2020-11-10T12:53:06.000Z","updated":"2024-08-04T06:02:51.914Z","title":"There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168251617","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00578,"kevAdded":null},{"id":"CVE-2020-0437","published":"2020-11-10T12:52:51.000Z","updated":"2024-08-04T06:02:52.031Z","title":"In CellBroadcastReceiver's intent handlers, there is a possible denial of service due to a missing permission check. This could lead to local denial of service…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00149,"kevAdded":null},{"id":"CVE-2020-0449","published":"2020-11-10T12:52:32.000Z","updated":"2024-08-04T06:02:51.988Z","title":"In btm_sec_disconnected of btm_sec.cc, there is a possible memory corruption due to a use after free. This could lead to remote code execution in the Bluetooth…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.01343,"kevAdded":null},{"id":"CVE-2020-0438","published":"2020-11-10T12:51:57.000Z","updated":"2024-08-04T06:02:51.992Z","title":"In the AIBinder_Class constructor of ibinder.cpp, there is a possible arbitrary code execution due to uninitialized data. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00171,"kevAdded":null},{"id":"CVE-2020-0454","published":"2020-11-10T12:51:28.000Z","updated":"2024-08-04T06:02:52.132Z","title":"In callCallbackForRequest of ConnectivityService.java, there is a possible permission bypass due to a missing permission check. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00241,"kevAdded":null},{"id":"CVE-2020-0424","published":"2020-11-10T12:51:17.000Z","updated":"2024-08-04T06:02:52.049Z","title":"In send_vc of res_send.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00165,"kevAdded":null},{"id":"CVE-2020-0453","published":"2020-11-10T12:50:23.000Z","updated":"2024-08-04T06:02:52.055Z","title":"In updateNotification of BeamTransferManager.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00261,"kevAdded":null},{"id":"CVE-2020-0452","published":"2020-11-10T12:50:04.000Z","updated":"2024-08-04T06:02:51.976Z","title":"In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.03327,"kevAdded":null},{"id":"CVE-2020-0451","published":"2020-11-10T12:49:50.000Z","updated":"2024-08-04T06:02:52.032Z","title":"In sbrDecoder_AssignQmfChannels2SbrChannels of sbrdecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.01951,"kevAdded":null},{"id":"CVE-2020-0441","published":"2020-11-10T12:49:22.000Z","updated":"2024-08-04T06:02:51.998Z","title":"In Message and toBundle of Notification.java, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.01077,"kevAdded":null},{"id":"CVE-2020-0450","published":"2020-11-10T12:49:05.000Z","updated":"2024-08-04T06:02:51.775Z","title":"In rw_i93_sm_format of rw_i93.cc, there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure over NFC…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00877,"kevAdded":null},{"id":"CVE-2020-0409","published":"2020-11-10T12:48:30.000Z","updated":"2024-08-04T06:02:52.030Z","title":"In create of FileMap.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00259,"kevAdded":null},{"id":"CVE-2020-0448","published":"2020-11-10T12:48:02.000Z","updated":"2024-08-04T06:02:51.831Z","title":"In getPhoneAccountsForPackage of TelecomServiceImpl.java, there is a possible way to access a tracking identifier due to a missing permission check. This could…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00155,"kevAdded":null},{"id":"CVE-2020-0418","published":"2020-11-10T12:47:40.000Z","updated":"2024-08-04T06:02:52.127Z","title":"In getPermissionInfosForGroup of Utils.java, there is a logic error. This could lead to local escalation of privilege with User execution privileges needed.…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00267,"kevAdded":null},{"id":"CVE-2020-0443","published":"2020-11-10T12:47:23.000Z","updated":"2024-08-04T06:02:51.763Z","title":"In LocaleList of LocaleList.java, there is a possible forced reboot due to an uncaught exception. This could lead to local denial of service requiring factory…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00324,"kevAdded":null},{"id":"CVE-2020-0442","published":"2020-11-10T12:47:04.000Z","updated":"2024-08-04T06:02:51.830Z","title":"In Message and toBundle of Notification.java, there is a possible UI slowdown or crash due to improper input validation. This could lead to remote denial of…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.01047,"kevAdded":null},{"id":"CVE-2020-0439","published":"2020-11-10T12:46:20.000Z","updated":"2024-08-04T06:02:52.031Z","title":"In generatePackageInfo of PackageManagerService.java, there is a possible permissions bypass due to an incorrect permission check. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00228,"kevAdded":null},{"id":"CVE-2020-0283","published":"2020-10-14T13:10:28.000Z","updated":"2024-08-04T05:55:12.778Z","title":"There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-163008257","severity":"CRITICAL","score":9.1,"vendor":null,"product":"Android","kev":false,"epss":0.00545,"kevAdded":null},{"id":"CVE-2020-0371","published":"2020-10-14T13:10:13.000Z","updated":"2024-08-04T05:55:12.875Z","title":"There is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-163008256","severity":"CRITICAL","score":9.1,"vendor":null,"product":"Android","kev":false,"epss":0.00587,"kevAdded":null},{"id":"CVE-2020-0376","published":"2020-10-14T13:10:05.000Z","updated":"2024-08-04T06:02:51.272Z","title":"There is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-163003156","severity":"CRITICAL","score":9.1,"vendor":null,"product":"Android","kev":false,"epss":0.00582,"kevAdded":null},{"id":"CVE-2020-0339","published":"2020-10-14T13:09:48.000Z","updated":"2024-08-04T05:55:12.857Z","title":"There is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-162980705","severity":"CRITICAL","score":9.1,"vendor":null,"product":"Android","kev":false,"epss":0.00587,"kevAdded":null},{"id":"CVE-2020-0367","published":"2020-10-14T13:09:07.000Z","updated":"2024-08-04T05:55:12.960Z","title":"There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-162980455","severity":"CRITICAL","score":9.1,"vendor":null,"product":"Android","kev":false,"epss":0.00476,"kevAdded":null},{"id":"CVE-2020-0420","published":"2020-10-14T13:08:03.000Z","updated":"2024-08-04T06:02:51.889Z","title":"In setUpdatableDriverPath of GpuService.cpp, there is a possible memory corruption due to a missing permission check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00128,"kevAdded":null},{"id":"CVE-2020-0421","published":"2020-10-14T13:07:32.000Z","updated":"2024-08-04T06:02:51.739Z","title":"In appendFormatV of String8.cpp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00266,"kevAdded":null},{"id":"CVE-2020-0422","published":"2020-10-14T13:07:24.000Z","updated":"2024-08-04T06:02:52.059Z","title":"In constructImportFailureNotification of NotificationImportExportListener.java, there is a possible permissions bypass due to an unsafe PendingIntent. This…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00166,"kevAdded":null},{"id":"CVE-2020-0423","published":"2020-10-14T13:07:13.000Z","updated":"2024-08-04T06:02:51.790Z","title":"In binder_release_work of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00507,"kevAdded":null},{"id":"CVE-2020-0412","published":"2020-10-14T13:07:05.000Z","updated":"2024-08-04T06:02:51.321Z","title":"In setProcessMemoryTrimLevel of ActivityManagerService.java, there is a missing permission check. This could lead to local information disclosure of foreground…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.0016,"kevAdded":null},{"id":"CVE-2020-0246","published":"2020-10-14T13:06:52.000Z","updated":"2024-08-04T05:55:12.536Z","title":"In getCarrierPrivilegeStatus of UiccAccessRule.java, there is a missing permission check. This could lead to local information disclosure of EID data with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00168,"kevAdded":null},{"id":"CVE-2020-0377","published":"2020-10-14T13:06:31.000Z","updated":"2024-08-04T06:02:51.303Z","title":"In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.01891,"kevAdded":null},{"id":"CVE-2020-0413","published":"2020-10-14T13:05:55.000Z","updated":"2024-08-04T06:02:51.753Z","title":"In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.01494,"kevAdded":null},{"id":"CVE-2020-0378","published":"2020-10-14T13:05:45.000Z","updated":"2024-08-04T06:02:50.838Z","title":"In onWnmFrameReceived of PasspointManager.java, there is a missing permission check. This could lead to local information disclosure of location data with User…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00165,"kevAdded":null},{"id":"CVE-2020-0414","published":"2020-10-14T13:05:29.000Z","updated":"2024-08-04T06:02:51.966Z","title":"In AudioFlinger::RecordThread::threadLoop of audioflinger/Threads.cpp, there is a possible non-silenced audio buffer due to a permissions bypass. This could…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00996,"kevAdded":null},{"id":"CVE-2020-0408","published":"2020-10-14T13:05:14.000Z","updated":"2024-08-04T06:02:51.320Z","title":"In remove of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00192,"kevAdded":null},{"id":"CVE-2020-0410","published":"2020-10-14T13:04:31.000Z","updated":"2024-08-04T06:02:52.026Z","title":"In setNotification of SapServer.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclosure with…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00157,"kevAdded":null},{"id":"CVE-2020-0415","published":"2020-10-14T13:04:20.000Z","updated":"2026-06-18T13:57:33.556Z","title":"In various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0017,"kevAdded":null},{"id":"CVE-2020-0416","published":"2020-10-14T13:04:09.000Z","updated":"2024-08-04T06:02:52.063Z","title":"In multiple settings screens, there are possible tapjacking attacks due to an insecure default value. This could lead to local escalation of privilege and…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.01252,"kevAdded":null},{"id":"CVE-2020-0398","published":"2020-10-14T13:03:37.000Z","updated":"2024-08-04T06:02:51.304Z","title":"In updateMwi of NotificationMgr.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclosure with…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00194,"kevAdded":null},{"id":"CVE-2020-0400","published":"2020-10-14T13:03:09.000Z","updated":"2024-08-04T06:02:51.308Z","title":"In showDataRoamingNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00196,"kevAdded":null},{"id":"CVE-2020-0411","published":"2020-10-14T13:02:35.000Z","updated":"2024-08-04T06:02:51.778Z","title":"In ~AACExtractor() of AACExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote information disclosure…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00884,"kevAdded":null},{"id":"CVE-2020-0419","published":"2020-10-14T13:02:25.000Z","updated":"2024-08-04T06:02:52.028Z","title":"In generateInfo of PackageInstallerSession.java, there is a possible leak of cross-profile URI data during app installation due to a missing permission check.…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00155,"kevAdded":null},{"id":"CVE-2019-2194","published":"2020-10-14T13:00:47.000Z","updated":"2024-08-04T18:42:50.767Z","title":"In SurfaceFlinger::createLayer of SurfaceFlinger.cpp, there is a possible arbitrary code execution due to improper casting. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00155,"kevAdded":null},{"id":"CVE-2020-0365","published":"2020-09-18T15:27:39.000Z","updated":"2024-08-04T05:55:12.865Z","title":"In netd, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00243,"kevAdded":null},{"id":"CVE-2020-0349","published":"2020-09-18T15:27:23.000Z","updated":"2024-08-04T05:55:12.862Z","title":"In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00151,"kevAdded":null},{"id":"CVE-2020-0348","published":"2020-09-18T15:27:05.000Z","updated":"2024-08-04T05:55:12.842Z","title":"In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over NFC with System execution…","severity":"MEDIUM","score":4.9,"vendor":null,"product":"Android","kev":false,"epss":0.00689,"kevAdded":null},{"id":"CVE-2020-0331","published":"2020-09-18T15:26:51.000Z","updated":"2024-08-04T05:55:12.852Z","title":"In Settings, there is a possible permissions bypass. This could lead to local information disclosure of the device's IMEI with User execution privileges…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2020-0327","published":"2020-09-18T15:26:39.000Z","updated":"2024-08-04T05:55:12.859Z","title":"In core networking, there is a missing permission check. This could lead to local information disclosure of app network usage with User execution privileges…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00145,"kevAdded":null},{"id":"CVE-2020-0325","published":"2020-09-18T15:26:20.000Z","updated":"2024-08-04T05:55:12.851Z","title":"In NFC, there is a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2020-0316","published":"2020-09-18T15:26:09.000Z","updated":"2024-08-04T05:55:12.845Z","title":"In Telephony, there is a missing permission check. This could lead to local information disclosure of radio data with no additional execution privileges…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00132,"kevAdded":null},{"id":"CVE-2020-0315","published":"2020-09-18T15:25:49.000Z","updated":"2024-08-04T05:55:12.837Z","title":"In Zen Mode, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2020-0313","published":"2020-09-18T15:25:32.000Z","updated":"2024-08-04T05:55:12.849Z","title":"In NotificationManagerService, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00161,"kevAdded":null},{"id":"CVE-2020-0311","published":"2020-09-18T15:25:17.000Z","updated":"2024-08-04T05:55:12.842Z","title":"In InputManagerService, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2020-0310","published":"2020-09-18T15:24:52.000Z","updated":"2024-08-04T05:55:12.843Z","title":"In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00145,"kevAdded":null},{"id":"CVE-2020-0307","published":"2020-09-18T15:24:38.000Z","updated":"2024-08-04T05:55:12.832Z","title":"In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2020-0304","published":"2020-09-18T15:24:21.000Z","updated":"2024-08-04T05:55:12.851Z","title":"In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2020-0302","published":"2020-09-18T15:24:08.000Z","updated":"2024-08-04T05:55:12.837Z","title":"In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2020-0300","published":"2020-09-18T15:23:46.000Z","updated":"2024-08-04T05:55:12.836Z","title":"In NFC, there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure with no additional execution…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2020-0295","published":"2020-09-18T15:22:54.000Z","updated":"2024-08-04T05:55:12.842Z","title":"In Telecom, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2020-0294","published":"2020-09-18T15:22:45.000Z","updated":"2024-08-04T05:55:12.842Z","title":"In bindWallpaperComponentLocked of WallpaperManagerService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00168,"kevAdded":null},{"id":"CVE-2020-0292","published":"2020-09-18T15:22:23.000Z","updated":"2024-08-04T05:55:12.830Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00157,"kevAdded":null},{"id":"CVE-2020-0291","published":"2020-09-18T15:22:06.000Z","updated":"2024-08-04T05:55:12.832Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00161,"kevAdded":null},{"id":"CVE-2020-0286","published":"2020-09-18T15:21:42.000Z","updated":"2024-08-04T05:55:12.711Z","title":"In Bluetooth AVRCP, there is a possible leak of audio metadata due to residual data. This could lead to remote information disclosure with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2020-0285","published":"2020-09-18T15:21:16.000Z","updated":"2024-08-04T05:55:12.580Z","title":"In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00136,"kevAdded":null},{"id":"CVE-2020-0284","published":"2020-09-18T15:09:02.000Z","updated":"2024-08-04T05:55:12.594Z","title":"In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00136,"kevAdded":null},{"id":"CVE-2020-0282","published":"2020-09-18T15:08:51.000Z","updated":"2024-08-04T05:55:12.794Z","title":"In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure. System execution privileges, a…","severity":"MEDIUM","score":4.5,"vendor":null,"product":"Android","kev":false,"epss":0.00618,"kevAdded":null},{"id":"CVE-2020-0281","published":"2020-09-18T15:08:36.000Z","updated":"2024-08-04T05:55:12.576Z","title":"In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure. System execution privileges, a…","severity":"MEDIUM","score":4.5,"vendor":null,"product":"Android","kev":false,"epss":0.00618,"kevAdded":null},{"id":"CVE-2020-0276","published":"2020-09-18T15:08:17.000Z","updated":"2024-08-04T05:55:12.470Z","title":"In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2020-0272","published":"2020-09-18T15:07:53.000Z","updated":"2024-08-04T05:55:12.638Z","title":"In libhwbinder, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2020-0269","published":"2020-09-18T15:07:21.000Z","updated":"2024-08-04T05:55:12.629Z","title":"In Android Auto Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00149,"kevAdded":null},{"id":"CVE-2020-0265","published":"2020-09-18T15:06:58.000Z","updated":"2024-08-04T05:55:12.709Z","title":"In Telephony, there are possible leaks of sensitive data due to missing permission checks. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2020-0263","published":"2020-09-18T15:06:48.000Z","updated":"2024-08-04T05:55:12.504Z","title":"In the Accessibility service, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2020-0405","published":"2020-09-18T15:06:34.000Z","updated":"2024-08-04T06:02:51.863Z","title":"In NetworkStackNotifier, there is a possible permissions bypass due to an unsafe implicit PendingIntent. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2020-0350","published":"2020-09-18T15:06:12.000Z","updated":"2024-08-04T05:55:12.922Z","title":"In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2020-0347","published":"2020-09-18T15:05:57.000Z","updated":"2024-08-04T05:55:12.885Z","title":"In iptables, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2020-0335","published":"2020-09-18T15:05:42.000Z","updated":"2024-08-04T05:55:12.851Z","title":"In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2020-0334","published":"2020-09-18T15:05:24.000Z","updated":"2024-08-04T05:55:12.860Z","title":"In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2020-0326","published":"2020-09-18T15:05:08.000Z","updated":"2024-08-04T05:55:12.927Z","title":"In NFC, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with System execution privileges…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00149,"kevAdded":null},{"id":"CVE-2020-0319","published":"2020-09-18T15:04:39.000Z","updated":"2024-08-04T05:55:12.853Z","title":"In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0043,"kevAdded":null},{"id":"CVE-2020-0309","published":"2020-09-18T15:04:26.000Z","updated":"2024-08-04T05:55:12.833Z","title":"In the Bluetooth server, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00137,"kevAdded":null},{"id":"CVE-2020-0299","published":"2020-09-18T15:04:07.000Z","updated":"2024-08-04T05:55:12.838Z","title":"In Bluetooth, there is a possible spoofing of bluetooth device metadata due to a missing permission check. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00145,"kevAdded":null},{"id":"CVE-2020-0298","published":"2020-09-18T15:03:54.000Z","updated":"2024-08-04T05:55:12.839Z","title":"In Bluetooth, there is a possible control over Bluetooth enabled state due to a missing permission check. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00145,"kevAdded":null},{"id":"CVE-2020-0273","published":"2020-09-18T15:03:19.000Z","updated":"2024-08-04T05:55:12.495Z","title":"In hwservicemanager, there is a possible out of bounds write due to freeing a wild pointer. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0015,"kevAdded":null},{"id":"CVE-2020-0271","published":"2020-09-18T15:03:02.000Z","updated":"2024-08-04T05:55:12.559Z","title":"In the Settings app, there is an insecure default value. This could lead to local escalation of privilege and tapjacking with User execution privileges needed.…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00161,"kevAdded":null},{"id":"CVE-2020-0268","published":"2020-09-18T15:02:45.000Z","updated":"2024-08-04T05:55:12.457Z","title":"In NFC, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed.…","severity":"MEDIUM","score":6.4,"vendor":null,"product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2020-0262","published":"2020-09-18T15:02:08.000Z","updated":"2024-08-04T05:55:12.828Z","title":"In WiFi tethering, there is a possible attacker controlled intent due to an unsafe PendingIntent. This could lead to local escalation of privilege with User…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00151,"kevAdded":null},{"id":"CVE-2020-0089","published":"2020-09-18T14:52:32.000Z","updated":"2024-08-04T05:47:40.795Z","title":"In the audio server, there is a missing permission check. This could lead to local escalation of privilege regarding audio settings with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2020-0354","published":"2020-09-18T14:52:08.000Z","updated":"2024-08-04T05:55:12.884Z","title":"In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.0108,"kevAdded":null},{"id":"CVE-2020-0318","published":"2020-09-18T14:51:38.000Z","updated":"2024-08-04T05:55:12.850Z","title":"In the System UI, there is a possible system crash due to an uncaught exception. This could lead to local permanent denial of service with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2020-0375","published":"2020-09-17T20:58:45.000Z","updated":"2024-08-04T05:55:12.961Z","title":"In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege and the setting of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00163,"kevAdded":null},{"id":"CVE-2020-0374","published":"2020-09-17T20:58:39.000Z","updated":"2024-08-04T05:55:12.853Z","title":"In NFC, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00163,"kevAdded":null},{"id":"CVE-2020-0266","published":"2020-09-17T20:58:31.000Z","updated":"2024-08-04T05:55:12.721Z","title":"In factory reset protection, there is a possible FRP bypass due to a missing permission check. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00163,"kevAdded":null},{"id":"CVE-2020-0363","published":"2020-09-17T20:58:22.000Z","updated":"2024-08-04T05:55:12.843Z","title":"In libmedia, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00635,"kevAdded":null},{"id":"CVE-2020-0362","published":"2020-09-17T20:58:08.000Z","updated":"2024-08-04T05:55:12.861Z","title":"In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00724,"kevAdded":null},{"id":"CVE-2020-0353","published":"2020-09-17T20:57:57.000Z","updated":"2024-08-04T05:55:12.923Z","title":"In libmp4extractor, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00724,"kevAdded":null},{"id":"CVE-2020-0351","published":"2020-09-17T20:57:47.000Z","updated":"2024-08-04T05:55:12.828Z","title":"In libstagefright, there is possible CPU exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00781,"kevAdded":null},{"id":"CVE-2020-0332","published":"2020-09-17T20:57:37.000Z","updated":"2024-08-04T05:55:12.834Z","title":"In libstagefright, there is a possible dead loop due to an uncaught exception. This could lead to remote denial of service with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00635,"kevAdded":null},{"id":"CVE-2020-0320","published":"2020-09-17T20:57:22.000Z","updated":"2024-08-04T05:55:12.835Z","title":"In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00635,"kevAdded":null},{"id":"CVE-2020-0301","published":"2020-09-17T20:57:08.000Z","updated":"2024-08-04T05:55:12.802Z","title":"In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00635,"kevAdded":null},{"id":"CVE-2020-0287","published":"2020-09-17T20:56:57.000Z","updated":"2024-08-04T05:55:12.802Z","title":"In libmkvextractor, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00635,"kevAdded":null},{"id":"CVE-2020-0373","published":"2020-09-17T20:56:48.000Z","updated":"2024-08-04T05:55:12.934Z","title":"In SoundTriggerHwService, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":4.7,"vendor":null,"product":"Android","kev":false,"epss":0.00106,"kevAdded":null},{"id":"CVE-2020-0370","published":"2020-09-17T20:56:39.000Z","updated":"2024-08-04T05:55:12.863Z","title":"In libAACdec, there is a possible out of bounds read due to missing bounds check. This could lead to remote information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2020-0364","published":"2020-09-17T20:56:27.000Z","updated":"2024-08-04T05:55:12.906Z","title":"In libDRCdec, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00835,"kevAdded":null},{"id":"CVE-2020-0361","published":"2020-09-17T20:56:15.000Z","updated":"2024-08-04T05:55:12.863Z","title":"In libDRCdec, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2020-0359","published":"2020-09-17T20:56:02.000Z","updated":"2024-08-04T05:55:12.850Z","title":"In GLESRenderEngine, there is a possible out of bounds read due to a buffer overflow. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00158,"kevAdded":null},{"id":"CVE-2020-0355","published":"2020-09-17T20:55:51.000Z","updated":"2024-08-04T05:55:12.850Z","title":"In libFraunhoferAAC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00842,"kevAdded":null},{"id":"CVE-2020-0344","published":"2020-09-17T20:55:41.000Z","updated":"2024-08-04T05:55:12.843Z","title":"In MediaProvider, there is a possible permissions bypass due to SQL injection. This could lead to local information disclosure with no additional execution…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00231,"kevAdded":null},{"id":"CVE-2020-0340","published":"2020-09-17T20:55:31.000Z","updated":"2024-08-04T05:55:12.842Z","title":"In libcodec2_soft_mp3dec, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2020-0329","published":"2020-09-17T20:55:18.000Z","updated":"2024-08-04T05:55:12.836Z","title":"In the OMX encoder, there is a possible out of bounds read due to invalid input validation. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0014,"kevAdded":null},{"id":"CVE-2020-0328","published":"2020-09-17T20:55:10.000Z","updated":"2024-08-04T05:55:12.854Z","title":"In the camera, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2020-0324","published":"2020-09-17T20:54:59.000Z","updated":"2024-08-04T05:55:12.851Z","title":"In libsonivox, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00835,"kevAdded":null},{"id":"CVE-2020-0314","published":"2020-09-17T20:54:48.000Z","updated":"2024-08-04T05:55:12.825Z","title":"In AudioService, there are missing permission checks. This could lead to local information disclosure of audio configuration with no additional execution…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2020-0279","published":"2020-09-17T20:54:38.000Z","updated":"2025-11-04T21:08:11.854Z","title":"In the AAC parser, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.0106,"kevAdded":null},{"id":"CVE-2020-0274","published":"2020-09-17T20:54:29.000Z","updated":"2024-08-04T05:55:12.658Z","title":"In the OMX parser, there is a possible information disclosure due to a returned raw pointer. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0014,"kevAdded":null},{"id":"CVE-2020-0270","published":"2020-09-17T20:54:18.000Z","updated":"2024-08-04T05:55:12.720Z","title":"In tremolo, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00835,"kevAdded":null},{"id":"CVE-2020-0125","published":"2020-09-17T20:54:00.000Z","updated":"2024-08-04T05:47:40.755Z","title":"In mediadrm, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0014,"kevAdded":null},{"id":"CVE-2020-0406","published":"2020-09-17T20:53:49.000Z","updated":"2024-08-04T06:02:51.670Z","title":"In libmpeg2dec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if another exploit…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00423,"kevAdded":null},{"id":"CVE-2020-0360","published":"2020-09-17T20:53:37.000Z","updated":"2024-08-04T05:55:12.862Z","title":"In Notification Access Confirmation, there is a possible permissions bypass due to uninformed consent. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00439,"kevAdded":null},{"id":"CVE-2020-0358","published":"2020-09-17T20:53:17.000Z","updated":"2024-08-04T05:55:12.849Z","title":"In SurfaceFlinger, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.4,"vendor":null,"product":"Android","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2020-0357","published":"2020-09-17T20:53:02.000Z","updated":"2024-08-04T05:55:12.874Z","title":"In SurfaceFlinger, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the graphics server with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2020-0356","published":"2020-09-17T20:52:50.000Z","updated":"2024-08-04T05:55:12.875Z","title":"In the Audio HAL, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.0015,"kevAdded":null},{"id":"CVE-2020-0346","published":"2020-09-17T20:52:35.000Z","updated":"2024-08-04T05:55:12.930Z","title":"In Mediaserver, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if integer sanitization…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00158,"kevAdded":null},{"id":"CVE-2020-0336","published":"2020-09-17T20:52:23.000Z","updated":"2024-08-04T05:55:12.854Z","title":"In SurfaceFlinger, there is possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.0016,"kevAdded":null},{"id":"CVE-2020-0306","published":"2020-09-17T20:52:08.000Z","updated":"2024-08-04T05:55:12.869Z","title":"In LLVM, there is a possible ineffective stack cookie placement due to stack frame double reservation. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00171,"kevAdded":null},{"id":"CVE-2020-0321","published":"2020-09-17T20:51:53.000Z","updated":"2024-08-04T05:55:12.878Z","title":"In the mp3 extractor, there is a possible out of bounds write due to uninitialized data. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2020-0303","published":"2020-09-17T20:51:23.000Z","updated":"2024-08-04T05:55:12.840Z","title":"In the Media extractor, there is a possible use after free due to improper locking. This could lead to remote code execution in the media extractor with no…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00559,"kevAdded":null},{"id":"CVE-2020-0264","published":"2020-09-17T20:51:08.000Z","updated":"2024-08-04T05:55:12.537Z","title":"In libstagefright, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2020-0426","published":"2020-09-17T20:50:51.000Z","updated":"2024-08-04T06:02:51.830Z","title":"In SyncManager, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0015,"kevAdded":null},{"id":"CVE-2020-0425","published":"2020-09-17T20:50:39.000Z","updated":"2024-08-04T06:02:52.011Z","title":"There is a possible way to view notifications even when the \"Lockdown\" feature is on. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0014,"kevAdded":null},{"id":"CVE-2020-0323","published":"2020-09-17T20:50:29.000Z","updated":"2024-08-04T05:55:12.850Z","title":"In libavb, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00148,"kevAdded":null},{"id":"CVE-2020-0322","published":"2020-09-17T20:50:20.000Z","updated":"2024-08-04T05:55:12.864Z","title":"In apexd, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00151,"kevAdded":null},{"id":"CVE-2020-0369","published":"2020-09-17T20:50:08.000Z","updated":"2024-08-04T05:55:12.874Z","title":"In libavb, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00151,"kevAdded":null},{"id":"CVE-2020-0372","published":"2020-09-17T20:49:54.000Z","updated":"2024-08-04T05:55:12.878Z","title":"In ActivityManager, there is a possible access to protected data due to a missing permission check. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00132,"kevAdded":null},{"id":"CVE-2020-0352","published":"2020-09-17T20:49:42.000Z","updated":"2024-08-04T05:55:12.871Z","title":"In MediaProvider, there is a possible permissions bypass due to SQL injection. This could lead to local information disclosure with no additional execution…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00228,"kevAdded":null},{"id":"CVE-2020-0343","published":"2020-09-17T20:49:27.000Z","updated":"2024-08-04T05:55:12.865Z","title":"In NetworkStatsService, there is a possible access to protected data due to a missing permission check. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2020-0317","published":"2020-09-17T20:49:17.000Z","updated":"2024-08-04T05:55:12.841Z","title":"In UsageStatsManager, there is a possible access to protected data due to a missing permission check. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00132,"kevAdded":null},{"id":"CVE-2020-0312","published":"2020-09-17T20:49:03.000Z","updated":"2024-08-04T05:55:12.833Z","title":"In Battery Saver, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2020-0308","published":"2020-09-17T20:48:53.000Z","updated":"2024-08-04T05:55:12.799Z","title":"In Window Manager, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00145,"kevAdded":null},{"id":"CVE-2020-0297","published":"2020-09-17T20:48:42.000Z","updated":"2024-08-04T05:55:12.865Z","title":"In devicepolicy service, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00149,"kevAdded":null},{"id":"CVE-2020-0296","published":"2020-09-17T20:48:31.000Z","updated":"2024-08-04T05:55:12.850Z","title":"In ADB server and USB server, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00149,"kevAdded":null},{"id":"CVE-2020-0293","published":"2020-09-17T20:48:14.000Z","updated":"2024-08-04T05:55:12.838Z","title":"In Java network APIs, there is possible access to sensitive network state due to a missing permission check. This could lead to local information disclosure…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00219,"kevAdded":null},{"id":"CVE-2020-0290","published":"2020-09-17T20:48:04.000Z","updated":"2024-08-04T05:55:12.788Z","title":"In PackageManager, there is a missing permission check. This could lead to local information disclosure across users with no additional execution privileges…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00132,"kevAdded":null},{"id":"CVE-2020-0289","published":"2020-09-17T20:47:55.000Z","updated":"2024-08-04T05:55:12.859Z","title":"In PackageManager, there is a missing permission check. This could lead to local information disclosure across users with no additional execution privileges…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00135,"kevAdded":null},{"id":"CVE-2020-0288","published":"2020-09-17T20:47:46.000Z","updated":"2024-08-04T05:55:12.838Z","title":"In PackageManager, there is a missing permission check. This could lead to local information disclosure across user boundaries with no additional execution…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00135,"kevAdded":null},{"id":"CVE-2020-0366","published":"2020-09-17T20:47:36.000Z","updated":"2024-08-04T05:55:12.861Z","title":"In PackageInstaller, there is a possible permissions bypass due to a tapjacking vulnerability. This could lead to local escalation of privilege using an app…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00407,"kevAdded":null},{"id":"CVE-2020-0345","published":"2020-09-17T20:47:23.000Z","updated":"2024-08-04T05:55:12.960Z","title":"In DocumentsUI, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00187,"kevAdded":null},{"id":"CVE-2020-0341","published":"2020-09-17T20:47:01.000Z","updated":"2024-08-04T05:55:12.854Z","title":"In DisplayManager, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2020-0277","published":"2020-09-17T20:46:40.000Z","updated":"2024-08-04T05:55:12.583Z","title":"In NetworkPolicyManagerService, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2020-0130","published":"2020-09-17T20:46:29.000Z","updated":"2024-08-04T05:47:40.789Z","title":"In screencap, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege in a system process with…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00413,"kevAdded":null},{"id":"CVE-2020-0333","published":"2020-09-17T20:46:12.000Z","updated":"2024-08-04T05:55:12.841Z","title":"In UrlQuerySanitizer, there is a possible improper input validation. This could lead to remote code execution with no additional execution privileges needed.…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00844,"kevAdded":null},{"id":"CVE-2020-0338","published":"2020-09-17T20:45:46.000Z","updated":"2024-08-04T05:55:12.927Z","title":"In checkKeyIntent of AccountManagerService.java, there is a possible permission bypass. This could lead to local information disclosure with User execution…","severity":"MEDIUM","score":5,"vendor":null,"product":"Android","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2020-0337","published":"2020-09-17T20:45:36.000Z","updated":"2024-08-04T05:55:12.864Z","title":"In MediaProvider, there is a possible bypass of a permissions check due to a confused deputy. This could lead to local information disclosure, with User…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2020-0275","published":"2020-09-17T20:45:17.000Z","updated":"2024-08-04T05:55:12.581Z","title":"In MediaProvider, there is a possible way to access ContentResolver and MediaStore entries the app shouldn't have access to due to a permissions bypass. This…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00163,"kevAdded":null},{"id":"CVE-2020-0267","published":"2020-09-17T20:44:45.000Z","updated":"2024-08-04T05:55:12.567Z","title":"In WindowManager, there is a possible launch of an unexpected app due to a confused deputy. This could lead to local escalation of privilege due to launching a…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0055,"kevAdded":null},{"id":"CVE-2020-0330","published":"2020-09-17T20:44:18.000Z","updated":"2024-08-04T05:55:12.922Z","title":"In iorap, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege and code execution with System…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00146,"kevAdded":null},{"id":"CVE-2020-0434","published":"2020-09-17T18:46:30.000Z","updated":"2024-08-04T06:02:52.032Z","title":"In Pixel's use of the Catpipe library, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00157,"kevAdded":null},{"id":"CVE-2020-0433","published":"2020-09-17T18:45:46.000Z","updated":"2024-08-04T06:02:51.949Z","title":"In blk_mq_queue_tag_busy_iter of blk-mq-tag.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00149,"kevAdded":null},{"id":"CVE-2020-0432","published":"2020-09-17T18:45:31.000Z","updated":"2024-08-04T06:02:52.299Z","title":"In skb_to_mamac of networking.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00225,"kevAdded":null},{"id":"CVE-2020-0431","published":"2020-09-17T18:45:00.000Z","updated":"2024-08-04T06:02:52.156Z","title":"In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.0022,"kevAdded":null},{"id":"CVE-2020-0430","published":"2020-09-17T18:44:40.000Z","updated":"2024-08-04T06:02:51.835Z","title":"In skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00184,"kevAdded":null},{"id":"CVE-2020-0429","published":"2020-09-17T18:42:18.000Z","updated":"2024-08-04T06:02:52.059Z","title":"In l2tp_session_delete and related functions of l2tp_core.c, there is possible memory corruption due to a use after free. This could lead to local escalation…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00176,"kevAdded":null},{"id":"CVE-2020-0428","published":"2020-09-17T18:42:05.000Z","updated":"2024-08-04T06:02:52.036Z","title":"In CamX code, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges…","severity":"MEDIUM","score":6.4,"vendor":null,"product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2020-0403","published":"2020-09-17T18:28:52.000Z","updated":"2024-08-04T06:02:51.839Z","title":"In the FPC TrustZone fingerprint App, there is a possible invalid command handler due to an exposed test feature. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2020-0387","published":"2020-09-17T18:28:21.000Z","updated":"2024-08-04T06:02:51.271Z","title":"In manifest files of the SmartSpace package, there is a possible tapjacking vector due to a missing permission check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00471,"kevAdded":null},{"id":"CVE-2020-0342","published":"2020-09-17T15:55:07.000Z","updated":"2024-08-04T05:55:12.858Z","title":"There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-160812576","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00564,"kevAdded":null},{"id":"CVE-2020-0278","published":"2020-09-17T15:54:40.000Z","updated":"2024-08-04T05:55:12.630Z","title":"There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-160812574","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00564,"kevAdded":null},{"id":"CVE-2020-0391","published":"2020-09-17T15:54:24.000Z","updated":"2024-08-04T06:02:51.300Z","title":"In applyPolicy of PackageManagerService.java, there is possible arbitrary command execution as System due to an unenforced protected-broadcast. This could lead…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00425,"kevAdded":null},{"id":"CVE-2020-0390","published":"2020-09-17T15:54:09.000Z","updated":"2024-08-04T06:02:51.314Z","title":"In the app zygote SE Policy, there is a possible permissions bypass. This could lead to local information disclosure with no additional execution privileges…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2020-0389","published":"2020-09-17T15:50:49.000Z","updated":"2024-08-04T06:02:51.307Z","title":"In createSaveNotification of RecordingService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2020-0229","published":"2020-09-17T15:50:08.000Z","updated":"2024-08-04T05:55:12.483Z","title":"There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-156333725","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00564,"kevAdded":null},{"id":"CVE-2020-0388","published":"2020-09-17T15:49:20.000Z","updated":"2024-08-04T06:02:51.264Z","title":"In createEmergencyLocationUserNotification of GnssVisibilityControl.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00169,"kevAdded":null},{"id":"CVE-2020-0386","published":"2020-09-17T15:48:15.000Z","updated":"2024-08-04T06:02:51.313Z","title":"In onCreate of RequestPermissionActivity.java, there is a possible tapjacking vector due to an insecure default value. This could lead to local escalation of…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00385,"kevAdded":null},{"id":"CVE-2020-0394","published":"2020-09-17T15:47:57.000Z","updated":"2024-08-04T06:02:51.279Z","title":"In onCreate of BluetoothPairingDialog.java, there is a possible tapjacking vector due to an insecure default value. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0027,"kevAdded":null},{"id":"CVE-2020-0396","published":"2020-09-17T15:46:59.000Z","updated":"2024-08-04T06:02:51.998Z","title":"In various places in Telephony, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00183,"kevAdded":null},{"id":"CVE-2020-0397","published":"2020-09-17T15:46:31.000Z","updated":"2024-08-04T06:02:51.229Z","title":"In getNotificationBuilder of CarrierServiceStateTracker.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2020-0395","published":"2020-09-17T15:43:43.000Z","updated":"2024-08-04T06:02:51.252Z","title":"In showNotification of EmergencyCallbackModeService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2020-0393","published":"2020-09-17T15:43:18.000Z","updated":"2024-08-04T06:02:51.987Z","title":"In decrypt and decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00158,"kevAdded":null},{"id":"CVE-2020-0399","published":"2020-09-17T15:42:55.000Z","updated":"2024-08-04T06:02:50.848Z","title":"In showLimitedSimFunctionWarningNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00183,"kevAdded":null},{"id":"CVE-2020-0407","published":"2020-09-17T15:41:18.000Z","updated":"2024-08-04T06:02:52.004Z","title":"In various functions in fscrypt_ice.c and related files in some implementations of f2fs encryption that use encryption hardware which only supports 32-bit IVs…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2020-0382","published":"2020-09-17T15:40:42.000Z","updated":"2024-08-04T06:02:51.293Z","title":"In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception. This could lead to local information disclosure of bug…","severity":"LOW","score":2.3,"vendor":null,"product":"Android","kev":false,"epss":0.00152,"kevAdded":null},{"id":"CVE-2020-0245","published":"2020-09-17T15:29:15.000Z","updated":"2024-08-04T05:55:12.651Z","title":"In DecodeFrameCombinedMode of combined_decode.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.02053,"kevAdded":null},{"id":"CVE-2020-0401","published":"2020-09-17T15:28:15.000Z","updated":"2024-08-04T06:02:51.993Z","title":"In setInstallerPackageName of PackageManagerService.java, there is a missing permission check. This could lead to local escalation of privilege and granting…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00278,"kevAdded":null},{"id":"CVE-2020-0392","published":"2020-09-17T15:27:47.000Z","updated":"2024-08-04T06:02:52.079Z","title":"In getLayerDebugInfo of SurfaceFlinger.cpp, there is a possible code execution due to a double free. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00266,"kevAdded":null},{"id":"CVE-2020-0383","published":"2020-09-17T15:27:08.000Z","updated":"2024-08-04T06:02:51.296Z","title":"In Parse_ins of eas_mdls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure in the…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00645,"kevAdded":null},{"id":"CVE-2020-0385","published":"2020-09-17T15:25:58.000Z","updated":"2024-08-04T06:02:51.289Z","title":"In Parse_insh of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote information disclosure in the…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00645,"kevAdded":null},{"id":"CVE-2020-0384","published":"2020-09-17T15:25:24.000Z","updated":"2024-08-04T06:02:51.281Z","title":"In Parse_art of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote information disclosure in the…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00645,"kevAdded":null},{"id":"CVE-2020-0381","published":"2020-09-17T15:25:06.000Z","updated":"2024-08-04T06:02:51.266Z","title":"In Parse_wave of eas_mdls.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote information disclosure in a highly…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.01494,"kevAdded":null},{"id":"CVE-2020-0379","published":"2020-09-17T15:24:02.000Z","updated":"2024-08-04T06:02:51.219Z","title":"In the Bluetooth service, there is a possible spoofing attack due to a logic error. This could lead to remote information disclosure of sensitive information…","severity":"MEDIUM","score":5.7,"vendor":null,"product":"Android","kev":false,"epss":0.00333,"kevAdded":null},{"id":"CVE-2020-0123","published":"2020-09-17T15:23:08.000Z","updated":"2024-08-04T05:47:40.794Z","title":"There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-149871374","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00635,"kevAdded":null},{"id":"CVE-2020-0380","published":"2020-09-17T15:22:42.000Z","updated":"2024-08-04T06:02:50.849Z","title":"In allocExcessBits of bitalloc.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.02821,"kevAdded":null},{"id":"CVE-2020-0074","published":"2020-09-17T15:21:14.000Z","updated":"2024-08-04T05:47:40.718Z","title":"In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00219,"kevAdded":null},{"id":"CVE-2020-0404","published":"2020-09-17T15:20:11.000Z","updated":"2024-08-04T06:02:51.648Z","title":"In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00232,"kevAdded":null},{"id":"CVE-2020-0427","published":"2020-09-17T00:00:00.000Z","updated":"2024-08-04T06:02:52.034Z","title":"In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00492,"kevAdded":null},{"id":"CVE-2020-0261","published":"2020-08-13T15:47:19.000Z","updated":"2024-08-04T05:55:12.517Z","title":"In C2 flame devices, there is a possible bypass of seccomp due to a missing configuration file. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00179,"kevAdded":null},{"id":"CVE-2020-0260","published":"2020-08-11T19:32:58.000Z","updated":"2024-08-04T05:55:12.553Z","title":"There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-152225183","severity":"CRITICAL","score":9.1,"vendor":null,"product":"Android","kev":false,"epss":0.00455,"kevAdded":null},{"id":"CVE-2020-0259","published":"2020-08-11T19:32:36.000Z","updated":"2024-08-04T05:55:12.588Z","title":"In android_verity_ctr of dm-android-verity.c, there is a possible way to modify a dm-verity protected filesystem due to improperly used crypto. This could lead…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0016,"kevAdded":null},{"id":"CVE-2020-0258","published":"2020-08-11T19:32:17.000Z","updated":"2024-08-04T05:55:12.573Z","title":"In stopZygoteLocked of AppZygote.java, there is an insufficient cleanup. This could lead to local information disclosure in the application that is started…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00305,"kevAdded":null},{"id":"CVE-2020-0257","published":"2020-08-11T19:32:01.000Z","updated":"2024-08-04T05:55:12.601Z","title":"In SpecializeCommon of com_android_internal_os_Zygote.cpp, there is a permissions bypass due to an incomplete cleanup. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00179,"kevAdded":null},{"id":"CVE-2020-0256","published":"2020-08-11T19:31:42.000Z","updated":"2024-08-04T05:55:12.551Z","title":"In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when…","severity":"MEDIUM","score":6.8,"vendor":null,"product":"Android","kev":false,"epss":0.00214,"kevAdded":null},{"id":"CVE-2020-0254","published":"2020-08-11T19:31:18.000Z","updated":"2024-08-04T05:55:12.499Z","title":"There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-152647751","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00486,"kevAdded":null},{"id":"CVE-2020-0253","published":"2020-08-11T19:30:44.000Z","updated":"2024-08-04T05:55:12.454Z","title":"There is a possible memory corruption due to a use after free.Product: AndroidVersions: Android SoCAndroid ID: A-152647365","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00646,"kevAdded":null},{"id":"CVE-2020-0252","published":"2020-08-11T19:30:31.000Z","updated":"2024-08-04T05:55:12.496Z","title":"There is a possible memory corruption due to a use after free.Product: AndroidVersions: Android SoCAndroid ID: A-152236803","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00564,"kevAdded":null},{"id":"CVE-2020-0251","published":"2020-08-11T19:30:16.000Z","updated":"2024-08-04T05:55:12.442Z","title":"There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-152647626","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00486,"kevAdded":null},{"id":"CVE-2020-0250","published":"2020-08-11T19:29:19.000Z","updated":"2024-08-04T05:55:12.497Z","title":"In requestCellInfoUpdateInternal of PhoneInterfaceManager.java, there is a missing permission check. This could lead to local information disclosure of…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00148,"kevAdded":null},{"id":"CVE-2020-0249","published":"2020-08-11T19:29:03.000Z","updated":"2024-08-04T05:55:12.452Z","title":"In postInstantAppNotif of InstantAppNotifier.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2020-0248","published":"2020-08-11T19:28:39.000Z","updated":"2024-08-04T05:55:12.485Z","title":"In postInstantAppNotif of InstantAppNotifier.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2020-0247","published":"2020-08-11T19:28:23.000Z","updated":"2024-08-04T05:55:12.863Z","title":"In Threshold::getHistogram of ImageProcessHelper.java, there is a possible crash loop due to an uncaught exception. This could lead to local denial of service…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0014,"kevAdded":null},{"id":"CVE-2020-0243","published":"2020-08-11T19:28:04.000Z","updated":"2024-08-04T05:55:12.593Z","title":"In clearPropValue of MediaAnalyticsItem.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2020-0242","published":"2020-08-11T19:27:37.000Z","updated":"2024-08-04T05:55:12.443Z","title":"In reset of NuPlayerDriver.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00244,"kevAdded":null},{"id":"CVE-2020-0241","published":"2020-08-11T19:27:21.000Z","updated":"2024-08-04T05:55:12.587Z","title":"In NuPlayerStreamListener of NuPlayerStreamListener.cpp, there is possible memory corruption due to a double free. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00251,"kevAdded":null},{"id":"CVE-2020-0240","published":"2020-08-11T19:27:01.000Z","updated":"2024-08-04T05:55:12.495Z","title":"In NewFixedDoubleArray of factory.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.021,"kevAdded":null},{"id":"CVE-2020-0239","published":"2020-08-11T19:26:42.000Z","updated":"2024-08-04T05:55:12.500Z","title":"In getDocumentMetadata of DocumentsContract.java, there is a possible disclosure of location metadata from a file due to a permissions bypass. This could lead…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00183,"kevAdded":null},{"id":"CVE-2020-0238","published":"2020-08-11T19:26:12.000Z","updated":"2024-08-04T05:55:12.470Z","title":"In updatePreferenceIntents of AccountTypePreferenceLoader, there is a possible confused deputy attack due to a race condition. This could lead to local…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.0013,"kevAdded":null},{"id":"CVE-2020-0108","published":"2020-08-11T19:25:49.000Z","updated":"2024-08-04T05:47:40.679Z","title":"In postNotification of ServiceRecord.java, there is a possible bypass of foreground process restrictions due to an uncaught exception. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00502,"kevAdded":null},{"id":"CVE-2020-0230","published":"2020-07-17T20:11:21.000Z","updated":"2024-08-04T05:55:12.428Z","title":"There is a possible out of bounds write due to an incorrect bounds check. Product: AndroidVersions: Android SoCAndroid ID: A-156337262","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00482,"kevAdded":null},{"id":"CVE-2020-0231","published":"2020-07-17T20:11:05.000Z","updated":"2024-08-04T05:55:12.560Z","title":"There is a possible out of bounds write due to an incorrect bounds check. Product: AndroidVersions: Android SoCAndroid ID: A-156333727","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00443,"kevAdded":null},{"id":"CVE-2020-0228","published":"2020-07-17T20:10:47.000Z","updated":"2024-08-04T05:55:12.598Z","title":"There is an improper configuration of recorder related service. Product: AndroidVersions: Android SoCAndroid ID: A-156333723","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00413,"kevAdded":null},{"id":"CVE-2020-0226","published":"2020-07-17T20:10:20.000Z","updated":"2024-08-04T05:55:12.630Z","title":"In createWithSurfaceParent of Client.cpp, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege in…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00273,"kevAdded":null},{"id":"CVE-2020-0224","published":"2020-07-17T20:09:50.000Z","updated":"2024-08-04T05:55:12.458Z","title":"In FastKeyAccumulator::GetKeysSlow of keys.cc, there is a possible out of bounds write due to type confusion. This could lead to remote code execution when…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.01581,"kevAdded":null},{"id":"CVE-2020-0122","published":"2020-07-17T20:09:18.000Z","updated":"2024-08-04T05:47:40.986Z","title":"In the permission declaration for com.google.android.providers.gsf.permission.WRITE_GSERVICES in AndroidManifest.xml, there is a possible permissions bypass.…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00179,"kevAdded":null},{"id":"CVE-2020-0107","published":"2020-07-17T20:08:17.000Z","updated":"2024-08-04T05:47:40.861Z","title":"In getUiccCardsInfo of PhoneInterfaceManager.java, there is a possible permissions bypass due to improper input validation. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00146,"kevAdded":null},{"id":"CVE-2020-0225","published":"2020-07-17T20:07:34.000Z","updated":"2024-08-04T05:55:12.514Z","title":"In a2dp_vendor_ldac_decoder_decode_packet of a2dp_vendor_ldac_decoder.cc, there is a possible out of bounds write due to a missing bounds check. This could…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.02681,"kevAdded":null},{"id":"CVE-2020-0227","published":"2020-07-17T20:06:50.000Z","updated":"2024-08-04T05:55:12.439Z","title":"In onCommand of CompanionDeviceManagerService.java, there is a possible permissions bypass due to a missing permission check. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00268,"kevAdded":null},{"id":"CVE-2020-0305","published":"2020-07-17T19:59:06.000Z","updated":"2024-08-04T05:55:12.844Z","title":"In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.4,"vendor":null,"product":"Android","kev":false,"epss":0.00171,"kevAdded":null},{"id":"CVE-2020-0120","published":"2020-07-17T19:51:53.000Z","updated":"2024-08-04T05:47:40.857Z","title":"In notifyErrorForPendingRequests of QCamera3HWI.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00161,"kevAdded":null},{"id":"CVE-2020-0223","published":"2020-06-16T13:31:55.000Z","updated":"2024-08-04T05:55:12.469Z","title":"This is an unbounded write into kernel global memory, via a user-controlled buffer size.Product: AndroidVersions: Android kernelAndroid ID: A-135130450","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00443,"kevAdded":null},{"id":"CVE-2020-0235","published":"2020-06-16T13:31:11.000Z","updated":"2024-08-04T05:55:12.554Z","title":"In crus_sp_shared_ioctl we first copy 4 bytes from userdata into \"size\" variable, and then use that variable as the size parameter for \"copy_from_user\", ending…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00443,"kevAdded":null},{"id":"CVE-2020-0232","published":"2020-06-16T13:30:52.000Z","updated":"2024-08-04T05:55:12.492Z","title":"Function abc_pcie_issue_dma_xfer_sync creates a transfer object, adds it to the session object then continues to work with it. A concurrent thread could…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00443,"kevAdded":null},{"id":"CVE-2020-0234","published":"2020-06-16T13:30:14.000Z","updated":"2024-08-04T05:55:12.480Z","title":"In crus_afe_get_param of msm-cirrus-playback.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2020-0233","published":"2020-06-11T14:43:50.000Z","updated":"2024-08-04T05:55:12.482Z","title":"In main of main.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00164,"kevAdded":null},{"id":"CVE-2020-0214","published":"2020-06-11T14:43:50.000Z","updated":"2024-08-04T05:55:12.435Z","title":"In ce_t4t_process_select_file_cmd of ce_t4t.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2020-0206","published":"2020-06-11T14:43:50.000Z","updated":"2024-08-04T05:55:12.484Z","title":"In the settings app, there is a possible app crash due to improper input validation. This could lead to local denial of service of the Settings app with User…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00132,"kevAdded":null},{"id":"CVE-2020-0196","published":"2020-06-11T14:43:50.000Z","updated":"2024-08-04T05:55:11.859Z","title":"In RegisterNotificationResponse::GetEvent of register_notification_packet.cc, there is a possible abort due to improper input validation. This could lead to…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00302,"kevAdded":null},{"id":"CVE-2020-0185","published":"2020-06-11T14:43:50.000Z","updated":"2024-08-04T05:55:11.750Z","title":"In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2020-0178","published":"2020-06-11T14:43:50.000Z","updated":"2024-08-04T05:55:11.123Z","title":"In getAllConfigFlags of SettingsProvider.cpp, there is a possible illegal read due to a missing permission check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00158,"kevAdded":null},{"id":"CVE-2020-0176","published":"2020-06-11T14:43:50.000Z","updated":"2024-08-04T05:55:11.798Z","title":"In avdt_msg_prs_rej of avdt_msg.cc, there is a possible out-of-bounds read due to improper input validation. This could lead to remote information disclosure…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00827,"kevAdded":null},{"id":"CVE-2020-0219","published":"2020-06-11T14:43:49.000Z","updated":"2024-08-04T05:55:12.481Z","title":"In onCreate of SliceDeepLinkSpringBoard.java there is a possible insecure Intent. This could lead to local elevation of privilege with no additional execution…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00329,"kevAdded":null},{"id":"CVE-2020-0216","published":"2020-06-11T14:43:49.000Z","updated":"2024-08-04T05:55:12.494Z","title":"In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00196,"kevAdded":null},{"id":"CVE-2020-0215","published":"2020-06-11T14:43:49.000Z","updated":"2024-08-04T05:55:12.461Z","title":"In onCreate of ConfirmConnectActivity.java, there is a possible leak of Bluetooth information due to a permissions bypass. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00277,"kevAdded":null},{"id":"CVE-2020-0204","published":"2020-06-11T14:43:49.000Z","updated":"2024-08-04T05:55:12.377Z","title":"In InstallPackage of package.cpp, there is a possible bypass of a signature check due to a Time of Check/Time of Use condition. This could lead to local…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00325,"kevAdded":null},{"id":"CVE-2020-0202","published":"2020-06-11T14:43:49.000Z","updated":"2024-08-04T05:55:12.129Z","title":"In onHandleIntent of TraceService.java, there is a possible bypass of developer settings requirements for capturing system traces due to a missing permission…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00409,"kevAdded":null},{"id":"CVE-2020-0201","published":"2020-06-11T14:43:49.000Z","updated":"2024-08-04T05:55:12.421Z","title":"In showSecurityFields of WifiConfigController.java there is a possible credential leak due to a confused deputy. This could lead to remote escalation of…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.01759,"kevAdded":null},{"id":"CVE-2020-0188","published":"2020-06-11T14:43:49.000Z","updated":"2024-08-04T05:55:12.453Z","title":"In onCreatePermissionRequest of SettingsSliceProvider.java, there is a possible permissions bypass due to a PendingIntent error. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00321,"kevAdded":null},{"id":"CVE-2020-0186","published":"2020-06-11T14:43:49.000Z","updated":"2024-08-04T05:55:11.780Z","title":"In hal_fd_init of hal_fd.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2020-0183","published":"2020-06-11T14:43:49.000Z","updated":"2024-08-04T05:55:11.637Z","title":"In handleMessage of BluetoothManagerService, there is an incomplete reset. This could lead to local escalation of privilege with no additional execution…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00302,"kevAdded":null},{"id":"CVE-2020-0177","published":"2020-06-11T14:43:49.000Z","updated":"2024-08-04T05:55:11.618Z","title":"In connect() of PanService.java, there is a possible permissions bypass. This could lead to local escalation of privilege to change network connection settings…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2020-0165","published":"2020-06-11T14:43:49.000Z","updated":"2024-08-04T05:47:40.949Z","title":"In phNxpNciHal_NfcDep_cmd_ext of phNxpNciHal_NfcDepSWPrio.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00167,"kevAdded":null},{"id":"CVE-2020-0164","published":"2020-06-11T14:43:49.000Z","updated":"2024-08-04T05:47:40.848Z","title":"In phNxpNciHal_NfcDep_cmd_ext of phNxpNciHal_NfcDepSWPrio.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00183,"kevAdded":null},{"id":"CVE-2020-0159","published":"2020-06-11T14:43:49.000Z","updated":"2024-08-04T05:47:40.804Z","title":"In rw_mfc_writeBlock of rw_mfc.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00347,"kevAdded":null},{"id":"CVE-2020-0158","published":"2020-06-11T14:43:49.000Z","updated":"2024-08-04T05:47:40.857Z","title":"In nfc_ncif_proc_t3t_polling_ntf of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2020-0157","published":"2020-06-11T14:43:49.000Z","updated":"2024-08-04T05:47:41.018Z","title":"In nfa_hci_conn_cback of nfa_hci_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information…","severity":"MEDIUM","score":4.9,"vendor":null,"product":"Android","kev":false,"epss":0.00689,"kevAdded":null},{"id":"CVE-2020-0156","published":"2020-06-11T14:43:49.000Z","updated":"2024-08-04T05:47:40.948Z","title":"In NxpNfc::ioctl of NxpNfc.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2020-0155","published":"2020-06-11T14:43:49.000Z","updated":"2024-08-04T05:47:41.047Z","title":"In phNxpNciHal_send_ese_hal_cmd of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00246,"kevAdded":null},{"id":"CVE-2020-0154","published":"2020-06-11T14:43:49.000Z","updated":"2024-08-04T05:47:40.926Z","title":"In nci_proc_core_rsp of nci_hrcv.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2020-0153","published":"2020-06-11T14:43:49.000Z","updated":"2024-08-04T05:47:40.965Z","title":"In phNxpNciHal_write_ext of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.0016,"kevAdded":null},{"id":"CVE-2020-0150","published":"2020-06-11T14:43:49.000Z","updated":"2024-08-04T05:47:40.858Z","title":"In rw_t3t_message_set_block_list of rw_t3t.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2020-0149","published":"2020-06-11T14:43:49.000Z","updated":"2024-08-04T05:47:40.901Z","title":"In btu_hcif_mode_change_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00146,"kevAdded":null},{"id":"CVE-2020-0148","published":"2020-06-11T14:43:49.000Z","updated":"2024-08-04T05:47:40.841Z","title":"In btu_hcif_pin_code_request_evt, btu_hcif_link_key_request_evt, and btu_hcif_link_key_notification_evt of btu_hcif.cc, there is a possible out of bounds read…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2020-0147","published":"2020-06-11T14:43:49.000Z","updated":"2024-08-04T05:47:40.755Z","title":"In btu_hcif_esco_connection_chg_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2020-0146","published":"2020-06-11T14:43:49.000Z","updated":"2024-08-04T05:47:41.056Z","title":"In btu_hcif_hardware_error_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2020-0145","published":"2020-06-11T14:43:49.000Z","updated":"2024-08-04T05:47:40.853Z","title":"In btm_simple_pair_complete of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2020-0144","published":"2020-06-11T14:43:49.000Z","updated":"2024-08-04T05:47:40.921Z","title":"In btm_proc_sp_req_evt of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00146,"kevAdded":null},{"id":"CVE-2020-0143","published":"2020-06-11T14:43:49.000Z","updated":"2024-08-04T05:47:40.742Z","title":"In nfa_dm_ndef_find_next_handler of nfa_dm_ndef.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2020-0142","published":"2020-06-11T14:43:49.000Z","updated":"2024-08-04T05:47:40.863Z","title":"In rw_i93_sm_format of rw_i93.c, there is a possible information disclosure due to a missing bounds check. This could lead to remote information disclosure…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2020-0140","published":"2020-06-11T14:43:49.000Z","updated":"2024-08-04T05:47:40.839Z","title":"In rw_i93_sm_detect_ndef of rw_i93.c, there is a possible information disclosure due to a missing bounds check. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2020-0139","published":"2020-06-11T14:43:49.000Z","updated":"2024-08-04T05:47:40.930Z","title":"In NDEF_MsgValidate of ndef_utils.c, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure if a…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2020-0217","published":"2020-06-11T14:43:48.000Z","updated":"2024-08-04T05:55:12.471Z","title":"In RW_T4tPresenceCheck of rw_t4t.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00844,"kevAdded":null},{"id":"CVE-2020-0212","published":"2020-06-11T14:43:48.000Z","updated":"2024-08-04T05:55:12.377Z","title":"In _onBufferDestroyed of InputBufferManager.cpp, there is a possible out of bounds read due to a use after free. This could lead to remote information…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2020-0211","published":"2020-06-11T14:43:48.000Z","updated":"2024-08-04T05:55:12.475Z","title":"In SumCompoundHorizontalTaps of convolve_neon.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2020-0207","published":"2020-06-11T14:43:48.000Z","updated":"2024-08-04T05:55:12.452Z","title":"In next_marker of jdmarker.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with no…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2020-0205","published":"2020-06-11T14:43:48.000Z","updated":"2024-08-04T05:55:12.434Z","title":"In the DaalaBitReader constructor of entropy_decoder.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2020-0200","published":"2020-06-11T14:43:48.000Z","updated":"2024-08-04T05:55:12.403Z","title":"In ReadLittleEndian of raw_bit_reader.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2020-0199","published":"2020-06-11T14:43:48.000Z","updated":"2024-08-04T05:55:11.770Z","title":"In TimeCheck::TimeCheckThread::threadLoop of TimeCheck.cpp, there is a possible use-after-free due to a race condition. This could lead to local information…","severity":"MEDIUM","score":4.1,"vendor":null,"product":"Android","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2020-0198","published":"2020-06-11T14:43:48.000Z","updated":"2024-08-04T05:55:12.544Z","title":"In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could lead to remote denial of service with no…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.04262,"kevAdded":null},{"id":"CVE-2020-0197","published":"2020-06-11T14:43:48.000Z","updated":"2024-08-04T05:55:12.422Z","title":"In InitDataParser::parsePssh of InitDataParser.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2020-0195","published":"2020-06-11T14:43:48.000Z","updated":"2024-08-04T05:55:12.489Z","title":"In ihevcd_iquant_itrans_recon_ctb of ihevcd_iquant_itrans_recon_ctb.c and related functions, there is a possible information disclosure due to uninitialized…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2020-0189","published":"2020-06-11T14:43:48.000Z","updated":"2024-08-04T05:55:11.125Z","title":"In ihevcd_decode() of ihevcd_decode.c, there is possible resource exhaustion due to an infinite loop. This could lead to remote denial of service with no…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00635,"kevAdded":null},{"id":"CVE-2020-0184","published":"2020-06-11T14:43:48.000Z","updated":"2024-08-04T05:55:11.897Z","title":"In ihevcd_ref_list() of ihevcd_ref_list.c, there is a possible infinite loop due to a missing bounds check. This could lead to remote denial of service with no…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00635,"kevAdded":null},{"id":"CVE-2020-0181","published":"2020-06-11T14:43:48.000Z","updated":"2024-08-04T05:55:12.265Z","title":"In exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an integer overflow. This could lead to remote denial of service…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.02856,"kevAdded":null},{"id":"CVE-2020-0175","published":"2020-06-11T14:43:48.000Z","updated":"2024-08-04T05:55:11.125Z","title":"In XMF_ReadNode of eas_xmf.c, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00771,"kevAdded":null},{"id":"CVE-2020-0174","published":"2020-06-11T14:43:48.000Z","updated":"2024-08-04T05:55:11.127Z","title":"In Parse_ptbl of eas_mdls.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00781,"kevAdded":null},{"id":"CVE-2020-0173","published":"2020-06-11T14:43:48.000Z","updated":"2024-08-04T05:55:11.113Z","title":"In Parse_lins of eas_mdls.c, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00771,"kevAdded":null},{"id":"CVE-2020-0172","published":"2020-06-11T14:43:48.000Z","updated":"2024-08-04T05:47:40.924Z","title":"In Parse_art of eas_mdls.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00781,"kevAdded":null},{"id":"CVE-2020-0171","published":"2020-06-11T14:43:48.000Z","updated":"2024-08-04T05:47:41.022Z","title":"In Parse_lart of eas_mdls.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00781,"kevAdded":null},{"id":"CVE-2020-0170","published":"2020-06-11T14:43:48.000Z","updated":"2024-08-04T05:47:40.857Z","title":"In IMY_Event of eas_imelody.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00771,"kevAdded":null},{"id":"CVE-2020-0169","published":"2020-06-11T14:43:48.000Z","updated":"2024-08-04T05:47:40.786Z","title":"In RTTTL_Event of eas_rtttl.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00771,"kevAdded":null},{"id":"CVE-2020-0163","published":"2020-06-11T14:43:48.000Z","updated":"2024-08-04T05:47:41.046Z","title":"In parseSampleAuxiliaryInformationSizes of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could lead to…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00635,"kevAdded":null},{"id":"CVE-2020-0162","published":"2020-06-11T14:43:48.000Z","updated":"2024-08-04T05:47:40.952Z","title":"In parseSampleAuxiliaryInformationOffsets of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could lead to…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00635,"kevAdded":null},{"id":"CVE-2020-0161","published":"2020-06-11T14:43:48.000Z","updated":"2024-08-04T05:47:41.056Z","title":"In parseChunk of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00635,"kevAdded":null},{"id":"CVE-2020-0160","published":"2020-06-11T14:43:48.000Z","updated":"2024-08-04T05:47:40.860Z","title":"In setSyncSampleParams of SampleTable.cpp, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.01059,"kevAdded":null},{"id":"CVE-2020-0138","published":"2020-06-11T14:43:48.000Z","updated":"2024-08-04T05:47:40.928Z","title":"In get_element_attr_rsp of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.01355,"kevAdded":null},{"id":"CVE-2020-0137","published":"2020-06-11T14:43:48.000Z","updated":"2024-08-04T05:47:40.852Z","title":"In setIPv6AddrGenMode of NetworkManagementService.java, there is a possible bypass of networking permissions due to a missing permission check. This could lead…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00232,"kevAdded":null},{"id":"CVE-2020-0136","published":"2020-06-11T14:43:48.000Z","updated":"2024-08-04T05:47:40.750Z","title":"In multiple locations of Parcel.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege in…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00246,"kevAdded":null},{"id":"CVE-2020-0133","published":"2020-06-11T14:43:48.000Z","updated":"2024-08-04T05:47:40.796Z","title":"In MockLocationAppPreferenceController.java, it is possible to mock the GPS location of the device due to a permissions bypass. This could lead to local…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00202,"kevAdded":null},{"id":"CVE-2020-0129","published":"2020-06-11T14:43:48.000Z","updated":"2024-08-04T05:47:40.862Z","title":"In SetData of btm_ble_multi_adv.cc, there is a possible out-of-bound write due to an incorrect bounds check. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2020-0218","published":"2020-06-11T14:43:47.000Z","updated":"2024-08-04T05:55:12.445Z","title":"In loadSoundModel and related functions of SoundTriggerHwService.cpp, there is possible out of bounds write due to a race condition. This could lead to local…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00179,"kevAdded":null},{"id":"CVE-2020-0213","published":"2020-06-11T14:43:47.000Z","updated":"2024-08-04T05:55:12.485Z","title":"In hevcd_fmt_conv_420sp_to_420sp_av8 of ihevcd_fmt_conv_420sp_to_420sp.s, there is a possible out of bounds write due to a heap buffer overflow. This could…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.0088,"kevAdded":null},{"id":"CVE-2020-0210","published":"2020-06-11T14:43:47.000Z","updated":"2024-08-04T05:55:12.404Z","title":"In removeSharedAccountAsUser of AccountManager.java, there is a possible permissions bypass to a confused deputy. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00178,"kevAdded":null},{"id":"CVE-2020-0209","published":"2020-06-11T14:43:47.000Z","updated":"2024-08-04T05:55:11.758Z","title":"In multiple functions of AccountManager.java, there is a possible permissions bypass. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00254,"kevAdded":null},{"id":"CVE-2020-0194","published":"2020-06-11T14:43:47.000Z","updated":"2024-08-04T05:55:12.655Z","title":"In ihevcd_parse_slice_header of ihevcd_parse_slice_header.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2020-0193","published":"2020-06-11T14:43:47.000Z","updated":"2024-08-04T05:55:11.842Z","title":"In ihevc_intra_pred_chroma_mode_3_to_9_av8 of ihevc_intra_pred_chroma_mode_3_to_9.s, there is a possible out of bounds read due to a heap buffer overflow. This…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00766,"kevAdded":null},{"id":"CVE-2020-0192","published":"2020-06-11T14:43:47.000Z","updated":"2024-08-04T05:55:12.085Z","title":"In ih264d_decode_slice_thread of ih264d_thread_parse_decode.c, there is a possible out of bounds read due to improper input validation. This could lead to…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2020-0191","published":"2020-06-11T14:43:47.000Z","updated":"2024-08-04T05:55:11.776Z","title":"In ih264d_update_default_index_list() of ih264d_dpb_mgr.c, there is a possible out of bounds read due to a logic error. This could lead to remote information…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00768,"kevAdded":null},{"id":"CVE-2020-0190","published":"2020-06-11T14:43:47.000Z","updated":"2024-08-04T05:55:11.743Z","title":"In ideint_weave_blk of ideint_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00747,"kevAdded":null},{"id":"CVE-2020-0182","published":"2020-06-11T14:43:47.000Z","updated":"2024-08-04T05:55:11.628Z","title":"In exif_entry_get_value of exif-entry.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.01134,"kevAdded":null},{"id":"CVE-2020-0180","published":"2020-06-11T14:43:47.000Z","updated":"2024-08-04T05:55:11.130Z","title":"In GetOpusHeaderBuffers() of OpusHeader.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2020-0179","published":"2020-06-11T14:43:47.000Z","updated":"2024-08-04T05:55:11.773Z","title":"In doSendObjectInfo of MtpServer.cpp, there is a possible path traversal attack due to insufficient input validation. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00487,"kevAdded":null},{"id":"CVE-2020-0168","published":"2020-06-11T14:43:47.000Z","updated":"2024-08-04T05:47:41.059Z","title":"In impeg2_fmt_conv_yuv420p_to_yuv420sp_uv of impeg2_format_conv.c, there is a possible out of bounds write due to a missing bounds check. This could lead to…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2020-0167","published":"2020-06-11T14:43:47.000Z","updated":"2024-08-04T05:47:40.840Z","title":"In load of ResourceTypes.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00411,"kevAdded":null},{"id":"CVE-2020-0152","published":"2020-06-11T14:43:47.000Z","updated":"2024-08-04T05:47:40.809Z","title":"In avb_vbmeta_image_verify of avb_vbmeta_image.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00146,"kevAdded":null},{"id":"CVE-2020-0151","published":"2020-06-11T14:43:47.000Z","updated":"2024-08-04T05:47:40.862Z","title":"In avb_vbmeta_image_verify of avb_vbmeta_image.c there is a possible out of bounds read due to a missing bounds check. This could lead to a local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2020-0141","published":"2020-06-11T14:43:47.000Z","updated":"2024-08-04T05:47:40.987Z","title":"In OutputBuffersArray::realloc of CCodecBuffers.cpp, there is a possible heap disclosure due to a race condition. This could lead to remote information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00493,"kevAdded":null},{"id":"CVE-2020-0135","published":"2020-06-11T14:43:47.000Z","updated":"2024-08-04T05:47:40.854Z","title":"In dump of RollbackManagerServiceImpl.java, there is a possible backup metadata exposure due to a missing permission check. This could lead to local…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00137,"kevAdded":null},{"id":"CVE-2020-0134","published":"2020-06-11T14:43:47.000Z","updated":"2024-08-04T05:47:40.867Z","title":"In BnDrm::onTransact of IDrm.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2020-0132","published":"2020-06-11T14:43:47.000Z","updated":"2024-08-04T05:47:40.882Z","title":"In BnAAudioService::onTransact of IAAudioService.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00248,"kevAdded":null},{"id":"CVE-2020-0131","published":"2020-06-11T14:43:47.000Z","updated":"2024-08-04T05:47:40.781Z","title":"In parseChunk of MPEG4Extractor.cpp, there is a possible out of bounds write due to incompletely initialized data. This could lead to remote code execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2020-0128","published":"2020-06-11T14:43:47.000Z","updated":"2024-08-04T05:47:40.927Z","title":"In addPacket of AMPEG4ElementaryAssembler, there is an out of bounds read due to an integer overflow. This could lead to remote information disclosure with no…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2020-0127","published":"2020-06-11T14:43:47.000Z","updated":"2024-08-04T05:47:40.725Z","title":"In AudioStream::decode of AudioGroup.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00856,"kevAdded":null},{"id":"CVE-2020-0126","published":"2020-06-11T14:43:47.000Z","updated":"2024-08-04T05:47:40.884Z","title":"In multiple functions in DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local code execution with System…","severity":"MEDIUM","score":6.4,"vendor":null,"product":"Android","kev":false,"epss":0.00107,"kevAdded":null},{"id":"CVE-2020-0208","published":"2020-06-11T14:20:40.000Z","updated":"2024-08-04T05:55:12.224Z","title":"In multiple functions of AccountManager.java, there is a possible permissions bypass. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00148,"kevAdded":null},{"id":"CVE-2020-0203","published":"2020-06-11T14:14:21.000Z","updated":"2024-08-04T05:55:12.171Z","title":"In freeIsolatedUidLocked of ProcessList.java, there is a possible UID reuse due to improper cleanup. This could lead to local escalation of privilege between…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00246,"kevAdded":null},{"id":"CVE-2020-0124","published":"2020-06-11T14:13:27.000Z","updated":"2024-08-04T05:47:40.825Z","title":"In markBootComplete of InstalldNativeService.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2020-0187","published":"2020-06-11T14:11:50.000Z","updated":"2024-08-04T05:55:11.828Z","title":"In engineSetMode of BaseBlockCipher.java, there is a possible incorrect cryptographic algorithm chosen due to an incomplete comparison. This could lead to…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00158,"kevAdded":null},{"id":"CVE-2020-0166","published":"2020-06-11T14:10:37.000Z","updated":"2024-08-04T05:47:40.942Z","title":"In multiple functions of URI.java, there is a possible escalation of privilege due to missing validation in the parceling of URI information. This could lead…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2020-0116","published":"2020-06-10T17:12:22.000Z","updated":"2024-08-04T05:47:40.742Z","title":"In checkSystemLocationAccess of LocationAccessPolicy.java, there is a possible bypass of user profile isolation due to a permissions bypass. This could lead to…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00183,"kevAdded":null},{"id":"CVE-2020-0117","published":"2020-06-10T17:12:15.000Z","updated":"2024-08-04T05:47:40.743Z","title":"In aes_cmac of aes_cmac.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution in the bluetooth…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.01621,"kevAdded":null},{"id":"CVE-2020-0113","published":"2020-06-10T17:12:05.000Z","updated":"2024-08-04T05:47:40.782Z","title":"In sendCaptureResult of Camera3OutputUtils.cpp, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00364,"kevAdded":null},{"id":"CVE-2020-0118","published":"2020-06-10T17:11:49.000Z","updated":"2024-08-04T05:47:40.819Z","title":"In addListener of RegionSamplingThread.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00191,"kevAdded":null},{"id":"CVE-2020-0119","published":"2020-06-10T17:11:42.000Z","updated":"2024-08-04T05:47:40.878Z","title":"In addOrUpdateNetworkInternal and related functions of WifiConfigManager.java, there is a possible man in the middle attack due to improper certificate…","severity":"MEDIUM","score":5.3,"vendor":null,"product":"Android","kev":false,"epss":0.00742,"kevAdded":null},{"id":"CVE-2020-0115","published":"2020-06-10T17:11:32.000Z","updated":"2024-08-04T05:47:40.821Z","title":"In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00171,"kevAdded":null},{"id":"CVE-2020-0121","published":"2020-06-10T17:11:24.000Z","updated":"2024-08-04T05:47:40.794Z","title":"In updateUidProcState of AppOpsService.java, there is a possible permission bypass due to a logic error. This could lead to local information disclosure of…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00258,"kevAdded":null},{"id":"CVE-2020-0114","published":"2020-06-10T17:10:57.000Z","updated":"2024-08-04T05:47:40.682Z","title":"In onCreateSliceProvider of KeyguardSliceProvider.java, there is a possible confused deputy due to a PendingIntent error. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00324,"kevAdded":null},{"id":"CVE-2020-0221","published":"2020-05-14T20:17:18.000Z","updated":"2024-08-04T05:55:12.829Z","title":"Airbrush FW's scratch memory allocator is susceptible to numeric overflow. When the overflow occurs, the next allocation could potentially return a pointer…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00466,"kevAdded":null},{"id":"CVE-2020-0220","published":"2020-05-14T20:17:12.000Z","updated":"2024-08-04T05:55:12.484Z","title":"In crus_afe_callback of msm-cirrus-playback.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2020-0100","published":"2020-05-14T20:12:37.000Z","updated":"2024-08-04T05:47:40.559Z","title":"In onTransact of IHDCP.cpp, there is a possible out of bounds read due to incorrect error handling. This could lead to local information disclosure of data…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2020-0064","published":"2020-05-14T20:12:32.000Z","updated":"2024-08-04T05:47:40.488Z","title":"An improper authorization while processing the provisioning data.Product: AndroidVersions: Android SoCAndroid ID: A-149866855","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00134,"kevAdded":null},{"id":"CVE-2020-0065","published":"2020-05-14T20:12:27.000Z","updated":"2024-08-04T05:47:40.700Z","title":"An improper authorization in the receiver component of the Android Suite Daemon.Product: AndroidVersions: Android SoCAndroid ID: A-149813448","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00134,"kevAdded":null},{"id":"CVE-2020-0090","published":"2020-05-14T20:12:22.000Z","updated":"2024-08-04T05:47:40.663Z","title":"An improper authorization in the receiver component of Email.Product: AndroidVersions: Android SoCAndroid ID: A-149813048","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00134,"kevAdded":null},{"id":"CVE-2020-0091","published":"2020-05-14T20:12:15.000Z","updated":"2024-08-04T05:47:40.741Z","title":"In mnld, an incorrect configuration in driver_cfg of mnld for meta factory mode.Product: AndroidVersions: Android SoCAndroid ID: A-149808700","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00134,"kevAdded":null},{"id":"CVE-2020-0093","published":"2020-05-14T20:10:39.000Z","updated":"2024-08-04T05:47:40.659Z","title":"In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":5,"vendor":null,"product":"Android","kev":false,"epss":0.00301,"kevAdded":null},{"id":"CVE-2020-0106","published":"2020-05-14T20:10:32.000Z","updated":"2024-08-04T05:47:40.841Z","title":"In getCellLocation of PhoneInterfaceManager.java, there is a possible permission bypass due to a missing SDK version check. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2020-0094","published":"2020-05-14T20:10:26.000Z","updated":"2024-08-04T05:47:40.835Z","title":"In setImageHeight and setImageWidth of ExifUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00158,"kevAdded":null},{"id":"CVE-2020-0110","published":"2020-05-14T20:10:20.000Z","updated":"2024-08-04T05:47:40.797Z","title":"In psi_write of psi.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2020-0103","published":"2020-05-14T20:10:14.000Z","updated":"2024-08-04T05:47:40.689Z","title":"In a2dp_aac_decoder_cleanup of a2dp_aac_decoder.cc, there is a possible invalid free due to memory corruption. This could lead to remote code execution with no…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.01649,"kevAdded":null},{"id":"CVE-2020-0109","published":"2020-05-14T20:10:08.000Z","updated":"2024-08-04T05:47:40.782Z","title":"In simulatePackageSuspendBroadcast of NotificationManagerService.java, there is a missing permission check. This could lead to local escalation of privilege by…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2020-0097","published":"2020-05-14T20:09:59.000Z","updated":"2024-08-04T05:47:40.820Z","title":"In various methods of PackageManagerService.java, there is a possible permission bypass due to a missing condition for system apps. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00166,"kevAdded":null},{"id":"CVE-2020-0096","published":"2020-05-14T20:09:51.000Z","updated":"2024-08-04T05:47:40.693Z","title":"In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00606,"kevAdded":null},{"id":"CVE-2020-0092","published":"2020-05-14T20:08:49.000Z","updated":"2024-08-04T05:47:40.841Z","title":"In setHideSensitive of NotificationStackScrollLayout.java, there is a possible disclosure of sensitive notification content due to a permissions bypass. This…","severity":"MEDIUM","score":5,"vendor":null,"product":"Android","kev":false,"epss":0.00165,"kevAdded":null},{"id":"CVE-2020-0101","published":"2020-05-14T20:08:43.000Z","updated":"2024-08-04T05:47:40.782Z","title":"In BnCrypto::onTransact of ICrypto.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2020-0104","published":"2020-05-14T20:08:37.000Z","updated":"2024-08-04T05:47:40.864Z","title":"In onShowingStateChanged of KeyguardStateMonitor.java, there is a possible inappropriate read due to a logic error. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00167,"kevAdded":null},{"id":"CVE-2020-0098","published":"2020-05-14T20:08:31.000Z","updated":"2024-08-04T05:47:40.523Z","title":"In navigateUpToLocked of ActivityStack.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00159,"kevAdded":null},{"id":"CVE-2020-0105","published":"2020-05-14T20:08:24.000Z","updated":"2024-08-04T05:47:40.864Z","title":"In onKeyguardVisibilityChanged of key_store_service.cpp, there is a missing permission check. This could lead to local escalation of privilege, allowing apps…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2020-0102","published":"2020-05-14T20:08:17.000Z","updated":"2024-08-04T05:47:40.855Z","title":"In GattServer::SendResponse of gatt_server.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2020-0024","published":"2020-05-14T20:08:08.000Z","updated":"2024-08-04T05:47:40.791Z","title":"In onCreate of SettingsBaseActivity.java, there is a possible unauthorized setting modification due to a permissions bypass. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00167,"kevAdded":null},{"id":"CVE-2020-0077","published":"2020-04-17T18:21:21.000Z","updated":"2024-08-04T05:47:40.739Z","title":"In authorize_enroll of the FPC IRIS TrustZone app, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00144,"kevAdded":null},{"id":"CVE-2020-0075","published":"2020-04-17T18:21:14.000Z","updated":"2024-08-04T05:47:40.816Z","title":"In set_shared_key of the FPC IRIS TrustZone app, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00144,"kevAdded":null},{"id":"CVE-2020-0076","published":"2020-04-17T18:21:06.000Z","updated":"2024-08-04T05:47:40.823Z","title":"In get_auth_result of the FPC IRIS TrustZone app, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00157,"kevAdded":null},{"id":"CVE-2019-2056","published":"2020-04-17T18:20:49.000Z","updated":"2024-08-04T18:35:52.646Z","title":"There is a possible disclosure of RAM using a shared crypto key due to improperly used crypto. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00148,"kevAdded":null},{"id":"CVE-2020-0073","published":"2020-04-17T18:20:28.000Z","updated":"2024-08-04T05:47:40.464Z","title":"In rw_t2t_handle_tlv_detect_rsp of rw_t2t_ndef.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.01338,"kevAdded":null},{"id":"CVE-2020-0072","published":"2020-04-17T18:20:21.000Z","updated":"2024-08-04T05:47:40.519Z","title":"In rw_t2t_handle_tlv_detect_rsp of rw_t2t_ndef.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.01338,"kevAdded":null},{"id":"CVE-2020-0071","published":"2020-04-17T18:20:12.000Z","updated":"2024-08-04T05:47:40.666Z","title":"In rw_t2t_extract_default_locks_info of rw_t2t_ndef.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.01338,"kevAdded":null},{"id":"CVE-2020-0070","published":"2020-04-17T18:19:57.000Z","updated":"2024-08-04T05:47:40.597Z","title":"In rw_t2t_update_lock_attributes of rw_t2t_ndef.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.01338,"kevAdded":null},{"id":"CVE-2020-0079","published":"2020-04-17T18:19:43.000Z","updated":"2024-08-04T05:47:40.855Z","title":"In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds write due to stale pointer. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2020-0078","published":"2020-04-17T18:19:36.000Z","updated":"2024-08-04T05:47:40.955Z","title":"In releaseSecureStops of DrmPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2020-0082","published":"2020-04-17T18:19:29.000Z","updated":"2024-08-04T05:47:40.635Z","title":"In ExternalVibration of ExternalVibration.java, there is a possible activation of an arbitrary intent due to unsafe deserialization. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00409,"kevAdded":null},{"id":"CVE-2020-0081","published":"2020-04-17T18:19:12.000Z","updated":"2024-08-04T05:47:40.840Z","title":"In finalize of AssetManager.java, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00172,"kevAdded":null},{"id":"CVE-2020-0080","published":"2020-04-17T18:19:01.000Z","updated":"2024-08-04T05:47:40.780Z","title":"In onOpActiveChanged and related methods of AppOpsControllerImpl.java, there is a possible way to display an app overlaying other apps without the notification…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00501,"kevAdded":null},{"id":"CVE-2020-0068","published":"2020-04-17T18:04:40.000Z","updated":"2024-08-04T05:47:40.861Z","title":"In crus_afe_get_param of msm-cirrus-playback.c, there is a possible out of bounds read due to an integer overflow. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00148,"kevAdded":null},{"id":"CVE-2020-0067","published":"2020-04-17T18:03:45.000Z","updated":"2024-08-04T05:47:40.785Z","title":"In f2fs_xattr_generic_list of xattr.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00477,"kevAdded":null},{"id":"CVE-2019-9474","published":"2020-03-15T21:17:56.000Z","updated":"2024-08-04T21:54:44.025Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2019-9473","published":"2020-03-15T21:17:24.000Z","updated":"2024-08-04T21:54:43.553Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2020-0088","published":"2020-03-15T21:16:41.000Z","updated":"2024-08-04T05:47:40.708Z","title":"In parseTrackFragmentRun of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00674,"kevAdded":null},{"id":"CVE-2020-0086","published":"2020-03-15T21:15:47.000Z","updated":"2024-08-04T05:47:40.431Z","title":"In readCString of Parcel.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to arbitrary code execution if IntSan were…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.0064,"kevAdded":null},{"id":"CVE-2019-2058","published":"2020-03-15T21:14:50.000Z","updated":"2024-08-04T18:35:52.402Z","title":"In libAACdec, there is a possible out of bounds read. This could lead to remote information disclosure, with no additional execution privileges needed. User…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-2088","published":"2020-03-15T21:13:56.000Z","updated":"2024-08-04T18:42:49.930Z","title":"In StatsService, there is a possible out of bounds read. This could lead to local information disclosure if UBSAN were not enabled, with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2019-2089","published":"2020-03-15T21:13:04.000Z","updated":"2024-08-04T18:42:50.275Z","title":"In app uninstallation, there is a possible set of permissions that may not be removed from a shared app ID. This could lead to a local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00166,"kevAdded":null},{"id":"CVE-2019-2216","published":"2020-03-15T21:10:25.000Z","updated":"2024-08-04T18:42:50.838Z","title":"In overlay notifications, there is a possible hidden notification due to improper input validation. This could lead to a local escalation of privilege because…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00167,"kevAdded":null},{"id":"CVE-2020-0057","published":"2020-03-10T20:04:32.000Z","updated":"2024-08-04T05:47:40.694Z","title":"In btm_process_inq_results of btm_inq.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2020-0056","published":"2020-03-10T20:04:26.000Z","updated":"2024-08-04T05:47:40.351Z","title":"In btu_hcif_connection_comp_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2020-0055","published":"2020-03-10T20:04:18.000Z","updated":"2024-08-04T05:47:40.782Z","title":"In l2c_link_process_num_completed_pkts of l2c_link.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00166,"kevAdded":null},{"id":"CVE-2020-0054","published":"2020-03-10T20:04:11.000Z","updated":"2024-08-04T05:47:40.577Z","title":"In WifiNetworkSuggestionsManager of WifiNetworkSuggestionsManager.java, there is a possible permission revocation due to a missing permission check. This could…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2020-0053","published":"2020-03-10T20:04:03.000Z","updated":"2024-08-04T05:47:40.502Z","title":"In convertHidlNanDataPathInitiatorRequestToLegacy, and convertHidlNanDataPathIndicationResponseToLegacy of hidl_struct_util.cpp, there is a possible out of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2020-0052","published":"2020-03-10T20:03:57.000Z","updated":"2024-08-04T05:47:40.661Z","title":"In smsSelected of AnswerFragment.java, there is a way to send an SMS from the lock screen due to a permissions bypass. This could lead to local escalation of…","severity":"MEDIUM","score":4.3,"vendor":null,"product":"Android","kev":false,"epss":0.00158,"kevAdded":null},{"id":"CVE-2020-0085","published":"2020-03-10T20:03:53.000Z","updated":"2024-08-04T05:47:40.833Z","title":"In setBluetoothTethering of PanService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00145,"kevAdded":null},{"id":"CVE-2020-0051","published":"2020-03-10T20:03:48.000Z","updated":"2024-08-04T05:47:40.538Z","title":"In onCreate of SettingsHomepageActivity, there is a possible tapjacking attack. This could lead to local escalation of privilege in Settings with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00167,"kevAdded":null},{"id":"CVE-2020-0050","published":"2020-03-10T20:03:44.000Z","updated":"2024-08-04T05:47:40.681Z","title":"In nfa_hciu_send_msg of nfa_hci_utils.cc, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.0016,"kevAdded":null},{"id":"CVE-2020-0049","published":"2020-03-10T20:03:38.000Z","updated":"2024-08-04T05:47:40.782Z","title":"In onReadBuffer() of StreamingSource.cpp, there is a possible information disclosure due to uninitialized data. This could lead to remote information…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2020-0048","published":"2020-03-10T20:03:33.000Z","updated":"2024-08-04T05:47:40.893Z","title":"In onTransact of IAudioFlinger.cpp, there is a possible stack information leak due to uninitialized data. This could lead to local information disclosure with…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2020-0047","published":"2020-03-10T20:03:27.000Z","updated":"2024-08-04T05:47:40.830Z","title":"In setMasterMute of AudioService.java, there is a missing permission check. This could lead to local silencing of audio with no additional execution privileges…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.0013,"kevAdded":null},{"id":"CVE-2020-0046","published":"2020-03-10T20:03:22.000Z","updated":"2024-08-04T05:47:40.520Z","title":"In DrmPlugin::releaseSecureStops of DrmPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00161,"kevAdded":null},{"id":"CVE-2020-0087","published":"2020-03-10T20:03:17.000Z","updated":"2024-08-04T05:47:40.743Z","title":"In getProcessPss of ActivityManagerService.java, there is a possible side channel information disclosure. This could lead to local information disclosure with…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00145,"kevAdded":null},{"id":"CVE-2020-0084","published":"2020-03-10T20:03:14.000Z","updated":"2024-08-04T05:47:40.839Z","title":"In several functions of NotificationManagerService.java, there are missing permission checks. This could lead to local escalation of privilege by creating fake…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00145,"kevAdded":null},{"id":"CVE-2020-0062","published":"2020-03-10T20:03:03.000Z","updated":"2024-08-04T05:47:40.717Z","title":"In Euicc, there is a possible information disclosure due to an included test Certificate. This could lead to remote information disclosure with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00609,"kevAdded":null},{"id":"CVE-2020-0066","published":"2020-03-10T20:02:44.000Z","updated":"2024-08-04T05:47:40.809Z","title":"In the netlink driver, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.4,"vendor":null,"product":"Android","kev":false,"epss":0.00145,"kevAdded":null},{"id":"CVE-2020-0063","published":"2020-03-10T20:02:08.000Z","updated":"2024-08-04T05:47:40.627Z","title":"In SurfaceFlinger, it is possible to override UI confirmation screen protected by the TEE. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00168,"kevAdded":null},{"id":"CVE-2020-0045","published":"2020-03-10T20:01:42.000Z","updated":"2024-08-04T05:47:40.507Z","title":"In StatsService::command of StatsService.cpp, there is possible memory corruption due to a race condition. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.4,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2020-0061","published":"2020-03-10T20:01:13.000Z","updated":"2024-08-04T05:47:40.466Z","title":"In Pixel Recorder, there is a possible permissions bypass allowing arbitrary apps to record audio. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00164,"kevAdded":null},{"id":"CVE-2020-0083","published":"2020-03-10T20:01:06.000Z","updated":"2024-08-04T05:47:40.688Z","title":"In setRequirePmfInternal of sta_network.cpp, there is a possible default value being improperly applied due to a logic error. This could lead to remote denial…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00888,"kevAdded":null},{"id":"CVE-2020-0060","published":"2020-03-10T20:00:59.000Z","updated":"2024-08-04T05:47:40.537Z","title":"In query of SmsProvider.java and MmsSmsProvider.java, there is a possible permission bypass due to SQL injection. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00167,"kevAdded":null},{"id":"CVE-2020-0059","published":"2020-03-10T20:00:50.000Z","updated":"2024-08-04T05:47:40.867Z","title":"In btm_ble_batchscan_filter_track_adv_vse_cback of btm_ble_batchscan.cc, there is a possible out of bounds read due to a missing bounds check. This could lead…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2020-0058","published":"2020-03-10T20:00:37.000Z","updated":"2024-08-04T05:47:40.698Z","title":"In l2c_rcv_acl_data of l2c_main.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.0016,"kevAdded":null},{"id":"CVE-2020-0069","published":"2020-03-10T19:56:37.000Z","updated":"2025-10-21T23:35:49.217Z","title":"In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":true,"epss":0.01382,"kevAdded":"2021-11-03"},{"id":"CVE-2020-0044","published":"2020-03-10T19:56:33.000Z","updated":"2024-08-04T05:47:40.810Z","title":"In set_nonce of fpc_ta_qc_auth.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2020-0043","published":"2020-03-10T19:56:30.000Z","updated":"2024-08-04T05:47:40.639Z","title":"In authorize_enrol of fpc_ta_hw_auth.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00158,"kevAdded":null},{"id":"CVE-2020-0042","published":"2020-03-10T19:56:27.000Z","updated":"2024-08-04T05:47:40.520Z","title":"In fpc_ta_hw_auth_unwrap_key of fpc_ta_hw_auth_qsee.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00158,"kevAdded":null},{"id":"CVE-2020-0041","published":"2020-03-10T19:56:22.000Z","updated":"2025-10-21T23:35:49.368Z","title":"In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":true,"epss":0.03171,"kevAdded":"2021-11-03"},{"id":"CVE-2020-0039","published":"2020-03-10T19:56:19.000Z","updated":"2024-08-04T05:47:40.481Z","title":"In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.01145,"kevAdded":null},{"id":"CVE-2020-0038","published":"2020-03-10T19:56:16.000Z","updated":"2024-08-04T05:47:40.698Z","title":"In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.01145,"kevAdded":null},{"id":"CVE-2020-0037","published":"2020-03-10T19:56:12.000Z","updated":"2024-08-04T05:47:40.845Z","title":"In rw_i93_sm_set_read_only of rw_i93.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.01161,"kevAdded":null},{"id":"CVE-2020-0036","published":"2020-03-10T19:56:09.000Z","updated":"2024-08-04T05:47:40.627Z","title":"In hasPermissions of PermissionMonitor.java, there is a possible access to restricted permissions due to a permissions bypass. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00191,"kevAdded":null},{"id":"CVE-2020-0035","published":"2020-03-10T19:56:06.000Z","updated":"2024-08-04T05:47:40.541Z","title":"In query of TelephonyProvider.java, there is a possible access to SIM card info due to a missing permission check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00162,"kevAdded":null},{"id":"CVE-2020-0034","published":"2020-03-10T19:56:04.000Z","updated":"2024-08-04T05:47:40.786Z","title":"In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.01945,"kevAdded":null},{"id":"CVE-2020-0033","published":"2020-03-10T19:55:57.000Z","updated":"2024-08-04T05:47:40.386Z","title":"In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to stale pointer. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00199,"kevAdded":null},{"id":"CVE-2020-0032","published":"2020-03-10T19:55:54.000Z","updated":"2024-08-04T05:47:40.588Z","title":"In ih264d_release_display_bufs of ih264d_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.01599,"kevAdded":null},{"id":"CVE-2020-0031","published":"2020-03-10T19:55:51.000Z","updated":"2024-08-04T05:47:40.437Z","title":"In triggerAugmentedAutofillLocked and related functions of Session.java, it is possible for Augmented Autofill to display sensitive information to the user…","severity":"MEDIUM","score":5,"vendor":null,"product":"Android","kev":false,"epss":0.00157,"kevAdded":null},{"id":"CVE-2020-0029","published":"2020-03-10T19:55:46.000Z","updated":"2024-08-04T05:47:40.773Z","title":"In the WifiConfigManager, there is a possible storage of location history which can only be deleted by triggering a factory reset. This could lead to local…","severity":"LOW","score":2.3,"vendor":null,"product":"Android","kev":false,"epss":0.00147,"kevAdded":null},{"id":"CVE-2020-0012","published":"2020-03-10T19:55:33.000Z","updated":"2024-08-04T05:47:39.583Z","title":"In fpc_ta_pn_get_unencrypted_image of fpc_ta_pn.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00172,"kevAdded":null},{"id":"CVE-2020-0011","published":"2020-03-10T19:55:25.000Z","updated":"2024-08-04T05:47:40.781Z","title":"In get_auth_result of fpc_ta_hw_auth.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2020-0010","published":"2020-03-10T19:53:17.000Z","updated":"2024-08-04T05:47:40.320Z","title":"In fpc_ta_get_build_info of fpc_ta_kpi.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00167,"kevAdded":null},{"id":"CVE-2020-0030","published":"2020-02-13T14:22:43.000Z","updated":"2024-08-04T05:47:40.791Z","title":"In binder_thread_release of binder.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00155,"kevAdded":null},{"id":"CVE-2020-0028","published":"2020-02-13T14:22:35.000Z","updated":"2024-08-04T05:47:40.574Z","title":"In notifyNetworkTested and related functions of NetworkMonitor.java, there is a possible bypass of private DNS settings. This could lead to remote information…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.02683,"kevAdded":null},{"id":"CVE-2020-0027","published":"2020-02-13T14:22:27.000Z","updated":"2024-08-04T05:47:40.435Z","title":"In HidRawSensor::batch of HidRawSensor.cpp, there is a possible out of bounds write due to an unexpected switch fallthrough. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00181,"kevAdded":null},{"id":"CVE-2020-0026","published":"2020-02-13T14:22:15.000Z","updated":"2024-08-04T05:47:40.852Z","title":"In Parcel::continueWrite of Parcel.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00171,"kevAdded":null},{"id":"CVE-2020-0005","published":"2020-02-13T14:22:01.000Z","updated":"2024-08-04T05:47:40.799Z","title":"In btm_read_remote_ext_features_complete of btm_acl.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2020-0023","published":"2020-02-13T14:21:52.000Z","updated":"2024-08-04T05:47:40.375Z","title":"In setPhonebookAccessPermission of AdapterService.java, there is a possible disclosure of user contacts over bluetooth due to a missing permission check. This…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00332,"kevAdded":null},{"id":"CVE-2020-0022","published":"2020-02-13T14:21:41.000Z","updated":"2024-08-04T05:47:40.847Z","title":"In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.06052,"kevAdded":null},{"id":"CVE-2020-0021","published":"2020-02-13T14:21:25.000Z","updated":"2024-08-04T05:47:39.569Z","title":"In removeUnusedPackagesLPw of PackageManagerService.java, there is a possible permanent denial-of-service due to a missing package dependency test. This could…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00847,"kevAdded":null},{"id":"CVE-2020-0020","published":"2020-02-13T14:21:09.000Z","updated":"2024-08-04T05:47:40.607Z","title":"In getAttributeRange of ExifInterface.java, there is a possible failure to redact location information from media files due to an incorrect bounds check. This…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00148,"kevAdded":null},{"id":"CVE-2020-0018","published":"2020-02-13T14:20:59.000Z","updated":"2024-08-04T05:47:40.759Z","title":"In MotionEntry::appendDescription of InputDispatcher.cpp, there is a possible log information disclosure. This could lead to local disclosure of user input…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.0016,"kevAdded":null},{"id":"CVE-2020-0017","published":"2020-02-13T14:20:47.000Z","updated":"2024-08-04T05:47:39.561Z","title":"In multiple places, it was possible for the primary user’s dictionary to be visible to and modifiable by secondary users. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00176,"kevAdded":null},{"id":"CVE-2019-2200","published":"2020-02-13T14:20:36.000Z","updated":"2024-08-04T18:42:50.837Z","title":"In updatePermissions of PermissionManagerService.java, it may be possible for a malicious app to obtain a custom permission from another app due to a…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00188,"kevAdded":null},{"id":"CVE-2020-0015","published":"2020-02-13T14:20:24.000Z","updated":"2024-08-04T05:47:40.323Z","title":"In onCreate of CertInstaller.java, there is a possible way to overlay the Certificate Installation dialog by a malicious application. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00167,"kevAdded":null},{"id":"CVE-2020-0014","published":"2020-02-13T14:20:09.000Z","updated":"2024-08-04T05:47:40.797Z","title":"It is possible for a malicious application to construct a TYPE_TOAST window manually and make that window clickable. This could lead to a local escalation of…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00926,"kevAdded":null},{"id":"CVE-2020-0008","published":"2020-01-08T18:34:50.000Z","updated":"2024-08-04T05:47:40.264Z","title":"In LowEnergyClient::MtuChangedCallback of low_energy_client.cc, there is a possible out of bounds read due to a race condition. This could lead to local…","severity":"MEDIUM","score":4.7,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2020-0007","published":"2020-01-08T18:33:59.000Z","updated":"2024-08-04T05:47:40.523Z","title":"In flattenString8 of Sensor.cpp, there is a possible information disclosure of heap memory due to uninitialized data. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00168,"kevAdded":null},{"id":"CVE-2020-0006","published":"2020-01-08T18:32:49.000Z","updated":"2024-08-04T05:47:40.354Z","title":"In rw_i93_send_cmd_write_single_block of rw_i93.cc, there is a possible information disclosure of heap memory due to uninitialized data. This could lead to…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00769,"kevAdded":null},{"id":"CVE-2020-0004","published":"2020-01-08T18:31:15.000Z","updated":"2024-08-04T05:47:40.397Z","title":"In generateCrop of WallpaperManagerService.java, there is a possible sysui crash due to image exceeding maximum texture size. This could lead to local denial…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00148,"kevAdded":null},{"id":"CVE-2020-0003","published":"2020-01-08T18:30:02.000Z","updated":"2024-08-04T05:47:40.461Z","title":"In onCreate of InstallStart.java, there is a possible package validation bypass due to a time-of-check time-of-use vulnerability. This could lead to local…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.0014,"kevAdded":null},{"id":"CVE-2020-0002","published":"2020-01-08T18:26:11.000Z","updated":"2024-08-04T05:47:40.577Z","title":"In ih264d_init_decoder of ih264d_api.c, there is a possible out of bounds write due to a use after free. This could lead to remote code execution with no…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.01387,"kevAdded":null},{"id":"CVE-2020-0001","published":"2020-01-08T18:25:12.000Z","updated":"2024-08-04T05:47:40.190Z","title":"In getProcessRecordLocked of ActivityManagerService.java isolated apps are not handled correctly. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00415,"kevAdded":null},{"id":"CVE-2020-0009","published":"2020-01-08T15:31:49.000Z","updated":"2024-08-04T05:47:40.683Z","title":"In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This could lead to local escalation of…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00678,"kevAdded":null},{"id":"CVE-2014-9908","published":"2020-01-08T14:46:14.000Z","updated":"2024-08-06T14:02:38.208Z","title":"A Denial of Service vulnerability exists in Google Android 4.4.4, 5.0.2, and 5.1.1, which allows malicious users to block Bluetooh access (Android Bug ID…","severity":"MEDIUM","score":6.5,"vendor":"Google","product":"Android","kev":false,"epss":0.00404,"kevAdded":null},{"id":"CVE-2019-9465","published":"2020-01-07T18:07:47.000Z","updated":"2024-08-04T21:54:43.492Z","title":"In the Titan M handling of cryptographic operations, there is a possible information disclosure due to an unusual root cause. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00266,"kevAdded":null},{"id":"CVE-2019-9468","published":"2020-01-06T17:26:00.000Z","updated":"2024-08-04T21:54:43.517Z","title":"In export_key_der of export_key.cpp, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00164,"kevAdded":null},{"id":"CVE-2019-9469","published":"2020-01-06T17:25:56.000Z","updated":"2024-08-04T21:54:43.521Z","title":"In km_compute_shared_hmac of km4.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2019-9470","published":"2020-01-06T17:25:48.000Z","updated":"2024-08-04T21:54:43.511Z","title":"In dma_sblk_start of abc-pcie.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2019-9471","published":"2020-01-06T17:25:42.000Z","updated":"2024-08-04T21:54:43.514Z","title":"In set_outbound_iatu of abc-pcie.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2019-9472","published":"2020-01-06T17:25:37.000Z","updated":"2024-08-04T21:54:43.523Z","title":"In DCRYPTO_equals of compare.c, there is a possible timing attack due to improperly used crypto. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2019-2231","published":"2019-12-06T22:40:40.000Z","updated":"2024-08-04T18:42:51.112Z","title":"In Blob::Blob of blob.cpp, there is a possible unencrypted master key due to improper input validation. This could lead to local information disclosure with…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2019-2230","published":"2019-12-06T22:40:40.000Z","updated":"2024-08-04T18:42:50.953Z","title":"In nfcManager_routeAid and nfcManager_unrouteAid of NativeNfcManager.cpp, there is possible memory reuse due to a use after free. This could lead to remote…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2019-2229","published":"2019-12-06T22:40:40.000Z","updated":"2024-08-04T18:42:50.847Z","title":"In updateWidget of BaseWidgetProvider.java, there is a possible leak of user data due to a missing permission check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00131,"kevAdded":null},{"id":"CVE-2019-2228","published":"2019-12-06T22:40:40.000Z","updated":"2024-08-04T18:42:51.106Z","title":"In array_find of array.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure in the…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00203,"kevAdded":null},{"id":"CVE-2019-2227","published":"2019-12-06T22:40:40.000Z","updated":"2024-08-04T18:42:51.116Z","title":"In DeepCopy of btif_av.cc, there is a possible out of bounds read due to improper casting. This could lead to remote information disclosure over Bluetooth with…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00308,"kevAdded":null},{"id":"CVE-2019-2226","published":"2019-12-06T22:40:40.000Z","updated":"2024-08-04T18:42:50.931Z","title":"In device_class_to_int of device_class.cc, there is a possible out of bounds read due to improper casting. This could lead to local information disclosure in…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00148,"kevAdded":null},{"id":"CVE-2019-2225","published":"2019-12-06T22:40:40.000Z","updated":"2024-08-04T18:42:51.108Z","title":"When pairing with a Bluetooth device, it may be possible to pair a malicious device without any confirmation from the user, and that device may be able to…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00401,"kevAdded":null},{"id":"CVE-2019-2223","published":"2019-12-06T22:40:40.000Z","updated":"2024-08-04T18:42:51.107Z","title":"In ihevcd_ref_list of ihevcd_ref_list.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00564,"kevAdded":null},{"id":"CVE-2019-2222","published":"2019-12-06T22:40:40.000Z","updated":"2024-08-04T18:42:50.924Z","title":"n ihevcd_parse_slice_data of ihevcd_parse_slice.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00579,"kevAdded":null},{"id":"CVE-2019-2221","published":"2019-12-06T22:40:40.000Z","updated":"2024-08-04T18:42:50.915Z","title":"In hasActivityInVisibleTask of WindowProcessController.java there’s a possible bypass of user interaction requirements due to incorrect handling of top…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0016,"kevAdded":null},{"id":"CVE-2019-2219","published":"2019-12-06T22:40:40.000Z","updated":"2024-08-04T18:42:50.871Z","title":"In several functions of NotificationManagerService.java and related files, there is a possible way to record audio from the background without notification to…","severity":"MEDIUM","score":4.7,"vendor":null,"product":"Android","kev":false,"epss":0.00148,"kevAdded":null},{"id":"CVE-2019-9464","published":"2019-12-06T22:40:39.000Z","updated":"2024-08-04T21:54:43.554Z","title":"In various functions of RecentLocationApps.java, DevicePolicyManagerService.java, and RecognitionService.java, there is an incorrect warning indicating an app…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00359,"kevAdded":null},{"id":"CVE-2019-2232","published":"2019-12-06T22:40:39.000Z","updated":"2024-08-04T18:42:50.849Z","title":"In handleRun of TextLine.java, there is a possible application crash due to improper input validation. This could lead to remote denial of service when…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.01073,"kevAdded":null},{"id":"CVE-2019-2220","published":"2019-12-06T22:40:39.000Z","updated":"2024-08-04T18:42:50.919Z","title":"In checkOperation of AppOpsService.java, there is a possible bypass of user interaction requirements due to mishandling application suspend. This could lead to…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00164,"kevAdded":null},{"id":"CVE-2019-2218","published":"2019-12-06T22:40:39.000Z","updated":"2024-08-04T18:42:50.869Z","title":"In createSessionInternal of PackageInstallerService.java, there is a possible improper permission grant due to a missing permission check. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2019-2217","published":"2019-12-06T22:40:39.000Z","updated":"2024-08-04T18:42:50.828Z","title":"In setCpuVulkanInUse of GpuStats.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00164,"kevAdded":null},{"id":"CVE-2019-9467","published":"2019-11-13T19:48:07.000Z","updated":"2024-08-04T21:54:43.518Z","title":"In the Bootloader, there is a possible kernel command injection due to missing command sanitization. This could lead to a local elevation of privilege with…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00286,"kevAdded":null},{"id":"CVE-2019-2210","published":"2019-11-13T19:47:47.000Z","updated":"2024-08-04T18:42:51.079Z","title":"In load_logging_config of qmi_vs_service.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2019-2214","published":"2019-11-13T17:44:37.000Z","updated":"2024-08-04T18:42:51.098Z","title":"In binder_transaction of binder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00333,"kevAdded":null},{"id":"CVE-2019-2213","published":"2019-11-13T17:44:20.000Z","updated":"2024-08-04T18:42:50.962Z","title":"In binder_free_transaction of binder.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.4,"vendor":null,"product":"Android","kev":false,"epss":0.00146,"kevAdded":null},{"id":"CVE-2019-2036","published":"2019-11-13T17:44:05.000Z","updated":"2024-08-04T18:35:52.521Z","title":"In okToConnect of HidHostService.java, there is a possible permission bypass due to an incorrect state check. This could lead to remote escalation of privilege…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.02038,"kevAdded":null},{"id":"CVE-2019-2198","published":"2019-11-13T17:43:52.000Z","updated":"2024-08-04T18:42:50.751Z","title":"In Download Provider, there is a possible SQL injection vulnerability. This could lead to local information disclosure with no additional execution privileges…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00403,"kevAdded":null},{"id":"CVE-2019-2196","published":"2019-11-13T17:43:34.000Z","updated":"2024-08-04T18:42:51.071Z","title":"In Download Provider, there is possible SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00403,"kevAdded":null},{"id":"CVE-2019-2209","published":"2019-11-13T17:43:05.000Z","updated":"2024-08-04T18:42:50.913Z","title":"In BTA_DmPinReply of bta_dm_api.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00148,"kevAdded":null},{"id":"CVE-2019-2208","published":"2019-11-13T17:42:39.000Z","updated":"2024-08-04T18:42:50.881Z","title":"In PromiseBuiltinsAssembler::NewPromiseCapability of builtins-promise.cc, there is a possible out of bounds read in v8 JIT code due to a bug in code…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.01004,"kevAdded":null},{"id":"CVE-2019-2212","published":"2019-11-13T17:42:20.000Z","updated":"2024-08-04T18:42:50.944Z","title":"In poisson_distribution of random, there is an out of bounds read. This could lead to local information disclosure with no additional execution privileges…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00169,"kevAdded":null},{"id":"CVE-2019-2207","published":"2019-11-13T17:42:02.000Z","updated":"2024-08-04T18:42:50.729Z","title":"In nfa_hci_handle_admin_gate_rsp of nfa_hci_act.cc, there is a possible out of bound write due to missing bounds checks. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00181,"kevAdded":null},{"id":"CVE-2019-2233","published":"2019-11-13T17:39:57.000Z","updated":"2024-08-04T18:42:51.110Z","title":"In getUserCount and getCount of UserSwitcherController.java, there is possible new user creation due to a logic error. This could lead to local escalation of…","severity":"MEDIUM","score":6.8,"vendor":null,"product":"Android","kev":false,"epss":0.00181,"kevAdded":null},{"id":"CVE-2019-2206","published":"2019-11-13T17:37:58.000Z","updated":"2024-08-04T18:42:50.932Z","title":"In rw_i93_sm_set_read_only of rw_i93.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.01178,"kevAdded":null},{"id":"CVE-2019-2205","published":"2019-11-13T17:37:38.000Z","updated":"2024-08-04T18:42:50.859Z","title":"In ProxyResolverV8::SetPacScript of proxy_resolver_v8.cc, there is a possible memory corruption due to a use after free. This could lead to remote code…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.02864,"kevAdded":null},{"id":"CVE-2019-2204","published":"2019-11-13T17:37:02.000Z","updated":"2024-08-04T18:42:51.093Z","title":"In FindSharedFunctionInfo of objects.cc, there is a possible out of bounds read due to a mistake in AST traversal. This could lead to remote code execution in…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.01338,"kevAdded":null},{"id":"CVE-2019-2203","published":"2019-11-13T17:36:33.000Z","updated":"2024-08-04T18:42:50.747Z","title":"In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2019-2202","published":"2019-11-13T17:36:10.000Z","updated":"2024-08-04T18:42:50.864Z","title":"In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2019-2201","published":"2019-11-13T17:35:51.000Z","updated":"2024-08-04T18:42:50.884Z","title":"In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds write due to a missing bounds check. This could lead to remote…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.02461,"kevAdded":null},{"id":"CVE-2019-2197","published":"2019-11-13T17:34:51.000Z","updated":"2024-08-04T18:42:51.103Z","title":"In processPhonebookAccess of CachedBluetoothDevice.java, there is a possible permission bypass due to an insecure default value. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00158,"kevAdded":null},{"id":"CVE-2019-2211","published":"2019-11-13T17:34:25.000Z","updated":"2024-08-04T18:42:50.867Z","title":"In createProjectionMapForQuery of TvProvider.java, there is possible SQL injection. This could lead to local information disclosure with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00669,"kevAdded":null},{"id":"CVE-2019-2199","published":"2019-11-13T17:32:49.000Z","updated":"2024-08-04T18:42:50.866Z","title":"In createSessionInternal of PackageInstallerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege with System…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00184,"kevAdded":null},{"id":"CVE-2019-2195","published":"2019-11-13T17:32:28.000Z","updated":"2024-08-04T18:42:51.115Z","title":"In tokenize of sqlite3_android.cpp, there is a possible attacker controlled INSERT statement due to improper input validation. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00195,"kevAdded":null},{"id":"CVE-2019-2193","published":"2019-11-13T17:31:28.000Z","updated":"2024-08-04T18:42:51.103Z","title":"In WelcomeActivity.java and related files, there is a possible permissions bypass due to a partially provisioned Device Policy Client. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0017,"kevAdded":null},{"id":"CVE-2019-2192","published":"2019-11-13T17:30:42.000Z","updated":"2024-08-04T18:42:51.111Z","title":"In call of SliceProvider.java, there is a possible permissions bypass due to improper input validation. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00185,"kevAdded":null},{"id":"CVE-2019-2183","published":"2019-10-11T18:23:57.000Z","updated":"2024-08-04T18:42:50.842Z","title":"In generateServicesMap of RegisteredServicesCache.java, there is a possible account protection bypass due to a caching optimization. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00158,"kevAdded":null},{"id":"CVE-2019-2215","published":"2019-10-11T18:16:48.000Z","updated":"2025-10-21T23:45:29.242Z","title":"A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":true,"epss":0.72105,"kevAdded":"2021-11-03"},{"id":"CVE-2019-2187","published":"2019-10-11T18:16:26.000Z","updated":"2024-08-04T18:42:50.878Z","title":"In nfc_ncif_decode_rf_params of nfc_ncif.cc, there is a possible out of bounds read due to an integer underflow. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0016,"kevAdded":null},{"id":"CVE-2019-2114","published":"2019-10-11T18:16:04.000Z","updated":"2024-08-04T18:42:50.521Z","title":"In the default privileges of NFC, there is a possible local bypass of user interaction requirements on package installation due to a default permission. This…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0023,"kevAdded":null},{"id":"CVE-2019-2110","published":"2019-10-11T18:15:40.000Z","updated":"2024-08-04T18:42:50.002Z","title":"In ScreenRotationAnimation of ScreenRotationAnimation.java, there is a possible capture of a secure screen due to a missing permission check. This could lead…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00147,"kevAdded":null},{"id":"CVE-2019-2186","published":"2019-10-11T18:15:22.000Z","updated":"2024-08-04T18:42:50.927Z","title":"In GetMBheader of combined_decode.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.01345,"kevAdded":null},{"id":"CVE-2019-2185","published":"2019-10-11T18:15:02.000Z","updated":"2024-08-04T18:42:50.865Z","title":"In VlcDequantH263IntraBlock_SH of vlc_dequant.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.01345,"kevAdded":null},{"id":"CVE-2019-2184","published":"2019-10-11T18:14:43.000Z","updated":"2024-08-04T18:42:50.896Z","title":"In PV_DecodePredictedIntraDC of dec_pred_intra_dc.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.01345,"kevAdded":null},{"id":"CVE-2019-2173","published":"2019-10-11T18:14:24.000Z","updated":"2024-08-04T18:42:50.262Z","title":"In startActivityMayWait of ActivityStarter.java, there is a possible incorrect Activity launch due to an incorrect permission check. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00161,"kevAdded":null},{"id":"CVE-2019-2191","published":"2019-09-27T18:21:43.000Z","updated":"2024-08-04T18:42:51.060Z","title":"In LG's LAF component, there is a possible leak of information in a protected disk partition due to a missing bounds check. This could lead to local…","severity":"MEDIUM","score":4.3,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2019-2190","published":"2019-09-27T18:21:43.000Z","updated":"2024-08-04T18:42:50.774Z","title":"In LG's LAF component, there is a possible leak of information in a protected disk partition due to a missing bounds check. This could lead to local…","severity":"MEDIUM","score":4.3,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2019-2189","published":"2019-09-27T18:21:43.000Z","updated":"2024-08-04T18:42:51.106Z","title":"In the Easel driver, there is possible memory corruption due to race conditions. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.4,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2019-2188","published":"2019-09-27T18:21:43.000Z","updated":"2024-08-04T18:42:50.834Z","title":"In the Easel driver, there is possible memory corruption due to race conditions. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.4,"vendor":null,"product":"Android","kev":false,"epss":0.00117,"kevAdded":null},{"id":"CVE-2019-9463","published":"2019-09-27T18:05:19.000Z","updated":"2024-08-04T21:46:30.560Z","title":"In Platform, there is a possible bypass of user interaction requirements due to background app interception. This could lead to local escalation of privilege…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2019-9462","published":"2019-09-27T18:05:19.000Z","updated":"2024-08-04T21:46:30.621Z","title":"In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service with no additional execution…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00797,"kevAdded":null},{"id":"CVE-2019-9459","published":"2019-09-27T18:05:19.000Z","updated":"2024-08-04T21:46:30.330Z","title":"In libttspico, there is a possible OOB write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.01115,"kevAdded":null},{"id":"CVE-2019-9440","published":"2019-09-27T18:05:19.000Z","updated":"2024-08-04T21:46:30.726Z","title":"In AOSP Email, there is a possible information disclosure due to a confused deputy. This could lead to local disclosure of the Email app's protected files with…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2019-9438","published":"2019-09-27T18:05:19.000Z","updated":"2024-08-04T21:46:30.484Z","title":"In the Package Manager service, there is a possible information disclosure due to a confused deputy. This could lead to local disclosure of information about…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2018-9581","published":"2019-09-27T18:05:19.000Z","updated":"2024-08-05T07:24:55.927Z","title":"In WiFi, the RSSI value and SSID information is broadcast as part of android.net.wifi.RSSI_CHANGE and android.net.wifi.STATE_CHANGE intents. This could lead to…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2018-9425","published":"2019-09-27T18:05:19.000Z","updated":"2024-08-05T07:17:51.835Z","title":"In Platform, there is a possible bypass of user interaction requirements due to missing permission checks. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00145,"kevAdded":null},{"id":"CVE-2019-9435","published":"2019-09-27T18:05:18.000Z","updated":"2024-08-04T21:46:30.561Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2019-9434","published":"2019-09-27T18:05:18.000Z","updated":"2024-08-04T21:46:30.636Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with heap information…","severity":"MEDIUM","score":4.9,"vendor":null,"product":"Android","kev":false,"epss":0.00689,"kevAdded":null},{"id":"CVE-2019-9433","published":"2019-09-27T18:05:18.000Z","updated":"2024-08-04T21:46:30.345Z","title":"In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.0312,"kevAdded":null},{"id":"CVE-2019-9432","published":"2019-09-27T18:05:18.000Z","updated":"2024-08-04T21:46:30.303Z","title":"In Bluetooth, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure in the Bluetooth server…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2019-9431","published":"2019-09-27T18:05:18.000Z","updated":"2024-08-04T21:46:30.497Z","title":"In Bluetooth, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with heap information written to…","severity":"MEDIUM","score":4.9,"vendor":null,"product":"Android","kev":false,"epss":0.00689,"kevAdded":null},{"id":"CVE-2019-9430","published":"2019-09-27T18:05:18.000Z","updated":"2024-08-04T21:46:30.534Z","title":"In Bluetooth, there is a possible null pointer dereference due to a missing null check. This could lead to remote denial of service with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00987,"kevAdded":null},{"id":"CVE-2019-9429","published":"2019-09-27T18:05:18.000Z","updated":"2024-08-04T21:46:30.524Z","title":"In profman, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no additional execution…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00166,"kevAdded":null},{"id":"CVE-2019-9428","published":"2019-09-27T18:05:18.000Z","updated":"2024-08-04T21:46:30.563Z","title":"In the Framework, it is possible to set up BROWSEABLE intents to take over certain URLs. This could lead to remote information disclosure of sensitive URLs…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00856,"kevAdded":null},{"id":"CVE-2019-9427","published":"2019-09-27T18:05:18.000Z","updated":"2024-08-04T21:46:30.077Z","title":"In Bluetooth, there is a possible information disclosure due to a use after free. This could lead to local information disclosure with no additional execution…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2019-9425","published":"2019-09-27T18:05:18.000Z","updated":"2024-08-04T21:46:30.564Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00797,"kevAdded":null},{"id":"CVE-2019-9424","published":"2019-09-27T18:05:18.000Z","updated":"2024-08-04T21:46:30.562Z","title":"In the Screen Lock, there is a possible information disclosure due to an unusual root cause. In certain circumstances, the setting to hide the unlock pattern…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00405,"kevAdded":null},{"id":"CVE-2019-9423","published":"2019-09-27T18:05:18.000Z","updated":"2024-08-04T21:46:30.491Z","title":"In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00291,"kevAdded":null},{"id":"CVE-2019-9422","published":"2019-09-27T18:05:18.000Z","updated":"2024-08-04T21:46:30.457Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2019-9421","published":"2019-09-27T18:05:18.000Z","updated":"2024-08-04T21:46:30.456Z","title":"In libandroidfw, there is a possible OOB read due to an integer overflow. This could lead to local information disclosure with no additional execution…","severity":"MEDIUM","score":5,"vendor":null,"product":"Android","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2019-9420","published":"2019-09-27T18:05:18.000Z","updated":"2024-08-04T21:46:30.513Z","title":"In libhevc, there is a possible out of bounds read due to an integer overflow. This could lead to remote denial of service with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00635,"kevAdded":null},{"id":"CVE-2019-9419","published":"2019-09-27T18:05:18.000Z","updated":"2024-08-04T21:46:30.494Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2019-9418","published":"2019-09-27T18:05:18.000Z","updated":"2024-08-04T21:46:30.496Z","title":"In libstagefright, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00685,"kevAdded":null},{"id":"CVE-2019-9417","published":"2019-09-27T18:05:18.000Z","updated":"2024-08-04T21:46:30.455Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2019-9416","published":"2019-09-27T18:05:18.000Z","updated":"2024-08-04T21:46:30.215Z","title":"In libstagefright there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9415","published":"2019-09-27T18:05:18.000Z","updated":"2024-08-04T21:46:30.522Z","title":"In libstagefright there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9414","published":"2019-09-27T18:05:18.000Z","updated":"2024-08-04T21:46:30.460Z","title":"In wpa_supplicant, there is a possible man in the middle vulnerability due to improper input validation of the basicConstraints field of intermediary…","severity":"MEDIUM","score":5.9,"vendor":null,"product":"Android","kev":false,"epss":0.00565,"kevAdded":null},{"id":"CVE-2019-9413","published":"2019-09-27T18:05:18.000Z","updated":"2024-08-04T21:46:30.326Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2019-9412","published":"2019-09-27T18:05:18.000Z","updated":"2024-08-04T21:46:30.454Z","title":"In libSBRdec there is a possible out of bounds read due to incorrect bounds check. This could lead to remote information disclosure with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9411","published":"2019-09-27T18:05:18.000Z","updated":"2024-08-04T21:46:30.558Z","title":"In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9410","published":"2019-09-27T18:05:18.000Z","updated":"2024-08-04T21:46:30.627Z","title":"In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9409","published":"2019-09-27T18:05:18.000Z","updated":"2024-08-04T21:46:30.521Z","title":"In libhevc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9408","published":"2019-09-27T18:05:18.000Z","updated":"2024-08-04T21:46:30.342Z","title":"In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9407","published":"2019-09-27T18:05:18.000Z","updated":"2024-08-04T21:46:30.514Z","title":"In notification management of the service manager, there is a possible permissions bypass. This could lead to local escalation of privilege by preventing user…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00158,"kevAdded":null},{"id":"CVE-2019-9406","published":"2019-09-27T18:05:18.000Z","updated":"2024-08-04T21:46:30.337Z","title":"In libhevc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9405","published":"2019-09-27T18:05:18.000Z","updated":"2024-08-04T21:46:30.283Z","title":"In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-9404","published":"2019-09-27T18:05:18.000Z","updated":"2024-08-04T21:46:29.982Z","title":"In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00797,"kevAdded":null},{"id":"CVE-2019-9403","published":"2019-09-27T18:05:17.000Z","updated":"2024-08-04T21:46:30.537Z","title":"In cn-cbor, there is a possible out of bounds read due to improper casting. This could lead to remote information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9402","published":"2019-09-27T18:05:17.000Z","updated":"2024-08-04T21:46:30.332Z","title":"In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00797,"kevAdded":null},{"id":"CVE-2019-9401","published":"2019-09-27T18:05:17.000Z","updated":"2024-08-04T21:46:30.444Z","title":"In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00797,"kevAdded":null},{"id":"CVE-2019-9400","published":"2019-09-27T18:05:17.000Z","updated":"2024-08-04T21:46:30.528Z","title":"In Bluetooth, there is a possible null pointer dereference due to a missing null check. This could lead to remote denial of service with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00987,"kevAdded":null},{"id":"CVE-2019-9399","published":"2019-09-27T18:05:17.000Z","updated":"2024-08-04T21:46:29.983Z","title":"The Print Service is susceptible to man in the middle attacks due to improperly used crypto. This could lead to remote information disclosure with no…","severity":"MEDIUM","score":5.9,"vendor":null,"product":"Android","kev":false,"epss":0.00442,"kevAdded":null},{"id":"CVE-2019-9398","published":"2019-09-27T18:05:17.000Z","updated":"2024-08-04T21:46:30.560Z","title":"In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00797,"kevAdded":null},{"id":"CVE-2019-9397","published":"2019-09-27T18:05:17.000Z","updated":"2024-08-04T21:46:30.507Z","title":"In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00797,"kevAdded":null},{"id":"CVE-2019-9396","published":"2019-09-27T18:05:17.000Z","updated":"2024-08-04T21:46:30.469Z","title":"In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00797,"kevAdded":null},{"id":"CVE-2019-9395","published":"2019-09-27T18:05:17.000Z","updated":"2024-08-04T21:46:30.431Z","title":"In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00797,"kevAdded":null},{"id":"CVE-2019-9394","published":"2019-09-27T18:05:17.000Z","updated":"2024-08-04T21:46:30.509Z","title":"In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00797,"kevAdded":null},{"id":"CVE-2019-9393","published":"2019-09-27T18:05:17.000Z","updated":"2024-08-04T21:46:30.447Z","title":"In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00797,"kevAdded":null},{"id":"CVE-2019-9391","published":"2019-09-27T18:05:17.000Z","updated":"2024-08-04T21:46:30.508Z","title":"In libxaac, there is a possible out of bounds read due to uninitialized data. This could lead to information disclosure with no additional execution privileges…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-9390","published":"2019-09-27T18:05:17.000Z","updated":"2024-08-04T21:46:30.342Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00797,"kevAdded":null},{"id":"CVE-2019-9389","published":"2019-09-27T18:05:17.000Z","updated":"2024-08-04T21:46:30.344Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00797,"kevAdded":null},{"id":"CVE-2019-9388","published":"2019-09-27T18:05:17.000Z","updated":"2024-08-04T21:46:30.548Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth service…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2019-9387","published":"2019-09-27T18:05:17.000Z","updated":"2024-08-04T21:46:30.474Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2019-9386","published":"2019-09-27T18:05:17.000Z","updated":"2024-08-04T21:46:30.511Z","title":"In NFC server, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the system server…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.0019,"kevAdded":null},{"id":"CVE-2019-9385","published":"2019-09-27T18:05:17.000Z","updated":"2024-08-04T21:46:30.487Z","title":"In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9384","published":"2019-09-27T18:05:17.000Z","updated":"2024-08-04T21:46:30.406Z","title":"In LockPatternUtils, there is a possible escalation of privilege due to an improper permissions check. This could lead to local bypass of the Lockguard with…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00184,"kevAdded":null},{"id":"CVE-2019-9383","published":"2019-09-27T18:05:17.000Z","updated":"2024-08-04T21:46:29.990Z","title":"In NFC server, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5,"vendor":null,"product":"Android","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2019-9382","published":"2019-09-27T18:05:17.000Z","updated":"2024-08-04T21:46:30.520Z","title":"In libeffects, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-9381","published":"2019-09-27T18:05:17.000Z","updated":"2024-08-04T21:46:30.487Z","title":"In netd, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with no additional execution…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2019-9380","published":"2019-09-27T18:05:17.000Z","updated":"2024-08-04T21:46:30.192Z","title":"In the settings UI, there is a possible spoofing vulnerability due to a missing permission check. This could lead to a user mistakenly changing permission…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00474,"kevAdded":null},{"id":"CVE-2019-9379","published":"2019-09-27T18:05:17.000Z","updated":"2024-08-04T21:46:30.635Z","title":"In libstagefright, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00685,"kevAdded":null},{"id":"CVE-2019-9378","published":"2019-09-27T18:05:17.000Z","updated":"2024-08-04T21:46:29.996Z","title":"In the Activity Manager service, there is a possible permission bypass due to incorrect permission check. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00145,"kevAdded":null},{"id":"CVE-2019-9377","published":"2019-09-27T18:05:17.000Z","updated":"2024-08-04T21:46:30.443Z","title":"In FingerprintService, there is a possible bypass for operating system protections that isolate user profiles from each other due to a missing permission…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00131,"kevAdded":null},{"id":"CVE-2019-9376","published":"2019-09-27T18:05:17.000Z","updated":"2024-08-04T21:46:30.336Z","title":"In Account of Account.java, there is a possible boot loop due to improper input validation. This could lead to local denial of service with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2019-9375","published":"2019-09-27T18:05:17.000Z","updated":"2024-08-04T21:46:30.464Z","title":"In hostapd, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges…","severity":"MEDIUM","score":6.4,"vendor":null,"product":"Android","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2019-9373","published":"2019-09-27T18:05:17.000Z","updated":"2024-08-04T21:46:30.538Z","title":"In JobStore, there is a mismatched serialization/deserialization for the \"battery-not-low\" job attribute. This could lead to a local denial of service with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00234,"kevAdded":null},{"id":"CVE-2019-9372","published":"2019-09-27T18:05:17.000Z","updated":"2024-08-04T21:46:29.989Z","title":"In libskia, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed.…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00685,"kevAdded":null},{"id":"CVE-2019-9371","published":"2019-09-27T18:05:17.000Z","updated":"2024-08-04T21:46:30.263Z","title":"In libvpx, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.03138,"kevAdded":null},{"id":"CVE-2019-9370","published":"2019-09-27T18:05:16.000Z","updated":"2024-08-04T21:46:30.519Z","title":"In sonivox, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9369","published":"2019-09-27T18:05:16.000Z","updated":"2024-08-04T21:46:30.511Z","title":"In Bluetooth, there is a use of uninitialized variable. This could lead to local information disclosure with no additional execution privileges needed. User…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2019-9368","published":"2019-09-27T18:05:16.000Z","updated":"2024-08-04T21:46:30.514Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2019-9367","published":"2019-09-27T18:05:16.000Z","updated":"2024-08-04T21:46:30.310Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00844,"kevAdded":null},{"id":"CVE-2019-9366","published":"2019-09-27T18:05:16.000Z","updated":"2024-08-04T21:46:30.446Z","title":"In libSBRdec there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9365","published":"2019-09-27T18:05:16.000Z","updated":"2024-08-04T21:46:30.457Z","title":"In Bluetooth, there is a possible deserialization error due to missing string validation. This could lead to remote code execution with no additional execution…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00966,"kevAdded":null},{"id":"CVE-2019-9364","published":"2019-09-27T18:05:16.000Z","updated":"2024-08-04T21:46:30.399Z","title":"In AudioService, there is a possible trigger of background user audio due to a permissions bypass. This could lead to local information disclosure by playing…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00147,"kevAdded":null},{"id":"CVE-2019-9363","published":"2019-09-27T18:05:16.000Z","updated":"2024-08-04T21:46:30.528Z","title":"In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-9362","published":"2019-09-27T18:05:16.000Z","updated":"2024-08-04T21:46:30.502Z","title":"In libSACdec, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9361","published":"2019-09-27T18:05:16.000Z","updated":"2024-08-04T21:46:29.993Z","title":"In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9360","published":"2019-09-27T18:05:16.000Z","updated":"2024-08-04T21:46:30.521Z","title":"In the TEE, there's a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00151,"kevAdded":null},{"id":"CVE-2019-9359","published":"2019-09-27T18:05:16.000Z","updated":"2024-08-04T21:46:29.989Z","title":"In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9358","published":"2019-09-27T18:05:16.000Z","updated":"2024-08-04T21:46:29.979Z","title":"In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to a to local escalation of privilege with no additional…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00204,"kevAdded":null},{"id":"CVE-2019-9357","published":"2019-09-27T18:05:16.000Z","updated":"2024-08-04T21:46:30.446Z","title":"In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-9356","published":"2019-09-27T18:05:16.000Z","updated":"2024-08-04T21:46:30.507Z","title":"In NFC server, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5,"vendor":null,"product":"Android","kev":false,"epss":0.00164,"kevAdded":null},{"id":"CVE-2019-9355","published":"2019-09-27T18:05:16.000Z","updated":"2024-08-04T21:46:30.428Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2019-9354","published":"2019-09-27T18:05:16.000Z","updated":"2024-08-04T21:46:29.905Z","title":"In NFC server, there's a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00652,"kevAdded":null},{"id":"CVE-2019-9353","published":"2019-09-27T18:05:16.000Z","updated":"2024-08-04T21:46:29.962Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9352","published":"2019-09-27T18:05:16.000Z","updated":"2024-08-04T21:46:30.382Z","title":"In libstagefright, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00635,"kevAdded":null},{"id":"CVE-2019-9351","published":"2019-09-27T18:05:16.000Z","updated":"2024-08-04T21:46:30.451Z","title":"In SyncStatusObserver, there is a possible bypass for operating system protections that isolate user profiles from each other due to a missing permission…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2019-9350","published":"2019-09-27T18:05:16.000Z","updated":"2024-08-04T21:46:30.405Z","title":"In Keymaster, there is a possible EoP due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed.…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2019-9349","published":"2019-09-27T18:05:16.000Z","updated":"2024-08-04T21:46:30.406Z","title":"In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00685,"kevAdded":null},{"id":"CVE-2019-9348","published":"2019-09-27T18:05:16.000Z","updated":"2024-08-04T21:46:30.408Z","title":"In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00685,"kevAdded":null},{"id":"CVE-2019-9347","published":"2019-09-27T18:05:16.000Z","updated":"2024-08-04T21:46:30.038Z","title":"In the m4v_h263 codec, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2019-9346","published":"2019-09-27T18:05:16.000Z","updated":"2024-08-04T21:46:30.402Z","title":"In libstagefright, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00747,"kevAdded":null},{"id":"CVE-2019-9344","published":"2019-09-27T18:05:16.000Z","updated":"2024-08-04T21:46:30.420Z","title":"In NFC server, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5,"vendor":null,"product":"Android","kev":false,"epss":0.00164,"kevAdded":null},{"id":"CVE-2019-9343","published":"2019-09-27T18:05:16.000Z","updated":"2024-08-04T21:46:29.724Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2019-9342","published":"2019-09-27T18:05:16.000Z","updated":"2024-08-04T21:46:29.936Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2019-9341","published":"2019-09-27T18:05:16.000Z","updated":"2024-08-04T21:46:30.285Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2019-9338","published":"2019-09-27T18:05:16.000Z","updated":"2024-08-04T21:46:29.581Z","title":"In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00769,"kevAdded":null},{"id":"CVE-2019-9337","published":"2019-09-27T18:05:15.000Z","updated":"2024-08-04T21:46:30.808Z","title":"In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00769,"kevAdded":null},{"id":"CVE-2019-9336","published":"2019-09-27T18:05:15.000Z","updated":"2024-08-04T21:46:30.271Z","title":"In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00769,"kevAdded":null},{"id":"CVE-2019-9335","published":"2019-09-27T18:05:15.000Z","updated":"2024-08-04T21:46:29.580Z","title":"In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00769,"kevAdded":null},{"id":"CVE-2019-9334","published":"2019-09-27T18:05:15.000Z","updated":"2024-08-04T21:46:30.403Z","title":"In libhevc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9333","published":"2019-09-27T18:05:15.000Z","updated":"2024-08-04T21:46:29.685Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00746,"kevAdded":null},{"id":"CVE-2019-9332","published":"2019-09-27T18:05:15.000Z","updated":"2024-08-04T21:46:29.870Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2019-9331","published":"2019-09-27T18:05:15.000Z","updated":"2024-08-04T21:46:30.476Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2019-9330","published":"2019-09-27T18:05:15.000Z","updated":"2024-08-04T21:46:30.363Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2019-9329","published":"2019-09-27T18:05:15.000Z","updated":"2024-08-04T21:46:29.902Z","title":"In Bluetooth, there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure, with no additional privileges…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00526,"kevAdded":null},{"id":"CVE-2019-9328","published":"2019-09-27T18:05:15.000Z","updated":"2024-08-04T21:46:30.305Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure, with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00526,"kevAdded":null},{"id":"CVE-2019-9327","published":"2019-09-27T18:05:15.000Z","updated":"2024-08-04T21:46:29.548Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2019-9326","published":"2019-09-27T18:05:15.000Z","updated":"2024-08-04T21:46:30.505Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2019-9325","published":"2019-09-27T18:05:15.000Z","updated":"2024-08-04T21:46:29.710Z","title":"In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.02571,"kevAdded":null},{"id":"CVE-2019-9323","published":"2019-09-27T18:05:15.000Z","updated":"2024-08-04T21:46:30.537Z","title":"In the Wallpaper Manager service, there is a possible information disclosure due to a missing permission check. Any application can access wallpaper image with…","severity":"MEDIUM","score":5.3,"vendor":null,"product":"Android","kev":false,"epss":0.00487,"kevAdded":null},{"id":"CVE-2019-9322","published":"2019-09-27T18:05:15.000Z","updated":"2024-08-04T21:46:29.604Z","title":"In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9321","published":"2019-09-27T18:05:15.000Z","updated":"2024-08-04T21:46:29.525Z","title":"In libavc, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9320","published":"2019-09-27T18:05:15.000Z","updated":"2024-08-04T21:46:30.389Z","title":"In libavc, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9319","published":"2019-09-27T18:05:15.000Z","updated":"2024-08-04T21:46:29.638Z","title":"In libavc, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9318","published":"2019-09-27T18:05:15.000Z","updated":"2024-08-04T21:46:29.553Z","title":"In libhevc, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9317","published":"2019-09-27T18:05:15.000Z","updated":"2024-08-04T21:46:30.480Z","title":"In libstagefright, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed.…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9316","published":"2019-09-27T18:05:15.000Z","updated":"2024-08-04T21:46:30.559Z","title":"In libstagefright, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed.…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9315","published":"2019-09-27T18:05:15.000Z","updated":"2024-08-04T21:46:29.706Z","title":"In libhevc, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9314","published":"2019-09-27T18:05:15.000Z","updated":"2024-08-04T21:46:29.982Z","title":"In libavc, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9313","published":"2019-09-27T18:05:15.000Z","updated":"2024-08-04T21:46:30.284Z","title":"In libstagefright, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed.…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9312","published":"2019-09-27T18:05:15.000Z","updated":"2024-08-04T21:46:30.318Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2019-9311","published":"2019-09-27T18:05:15.000Z","updated":"2024-08-04T21:46:29.975Z","title":"In Bluetooth, there is a possible crash due to an integer overflow. This could lead to remote denial of service on incoming calls with no additional execution…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00797,"kevAdded":null},{"id":"CVE-2019-9310","published":"2019-09-27T18:05:15.000Z","updated":"2024-08-04T21:46:29.720Z","title":"In libFDK, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-9309","published":"2019-09-27T18:05:15.000Z","updated":"2024-08-04T21:46:29.605Z","title":"In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to a to local escalation of privilege with no additional…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00176,"kevAdded":null},{"id":"CVE-2019-9308","published":"2019-09-27T18:05:15.000Z","updated":"2024-08-04T21:46:29.681Z","title":"In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-9307","published":"2019-09-27T18:05:14.000Z","updated":"2024-08-04T21:46:30.510Z","title":"In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-9306","published":"2019-09-27T18:05:14.000Z","updated":"2024-08-04T21:46:29.994Z","title":"In libMpegTPDec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-9305","published":"2019-09-27T18:05:14.000Z","updated":"2024-08-04T21:46:29.595Z","title":"In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-9304","published":"2019-09-27T18:05:14.000Z","updated":"2024-08-04T21:46:29.684Z","title":"In libMpegTPDec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-9303","published":"2019-09-27T18:05:14.000Z","updated":"2024-08-04T21:46:30.422Z","title":"In libFDK, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-9302","published":"2019-09-27T18:05:14.000Z","updated":"2024-08-04T21:46:29.661Z","title":"In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-9301","published":"2019-09-27T18:05:14.000Z","updated":"2024-08-04T21:46:29.611Z","title":"In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00844,"kevAdded":null},{"id":"CVE-2019-9300","published":"2019-09-27T18:05:14.000Z","updated":"2024-08-04T21:46:29.974Z","title":"In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-9299","published":"2019-09-27T18:05:14.000Z","updated":"2024-08-04T21:46:29.983Z","title":"In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-9298","published":"2019-09-27T18:05:14.000Z","updated":"2024-08-04T21:46:29.604Z","title":"In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-9297","published":"2019-09-27T18:05:14.000Z","updated":"2024-08-04T21:46:30.474Z","title":"In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-9296","published":"2019-09-27T18:05:14.000Z","updated":"2024-08-04T21:46:30.285Z","title":"In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution…","severity":"MEDIUM","score":5,"vendor":null,"product":"Android","kev":false,"epss":0.00164,"kevAdded":null},{"id":"CVE-2019-9295","published":"2019-09-27T18:05:14.000Z","updated":"2024-08-04T21:46:29.602Z","title":"In com.android.apps.tag, there is a possible bypass of user interaction requirements due to a missing permission check. This could lead to a to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00146,"kevAdded":null},{"id":"CVE-2019-9294","published":"2019-09-27T18:05:14.000Z","updated":"2024-08-04T21:46:30.383Z","title":"In libstagefright, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9293","published":"2019-09-27T18:05:14.000Z","updated":"2024-08-04T21:46:29.804Z","title":"In libstagefright, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9292","published":"2019-09-27T18:05:14.000Z","updated":"2024-08-04T21:46:29.596Z","title":"In the Activity Manager service, there is a possible information disclosure due to a confused deputy. This could lead to local disclosure of current foreground…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2019-9291","published":"2019-09-27T18:05:14.000Z","updated":"2024-08-04T21:46:29.642Z","title":"In Bluetooth, there is a possible remote code execution due to an improper memory allocation. This could lead to remote code execution in Bluetooth with no…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-9290","published":"2019-09-27T18:05:14.000Z","updated":"2024-08-04T21:46:30.351Z","title":"In tzdata there is possible memory corruption due to a mismatch between allocation and deallocation functions. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00166,"kevAdded":null},{"id":"CVE-2019-9289","published":"2019-09-27T18:05:14.000Z","updated":"2024-08-04T21:46:30.227Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2019-9288","published":"2019-09-27T18:05:14.000Z","updated":"2024-08-04T21:46:29.531Z","title":"In libhidcommand_jni, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the USB…","severity":"MEDIUM","score":6.8,"vendor":null,"product":"Android","kev":false,"epss":0.00167,"kevAdded":null},{"id":"CVE-2019-9287","published":"2019-09-27T18:05:14.000Z","updated":"2024-08-04T21:46:29.328Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2019-9286","published":"2019-09-27T18:05:14.000Z","updated":"2024-08-04T21:46:29.555Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2019-9285","published":"2019-09-27T18:05:14.000Z","updated":"2024-08-04T21:46:29.601Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00797,"kevAdded":null},{"id":"CVE-2019-9284","published":"2019-09-27T18:05:14.000Z","updated":"2024-08-04T21:46:29.849Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure, with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00526,"kevAdded":null},{"id":"CVE-2019-9283","published":"2019-09-27T18:05:14.000Z","updated":"2025-11-04T21:08:10.542Z","title":"In AAC Codec, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00938,"kevAdded":null},{"id":"CVE-2019-9282","published":"2019-09-27T18:05:14.000Z","updated":"2024-08-04T21:46:28.349Z","title":"In skia, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9281","published":"2019-09-27T18:05:14.000Z","updated":"2024-08-04T21:46:28.332Z","title":"In GoogleContactsSyncAdapter, there is a possible path traversal due to improper input sanitization. This could lead to a bypass of user interaction…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.0075,"kevAdded":null},{"id":"CVE-2019-9280","published":"2019-09-27T18:05:14.000Z","updated":"2024-08-04T21:46:29.586Z","title":"In keyguard, there is a possible escalation of privilege due to improper permission checks. This could lead to a local bypass of the keyguard under limited…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00147,"kevAdded":null},{"id":"CVE-2019-9279","published":"2019-09-27T18:05:14.000Z","updated":"2024-08-04T21:46:29.979Z","title":"In the wifi hotspot service, there is a possible denial of service due to a null pointer dereference. This could lead to remote denial of service with no…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00987,"kevAdded":null},{"id":"CVE-2019-9278","published":"2019-09-27T18:05:14.000Z","updated":"2024-08-04T21:46:29.867Z","title":"In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.04059,"kevAdded":null},{"id":"CVE-2019-9277","published":"2019-09-27T18:05:14.000Z","updated":"2024-08-04T21:46:30.312Z","title":"In the proc filesystem, there is a possible information disclosure due to log information disclosure. This could lead to local disclosure of app and browser…","severity":"LOW","score":3.3,"vendor":null,"product":"Android","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2019-9272","published":"2019-09-27T18:05:13.000Z","updated":"2024-08-04T21:46:29.822Z","title":"In WiFi, there is a possible leak of WiFi state due to a permissions bypass. This could lead to a local information disclosure which could be used to determine…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2019-9269","published":"2019-09-27T18:05:13.000Z","updated":"2024-08-04T21:46:29.534Z","title":"In System Settings, there is a possible permissions bypass due to a cached Linux user ID. This could lead to a local permissions bypass with no additional…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2019-9268","published":"2019-09-27T18:05:13.000Z","updated":"2024-08-04T21:46:29.992Z","title":"In libstagefright, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2019-9266","published":"2019-09-27T18:05:13.000Z","updated":"2024-08-04T21:46:29.548Z","title":"In sensorservice, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00167,"kevAdded":null},{"id":"CVE-2019-9265","published":"2019-09-27T18:05:13.000Z","updated":"2024-08-04T21:46:28.332Z","title":"In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2019-9264","published":"2019-09-27T18:05:13.000Z","updated":"2024-08-04T21:46:29.457Z","title":"In libxaac there is a possible out of bounds read due to missing bounds check. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-9263","published":"2019-09-27T18:05:13.000Z","updated":"2024-08-04T21:46:28.271Z","title":"In telephony, there is a possible bypass of user interaction requirements due to missing permission checks. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00145,"kevAdded":null},{"id":"CVE-2019-9262","published":"2019-09-27T18:05:13.000Z","updated":"2024-08-04T21:46:28.349Z","title":"In MPEG4Extractor, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution in the media extractor with no…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00835,"kevAdded":null},{"id":"CVE-2019-9261","published":"2019-09-27T18:05:13.000Z","updated":"2024-08-04T21:46:28.183Z","title":"In libxaac there is a possible out of bounds read due to missing bounds check. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-9260","published":"2019-09-27T18:05:13.000Z","updated":"2024-08-04T21:46:28.184Z","title":"In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2019-9259","published":"2019-09-27T18:05:13.000Z","updated":"2024-08-04T21:46:28.244Z","title":"In the Bluetooth stack, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00167,"kevAdded":null},{"id":"CVE-2019-9258","published":"2019-09-27T18:05:13.000Z","updated":"2024-08-04T21:46:28.202Z","title":"In wifilogd, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2019-9257","published":"2019-09-27T18:05:13.000Z","updated":"2024-08-04T21:46:28.228Z","title":"In Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2019-9256","published":"2019-09-27T18:05:13.000Z","updated":"2024-08-04T21:46:28.220Z","title":"In libmediaextractor there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00835,"kevAdded":null},{"id":"CVE-2019-9253","published":"2019-09-27T18:05:13.000Z","updated":"2024-08-04T21:46:28.198Z","title":"In KeyStore, there is a possible storage of symmetric keys in the TEE instead of the strongbox due to a missing strongbox flag. This could lead to local…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00151,"kevAdded":null},{"id":"CVE-2019-9252","published":"2019-09-27T18:05:13.000Z","updated":"2024-08-04T21:38:46.693Z","title":"In libavc there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9251","published":"2019-09-27T18:05:13.000Z","updated":"2024-08-04T21:38:46.623Z","title":"In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution…","severity":"MEDIUM","score":5,"vendor":null,"product":"Android","kev":false,"epss":0.00164,"kevAdded":null},{"id":"CVE-2019-9250","published":"2019-09-27T18:05:13.000Z","updated":"2024-08-04T21:38:46.577Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2019-9249","published":"2019-09-27T18:05:13.000Z","updated":"2024-08-04T21:38:46.593Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2019-9247","published":"2019-09-27T18:05:13.000Z","updated":"2024-08-04T21:38:46.585Z","title":"In AAC Codec, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9246","published":"2019-09-27T18:05:13.000Z","updated":"2024-08-04T21:38:46.586Z","title":"In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution…","severity":"MEDIUM","score":5,"vendor":null,"product":"Android","kev":false,"epss":0.00164,"kevAdded":null},{"id":"CVE-2019-9244","published":"2019-09-27T18:05:13.000Z","updated":"2024-08-04T21:38:46.681Z","title":"In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution…","severity":"MEDIUM","score":5,"vendor":null,"product":"Android","kev":false,"epss":0.00164,"kevAdded":null},{"id":"CVE-2019-9243","published":"2019-09-27T18:05:13.000Z","updated":"2024-08-04T21:38:46.693Z","title":"In wpa_supplicant_8, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2019-9242","published":"2019-09-27T18:05:13.000Z","updated":"2024-08-04T21:38:46.694Z","title":"In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution…","severity":"MEDIUM","score":5,"vendor":null,"product":"Android","kev":false,"epss":0.00164,"kevAdded":null},{"id":"CVE-2019-9241","published":"2019-09-27T18:05:13.000Z","updated":"2024-08-04T21:38:46.654Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2019-9240","published":"2019-09-27T18:05:13.000Z","updated":"2024-08-04T21:38:46.682Z","title":"In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution…","severity":"MEDIUM","score":5,"vendor":null,"product":"Android","kev":false,"epss":0.00164,"kevAdded":null},{"id":"CVE-2019-9239","published":"2019-09-27T18:05:13.000Z","updated":"2024-08-04T21:38:46.647Z","title":"In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution…","severity":"MEDIUM","score":5,"vendor":null,"product":"Android","kev":false,"epss":0.00171,"kevAdded":null},{"id":"CVE-2019-9238","published":"2019-09-27T18:05:13.000Z","updated":"2024-08-04T21:38:46.659Z","title":"In the NFC stack, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00187,"kevAdded":null},{"id":"CVE-2019-9237","published":"2019-09-27T18:05:13.000Z","updated":"2024-08-04T21:38:46.656Z","title":"In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-9236","published":"2019-09-27T18:05:12.000Z","updated":"2024-08-04T21:38:46.655Z","title":"In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution…","severity":"MEDIUM","score":5,"vendor":null,"product":"Android","kev":false,"epss":0.00164,"kevAdded":null},{"id":"CVE-2019-9235","published":"2019-09-27T18:05:12.000Z","updated":"2024-08-04T21:38:46.599Z","title":"In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution…","severity":"MEDIUM","score":5,"vendor":null,"product":"Android","kev":false,"epss":0.00164,"kevAdded":null},{"id":"CVE-2019-9234","published":"2019-09-27T18:05:12.000Z","updated":"2024-08-04T21:38:46.692Z","title":"In wpa_supplicant_8, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00827,"kevAdded":null},{"id":"CVE-2019-9233","published":"2019-09-27T18:05:12.000Z","updated":"2024-08-04T21:38:46.657Z","title":"In wpa_supplicant_8, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00827,"kevAdded":null},{"id":"CVE-2019-9232","published":"2019-09-27T18:05:12.000Z","updated":"2024-08-04T21:38:46.620Z","title":"In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.05085,"kevAdded":null},{"id":"CVE-2019-2172","published":"2019-09-27T18:05:12.000Z","updated":"2024-08-04T18:42:50.434Z","title":"In libxaac there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2171","published":"2019-09-27T18:05:12.000Z","updated":"2024-08-04T18:42:50.203Z","title":"In libxaac there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2170","published":"2019-09-27T18:05:12.000Z","updated":"2024-08-04T18:42:50.135Z","title":"In libxaac there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2169","published":"2019-09-27T18:05:12.000Z","updated":"2024-08-04T18:42:50.240Z","title":"In libxaac there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2168","published":"2019-09-27T18:05:12.000Z","updated":"2024-08-04T18:42:50.868Z","title":"In libxaac there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2167","published":"2019-09-27T18:05:12.000Z","updated":"2024-08-04T18:42:51.084Z","title":"In libxaac there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2166","published":"2019-09-27T18:05:12.000Z","updated":"2024-08-04T18:42:50.741Z","title":"In libxaac there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2165","published":"2019-09-27T18:05:12.000Z","updated":"2024-08-04T18:42:50.835Z","title":"In libxaac there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2164","published":"2019-09-27T18:05:12.000Z","updated":"2024-08-04T18:42:50.137Z","title":"In libxaac there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2163","published":"2019-09-27T18:05:12.000Z","updated":"2024-08-04T18:42:50.867Z","title":"In libxaac there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2162","published":"2019-09-27T18:05:12.000Z","updated":"2024-08-04T18:42:50.502Z","title":"In libxaac there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2019-2161","published":"2019-09-27T18:05:12.000Z","updated":"2024-08-04T18:42:50.307Z","title":"In libxaac there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2160","published":"2019-09-27T18:05:12.000Z","updated":"2024-08-04T18:42:50.825Z","title":"In libxaac there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2159","published":"2019-09-27T18:05:12.000Z","updated":"2024-08-04T18:42:50.626Z","title":"In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-2158","published":"2019-09-27T18:05:12.000Z","updated":"2024-08-04T18:42:50.418Z","title":"In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2157","published":"2019-09-27T18:05:12.000Z","updated":"2024-08-04T18:42:50.952Z","title":"In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2156","published":"2019-09-27T18:05:12.000Z","updated":"2024-08-04T18:42:50.441Z","title":"In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2155","published":"2019-09-27T18:05:12.000Z","updated":"2024-08-04T18:42:50.492Z","title":"In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2154","published":"2019-09-27T18:05:12.000Z","updated":"2024-08-04T18:42:50.792Z","title":"In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2153","published":"2019-09-27T18:05:12.000Z","updated":"2024-08-04T18:42:50.521Z","title":"In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2152","published":"2019-09-27T18:05:12.000Z","updated":"2024-08-04T18:42:50.516Z","title":"In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2151","published":"2019-09-27T18:05:12.000Z","updated":"2024-08-04T18:42:51.081Z","title":"In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2150","published":"2019-09-27T18:05:12.000Z","updated":"2024-08-04T18:42:50.018Z","title":"In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2149","published":"2019-09-27T18:05:11.000Z","updated":"2024-08-04T18:42:50.438Z","title":"In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2148","published":"2019-09-27T18:05:11.000Z","updated":"2024-08-04T18:42:50.837Z","title":"In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00646,"kevAdded":null},{"id":"CVE-2019-2147","published":"2019-09-27T18:05:11.000Z","updated":"2024-08-04T18:42:50.577Z","title":"In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2146","published":"2019-09-27T18:05:11.000Z","updated":"2024-08-04T18:42:50.156Z","title":"In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2145","published":"2019-09-27T18:05:11.000Z","updated":"2024-08-04T18:42:50.624Z","title":"In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2144","published":"2019-09-27T18:05:11.000Z","updated":"2024-08-04T18:42:50.264Z","title":"In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2143","published":"2019-09-27T18:05:11.000Z","updated":"2024-08-04T18:42:50.493Z","title":"In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2142","published":"2019-09-27T18:05:11.000Z","updated":"2024-08-04T18:42:50.232Z","title":"In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2141","published":"2019-09-27T18:05:11.000Z","updated":"2024-08-04T18:42:50.849Z","title":"In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-2140","published":"2019-09-27T18:05:11.000Z","updated":"2024-08-04T18:42:50.180Z","title":"In libxaac, there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2139","published":"2019-09-27T18:05:11.000Z","updated":"2024-08-04T18:42:49.987Z","title":"In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2138","published":"2019-09-27T18:05:11.000Z","updated":"2024-08-04T18:42:50.166Z","title":"In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2087","published":"2019-09-27T18:05:11.000Z","updated":"2024-08-04T18:35:52.555Z","title":"In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-2086","published":"2019-09-27T18:05:11.000Z","updated":"2024-08-04T18:35:52.626Z","title":"In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-2085","published":"2019-09-27T18:05:11.000Z","updated":"2024-08-04T18:35:52.546Z","title":"In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-2084","published":"2019-09-27T18:05:11.000Z","updated":"2024-08-04T18:35:52.475Z","title":"In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-2083","published":"2019-09-27T18:05:11.000Z","updated":"2024-08-04T18:35:52.607Z","title":"In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-2082","published":"2019-09-27T18:05:11.000Z","updated":"2024-08-04T18:35:52.469Z","title":"In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-2081","published":"2019-09-27T18:05:11.000Z","updated":"2024-08-04T18:35:52.454Z","title":"In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-2080","published":"2019-09-27T18:05:11.000Z","updated":"2024-08-04T18:35:52.486Z","title":"In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-2079","published":"2019-09-27T18:05:11.000Z","updated":"2024-08-04T18:35:52.645Z","title":"In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2078","published":"2019-09-27T18:05:11.000Z","updated":"2024-08-04T18:35:52.546Z","title":"In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-2077","published":"2019-09-27T18:05:11.000Z","updated":"2024-08-04T18:35:52.468Z","title":"In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-2076","published":"2019-09-27T18:05:11.000Z","updated":"2024-08-04T18:35:52.447Z","title":"In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-2075","published":"2019-09-27T18:05:11.000Z","updated":"2024-08-04T18:35:52.600Z","title":"In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-2074","published":"2019-09-27T18:05:11.000Z","updated":"2024-08-04T18:35:52.459Z","title":"In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-2073","published":"2019-09-27T18:05:11.000Z","updated":"2024-08-04T18:35:52.536Z","title":"In libxaac there is a possible out of bounds write to missing bounds check. This could lead to remote code execution with no additional execution privileges…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-2072","published":"2019-09-27T18:05:11.000Z","updated":"2024-08-04T18:35:52.606Z","title":"In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-2071","published":"2019-09-27T18:05:10.000Z","updated":"2024-08-04T18:35:52.552Z","title":"In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-2070","published":"2019-09-27T18:05:10.000Z","updated":"2024-08-04T18:35:52.515Z","title":"In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-2069","published":"2019-09-27T18:05:10.000Z","updated":"2024-08-04T18:35:52.548Z","title":"In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-2068","published":"2019-09-27T18:05:10.000Z","updated":"2024-08-04T18:35:52.650Z","title":"In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-2067","published":"2019-09-27T18:05:10.000Z","updated":"2024-08-04T18:35:52.452Z","title":"In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-2066","published":"2019-09-27T18:05:10.000Z","updated":"2024-08-04T18:35:52.467Z","title":"In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-2065","published":"2019-09-27T18:05:10.000Z","updated":"2024-08-04T18:35:52.420Z","title":"In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-2064","published":"2019-09-27T18:05:10.000Z","updated":"2024-08-04T18:35:52.481Z","title":"In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-2063","published":"2019-09-27T18:05:10.000Z","updated":"2024-08-04T18:35:52.515Z","title":"In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution in the media server with no…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-2062","published":"2019-09-27T18:05:10.000Z","updated":"2024-08-04T18:35:52.552Z","title":"In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00852,"kevAdded":null},{"id":"CVE-2019-2061","published":"2019-09-27T18:05:10.000Z","updated":"2024-08-04T18:35:52.475Z","title":"In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-2060","published":"2019-09-27T18:05:10.000Z","updated":"2024-08-04T18:35:52.531Z","title":"In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2019-2059","published":"2019-09-27T18:05:10.000Z","updated":"2024-08-04T18:35:52.477Z","title":"In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-2055","published":"2019-09-27T18:05:10.000Z","updated":"2024-08-04T18:35:52.478Z","title":"In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2019-9455","published":"2019-09-06T21:51:21.000Z","updated":"2024-08-04T21:46:30.501Z","title":"In the Android kernel in the video driver there is a kernel pointer leak due to a WARN_ON statement. This could lead to local information disclosure with…","severity":"LOW","score":2.3,"vendor":null,"product":"Android","kev":false,"epss":0.00176,"kevAdded":null},{"id":"CVE-2019-9453","published":"2019-09-06T21:51:06.000Z","updated":"2024-08-04T21:46:30.610Z","title":"In the Android kernel in F2FS touch driver there is a possible out of bounds read due to improper input validation. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00177,"kevAdded":null},{"id":"CVE-2019-9452","published":"2019-09-06T21:50:55.000Z","updated":"2024-08-04T21:46:30.449Z","title":"In the Android kernel in SEC_TS touch driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00178,"kevAdded":null},{"id":"CVE-2019-9449","published":"2019-09-06T21:50:45.000Z","updated":"2024-08-04T21:46:30.532Z","title":"In the Android kernel in FingerTipS touchscreen driver there is a possible out of bounds read due to a missing bounds check. This could lead to local…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00184,"kevAdded":null},{"id":"CVE-2019-9445","published":"2019-09-06T21:50:34.000Z","updated":"2024-08-04T21:46:30.284Z","title":"In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.0027,"kevAdded":null},{"id":"CVE-2019-9444","published":"2019-09-06T21:50:08.000Z","updated":"2024-08-04T21:46:30.559Z","title":"In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This could lead to local information…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00196,"kevAdded":null},{"id":"CVE-2019-9245","published":"2019-09-06T21:49:54.000Z","updated":"2024-08-04T21:38:46.662Z","title":"In the Android kernel in the f2fs driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":4.4,"vendor":null,"product":"Android","kev":false,"epss":0.00184,"kevAdded":null},{"id":"CVE-2019-9458","published":"2019-09-06T21:49:41.000Z","updated":"2024-08-04T21:46:30.339Z","title":"In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00169,"kevAdded":null},{"id":"CVE-2019-9456","published":"2019-09-06T21:49:15.000Z","updated":"2024-08-04T21:46:30.545Z","title":"In the Android kernel in Pixel C USB monitor driver there is a possible OOB write due to a missing bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00197,"kevAdded":null},{"id":"CVE-2019-9454","published":"2019-09-06T21:48:59.000Z","updated":"2024-08-04T21:46:30.482Z","title":"In the Android kernel in i2c driver there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00179,"kevAdded":null},{"id":"CVE-2019-9451","published":"2019-09-06T21:48:47.000Z","updated":"2024-08-04T21:46:30.312Z","title":"In the Android kernel in the touchscreen driver there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00179,"kevAdded":null},{"id":"CVE-2019-9450","published":"2019-09-06T21:48:29.000Z","updated":"2024-08-04T21:46:30.340Z","title":"In the Android kernel in the FingerTipS touchscreen driver there is a possible memory corruption due to a race condition. This could lead to local escalation…","severity":"MEDIUM","score":6.4,"vendor":null,"product":"Android","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2019-9448","published":"2019-09-06T21:48:13.000Z","updated":"2024-08-04T21:46:30.501Z","title":"In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to a missing bounds check. This could lead to a local…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00186,"kevAdded":null},{"id":"CVE-2019-9447","published":"2019-09-06T21:47:57.000Z","updated":"2024-08-04T21:46:30.549Z","title":"In the Android kernel in the FingerTipS touchscreen driver there is a possible use-after-free due to improper locking. This could lead to a local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00147,"kevAdded":null},{"id":"CVE-2019-9446","published":"2019-09-06T21:47:42.000Z","updated":"2024-08-04T21:46:30.565Z","title":"In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to improper input validation. This could lead to a local…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2019-9443","published":"2019-09-06T21:47:27.000Z","updated":"2024-08-04T21:46:30.476Z","title":"In the Android kernel in the vl53L0 driver there is a possible out of bounds write due to a permissions bypass. This could lead to local escalation of…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00167,"kevAdded":null},{"id":"CVE-2019-9442","published":"2019-09-06T21:47:08.000Z","updated":"2024-08-04T21:46:30.544Z","title":"In the Android kernel in the mnh driver there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00144,"kevAdded":null},{"id":"CVE-2019-9441","published":"2019-09-06T21:46:57.000Z","updated":"2024-08-04T21:46:30.520Z","title":"In the Android kernel in the mnh driver there is a possible out of bounds write due to improper input validation. This could lead to escalation of privilege…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2019-9276","published":"2019-09-06T21:46:45.000Z","updated":"2024-08-04T21:46:29.695Z","title":"In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible out of bounds write due to a use after free. This could lead to a local…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2019-9275","published":"2019-09-06T21:46:27.000Z","updated":"2024-08-04T21:46:29.980Z","title":"In the Android kernel in the mnh driver there is a use after free due to improper locking. This could lead to escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00402,"kevAdded":null},{"id":"CVE-2019-9274","published":"2019-09-06T21:46:16.000Z","updated":"2024-08-04T21:46:29.627Z","title":"In the Android kernel in the mnh driver there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2019-9273","published":"2019-09-06T21:45:53.000Z","updated":"2024-08-04T21:46:29.743Z","title":"In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible use after free due to improper locking. This could lead to local…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2019-9271","published":"2019-09-06T21:45:20.000Z","updated":"2024-08-04T21:46:29.585Z","title":"In the Android kernel in the mnh driver there is a race condition due to insufficient locking. This could lead to a use-after-free which could lead to…","severity":"MEDIUM","score":6.4,"vendor":null,"product":"Android","kev":false,"epss":0.00131,"kevAdded":null},{"id":"CVE-2019-2182","published":"2019-09-06T21:44:08.000Z","updated":"2024-08-04T18:42:50.586Z","title":"In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pages writable. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00217,"kevAdded":null},{"id":"CVE-2019-9270","published":"2019-09-06T21:43:44.000Z","updated":"2024-08-04T21:46:28.199Z","title":"In the Android kernel in unifi and r8180 WiFi drivers there is a possible out of bounds write due to a missing bounds check. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00174,"kevAdded":null},{"id":"CVE-2019-9248","published":"2019-09-06T21:43:22.000Z","updated":"2024-08-04T21:38:46.584Z","title":"In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to a missing bounds check. This could lead to local…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00179,"kevAdded":null},{"id":"CVE-2019-9461","published":"2019-09-06T21:43:01.000Z","updated":"2024-08-04T21:46:30.537Z","title":"In the Android kernel in VPN routing there is a possible information disclosure. This could lead to remote information disclosure by an adjacent network…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.015,"kevAdded":null},{"id":"CVE-2019-9345","published":"2019-09-06T21:42:40.000Z","updated":"2024-08-04T21:46:29.891Z","title":"In the Android kernel in sdcardfs there is a possible violation of the separation of data between profiles due to shared mapping of obb files. This could lead…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00199,"kevAdded":null},{"id":"CVE-2019-9436","published":"2019-09-06T21:42:23.000Z","updated":"2024-08-04T21:46:30.493Z","title":"In the Android kernel in the bootloader there is a possible secure boot bypass. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2019-9426","published":"2019-09-06T21:42:00.000Z","updated":"2024-08-04T21:46:30.502Z","title":"In the Android kernel in Bluetooth there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":6.7,"vendor":null,"product":"Android","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2019-2181","published":"2019-09-05T21:43:40.000Z","updated":"2024-08-04T18:42:50.699Z","title":"In binder_transaction of binder.c in the Android kernel, there is a possible out of bounds write due to an integer overflow. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00409,"kevAdded":null},{"id":"CVE-2019-2108","published":"2019-09-05T21:42:37.000Z","updated":"2024-08-04T18:42:49.993Z","title":"In ihevcd_ref_list of ihevcd_ref_list.c in Android 10, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.01038,"kevAdded":null},{"id":"CVE-2019-9254","published":"2019-09-05T21:42:03.000Z","updated":"2024-08-04T21:46:28.185Z","title":"In readArgumentList of zygote.java in Android 10, there is a possible command injection due to improper input validation. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00423,"kevAdded":null},{"id":"CVE-2019-2124","published":"2019-09-05T21:41:22.000Z","updated":"2024-08-04T18:42:50.281Z","title":"In ComposeActivityEmailExternal of ComposeActivityEmailExternal.java in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible way to silently attach files…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2019-2180","published":"2019-09-05T21:40:22.000Z","updated":"2024-08-04T18:42:51.097Z","title":"In ippSetValueTag of ipp.c in Android 8.0, 8.1 and 9, there is a possible out of bounds read due to improper input validation. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00179,"kevAdded":null},{"id":"CVE-2019-2179","published":"2019-09-05T21:39:37.000Z","updated":"2024-08-04T18:42:50.914Z","title":"In NDEF_MsgValidate of ndef_utils in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible out of bounds read due to an integer overflow. This could lead…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00449,"kevAdded":null},{"id":"CVE-2019-2178","published":"2019-09-05T21:38:51.000Z","updated":"2024-08-04T18:42:51.164Z","title":"In rw_t4t_sm_read_ndef of rw_t4t in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible out of bounds write due to a missing bounds check. This could…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2019-2115","published":"2019-09-05T21:38:11.000Z","updated":"2024-08-04T18:42:50.413Z","title":"In GateKeeper::MintAuthToken of gatekeeper.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is possible memory corruption due to a double free. This could…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00269,"kevAdded":null},{"id":"CVE-2019-2177","published":"2019-09-05T21:37:13.000Z","updated":"2024-08-04T18:42:51.080Z","title":"In isPreferred of HidProfile.java in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible device type confusion due to a permissions bypass. This could…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00891,"kevAdded":null},{"id":"CVE-2019-2176","published":"2019-09-05T21:36:08.000Z","updated":"2024-08-04T18:42:51.112Z","title":"In ihevcd_parse_buffering_period_sei of ihevcd_parse_headers.c in Android 8.0, 8.1 and 9, there is a possible out of bounds write due to a missing bounds…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.01038,"kevAdded":null},{"id":"CVE-2019-2103","published":"2019-09-05T21:35:11.000Z","updated":"2024-08-04T18:42:50.148Z","title":"In Google Assistant in Android 9, there is a possible permissions bypass that allows the Assistant to take a screenshot of apps with FLAG_SECURE. This could…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00161,"kevAdded":null},{"id":"CVE-2019-2175","published":"2019-09-05T21:34:22.000Z","updated":"2024-08-04T18:42:51.096Z","title":"In checkAccess of SliceManagerService.java in Android 9, there is a possible permissions check bypass due to incorrect order of arguments. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00174,"kevAdded":null},{"id":"CVE-2019-2174","published":"2019-09-05T21:33:43.000Z","updated":"2024-08-04T18:42:50.740Z","title":"In SensorManager::assertStateLocked of SensorManager.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9, there is a possible use after free due to improper locking.…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2019-2123","published":"2019-09-05T21:31:25.000Z","updated":"2024-08-04T18:42:50.429Z","title":"In execTransact of Binder.java in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9, there is a possible local execution of arbitrary code in a privileged process due to a…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00163,"kevAdded":null},{"id":"CVE-2019-2127","published":"2019-08-20T19:55:15.000Z","updated":"2024-08-04T18:42:50.139Z","title":"In AudioInputDescriptor::setClientActive of AudioInputDescriptor.cpp, there is possible memory corruption due to a use after free. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0017,"kevAdded":null},{"id":"CVE-2019-2137","published":"2019-08-20T19:54:43.000Z","updated":"2024-08-04T18:42:50.011Z","title":"In the endCall() function of TelecomManager.java, there is a possible Denial of Service due to a missing permission check. This could lead to local denial of…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00155,"kevAdded":null},{"id":"CVE-2019-2136","published":"2019-08-20T19:54:14.000Z","updated":"2024-08-04T18:42:50.900Z","title":"In Status::readFromParcel of Status.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2019-2135","published":"2019-08-20T19:53:42.000Z","updated":"2024-08-04T18:42:51.109Z","title":"In Mfc_Transceive of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00496,"kevAdded":null},{"id":"CVE-2019-2134","published":"2019-08-20T19:53:12.000Z","updated":"2024-08-04T18:42:49.965Z","title":"In phFriNfc_ExtnsTransceive of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00519,"kevAdded":null},{"id":"CVE-2019-2133","published":"2019-08-20T19:52:19.000Z","updated":"2024-08-04T18:42:50.297Z","title":"In Mfc_Transceive of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00543,"kevAdded":null},{"id":"CVE-2019-2132","published":"2019-08-20T19:51:49.000Z","updated":"2024-08-04T18:42:49.897Z","title":"It is possible to overlay the VPN dialog by a malicious application. This could lead to local escalation of privilege with no additional execution privileges…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00519,"kevAdded":null},{"id":"CVE-2019-2131","published":"2019-08-20T19:51:20.000Z","updated":"2024-08-04T18:42:50.483Z","title":"An application with overlay permission can display overlays on top of settings UI. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00519,"kevAdded":null},{"id":"CVE-2019-2130","published":"2019-08-20T19:50:37.000Z","updated":"2024-08-04T18:42:49.945Z","title":"In CompilationJob::FinalizeJob of compiler.cc, there is a possible remote code execution due to type confusion. This could lead to escalation of privilege from…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.0165,"kevAdded":null},{"id":"CVE-2019-2129","published":"2019-08-20T19:50:07.000Z","updated":"2024-08-04T18:42:49.984Z","title":"In extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00746,"kevAdded":null},{"id":"CVE-2019-2128","published":"2019-08-20T19:49:36.000Z","updated":"2024-08-04T18:42:50.056Z","title":"In ACELP_4t64_fx of c4t64fx.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0019,"kevAdded":null},{"id":"CVE-2019-2126","published":"2019-08-20T19:49:04.000Z","updated":"2024-08-04T18:42:50.421Z","title":"In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer. This could lead to remote code…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.05508,"kevAdded":null},{"id":"CVE-2019-2125","published":"2019-08-20T19:48:29.000Z","updated":"2024-08-04T18:42:49.913Z","title":"In ChangeDefaultDialerDialog.java, there is a possible escalation of privilege due to an overlay attack. This could lead to local escalation of privilege,…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2019-2122","published":"2019-08-20T19:47:55.000Z","updated":"2024-08-04T18:42:50.585Z","title":"In LockTaskController.lockKeyguardIfNeeded of the LockTaskController.java, there was a difference in the handling of the default case between the WindowManager…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00185,"kevAdded":null},{"id":"CVE-2019-2121","published":"2019-08-20T19:46:59.000Z","updated":"2024-08-04T18:42:49.967Z","title":"In ActivityManagerService.attachApplication of ActivityManagerService, there is a possible race condition. This could lead to local escalation of privilege…","severity":"HIGH","score":7,"vendor":null,"product":"Android","kev":false,"epss":0.00123,"kevAdded":null},{"id":"CVE-2019-2120","published":"2019-08-20T19:46:02.000Z","updated":"2024-08-04T18:42:49.994Z","title":"In OatFileAssistant::GenerateOatFile of oat_file_assistant.cc, there is a possible file corruption issue due to an insecure default value. This could lead to…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2019-2119","published":"2019-07-08T17:41:52.000Z","updated":"2024-08-04T18:42:50.645Z","title":"In multiple functions of key_store_service.cpp, there is a possible Information Disclosure due to improper locking. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00115,"kevAdded":null},{"id":"CVE-2019-2118","published":"2019-07-08T17:41:14.000Z","updated":"2024-08-04T18:42:50.156Z","title":"In various functions of Parcel.cpp, there are uninitialized or partially initialized stack variables. These could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00165,"kevAdded":null},{"id":"CVE-2019-2117","published":"2019-07-08T17:40:37.000Z","updated":"2024-08-04T18:42:50.039Z","title":"In checkQueryPermission of TelephonyProvider.java, there is a possible disclosure of secure data due to a missing permission check. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00136,"kevAdded":null},{"id":"CVE-2019-2116","published":"2019-07-08T17:39:51.000Z","updated":"2024-08-04T18:42:50.251Z","title":"In save_attr_seq of sdp_discovery.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to remote information disclosure…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00818,"kevAdded":null},{"id":"CVE-2019-2113","published":"2019-07-08T17:39:13.000Z","updated":"2024-08-04T18:42:50.699Z","title":"In setup wizard there is a bypass of some checks when wifi connection is skipped. This could lead to factory reset protection bypass with no additional…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00134,"kevAdded":null},{"id":"CVE-2019-2112","published":"2019-07-08T17:37:58.000Z","updated":"2024-08-04T18:42:50.299Z","title":"In several functions of alarm.cc, there is possible memory corruption due to a use after free. This could lead to local code execution with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2019-2111","published":"2019-07-08T17:37:18.000Z","updated":"2024-08-04T18:42:49.889Z","title":"In loop of DnsTlsSocket.cpp, there is a possible heap memory corruption due to a use after free. This could lead to remote code execution in the netd server…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00842,"kevAdded":null},{"id":"CVE-2019-2109","published":"2019-07-08T17:36:43.000Z","updated":"2024-08-04T18:42:50.418Z","title":"In MakeMPEG4VideoCodecSpecificData of AVIExtractor.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.01199,"kevAdded":null},{"id":"CVE-2019-2107","published":"2019-07-08T17:36:03.000Z","updated":"2024-08-04T18:42:50.026Z","title":"In ihevcd_parse_pps of ihevcd_parse_headers.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.08998,"kevAdded":null},{"id":"CVE-2019-2106","published":"2019-07-08T17:35:31.000Z","updated":"2024-08-04T18:42:50.157Z","title":"In ihevcd_sao_shift_ctb of ihevcd_sao.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.01153,"kevAdded":null},{"id":"CVE-2019-2105","published":"2019-07-08T17:34:48.000Z","updated":"2024-08-04T18:42:50.233Z","title":"In FileInputStream::Read of file_input_stream.cc, there is a possible memory corruption due to uninitialized data. This could lead to remote code execution in…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00712,"kevAdded":null},{"id":"CVE-2019-2104","published":"2019-07-08T17:34:14.000Z","updated":"2024-08-04T18:42:49.887Z","title":"In HIDL, safe_union, and other C++ structs/unions being sent to application processes, there are uninitialized fields. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0016,"kevAdded":null},{"id":"CVE-2018-9561","published":"2019-06-19T20:13:03.000Z","updated":"2024-08-05T07:24:56.245Z","title":"In llcp_util_parse_connect of llcp_util.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00758,"kevAdded":null},{"id":"CVE-2019-2025","published":"2019-06-19T20:07:05.000Z","updated":"2024-08-04T18:35:52.397Z","title":"In binder_thread_read of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00523,"kevAdded":null},{"id":"CVE-2019-2024","published":"2019-06-19T20:06:41.000Z","updated":"2024-08-04T18:35:52.537Z","title":"In em28xx_unregister_dvb of em28xx-dvb.c, there is a possible use after free issue. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00221,"kevAdded":null},{"id":"CVE-2019-2023","published":"2019-06-19T20:05:51.000Z","updated":"2024-08-04T18:35:52.451Z","title":"In ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller. This could allow an app…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00492,"kevAdded":null},{"id":"CVE-2019-2003","published":"2019-06-19T20:05:09.000Z","updated":"2024-08-04T18:35:52.444Z","title":"In addLinks of Linkify.java, there is a possible phishing vector due to an unusual root cause. This could lead to remote code execution or misdirection of…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.0137,"kevAdded":null},{"id":"CVE-2019-2022","published":"2019-06-19T20:04:43.000Z","updated":"2024-08-04T18:35:52.461Z","title":"In rw_t3t_act_handle_fmt_rsp and rw_t3t_act_handle_sro_rsp of rw_t3t.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00779,"kevAdded":null},{"id":"CVE-2019-2021","published":"2019-06-19T20:04:18.000Z","updated":"2024-08-04T18:35:52.475Z","title":"In rw_t3t_act_handle_ndef_detect_rsp of rw_t3t.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00758,"kevAdded":null},{"id":"CVE-2019-2020","published":"2019-06-19T20:03:44.000Z","updated":"2024-08-04T18:35:52.396Z","title":"In llcp_dlc_proc_rr_rnr_pdu of llcp_dlc.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00758,"kevAdded":null},{"id":"CVE-2019-2019","published":"2019-06-19T20:03:20.000Z","updated":"2024-08-04T18:35:52.471Z","title":"In ce_t4t_data_cback of ce_t4t.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00879,"kevAdded":null},{"id":"CVE-2018-9564","published":"2019-06-19T20:02:54.000Z","updated":"2024-08-05T07:24:55.935Z","title":"In llcp_util_parse_link_params of llcp_util.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00758,"kevAdded":null},{"id":"CVE-2018-9563","published":"2019-06-19T20:01:55.000Z","updated":"2024-08-05T07:24:55.772Z","title":"In llcp_util_parse_cc of llcp_util.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":6.5,"vendor":null,"product":"Android","kev":false,"epss":0.00758,"kevAdded":null},{"id":"CVE-2019-2018","published":"2019-06-19T20:01:31.000Z","updated":"2024-08-04T18:35:52.454Z","title":"In resetPasswordInternal of DevicePolicyManagerService.java, there is a possible bypass of password reset protection due to an unusual root cause. Remote user…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.01205,"kevAdded":null},{"id":"CVE-2019-2017","published":"2019-06-19T20:01:07.000Z","updated":"2024-08-04T18:35:52.485Z","title":"In rw_t2t_handle_tlv_detect_rsp of rw_t2t_ndef.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2019-2016","published":"2019-06-19T20:00:39.000Z","updated":"2024-08-04T18:35:52.563Z","title":"In NFA_SendRawFrame of nfa_dm_api.cc, there is a possible out-of-bound write due to improper input validation. This could lead to local escalation of privilege…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00796,"kevAdded":null},{"id":"CVE-2019-2015","published":"2019-06-19T20:00:12.000Z","updated":"2024-08-04T18:35:52.481Z","title":"In rw_t3t_act_handle_check_rsp of rw_t3t.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00796,"kevAdded":null},{"id":"CVE-2019-2014","published":"2019-06-19T19:59:45.000Z","updated":"2024-08-04T18:35:52.429Z","title":"In rw_t3t_handle_get_sc_poll_rsp of rw_t3t.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00796,"kevAdded":null},{"id":"CVE-2019-2013","published":"2019-06-19T19:59:17.000Z","updated":"2024-08-04T18:35:52.413Z","title":"In rw_t3t_act_handle_sro_rsp of rw_t3t.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00796,"kevAdded":null},{"id":"CVE-2019-2012","published":"2019-06-19T19:58:49.000Z","updated":"2024-08-04T18:35:52.445Z","title":"In rw_t3t_act_handle_fmt_rsp of rw_t3t.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00796,"kevAdded":null},{"id":"CVE-2019-2011","published":"2019-06-19T19:58:06.000Z","updated":"2024-08-04T18:35:52.630Z","title":"In readNullableNativeHandleNoDup of Parcel.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00185,"kevAdded":null},{"id":"CVE-2019-2010","published":"2019-06-19T19:57:42.000Z","updated":"2024-08-04T18:35:52.411Z","title":"In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2019-2009","published":"2019-06-19T19:57:01.000Z","updated":"2024-08-04T18:35:52.444Z","title":"In l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.0061,"kevAdded":null},{"id":"CVE-2019-2008","published":"2019-06-19T19:56:32.000Z","updated":"2024-08-04T18:35:52.391Z","title":"In createEffect of AudioFlinger.cpp, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.00576,"kevAdded":null},{"id":"CVE-2019-2007","published":"2019-06-19T19:54:03.000Z","updated":"2024-08-04T18:35:52.463Z","title":"In getReadIndex and getWriteIndex of FifoControllerBase.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to local…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00921,"kevAdded":null},{"id":"CVE-2019-2006","published":"2019-06-19T19:53:20.000Z","updated":"2024-08-04T18:35:52.422Z","title":"In serviceDied of HalDeathHandlerHidl.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege in…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.00716,"kevAdded":null},{"id":"CVE-2019-1990","published":"2019-06-19T19:52:52.000Z","updated":"2024-08-04T18:35:52.491Z","title":"In ihevcd_fmt_conv_420sp_to_420p of ihevcd_fmt_conv.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.0137,"kevAdded":null},{"id":"CVE-2019-1989","published":"2019-06-19T19:52:22.000Z","updated":"2024-08-04T18:35:52.381Z","title":"In ih264d_fmt_conv_420sp_to_420p of ih264d_format_conv.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.0137,"kevAdded":null},{"id":"CVE-2019-2005","published":"2019-06-19T19:51:42.000Z","updated":"2024-08-04T18:35:52.461Z","title":"In onPermissionGrantResult of GrantPermissionsActivity.java, there is a possible incorrectly granted permission due to a missing permission check. This could…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.00644,"kevAdded":null},{"id":"CVE-2019-2004","published":"2019-06-19T19:51:16.000Z","updated":"2024-08-04T18:35:52.376Z","title":"In publishKeyEvent, publishMotionEvent and sendUnchainedFinishedSignal of InputTransport.cpp, there are uninitialized data leading to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.0017,"kevAdded":null},{"id":"CVE-2019-1985","published":"2019-06-19T19:50:40.000Z","updated":"2024-08-04T18:35:52.033Z","title":"In findAvailSpellCheckerLocked of TextServicesManagerService.java, there is a possible way to bypass the warning dialog when selecting an untrusted spell…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00199,"kevAdded":null},{"id":"CVE-2019-2101","published":"2019-06-07T19:41:55.000Z","updated":"2024-08-04T18:42:50.251Z","title":"In uvc_parse_standard_control of uvc_driver.c, there is a possible out-of-bound read due to improper input validation. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Android","product":"Android","kev":false,"epss":0.00435,"kevAdded":null},{"id":"CVE-2019-2099","published":"2019-06-07T19:41:09.000Z","updated":"2024-08-04T18:42:49.683Z","title":"In nfa_rw_store_ndef_rx_buf of nfa_rw_act.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00565,"kevAdded":null},{"id":"CVE-2019-2098","published":"2019-06-07T19:40:15.000Z","updated":"2024-08-04T18:42:50.019Z","title":"In areNotificationsEnabledForPackage of NotificationManagerService.java, there is a possible permissions bypass due to a missing permissions check. This could…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2019-2102","published":"2019-06-07T19:38:36.000Z","updated":"2024-08-04T18:42:50.123Z","title":"In the Bluetooth Low Energy (BLE) specification, there is a provided example Long Term Key (LTK). If a BLE device were to use this as a hardcoded LTK, it is…","severity":"HIGH","score":8.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00332,"kevAdded":null},{"id":"CVE-2019-2097","published":"2019-06-07T19:37:22.000Z","updated":"2024-08-04T18:42:49.859Z","title":"In HAliasAnalyzer.Query of hydrogen-alias-analysis.h, there is possible memory corruption due to type confusion. This could lead to remote code execution from…","severity":"CRITICAL","score":9.8,"vendor":"Android","product":"Android","kev":false,"epss":0.01334,"kevAdded":null},{"id":"CVE-2019-2096","published":"2019-06-07T19:36:39.000Z","updated":"2024-08-04T18:42:50.253Z","title":"In EffectRelease of EffectBundle.cpp, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege in the audio…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.0017,"kevAdded":null},{"id":"CVE-2019-2095","published":"2019-06-07T19:35:35.000Z","updated":"2024-08-04T18:42:49.864Z","title":"In callGenIDChangeListeners and related functions of SkPixelRef.cpp, there is a possible use after free due to a race condition. This could lead to remote code…","severity":"HIGH","score":7,"vendor":"Android","product":"Android","kev":false,"epss":0.00677,"kevAdded":null},{"id":"CVE-2019-2094","published":"2019-06-07T19:34:50.000Z","updated":"2024-08-04T18:42:50.043Z","title":"In parseMPEGCCData of NuPlayerCCDecoder.cpp, there is a possible out of bounds write due to missing bounds checks. This could lead to remote code execution…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.01092,"kevAdded":null},{"id":"CVE-2019-2093","published":"2019-06-07T19:34:03.000Z","updated":"2024-08-04T18:42:50.069Z","title":"In huff_dec_1D of nlc_dec.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no…","severity":"HIGH","score":8.8,"vendor":"Android","product":"Android","kev":false,"epss":0.01153,"kevAdded":null},{"id":"CVE-2019-2092","published":"2019-06-07T19:33:21.000Z","updated":"2024-08-04T18:42:49.897Z","title":"In isSeparateProfileChallengeAllowed of DevicePolicyManagerService.java, there is a possible permissions bypass due to a missing permission check. This could…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2019-2091","published":"2019-06-07T19:32:24.000Z","updated":"2024-08-04T18:42:50.429Z","title":"In GetPermittedAccessibilityServicesForUser of DevicePolicyManagerService.java, there is a possible permissions bypass due to a missing permission check. This…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2019-2090","published":"2019-06-07T19:31:35.000Z","updated":"2024-08-04T18:42:50.272Z","title":"In isPackageDeviceAdminOnAnyUser of PackageManagerService.java, there is a possible permissions bypass due to a missing permissions check. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00131,"kevAdded":null},{"id":"CVE-2019-2054","published":"2019-05-08T16:32:45.000Z","updated":"2024-08-04T18:35:52.549Z","title":"In the seccomp implementation prior to kernel version 4.8, there is a possible seccomp bypass due to seccomp policies that allow the use of ptrace. This could…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00671,"kevAdded":null},{"id":"CVE-2019-2053","published":"2019-05-08T16:32:03.000Z","updated":"2024-08-04T18:35:52.428Z","title":"In wnm_parse_neighbor_report_elem of wnm_sta.c, there is a possible out-of-bounds read due to missing bounds check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android","kev":false,"epss":0.00171,"kevAdded":null},{"id":"CVE-2019-2052","published":"2019-05-08T16:31:07.000Z","updated":"2024-08-04T18:35:52.547Z","title":"In VisitPointers of heap.cc, there is a possible out-of-bounds read due to type confusion. This could lead to remote information disclosure with no additional…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.01023,"kevAdded":null},{"id":"CVE-2019-2051","published":"2019-05-08T16:30:03.000Z","updated":"2024-08-04T18:35:52.571Z","title":"In heap of spaces.h, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure when processing…","severity":"HIGH","score":7.5,"vendor":null,"product":"Android","kev":false,"epss":0.01023,"kevAdded":null},{"id":"CVE-2019-2050","published":"2019-05-08T16:28:37.000Z","updated":"2024-08-04T18:35:52.512Z","title":"In tearDownClientInterface of WificondControl.java, there is a possible use after free due to improper locking. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2019-2049","published":"2019-05-08T16:27:50.000Z","updated":"2024-08-04T18:35:52.465Z","title":"In SendMediaUpdate and SendFolderUpdate of avrcp_service.cc, there is a possible memory corruption due to a use after free. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android","kev":false,"epss":0.0017,"kevAdded":null},{"id":"CVE-2019-2047","published":"2019-05-08T16:27:04.000Z","updated":"2024-08-04T18:35:52.476Z","title":"In UpdateLoadElement of ic.cc, there is a possible out-of-bounds write due to type confusion. This could lead to remote code execution in the proxy auto-config…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.01362,"kevAdded":null},{"id":"CVE-2019-2046","published":"2019-05-08T16:25:35.000Z","updated":"2024-08-04T18:35:52.483Z","title":"In CalculateInstanceSizeForDerivedClass of objects.cc, there is possible memory corruption due to an integer overflow. This could lead to remote code execution…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.01334,"kevAdded":null},{"id":"CVE-2019-2045","published":"2019-05-08T16:24:52.000Z","updated":"2024-08-04T18:35:52.499Z","title":"In JSCallTyper of typer.cc, there is an out of bounds write due to an incorrect bounds check. This could lead to remote code execution in the proxy auto-config…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"Android","kev":false,"epss":0.01362,"kevAdded":null},{"id":"CVE-2019-2044","published":"2019-05-08T16:23:41.000Z","updated":"2024-08-04T18:35:52.478Z","title":"In MakeMP>G4VideoCodecSpecificData of APacketSource.cpp, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote…","severity":"HIGH","score":8.8,"vendor":null,"product":"Android","kev":false,"epss":0.01153,"kevAdded":null},{"id":"CVE-2019-2043","published":"2019-05-08T16:22:06.000Z","updated":"2024-08-04T18:35:52.463Z","title":"In SmsDefaultDialog.onStart of SmsDefaultDialog.java, there is a possible escalation of privilege due to an overlay attack. This could lead to local escalation…","severity":"HIGH","score":7.3,"vendor":null,"product":"Android","kev":false,"epss":0.00178,"kevAdded":null},{"id":"CVE-2019-2037","published":"2019-04-19T19:47:33.000Z","updated":"2024-08-04T18:35:52.468Z","title":"In l2cu_send_peer_config_rej of l2c_utils.cc, there is a possible out-of-bound read due to an incorrect bounds check. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":"Android","product":"Android","kev":false,"epss":0.00818,"kevAdded":null},{"id":"CVE-2019-2041","published":"2019-04-19T19:46:40.000Z","updated":"2024-08-04T18:35:52.449Z","title":"In the configuration of NFC modules on certain devices, there is a possible failure to distinguish individual devices due to an insecure default value. This…","severity":"HIGH","score":7.3,"vendor":"Android","product":"Android","kev":false,"epss":0.00185,"kevAdded":null},{"id":"CVE-2019-2032","published":"2019-04-19T19:45:24.000Z","updated":"2024-08-04T18:35:52.443Z","title":"In SetScanResponseData of ble_advertiser_hci_interface.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00162,"kevAdded":null},{"id":"CVE-2019-2029","published":"2019-04-19T19:44:17.000Z","updated":"2024-08-04T18:35:52.546Z","title":"In btm_proc_smp_cback of tm_ble.cc, there is a possible memory corruption due to a use after free. This could lead to remote code execution with no additional…","severity":"HIGH","score":8.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00712,"kevAdded":null},{"id":"CVE-2019-2040","published":"2019-04-19T19:43:24.000Z","updated":"2024-08-04T18:35:52.452Z","title":"In rw_i93_process_ext_sys_info of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":5,"vendor":"Android","product":"Android","kev":false,"epss":0.00157,"kevAdded":null},{"id":"CVE-2019-2039","published":"2019-04-19T19:42:16.000Z","updated":"2024-08-04T18:35:52.482Z","title":"In rw_i93_sm_detect_ndef of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":5,"vendor":"Android","product":"Android","kev":false,"epss":0.00185,"kevAdded":null},{"id":"CVE-2019-2038","published":"2019-04-19T19:41:13.000Z","updated":"2024-08-04T18:35:52.472Z","title":"In rw_i93_process_sys_info of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":5.5,"vendor":"Android","product":"Android","kev":false,"epss":0.00436,"kevAdded":null},{"id":"CVE-2019-2035","published":"2019-04-19T19:39:51.000Z","updated":"2024-08-04T18:35:52.451Z","title":"In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00445,"kevAdded":null},{"id":"CVE-2019-2034","published":"2019-04-19T19:38:52.000Z","updated":"2024-08-04T18:35:52.428Z","title":"In rw_i93_sm_read_ndef of rw_i93.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege in…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00485,"kevAdded":null},{"id":"CVE-2019-2033","published":"2019-04-19T19:36:54.000Z","updated":"2024-08-04T18:35:52.398Z","title":"In create_hdr of dnssd_clientstub.c, there is a possible use after free. This could lead to local escalation of privilege with no additional execution…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.0017,"kevAdded":null},{"id":"CVE-2019-2031","published":"2019-04-19T19:26:00.000Z","updated":"2024-08-04T18:35:52.483Z","title":"In rw_t3t_act_handle_check_ndef_rsp of rw_t3t.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2019-2030","published":"2019-04-19T19:24:37.000Z","updated":"2024-08-04T18:35:52.413Z","title":"In removeInterfaceAddress of NetworkController.cpp, there is a possible use after free. This could lead to remote code execution with no additional execution…","severity":"CRITICAL","score":9.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00859,"kevAdded":null},{"id":"CVE-2019-2028","published":"2019-04-19T19:23:22.000Z","updated":"2024-08-04T18:35:52.469Z","title":"In numerous hand-crafted functions in libmpeg2, NEON registers are not preserved. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":"Android","product":"Android","kev":false,"epss":0.01153,"kevAdded":null},{"id":"CVE-2019-2027","published":"2019-04-19T19:21:23.000Z","updated":"2024-08-04T18:35:52.455Z","title":"In floor0_inverse1 of floor0.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no…","severity":"HIGH","score":8.8,"vendor":"Android","product":"Android","kev":false,"epss":0.01224,"kevAdded":null},{"id":"CVE-2019-2026","published":"2019-04-19T19:15:24.000Z","updated":"2024-08-04T18:35:52.427Z","title":"In updateAssistMenuItems of Editor.java, there is a possible escape from the Setup Wizard due to a missing permission check. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.0015,"kevAdded":null},{"id":"CVE-2019-2001","published":"2019-02-28T17:00:00.000Z","updated":"2024-09-16T19:09:52.134Z","title":"The permissions on /proc/iomem were world-readable. This could lead to local information disclosure with no additional execution privileges needed. User…","severity":"MEDIUM","score":5.5,"vendor":"Android","product":"Android","kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2019-2000","published":"2019-02-28T17:00:00.000Z","updated":"2024-09-16T22:01:39.066Z","title":"In several functions of binder.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00675,"kevAdded":null},{"id":"CVE-2019-1999","published":"2019-02-28T17:00:00.000Z","updated":"2024-09-17T03:17:33.855Z","title":"In binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege in the…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00807,"kevAdded":null},{"id":"CVE-2019-1998","published":"2019-02-28T17:00:00.000Z","updated":"2024-09-17T00:07:01.556Z","title":"In event_handler of keymaster_app.c, there is possible resource exhaustion due to a table being lost on reboot. This could lead to local denial of service that…","severity":"MEDIUM","score":5.5,"vendor":"Android","product":"Android","kev":false,"epss":0.00176,"kevAdded":null},{"id":"CVE-2019-1997","published":"2019-02-28T17:00:00.000Z","updated":"2024-09-16T23:40:56.912Z","title":"In random_get_bytes of random.c, there is a possible degradation of randomness due to an insecure default value. This could lead to local information…","severity":"HIGH","score":7.5,"vendor":"Android","product":"Android","kev":false,"epss":0.00857,"kevAdded":null},{"id":"CVE-2019-1996","published":"2019-02-28T17:00:00.000Z","updated":"2024-09-17T02:15:36.924Z","title":"In avrc_pars_browse_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information…","severity":"MEDIUM","score":6.5,"vendor":"Android","product":"Android","kev":false,"epss":0.00486,"kevAdded":null},{"id":"CVE-2019-1995","published":"2019-02-28T17:00:00.000Z","updated":"2024-09-16T23:20:42.094Z","title":"In ComposeActivityEmail of ComposeActivityEmail.java, there is a possible way to silently attach files to an email due to a confused deputy. This could lead to…","severity":"MEDIUM","score":5.5,"vendor":"Android","product":"Android","kev":false,"epss":0.00179,"kevAdded":null},{"id":"CVE-2019-1994","published":"2019-02-28T17:00:00.000Z","updated":"2024-09-17T00:36:18.392Z","title":"In refresh of DevelopmentTiles.java, there is the possibility of leaving development settings accessible due to an insecure default value. This could lead to…","severity":"HIGH","score":8.8,"vendor":"Android","product":"Android","kev":false,"epss":0.01007,"kevAdded":null},{"id":"CVE-2019-1993","published":"2019-02-28T17:00:00.000Z","updated":"2024-09-16T22:45:54.447Z","title":"In register_app of btif_hd.cc, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2019-1992","published":"2019-02-28T17:00:00.000Z","updated":"2024-09-16T17:37:57.595Z","title":"In bta_hl_sdp_query_results of bta_hl_main.cc, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no…","severity":"HIGH","score":7.5,"vendor":"Android","product":"Android","kev":false,"epss":0.01335,"kevAdded":null},{"id":"CVE-2019-1991","published":"2019-02-28T17:00:00.000Z","updated":"2024-09-17T02:41:29.598Z","title":"In btif_dm_data_copy of btif_core.cc, there is a possible out of bounds write due to a buffer overflow. This could lead to remote code execution with no…","severity":"HIGH","score":8.8,"vendor":"Android","product":"Android","kev":false,"epss":0.02027,"kevAdded":null},{"id":"CVE-2019-1988","published":"2019-02-28T17:00:00.000Z","updated":"2024-09-16T20:17:33.437Z","title":"In sample6 of SkSwizzler.cpp, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution in…","severity":"HIGH","score":8.8,"vendor":"Android","product":"Android","kev":false,"epss":0.0191,"kevAdded":null},{"id":"CVE-2019-1987","published":"2019-02-28T17:00:00.000Z","updated":"2024-09-16T18:48:20.754Z","title":"In onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.01245,"kevAdded":null},{"id":"CVE-2019-1986","published":"2019-02-28T17:00:00.000Z","updated":"2024-09-16T18:13:17.589Z","title":"In SkSwizzler::onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of…","severity":"HIGH","score":8.8,"vendor":"Android","product":"Android","kev":false,"epss":0.01502,"kevAdded":null},{"id":"CVE-2018-9594","published":"2019-02-12T00:00:00.000Z","updated":"2024-09-16T20:16:30.106Z","title":"In llcp_link_proc_agf_pdu of llcp_link.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of…","severity":"MEDIUM","score":6.5,"vendor":"*** n/a ***","product":"Android","kev":false,"epss":0.0033,"kevAdded":null},{"id":"CVE-2018-9593","published":"2019-02-12T00:00:00.000Z","updated":"2024-09-17T02:17:02.894Z","title":"In llcp_dlc_proc_i_pdu of llcp_dlc.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds…","severity":"MEDIUM","score":6.5,"vendor":"Android","product":"Android","kev":false,"epss":0.00314,"kevAdded":null},{"id":"CVE-2018-9592","published":"2019-02-12T00:00:00.000Z","updated":"2024-09-17T02:47:16.783Z","title":"In mca_ccb_hdl_rsp of mca_cact.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read…","severity":"HIGH","score":7.5,"vendor":"Android","product":"Android","kev":false,"epss":0.01335,"kevAdded":null},{"id":"CVE-2018-9591","published":"2019-02-12T00:00:00.000Z","updated":"2024-09-16T22:26:44.143Z","title":"In bta_hh_ctrl_dat_act of bta_hh_act.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds…","severity":"HIGH","score":7.5,"vendor":"Android","product":"Android","kev":false,"epss":0.01335,"kevAdded":null},{"id":"CVE-2018-9590","published":"2019-02-12T00:00:00.000Z","updated":"2024-09-16T20:02:57.026Z","title":"In add_attr of sdp_discovery.c in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due…","severity":"HIGH","score":7.5,"vendor":"Android","product":"Android","kev":false,"epss":0.01335,"kevAdded":null},{"id":"CVE-2018-9589","published":"2019-02-12T00:00:00.000Z","updated":"2024-09-17T01:21:47.211Z","title":"In ieee802_11_rx_wnmsleep_req of wnm_ap.c in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of…","severity":"MEDIUM","score":5.5,"vendor":"Android","product":"Android","kev":false,"epss":0.00179,"kevAdded":null},{"id":"CVE-2018-9588","published":"2019-02-12T00:00:00.000Z","updated":"2024-09-17T02:16:15.332Z","title":"In avdt_scb_hdl_report of avdt_scb_act.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of…","severity":"MEDIUM","score":6.5,"vendor":"Android","product":"Android","kev":false,"epss":0.00509,"kevAdded":null},{"id":"CVE-2018-9587","published":"2019-02-12T00:00:00.000Z","updated":"2024-09-17T03:02:20.568Z","title":"In savePhotoFromUriToUri of ContactPhotoUtils.java in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is possible…","severity":"HIGH","score":7.3,"vendor":"Android","product":"Android","kev":false,"epss":0.00193,"kevAdded":null},{"id":"CVE-2018-9586","published":"2019-02-12T00:00:00.000Z","updated":"2024-09-16T16:58:02.607Z","title":"In run of InstallPackageTask.java in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, it is possible that package…","severity":"HIGH","score":7,"vendor":"Android","product":"Android","kev":false,"epss":0.00131,"kevAdded":null},{"id":"CVE-2018-9585","published":"2019-02-12T00:00:00.000Z","updated":"2024-09-16T16:58:56.897Z","title":"In nfc_ncif_proc_get_routing of nfc_ncif.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00186,"kevAdded":null},{"id":"CVE-2018-9584","published":"2019-02-12T00:00:00.000Z","updated":"2024-09-16T19:14:37.623Z","title":"In nfc_ncif_set_config_status of nfc_ncif.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00186,"kevAdded":null},{"id":"CVE-2018-9583","published":"2019-02-12T00:00:00.000Z","updated":"2024-09-16T23:40:39.530Z","title":"In bta_ag_parse_cmer of bta_ag_cmd.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out-of-bounds…","severity":"CRITICAL","score":9.8,"vendor":"Android","product":"Android","kev":false,"epss":0.02262,"kevAdded":null},{"id":"CVE-2018-9582","published":"2019-02-12T00:00:00.000Z","updated":"2024-09-17T02:46:32.549Z","title":"In package installer in Android-8.0, Android-8.1 and Android-9, there is a possible bypass of the unknown source warning due to a confused deputy scenario.…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00211,"kevAdded":null},{"id":"CVE-2018-9578","published":"2018-12-07T23:00:00.000Z","updated":"2024-08-05T07:24:55.936Z","title":"In ixheaacd_adts_crc_start_reg of ixheaacd_adts_crc_check.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00844,"kevAdded":null},{"id":"CVE-2018-9577","published":"2018-12-07T23:00:00.000Z","updated":"2024-08-05T07:24:56.010Z","title":"In impd_parametric_drc_parse_gain_set_params of impd_drc_static_payload.c there is a possible out of bounds write due to missing bounds check. This could lead…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00863,"kevAdded":null},{"id":"CVE-2018-9576","published":"2018-12-07T23:00:00.000Z","updated":"2024-08-05T07:24:56.340Z","title":"In impd_parse_parametric_drc_instructions of impd_drc_static_payload.c there is a possible out of bounds write due to missing bounds check. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00863,"kevAdded":null},{"id":"CVE-2018-9575","published":"2018-12-07T23:00:00.000Z","updated":"2024-08-05T07:24:55.989Z","title":"In impd_parse_dwnmix_instructions of impd_drc_static_payload.c there is a possible out of bounds write due to missing bounds check. This could lead to remote…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00863,"kevAdded":null},{"id":"CVE-2018-9574","published":"2018-12-07T23:00:00.000Z","updated":"2024-08-05T07:24:56.115Z","title":"In impd_parse_split_drc_characteristic of impd_drc_static_payload.c there is a possible out of bounds write due to missing bounds check. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00863,"kevAdded":null},{"id":"CVE-2018-9573","published":"2018-12-07T23:00:00.000Z","updated":"2024-08-05T07:24:55.975Z","title":"In impd_parse_filt_block of impd_drc_dynamic_payload.c there is a possible out of bounds write due to missing bounds check. This could lead to remote code…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00863,"kevAdded":null},{"id":"CVE-2018-9572","published":"2018-12-07T23:00:00.000Z","updated":"2024-08-05T07:24:56.275Z","title":"In impd_drc_parse_coeff of impd_drc_static_payload.c there is a possible out of bounds write due to missing bounds check. This could lead to remote code…","severity":"HIGH","score":8.8,"vendor":null,"product":null,"kev":false,"epss":0.01133,"kevAdded":null},{"id":"CVE-2018-9571","published":"2018-12-07T23:00:00.000Z","updated":"2024-08-05T07:24:56.259Z","title":"In impd_parse_loud_eq_instructions of impd_drc_dynamic_payload.c there is a possible out-of-bound write due to missing bounds check. This could lead to remote…","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01133,"kevAdded":null},{"id":"CVE-2018-9570","published":"2018-12-07T23:00:00.000Z","updated":"2024-08-05T07:24:56.230Z","title":"In impd_parse_drc_ext_v1 of impd_drc_dynamic_payload.c there is a possible out-of-bound write due to missing bounds check. This could lead to remote code…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00863,"kevAdded":null},{"id":"CVE-2018-9569","published":"2018-12-07T23:00:00.000Z","updated":"2024-08-05T07:24:56.163Z","title":"In impd_init_drc_decode_post_config of impd_drc_gain_decoder.c there is a possible out-of-bound write due to incorrect bounds check. This could lead to remote…","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01133,"kevAdded":null},{"id":"CVE-2018-9519","published":"2018-12-07T23:00:00.000Z","updated":"2024-08-05T07:24:55.895Z","title":"In easelcomm_hw_build_scatterlist, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with…","severity":"MEDIUM","score":6.4,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2018-9518","published":"2018-12-07T23:00:00.000Z","updated":"2024-08-05T07:24:55.883Z","title":"In nfc_llcp_build_sdreq_tlv of llcp_commands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00266,"kevAdded":null},{"id":"CVE-2018-9517","published":"2018-12-07T23:00:00.000Z","updated":"2024-08-05T07:24:55.834Z","title":"In pppol2tp_connect, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution…","severity":"MEDIUM","score":6.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00444,"kevAdded":null},{"id":"CVE-2018-9568","published":"2018-12-06T14:00:00.000Z","updated":"2024-08-05T07:24:56.108Z","title":"In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00755,"kevAdded":null},{"id":"CVE-2018-9567","published":"2018-12-06T14:00:00.000Z","updated":"2024-08-05T07:24:56.257Z","title":"On Pixel devices there is a bug causing verified boot to show the same certificate fingerprint despite using different signing keys. This may lead to local…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00146,"kevAdded":null},{"id":"CVE-2018-9566","published":"2018-12-06T14:00:00.000Z","updated":"2024-08-05T07:24:56.329Z","title":"In process_service_search_rsp of sdp_discovery.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information…","severity":"MEDIUM","score":5.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00376,"kevAdded":null},{"id":"CVE-2018-9565","published":"2018-12-06T14:00:00.000Z","updated":"2024-08-05T07:24:56.048Z","title":"In readBytes of xltdecwbxml.c, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01143,"kevAdded":null},{"id":"CVE-2018-9562","published":"2018-12-06T14:00:00.000Z","updated":"2024-08-05T07:24:56.089Z","title":"In bta_ag_do_disc of bta_ag_sdp.cc, there is a possible out-of-bound read due to an incorrect parameter size. This could lead to remote information disclosure…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01089,"kevAdded":null},{"id":"CVE-2018-9560","published":"2018-12-06T14:00:00.000Z","updated":"2024-08-05T07:24:56.078Z","title":"In HID_DevAddRecord of hidd_api.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege in…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0016,"kevAdded":null},{"id":"CVE-2018-9559","published":"2018-12-06T14:00:00.000Z","updated":"2024-08-05T07:24:56.018Z","title":"In persist_set_key and other functions of cryptfs.cpp, there is a possible out-of-bounds write due to an uncaught error. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00166,"kevAdded":null},{"id":"CVE-2018-9558","published":"2018-12-06T14:00:00.000Z","updated":"2024-08-05T07:24:56.216Z","title":"In rw_t2t_handle_tlv_detect of rw_t2t_ndef.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00172,"kevAdded":null},{"id":"CVE-2018-9557","published":"2018-12-06T14:00:00.000Z","updated":"2024-08-05T07:24:56.160Z","title":"In really_install_package of install.cpp, there is a possible free of arbitrary memory due to uninitialized data. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00174,"kevAdded":null},{"id":"CVE-2018-9556","published":"2018-12-06T14:00:00.000Z","updated":"2024-08-05T07:24:55.937Z","title":"In ParsePayloadHeader of payload_metadata.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01962,"kevAdded":null},{"id":"CVE-2018-9555","published":"2018-12-06T14:00:00.000Z","updated":"2024-08-05T07:24:55.908Z","title":"In l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege…","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00676,"kevAdded":null},{"id":"CVE-2018-9554","published":"2018-12-06T14:00:00.000Z","updated":"2024-08-05T07:24:56.100Z","title":"In dumpExtractors of IMediaExtractor.cp, there is a possible disclosure of recently accessed media files due to a permissions bypass. This could lead to local…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00165,"kevAdded":null},{"id":"CVE-2018-9553","published":"2018-12-06T14:00:00.000Z","updated":"2024-08-05T07:24:56.078Z","title":"In MasteringMetadata::Parse of mkvparser.cc there is a possible double free due to an insecure default value. This could lead to remote code execution with no…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01089,"kevAdded":null},{"id":"CVE-2018-9552","published":"2018-12-06T14:00:00.000Z","updated":"2024-08-05T07:24:56.036Z","title":"In ihevcd_sao_shift_ctb of ihevcd_sao.c there is a possible out of bounds write due to missing bounds check. This could lead to information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00529,"kevAdded":null},{"id":"CVE-2018-9551","published":"2018-12-06T14:00:00.000Z","updated":"2024-08-05T07:24:55.995Z","title":"In CAacDecoder_Init of aacdecoder.cpp, there is a possible out-of-bound write due to a missing bounds check. This could lead to remote code execution in the…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01089,"kevAdded":null},{"id":"CVE-2018-9550","published":"2018-12-06T14:00:00.000Z","updated":"2024-08-05T07:24:56.265Z","title":"In CAacDecoder_Init of aacdecoder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01246,"kevAdded":null},{"id":"CVE-2018-9549","published":"2018-12-06T14:00:00.000Z","updated":"2024-08-05T07:24:55.915Z","title":"In lppTransposer of lpp_tran.cpp there is a possible out of bounds write due to missing bounds check. This could lead to remote code execution with no…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01089,"kevAdded":null},{"id":"CVE-2018-9548","published":"2018-12-06T14:00:00.000Z","updated":"2024-08-05T07:24:56.138Z","title":"In multiple functions of ContentProvider.java, there is a possible permission bypass due to a missing URI validation. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2018-9547","published":"2018-12-06T14:00:00.000Z","updated":"2024-08-05T07:24:56.155Z","title":"In unflatten of GraphicBuffer.cpp, there is a possible bad fd close due to improper input validation. This could lead to local escalation of privilege in the…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00168,"kevAdded":null},{"id":"CVE-2018-9538","published":"2018-12-06T14:00:00.000Z","updated":"2024-08-05T07:24:55.902Z","title":"In V4L2SliceVideoDecodeAccelerator::Dequeue of v4l2_slice_video_decode_accelerator.cc, there is a possible out of bounds read of a function pointer due to an…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00168,"kevAdded":null},{"id":"CVE-2018-9580","published":"2018-11-14T18:00:00.000Z","updated":"2024-08-05T07:24:55.925Z","title":"A Elevation of privilege vulnerability in the HTC bootloader. Product: Android. Versions: Android kernel. Android ID: A-76222002.","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00451,"kevAdded":null},{"id":"CVE-2018-9545","published":"2018-11-14T18:00:00.000Z","updated":"2024-08-05T07:24:56.038Z","title":"In BTA_HdRegisterApp of bta_hd_api.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00166,"kevAdded":null},{"id":"CVE-2018-9544","published":"2018-11-14T18:00:00.000Z","updated":"2024-08-05T07:24:56.142Z","title":"In register_app of btif_hd.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure in the…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00164,"kevAdded":null},{"id":"CVE-2018-9543","published":"2018-11-14T18:00:00.000Z","updated":"2024-08-05T07:24:55.926Z","title":"In trim_device of f2fs_format_utils.c, it is possible that the data partition is not wiped during a factory reset. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00203,"kevAdded":null},{"id":"CVE-2018-9542","published":"2018-11-14T18:00:00.000Z","updated":"2024-08-05T07:24:56.246Z","title":"In avrc_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01109,"kevAdded":null},{"id":"CVE-2018-9541","published":"2018-11-14T18:00:00.000Z","updated":"2024-08-05T07:24:55.906Z","title":"In avrc_pars_vendor_rsp of avcr_pars_ct.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01109,"kevAdded":null},{"id":"CVE-2018-9540","published":"2018-11-14T18:00:00.000Z","updated":"2024-08-05T07:24:55.833Z","title":"In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01109,"kevAdded":null},{"id":"CVE-2018-9539","published":"2018-11-14T18:00:00.000Z","updated":"2024-08-05T07:24:55.936Z","title":"In the ClearKey CAS descrambler, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00353,"kevAdded":null},{"id":"CVE-2018-9537","published":"2018-11-14T18:00:00.000Z","updated":"2024-08-05T07:24:55.947Z","title":"In CAacDecoder_DecodeFrame of aacdecode.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution in…","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01539,"kevAdded":null},{"id":"CVE-2018-9536","published":"2018-11-14T18:00:00.000Z","updated":"2024-08-05T07:24:55.886Z","title":"In numerous functions of libFDK, there are possible out of bounds writes due to incorrect bounds checks. This could lead to remote code execution with no…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01428,"kevAdded":null},{"id":"CVE-2018-9535","published":"2018-11-14T18:00:00.000Z","updated":"2024-08-05T07:24:55.944Z","title":"In ixheaacd_reset_acelp_data_fix of ixheaacd_lpc.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code…","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00727,"kevAdded":null},{"id":"CVE-2018-9534","published":"2018-11-14T18:00:00.000Z","updated":"2024-08-05T07:24:55.850Z","title":"In ixheaacd_mps_getstridemap of ixheaacd_mps_parse.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code…","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00727,"kevAdded":null},{"id":"CVE-2018-9533","published":"2018-11-14T18:00:00.000Z","updated":"2024-08-05T07:24:55.893Z","title":"In ixheaacd_dec_data_init of ixheaacd_create.c there is a possible out of write read due to a missing bounds check. This could lead to remote code execution…","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00727,"kevAdded":null},{"id":"CVE-2018-9532","published":"2018-11-14T18:00:00.000Z","updated":"2024-08-05T07:24:55.943Z","title":"In ixheaacd_extract_frame_info_ld of ixheaacd_env_extr.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code…","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00727,"kevAdded":null},{"id":"CVE-2018-9531","published":"2018-11-14T18:00:00.000Z","updated":"2024-08-05T07:24:55.944Z","title":"In AudioSpecificConfig_Parse of tpdec_asc.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01128,"kevAdded":null},{"id":"CVE-2018-9530","published":"2018-11-14T18:00:00.000Z","updated":"2024-08-05T07:24:55.943Z","title":"In ixheaacd_tns_ar_filter_dec of ixheaacd_aac_tns.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code…","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00727,"kevAdded":null},{"id":"CVE-2018-9529","published":"2018-11-14T18:00:00.000Z","updated":"2024-08-05T07:24:55.977Z","title":"In ixheaacd_individual_ch_stream of ixheaacd_channel.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code…","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00727,"kevAdded":null},{"id":"CVE-2018-9528","published":"2018-11-14T18:00:00.000Z","updated":"2024-08-05T07:24:55.903Z","title":"In ixheaacd_over_lap_add1_armv8 of ixheaacd_overlap_add1.s there is a possible out of bounds write due to a missing bounds check. This could lead to remote…","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00727,"kevAdded":null},{"id":"CVE-2018-9527","published":"2018-11-14T18:00:00.000Z","updated":"2024-08-05T07:24:56.077Z","title":"In vorbis_book_decodev_set of codebook.c there is a possible out of bounds write due to missing bounds check. This could lead to remote code execution with no…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01203,"kevAdded":null},{"id":"CVE-2018-9526","published":"2018-11-14T18:00:00.000Z","updated":"2024-08-05T07:24:56.017Z","title":"In device configuration data, there is an improperly configured setting. This could lead to remote disclosure of device location. User interaction is not…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0091,"kevAdded":null},{"id":"CVE-2018-9525","published":"2018-11-14T18:00:00.000Z","updated":"2024-08-05T07:24:56.277Z","title":"In the AndroidManifest.xml file defining the SliceBroadcastReceiver handler for com.android.settings.slice.action.WIFI_CHANGED, there is a possible permissions…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2018-9524","published":"2018-11-14T18:00:00.000Z","updated":"2024-08-05T07:24:55.947Z","title":"In functionality implemented in System UI, there are insufficient protections implemented around overlay windows. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00178,"kevAdded":null},{"id":"CVE-2018-9523","published":"2018-11-14T18:00:00.000Z","updated":"2024-08-05T07:24:55.918Z","title":"In Parcel.writeMapInternal of Parcel.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2018-9522","published":"2018-11-14T18:00:00.000Z","updated":"2024-08-05T07:24:56.131Z","title":"In the serialization functions of StatsLogEventWrapper.java, there is a possible out-of-bounds write due to unnecessary functionality which may be abused. This…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00178,"kevAdded":null},{"id":"CVE-2018-9521","published":"2018-11-14T18:00:00.000Z","updated":"2024-08-05T07:24:55.910Z","title":"In parseMPEGCCData of NuPlayer2CCDecoder.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code…","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01539,"kevAdded":null},{"id":"CVE-2018-9457","published":"2018-11-14T18:00:00.000Z","updated":"2024-08-05T07:24:54.838Z","title":"In onCheckedChanged of BluetoothPairingController.java, there is a possible way to retrieve contact information due to a permissions bypass. This could lead to…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00162,"kevAdded":null},{"id":"CVE-2018-9347","published":"2018-11-14T18:00:00.000Z","updated":"2024-08-05T07:17:52.087Z","title":"In function SMF_ParseMetaEvent of file eas_smf.c there is incorrect input validation causing an infinite loop. This could lead to a remote temporary DoS with…","severity":"MEDIUM","score":6.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00806,"kevAdded":null},{"id":"CVE-2018-9516","published":"2018-11-06T17:00:00.000Z","updated":"2024-09-16T17:09:12.114Z","title":"In hid_debug_events_read of drivers/hid/hid-debug.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00425,"kevAdded":null},{"id":"CVE-2018-9489","published":"2018-11-06T17:00:00.000Z","updated":"2024-09-16T20:22:34.166Z","title":"When wifi is switched, function sendNetworkStateChangeBroadcast of WifiStateMachine.java broadcasts an intent including detailed wifi network information. This…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00995,"kevAdded":null},{"id":"CVE-2018-9488","published":"2018-11-06T17:00:00.000Z","updated":"2024-09-17T01:50:46.089Z","title":"In the SELinux permissions of crash_dump.te, there is a permissions bypass due to a missing restriction. This could lead to a local escalation of privilege,…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00426,"kevAdded":null},{"id":"CVE-2018-9465","published":"2018-11-06T17:00:00.000Z","updated":"2024-09-16T23:41:04.670Z","title":"In task_get_unused_fd_flags of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00209,"kevAdded":null},{"id":"CVE-2018-9459","published":"2018-11-06T17:00:00.000Z","updated":"2024-09-16T20:06:56.127Z","title":"In Attachment of Attachment.java and getFilePath of EmlAttachmentProvider.java, there is a possible Elevation of Privilege due to a path traversal error. This…","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01677,"kevAdded":null},{"id":"CVE-2018-9458","published":"2018-11-06T17:00:00.000Z","updated":"2024-09-17T00:36:26.467Z","title":"In computeFocusedWindow of RootWindowContainer.java, and related functions, there is possible interception of keypresses due to focus being on the wrong…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0057,"kevAdded":null},{"id":"CVE-2018-9455","published":"2018-11-06T17:00:00.000Z","updated":"2024-09-16T20:02:21.254Z","title":"In sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0156,"kevAdded":null},{"id":"CVE-2018-9454","published":"2018-11-06T17:00:00.000Z","updated":"2024-09-16T17:48:54.851Z","title":"In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00199,"kevAdded":null},{"id":"CVE-2018-9453","published":"2018-11-06T17:00:00.000Z","updated":"2024-09-16T20:22:01.222Z","title":"In avdt_msg_prs_cfg of avdt_msg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0019,"kevAdded":null},{"id":"CVE-2018-9451","published":"2018-11-06T17:00:00.000Z","updated":"2024-09-16T22:01:52.849Z","title":"In DynamicRefTable::load of ResourceTypes.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0019,"kevAdded":null},{"id":"CVE-2018-9450","published":"2018-11-06T17:00:00.000Z","updated":"2024-09-16T19:04:39.393Z","title":"In avrc_proc_vendor_command of avrc_api.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution…","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.02739,"kevAdded":null},{"id":"CVE-2018-9448","published":"2018-11-06T17:00:00.000Z","updated":"2024-09-16T19:10:20.406Z","title":"In avct_bcb_msg_ind of avct_bcb_act.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01654,"kevAdded":null},{"id":"CVE-2018-9446","published":"2018-11-06T17:00:00.000Z","updated":"2024-09-16T18:43:42.880Z","title":"In smp_br_state_machine_event of smp_br_main.cc, there is a possible out of bounds write due to memory corruption. This could lead to remote code execution…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.02056,"kevAdded":null},{"id":"CVE-2018-9445","published":"2018-11-06T17:00:00.000Z","updated":"2024-09-17T04:25:36.140Z","title":"In readMetadata of Utils.cpp, there is a possible path traversal bug due to a confused deputy. This could lead to local escalation of privilege when mounting a…","severity":"MEDIUM","score":6.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0082,"kevAdded":null},{"id":"CVE-2018-9444","published":"2018-11-06T17:00:00.000Z","updated":"2024-09-16T17:22:59.792Z","title":"In ih264d_video_decode of ih264d_api.c there is a possible resource exhaustion due to an infinite loop. This could lead to remote temporary device denial of…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00532,"kevAdded":null},{"id":"CVE-2018-9438","published":"2018-11-06T17:00:00.000Z","updated":"2024-09-16T20:52:51.203Z","title":"When a device connects only over WiFi VPN, the device may not receive security updates due to some incorrect checks. This could lead to a local denial of…","severity":"MEDIUM","score":5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00192,"kevAdded":null},{"id":"CVE-2018-9437","published":"2018-11-06T17:00:00.000Z","updated":"2024-09-17T00:35:36.991Z","title":"In getstring of ID3.cpp there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote denial of service with no additional…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00884,"kevAdded":null},{"id":"CVE-2018-9436","published":"2018-11-06T17:00:00.000Z","updated":"2024-09-17T02:16:39.329Z","title":"In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01701,"kevAdded":null},{"id":"CVE-2018-9427","published":"2018-11-06T17:00:00.000Z","updated":"2024-09-16T16:28:04.219Z","title":"In CopyToOMX of OMXNodeInstance.cpp there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote arbitrary code…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01845,"kevAdded":null},{"id":"CVE-2018-9422","published":"2018-11-06T17:00:00.000Z","updated":"2024-09-16T18:24:27.587Z","title":"In get_futex_key of futex.c, there is a use-after-free due to improper locking. This could lead to local escalation of privilege with no additional privileges…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00216,"kevAdded":null},{"id":"CVE-2018-9415","published":"2018-11-06T17:00:00.000Z","updated":"2024-09-16T20:42:41.131Z","title":"In driver_override_store and driver_override_show of bus.c, there is a possible double free due to improper locking. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00254,"kevAdded":null},{"id":"CVE-2018-9385","published":"2018-11-06T17:00:00.000Z","updated":"2024-09-17T04:20:44.846Z","title":"In driver_override_store of bus.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00255,"kevAdded":null},{"id":"CVE-2018-9363","published":"2018-11-06T17:00:00.000Z","updated":"2024-09-16T18:38:38.597Z","title":"In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional execution privileges…","severity":"HIGH","score":8.4,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00456,"kevAdded":null},{"id":"CVE-2018-9362","published":"2018-11-06T17:00:00.000Z","updated":"2024-09-17T03:23:18.516Z","title":"In processMessagePart of InboundSmsHandler.java, there is a possible remote denial of service due to improper input validation. This could lead to remote…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0156,"kevAdded":null},{"id":"CVE-2018-9361","published":"2018-11-06T17:00:00.000Z","updated":"2024-09-16T16:18:55.966Z","title":"In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01709,"kevAdded":null},{"id":"CVE-2018-9360","published":"2018-11-06T17:00:00.000Z","updated":"2024-08-05T07:17:52.229Z","title":"In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.01736,"kevAdded":null},{"id":"CVE-2018-9359","published":"2018-11-06T17:00:00.000Z","updated":"2024-09-17T03:13:53.742Z","title":"In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01709,"kevAdded":null},{"id":"CVE-2018-9358","published":"2018-11-06T17:00:00.000Z","updated":"2024-09-17T00:06:26.656Z","title":"In gatts_process_attribute_req of gatt_sc.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01701,"kevAdded":null},{"id":"CVE-2018-9357","published":"2018-11-06T17:00:00.000Z","updated":"2024-09-16T17:07:46.072Z","title":"In BNEP_Write of bnep_api.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00208,"kevAdded":null},{"id":"CVE-2018-9356","published":"2018-11-06T17:00:00.000Z","updated":"2024-09-16T19:25:38.547Z","title":"In bnep_data_ind of bnep_main.c, there is a possible remote code execution due to a double free. This could lead to remote code execution with no additional…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.03246,"kevAdded":null},{"id":"CVE-2018-9355","published":"2018-11-06T17:00:00.000Z","updated":"2024-09-16T22:45:19.702Z","title":"In bta_dm_sdp_result of bta_dm_act.cc, there is a possible out of bounds stack write due to a missing bounds check. This could lead to remote code execution…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.02959,"kevAdded":null},{"id":"CVE-2018-9515","published":"2018-10-02T19:00:00.000Z","updated":"2024-09-16T21:07:52.862Z","title":"In sdcardfs_create and sdcardfs_mkdir of inode.c, there is a possible memory corruption due to improper locking. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00712,"kevAdded":null},{"id":"CVE-2018-9514","published":"2018-10-02T19:00:00.000Z","updated":"2024-09-16T17:42:54.580Z","title":"In sdcardfs_open of file.c, there is a possible Use After Free due to an unusual root cause. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0019,"kevAdded":null},{"id":"CVE-2018-9513","published":"2018-10-02T19:00:00.000Z","updated":"2024-09-17T01:51:35.931Z","title":"In copy_process of fork.c, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00165,"kevAdded":null},{"id":"CVE-2018-9511","published":"2018-10-02T19:00:00.000Z","updated":"2024-09-16T16:58:51.731Z","title":"In ipSecSetEncapSocketOwner of XfrmController.cpp, there is a possible failure to initialize a security feature due to uninitialized data. This could lead to…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00217,"kevAdded":null},{"id":"CVE-2018-9510","published":"2018-10-02T19:00:00.000Z","updated":"2024-09-17T02:36:07.667Z","title":"In smp_proc_enc_info of smp_act.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over…","severity":"MEDIUM","score":6.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00729,"kevAdded":null},{"id":"CVE-2018-9509","published":"2018-10-02T19:00:00.000Z","updated":"2024-09-17T00:06:57.043Z","title":"In smp_proc_master_id of smp_act.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure…","severity":"MEDIUM","score":6.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00729,"kevAdded":null},{"id":"CVE-2018-9508","published":"2018-10-02T19:00:00.000Z","updated":"2024-09-16T19:35:10.168Z","title":"In smp_process_keypress_notification of smp_act.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote…","severity":"MEDIUM","score":6.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00675,"kevAdded":null},{"id":"CVE-2018-9507","published":"2018-10-02T19:00:00.000Z","updated":"2024-09-17T02:31:54.977Z","title":"In bta_av_proc_meta_cmd of bta_av_act.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information…","severity":"MEDIUM","score":6.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00571,"kevAdded":null},{"id":"CVE-2018-9506","published":"2018-10-02T19:00:00.000Z","updated":"2024-09-16T17:22:39.902Z","title":"In avrc_msg_cback of avrc_api.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to remote information disclosure over…","severity":"MEDIUM","score":6.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00673,"kevAdded":null},{"id":"CVE-2018-9505","published":"2018-10-02T19:00:00.000Z","updated":"2024-09-16T19:10:01.885Z","title":"In mca_ccb_hdl_req of mca_cact.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over…","severity":"MEDIUM","score":6.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00571,"kevAdded":null},{"id":"CVE-2018-9504","published":"2018-10-02T19:00:00.000Z","updated":"2024-09-16T20:01:24.684Z","title":"In sdp_copy_raw_data of sdp_discovery.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution…","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00893,"kevAdded":null},{"id":"CVE-2018-9503","published":"2018-10-02T19:00:00.000Z","updated":"2024-09-16T16:22:27.641Z","title":"In rfc_process_mx_message of rfc_ts_frames.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.02625,"kevAdded":null},{"id":"CVE-2018-9502","published":"2018-10-02T19:00:00.000Z","updated":"2024-09-16T17:42:59.267Z","title":"In rfc_process_mx_message of rfc_ts_frames.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote information…","severity":"MEDIUM","score":6.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01208,"kevAdded":null},{"id":"CVE-2018-9501","published":"2018-10-02T19:00:00.000Z","updated":"2024-09-17T04:08:51.771Z","title":"In the SetupWizard, there is a possible Factory Reset Protection bypass due to a permissions bypass. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00224,"kevAdded":null},{"id":"CVE-2018-9499","published":"2018-10-02T19:00:00.000Z","updated":"2024-09-17T03:52:44.757Z","title":"In readVector of iCrypto.cpp, there is a possible invalid read due to uninitialized data. This could lead to local information disclosure from the DRM server…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00304,"kevAdded":null},{"id":"CVE-2018-9498","published":"2018-10-02T19:00:00.000Z","updated":"2024-09-17T00:21:56.699Z","title":"In SkSampler::Fill of SkSampler.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01625,"kevAdded":null},{"id":"CVE-2018-9497","published":"2018-10-02T19:00:00.000Z","updated":"2024-09-16T23:46:20.247Z","title":"In impeg2_fmt_conv_yuv420p_to_yuv420sp_uv_av8 of impeg2_format_conv.s there is a possible out of bounds write due to missing bounds check. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01568,"kevAdded":null},{"id":"CVE-2018-9496","published":"2018-10-02T19:00:00.000Z","updated":"2024-09-16T23:30:21.359Z","title":"In ixheaacd_real_synth_fft_p3 of ixheaacd_esbr_fft.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01822,"kevAdded":null},{"id":"CVE-2018-9493","published":"2018-10-02T19:00:00.000Z","updated":"2024-09-16T22:46:09.161Z","title":"In the content provider of the download manager, there is a possible SQL injection due to improper input validation. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0086,"kevAdded":null},{"id":"CVE-2018-9492","published":"2018-10-02T19:00:00.000Z","updated":"2024-09-16T22:31:12.845Z","title":"In checkGrantUriPermissionLocked of ActivityManagerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege with…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00188,"kevAdded":null},{"id":"CVE-2018-9491","published":"2018-10-02T19:00:00.000Z","updated":"2024-09-17T00:11:26.761Z","title":"In AMediaCodecCryptoInfo_new of NdkMediaCodec.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01514,"kevAdded":null},{"id":"CVE-2018-9490","published":"2018-10-02T19:00:00.000Z","updated":"2024-09-16T18:29:26.810Z","title":"In CollectValuesOrEntriesImpl of elements.cc, there is possible remote code execution due to type confusion. This could lead to remote escalation of privilege…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01443,"kevAdded":null},{"id":"CVE-2018-9476","published":"2018-10-02T19:00:00.000Z","updated":"2024-09-17T02:11:01.458Z","title":"In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible use-after-free due to improper locking. This could lead to remote escalation of privilege in…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.02478,"kevAdded":null},{"id":"CVE-2018-9473","published":"2018-10-02T19:00:00.000Z","updated":"2024-09-17T04:09:25.363Z","title":"In ihevcd_parse_sei_payload of ihevcd_parse_headers.c, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01505,"kevAdded":null},{"id":"CVE-2018-9452","published":"2018-10-02T19:00:00.000Z","updated":"2024-09-17T02:20:43.903Z","title":"In getOffsetForHorizontal of Layout.java, there is a possible application hang due to a slow width calculation. This could lead to remote denial of service if…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00942,"kevAdded":null},{"id":"CVE-2017-0751","published":"2018-04-05T18:00:00.000Z","updated":"2024-09-17T00:25:59.718Z","title":"An elevation of privilege vulnerability in the Qualcomm QCE driver. Product: Android. Versions: Android kernel. Android ID: A-36591162. References:…","severity":"MEDIUM","score":5.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2017-0748","published":"2018-04-05T18:00:00.000Z","updated":"2024-09-16T22:51:03.422Z","title":"An information disclosure vulnerability in the Qualcomm audio driver. Product: Android. Versions: Android Kernel. Android ID: A-35764875. References:…","severity":"MEDIUM","score":5.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00409,"kevAdded":null},{"id":"CVE-2017-0744","published":"2018-04-05T18:00:00.000Z","updated":"2024-09-17T03:14:30.230Z","title":"An elevation of privilege vulnerability in the NVIDIA firmware processing code. Product: Android. Versions: Android kernel. Android ID: A-34112726. References:…","severity":"MEDIUM","score":5.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2017-0431","published":"2018-04-05T18:00:00.000Z","updated":"2024-09-16T22:24:41.464Z","title":"An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-32573899.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00188,"kevAdded":null},{"id":"CVE-2016-8482","published":"2018-04-05T18:00:00.000Z","updated":"2024-09-17T04:29:32.782Z","title":"An elevation of privilege vulnerability in the NVIDIA GPU driver. Product: Android. Versions: Android kernel. Android ID: A-31799863. References:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00199,"kevAdded":null},{"id":"CVE-2015-9016","published":"2018-04-05T18:00:00.000Z","updated":"2024-09-17T04:28:55.719Z","title":"In blk_mq_tag_to_rq in blk-mq.c in the upstream kernel, there is a possible use after free due to a race condition when a request has been previously freed by…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2017-6426","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-17T01:21:59.030Z","title":"An information disclosure vulnerability in the Qualcomm SPMI driver. Product: Android. Versions: Android kernel. Android ID: A-33644474. References:…","severity":"LOW","score":3.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00405,"kevAdded":null},{"id":"CVE-2017-6425","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-16T20:42:47.194Z","title":"An information disclosure vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Android ID: A-32577085. References:…","severity":"LOW","score":3.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00405,"kevAdded":null},{"id":"CVE-2017-6424","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-16T16:48:42.158Z","title":"An elevation of privilege vulnerability in the Qualcomm WiFi driver. Product: Android. Versions: Android kernel. Android ID: A-32086742. References:…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00176,"kevAdded":null},{"id":"CVE-2017-6423","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-17T03:48:44.324Z","title":"An elevation of privilege vulnerability in the Qualcomm kyro L2 driver. Product: Android. Versions: Android kernel. Android ID: A-32831370. References:…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2016-10299","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-17T02:51:48.322Z","title":"An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-32577244.","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01086,"kevAdded":null},{"id":"CVE-2016-10298","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-16T22:09:53.144Z","title":"An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393252.","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01086,"kevAdded":null},{"id":"CVE-2016-10236","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-16T17:43:12.180Z","title":"An information disclosure vulnerability in the Qualcomm USB driver. Product: Android. Versions: Android kernel. Android ID: A-33280689. References:…","severity":"LOW","score":3.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00405,"kevAdded":null},{"id":"CVE-2016-10235","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-16T16:22:28.811Z","title":"A denial of service vulnerability in the Qualcomm WiFi driver. Product: Android. Versions: Android kernel. Android ID: A-34390620. References: QC-CR#1046409.","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00816,"kevAdded":null},{"id":"CVE-2016-10234","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-16T16:22:37.142Z","title":"An information disclosure vulnerability in the Qualcomm IPA driver. Product: Android. Versions: Android kernel. Android ID: A-34390017. References:…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00481,"kevAdded":null},{"id":"CVE-2016-10233","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-16T23:42:13.671Z","title":"An elevation of privilege vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Android ID: A-34389926. References:…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01073,"kevAdded":null},{"id":"CVE-2016-10232","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-16T19:24:40.992Z","title":"An elevation of privilege vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Android ID: A-34386696. References:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00549,"kevAdded":null},{"id":"CVE-2016-10231","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-17T00:30:38.241Z","title":"An elevation of privilege vulnerability in the Qualcomm sound codec driver. Product: Android. Versions: Android kernel. Android ID: A-33966912. References:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00626,"kevAdded":null},{"id":"CVE-2016-10230","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-16T19:46:44.944Z","title":"A remote code execution vulnerability in the Qualcomm crypto driver. Product: Android. Versions: Android kernel. Android ID: A-34389927. References:…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.02947,"kevAdded":null},{"id":"CVE-2016-8488","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-17T03:12:26.610Z","title":"An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-31625756.","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01073,"kevAdded":null},{"id":"CVE-2016-8487","published":"2018-04-04T18:00:00.000Z","updated":"2024-08-06T02:20:31.303Z","title":"An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823724.","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.01073,"kevAdded":null},{"id":"CVE-2016-8486","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-16T17:34:10.781Z","title":"An information disclosure vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823691.","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00716,"kevAdded":null},{"id":"CVE-2016-8485","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-17T02:41:46.507Z","title":"An information disclosure vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823681.","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00716,"kevAdded":null},{"id":"CVE-2016-8484","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-17T03:53:46.347Z","title":"An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823575.","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01073,"kevAdded":null},{"id":"CVE-2015-9015","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-16T23:56:22.560Z","title":"An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36714120.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00203,"kevAdded":null},{"id":"CVE-2015-9014","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-16T22:03:32.709Z","title":"An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393750.","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01349,"kevAdded":null},{"id":"CVE-2015-9013","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-17T03:43:25.908Z","title":"An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393251.","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01109,"kevAdded":null},{"id":"CVE-2015-9012","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-16T18:08:34.662Z","title":"An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384691.","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01086,"kevAdded":null},{"id":"CVE-2015-9011","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-17T01:16:23.097Z","title":"An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36714882.","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01109,"kevAdded":null},{"id":"CVE-2015-9010","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-16T21:07:23.381Z","title":"An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393101.","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01109,"kevAdded":null},{"id":"CVE-2015-9009","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-16T23:15:41.752Z","title":"An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393600.","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01109,"kevAdded":null},{"id":"CVE-2015-9008","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-17T04:25:19.563Z","title":"An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384689.","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01109,"kevAdded":null},{"id":"CVE-2014-9959","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-16T19:51:28.779Z","title":"An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36383694.","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01086,"kevAdded":null},{"id":"CVE-2014-9958","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-16T21:04:20.399Z","title":"An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384774.","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01086,"kevAdded":null},{"id":"CVE-2014-9957","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-16T18:24:14.140Z","title":"An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36387564.","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01086,"kevAdded":null},{"id":"CVE-2014-9956","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-16T18:45:22.700Z","title":"An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36389611.","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01086,"kevAdded":null},{"id":"CVE-2014-9955","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-16T16:28:31.557Z","title":"An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384686.","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01086,"kevAdded":null},{"id":"CVE-2014-9954","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-16T19:19:16.452Z","title":"An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36388559.","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01086,"kevAdded":null},{"id":"CVE-2014-9953","published":"2018-04-04T18:00:00.000Z","updated":"2024-09-16T23:26:21.146Z","title":"An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36714770.","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01086,"kevAdded":null},{"id":"CVE-2017-13272","published":"2018-04-04T17:00:00.000Z","updated":"2024-09-16T18:48:47.404Z","title":"In alarm_ready_generic of alarm.cc, there is a possible out of bounds write due to a use after free. This could lead to remote escalation of privilege with no…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01778,"kevAdded":null},{"id":"CVE-2017-13271","published":"2018-04-04T17:00:00.000Z","updated":"2024-09-16T20:12:51.376Z","title":"A elevation of privilege vulnerability in the upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-69006799.","severity":"HIGH","score":7.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00338,"kevAdded":null},{"id":"CVE-2017-13270","published":"2018-04-04T17:00:00.000Z","updated":"2024-09-17T00:20:59.193Z","title":"A elevation of privilege vulnerability in the upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-69474744.","severity":"HIGH","score":7.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00323,"kevAdded":null},{"id":"CVE-2017-13269","published":"2018-04-04T17:00:00.000Z","updated":"2024-09-17T02:46:55.407Z","title":"A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android…","severity":"MEDIUM","score":4.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00192,"kevAdded":null},{"id":"CVE-2017-13268","published":"2018-04-04T17:00:00.000Z","updated":"2024-09-16T22:29:47.253Z","title":"A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android…","severity":"MEDIUM","score":4.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00192,"kevAdded":null},{"id":"CVE-2017-13266","published":"2018-04-04T17:00:00.000Z","updated":"2024-09-17T00:56:47.101Z","title":"In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible stack corruption due to a missing bounds check. This could lead to remote code execution with…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01778,"kevAdded":null},{"id":"CVE-2017-13265","published":"2018-04-04T17:00:00.000Z","updated":"2024-09-17T02:41:40.807Z","title":"A elevation of privilege vulnerability in the Android system (OTA updates). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-36232423.","severity":"HIGH","score":7.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00323,"kevAdded":null},{"id":"CVE-2017-13264","published":"2018-04-04T17:00:00.000Z","updated":"2024-09-16T22:25:53.924Z","title":"A other vulnerability in the Android media framework (Avcdec). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70294343.","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2017-13263","published":"2018-04-04T17:00:00.000Z","updated":"2024-09-16T20:52:45.725Z","title":"A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 8.0, 8.1. Android ID: A-69383160.","severity":"HIGH","score":7.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00323,"kevAdded":null},{"id":"CVE-2017-13262","published":"2018-04-04T17:00:00.000Z","updated":"2024-09-16T18:29:29.191Z","title":"In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing length decrement operation. This could lead to remote information…","severity":"MEDIUM","score":6.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.08021,"kevAdded":null},{"id":"CVE-2017-13261","published":"2018-04-04T17:00:00.000Z","updated":"2024-09-17T01:10:48.091Z","title":"In bnep_process_control_packet of bnep_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.07146,"kevAdded":null},{"id":"CVE-2017-13260","published":"2018-04-04T17:00:00.000Z","updated":"2024-09-16T19:19:31.474Z","title":"In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.07293,"kevAdded":null},{"id":"CVE-2017-13259","published":"2018-04-04T17:00:00.000Z","updated":"2024-09-16T16:37:59.526Z","title":"In functionality implemented in sdp_discovery.cc, there are possible out of bounds reads due to missing bounds checks. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01259,"kevAdded":null},{"id":"CVE-2017-13258","published":"2018-04-04T17:00:00.000Z","updated":"2024-09-16T18:39:45.529Z","title":"In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.07116,"kevAdded":null},{"id":"CVE-2017-13257","published":"2018-04-04T17:00:00.000Z","updated":"2024-09-16T17:49:00.412Z","title":"In bta_pan_data_buf_ind_cback of bta_pan_act.cc there is a use after free that can result in an out of bounds read of memory allocated via malloc. This could…","severity":"MEDIUM","score":6.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00719,"kevAdded":null},{"id":"CVE-2017-13256","published":"2018-04-04T17:00:00.000Z","updated":"2024-09-16T16:34:02.341Z","title":"In process_service_search_attr_req of sdp_server.cc, there is an out of bounds write due to a missing bounds check. This could lead to remote code execution…","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00651,"kevAdded":null},{"id":"CVE-2017-13255","published":"2018-04-04T17:00:00.000Z","updated":"2024-09-17T02:37:32.701Z","title":"In process_service_attr_req of sdp_server.c, there is an out of bounds write due to a missing bounds check. This could lead to remote code execution with no…","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00651,"kevAdded":null},{"id":"CVE-2017-13254","published":"2018-04-04T17:00:00.000Z","updated":"2024-09-17T01:41:20.028Z","title":"A other vulnerability in the Android media framework (AACExtractor). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID:…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00422,"kevAdded":null},{"id":"CVE-2017-13253","published":"2018-04-04T17:00:00.000Z","updated":"2024-09-16T20:16:53.091Z","title":"In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.02811,"kevAdded":null},{"id":"CVE-2017-13252","published":"2018-04-04T17:00:00.000Z","updated":"2024-09-16T20:53:09.639Z","title":"In CryptoHal::decrypt of CryptoHal.cpp, there is an out of bounds write due to improper input validation that results in a read from uninitialized memory. This…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00561,"kevAdded":null},{"id":"CVE-2017-13251","published":"2018-04-04T17:00:00.000Z","updated":"2024-09-17T03:33:37.130Z","title":"In impeg2d_dec_pic_data_thread of impeg2d_dec_hdr.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00561,"kevAdded":null},{"id":"CVE-2017-13250","published":"2018-04-04T17:00:00.000Z","updated":"2024-09-16T23:55:41.941Z","title":"In ih264d_fmt_conv_420sp_to_420p of ih264d_utils.c, there is an out of bound write due to a missing out of bounds check because of a multiplication error. This…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01053,"kevAdded":null},{"id":"CVE-2017-13249","published":"2018-04-04T17:00:00.000Z","updated":"2024-09-17T03:17:42.231Z","title":"In impeg2d_api_set_display_frame of impeg2d_api_main.c, there is an out of bound write due to a missing bounds check. This could lead to remote code execution…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01053,"kevAdded":null},{"id":"CVE-2017-13248","published":"2018-04-04T17:00:00.000Z","updated":"2024-09-16T22:24:58.125Z","title":"In impeg2_idct_recon_sse42() of impeg2_idct_recon_sse42_intr.c, there is an out of bound write due to a missing bounds check. This could lead to an remote code…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01053,"kevAdded":null},{"id":"CVE-2017-13307","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-16T16:24:04.305Z","title":"A elevation of privilege vulnerability in the Upstream kernel pci sysfs. Product: Android. Versions: Android kernel. Android ID: A-69128924.","severity":"HIGH","score":7.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00486,"kevAdded":null},{"id":"CVE-2017-13306","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-17T00:46:38.287Z","title":"A elevation of privilege vulnerability in the Upstream kernel mnh driver. Product: Android. Versions: Android kernel. Android ID: A-70295063.","severity":"HIGH","score":7.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00345,"kevAdded":null},{"id":"CVE-2017-13305","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-16T18:13:39.183Z","title":"A information disclosure vulnerability in the Upstream kernel encrypted-keys. Product: Android. Versions: Android kernel. Android ID: A-70526974.","severity":"HIGH","score":7.1,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00308,"kevAdded":null},{"id":"CVE-2017-13304","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-17T03:18:07.595Z","title":"A information disclosure vulnerability in the Upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-70576999.","severity":"MEDIUM","score":5.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00363,"kevAdded":null},{"id":"CVE-2017-13303","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-17T04:09:54.923Z","title":"A information disclosure vulnerability in the Broadcom bcmdhd driver. Product: Android. Versions: Android kernel. Android ID: A-71359108. References:…","severity":"MEDIUM","score":5.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0034,"kevAdded":null},{"id":"CVE-2017-13302","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-17T03:47:42.061Z","title":"A denial of service vulnerability in the Android system (system ui). Product: Android. Versions: 8.0. Android ID: A-69969749.","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00422,"kevAdded":null},{"id":"CVE-2017-13301","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-17T02:06:42.157Z","title":"A denial of service vulnerability in the Android system (system ui). Product: Android. Versions: 8.0. Android ID: A-66498711.","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00422,"kevAdded":null},{"id":"CVE-2017-13300","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-16T22:14:38.411Z","title":"A denial of service vulnerability in the Android media framework (libhevc). Product: Android. Versions: 6.0, 6.0.1. Android ID: A-71567394.","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2017-13299","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-16T22:56:03.284Z","title":"A other vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70897394.","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2017-13298","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-16T22:03:09.265Z","title":"A information disclosure vulnerability in the Android media framework (libhavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android…","severity":"MEDIUM","score":5.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0034,"kevAdded":null},{"id":"CVE-2017-13297","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-17T03:33:58.902Z","title":"A information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android…","severity":"MEDIUM","score":5.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0034,"kevAdded":null},{"id":"CVE-2017-13296","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-16T18:19:42.444Z","title":"A information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android…","severity":"MEDIUM","score":5.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0034,"kevAdded":null},{"id":"CVE-2017-13295","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-17T01:36:09.072Z","title":"A denial of service vulnerability in the Android framework (package installer). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android…","severity":"MEDIUM","score":5.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00408,"kevAdded":null},{"id":"CVE-2017-13294","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-16T20:36:42.086Z","title":"A information disclosure vulnerability in the Android framework (aosp email application). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1.…","severity":"MEDIUM","score":5.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0034,"kevAdded":null},{"id":"CVE-2017-13293","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-17T01:16:19.682Z","title":"In the nfc_hci_cmd_received() function of core.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00174,"kevAdded":null},{"id":"CVE-2017-13292","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-17T02:07:06.004Z","title":"In wl_get_assoc_ies of wl_cfg80211.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01619,"kevAdded":null},{"id":"CVE-2017-13291","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-17T00:02:21.834Z","title":"In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible NULL pointer dereference due to missing bounds checks. This could lead to remote denial of…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01063,"kevAdded":null},{"id":"CVE-2017-13290","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-16T22:01:56.494Z","title":"In sdp_server_handle_client_req of sdp_server.cc, there is an out of bounds read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":6.2,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00166,"kevAdded":null},{"id":"CVE-2017-13289","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-16T22:45:22.814Z","title":"In writeToParcel and createFromParcel of RttManager.java, there is a permission bypass due to a write size mismatch. This could lead to a local escalation of…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00188,"kevAdded":null},{"id":"CVE-2017-13288","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-16T16:59:05.258Z","title":"In writeToParcel and readFromParcel of PeriodicAdvertisingReport.java, there is a permission bypass due to a 64/32bit int mismatch. This could lead to a local…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00193,"kevAdded":null},{"id":"CVE-2017-13287","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-16T21:57:05.450Z","title":"In createFromParcel of VerifyCredentialResponse.java, there is a possible invalid parcel read due to improper input validation. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0017,"kevAdded":null},{"id":"CVE-2017-13286","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-16T21:07:27.066Z","title":"In writeToParcel and readFromParcel of OutputConfiguration.java, there is a permission bypass due to mismatched serialization. This could lead to a local…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00327,"kevAdded":null},{"id":"CVE-2017-13285","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-16T20:37:05.260Z","title":"In SvoxSsmlParser and startElement of svox_ssml_parser.cpp, there is a possible out of bounds write due to an uninitialized buffer. This could lead to remote…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01592,"kevAdded":null},{"id":"CVE-2017-13284","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-16T17:58:41.881Z","title":"In config_set_string of config.cc, it is possible to pair a second BT keyboard without user approval due to improper input validation. This could lead to…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01619,"kevAdded":null},{"id":"CVE-2017-13283","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-16T19:24:51.589Z","title":"In avrc_ctrl_pars_vendor_rsp of bluetooth avrcp_ctrl, there is a possible out of bounds write on the stack due to a missing bounds check. This could lead to…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.02095,"kevAdded":null},{"id":"CVE-2017-13282","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-17T03:34:19.991Z","title":"In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible stack buffer overflow due to a missing bounds check. This could lead to remote code…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01693,"kevAdded":null},{"id":"CVE-2017-13281","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-16T18:54:14.872Z","title":"In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible stack buffer overflow due to an incorrect bounds check. This could lead to remote code…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0176,"kevAdded":null},{"id":"CVE-2017-13280","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-17T01:11:04.748Z","title":"In the FrameSequence_gif::FrameSequence_gif function of libframesequence, there is a out of bounds read due to a missing bounds check. This could lead to a…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00796,"kevAdded":null},{"id":"CVE-2017-13279","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-16T20:17:37.331Z","title":"In M3UParser::parse of M3UParser.cpp, there is a memory resource exhaustion due to a large loop of pushing items into a vector. This could lead to remote…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00526,"kevAdded":null},{"id":"CVE-2017-13278","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-16T16:28:24.709Z","title":"In MediaPlayerService::Client::notify of MediaPlayerService.cpp, there is a possible use after free. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00447,"kevAdded":null},{"id":"CVE-2017-13277","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-16T20:02:58.215Z","title":"In ihevcd_fmt_conv of ihevcd_fmt_conv.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01018,"kevAdded":null},{"id":"CVE-2017-13276","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-16T23:36:40.692Z","title":"In CProgramConfig_ReadHeightExt of tpdec_asc.cpp, there is a possible stack buffer overflow due to a missing bounds check. This could lead to a remote code…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0068,"kevAdded":null},{"id":"CVE-2017-13275","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-16T16:14:14.058Z","title":"In getVSCoverage of CmapCoverage.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2017-13274","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-17T02:33:08.200Z","title":"In the getHost() function of UriTest.java, there is the possibility of incorrect web origin determination. This could lead to incorrect security decisions with…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00491,"kevAdded":null},{"id":"CVE-2017-13267","published":"2018-04-04T16:00:00.000Z","updated":"2024-09-16T22:01:57.654Z","title":"In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible stack corruption due to a missing bounds check. This could lead to remote escalation of…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01619,"kevAdded":null},{"id":"CVE-2017-13273","published":"2018-02-15T02:00:00.000Z","updated":"2024-09-17T01:17:07.793Z","title":"In xt_qtaguid.c, there is a race condition due to insufficient locking. This could lead to local elevation of privileges with no additional execution…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00162,"kevAdded":null},{"id":"CVE-2017-13247","published":"2018-02-12T19:00:00.000Z","updated":"2024-09-17T00:06:03.165Z","title":"In the Pixel 2 bootloader, there is a missing permission check which bypasses carrier bootloader lock. This could lead to local elevation of privileges with…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2017-13246","published":"2018-02-12T19:00:00.000Z","updated":"2024-09-17T00:10:44.394Z","title":"A information disclosure vulnerability in the Upstream kernel network driver. Product: Android. Versions: Android kernel. ID: A-36279469.","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00514,"kevAdded":null},{"id":"CVE-2017-13245","published":"2018-02-12T19:00:00.000Z","updated":"2024-09-16T16:13:43.075Z","title":"A elevation of privilege vulnerability in the Upstream kernel audio driver. Product: Android. Versions: Android kernel. ID: A-64315347.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00151,"kevAdded":null},{"id":"CVE-2017-13244","published":"2018-02-12T19:00:00.000Z","updated":"2024-09-16T20:27:07.178Z","title":"A elevation of privilege vulnerability in the Upstream kernel easel. Product: Android. Versions: Android kernel. ID: A-62678986.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00151,"kevAdded":null},{"id":"CVE-2017-13243","published":"2018-02-12T19:00:00.000Z","updated":"2024-09-16T23:11:45.011Z","title":"A information disclosure vulnerability in the Android system (ui). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. ID: A-38258991.","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00594,"kevAdded":null},{"id":"CVE-2017-13242","published":"2018-02-12T19:00:00.000Z","updated":"2024-09-16T21:56:46.066Z","title":"A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID: A-62672248.","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00514,"kevAdded":null},{"id":"CVE-2017-13241","published":"2018-02-12T19:00:00.000Z","updated":"2024-09-17T03:43:47.268Z","title":"A information disclosure vulnerability in the Android media framework (libstagefright_soft_avcenc). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1,…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00514,"kevAdded":null},{"id":"CVE-2017-13240","published":"2018-02-12T19:00:00.000Z","updated":"2024-09-17T02:11:53.106Z","title":"A information disclosure vulnerability in the Android framework (crypto framework). Product: Android. Versions: 8.0, 8.1. ID: A-68694819.","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00514,"kevAdded":null},{"id":"CVE-2017-13239","published":"2018-02-12T19:00:00.000Z","updated":"2024-09-16T20:36:38.055Z","title":"A information disclosure vulnerability in the Android framework (ui framework). Product: Android. Versions: 8.0. ID: A-66244132.","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00433,"kevAdded":null},{"id":"CVE-2017-13238","published":"2018-02-12T19:00:00.000Z","updated":"2024-09-16T23:51:23.243Z","title":"In XBLRamDump mode, there is a debug feature that can be used to dump memory contents, if an attacker has physical access to the device. This could lead to…","severity":"MEDIUM","score":4.2,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2017-13236","published":"2018-02-12T19:00:00.000Z","updated":"2024-09-16T20:36:16.755Z","title":"In the KeyStore service, there is a permissions bypass that allows access to protected resources. This could lead to local escalation of privilege with system…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00548,"kevAdded":null},{"id":"CVE-2017-13235","published":"2018-02-12T19:00:00.000Z","updated":"2024-09-16T23:25:46.651Z","title":"A other vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID: A-68342866.","severity":"MEDIUM","score":6.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0034,"kevAdded":null},{"id":"CVE-2017-13234","published":"2018-02-12T19:00:00.000Z","updated":"2024-09-16T18:28:36.185Z","title":"In DLSParser of the sonivox library, there is possible resource exhaustion due to a memory leak. This could lead to remote temporary denial of service with no…","severity":"MEDIUM","score":6.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00636,"kevAdded":null},{"id":"CVE-2017-13233","published":"2018-02-12T19:00:00.000Z","updated":"2024-09-16T17:57:50.224Z","title":"In ihevcd_ctb_boundary_strength_pbslice of libhevc, there is possible resource exhaustion. This could lead to a remote temporary denial of service with no…","severity":"MEDIUM","score":6.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00636,"kevAdded":null},{"id":"CVE-2017-13232","published":"2018-02-12T19:00:00.000Z","updated":"2024-09-16T23:35:50.251Z","title":"In audioserver, there is an out-of-bounds write due to a log statement using %s with an array that may not be NULL terminated. This could lead to local…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00817,"kevAdded":null},{"id":"CVE-2017-13231","published":"2018-02-12T19:00:00.000Z","updated":"2024-09-17T02:07:12.902Z","title":"In libmediadrm, there is an out-of-bounds write due to improper input validation. This could lead to local elevation of privileges with no additional execution…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2017-13230","published":"2018-02-12T19:00:00.000Z","updated":"2024-09-17T01:11:39.394Z","title":"In hevc codec, there is an out-of-bounds write due to an incorrect bounds check with the i2_pic_width_in_luma_samples value. This could lead to remote…","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01905,"kevAdded":null},{"id":"CVE-2017-13229","published":"2018-02-12T19:00:00.000Z","updated":"2024-09-16T23:46:37.507Z","title":"A remote code execution vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID: A-68160703.","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01778,"kevAdded":null},{"id":"CVE-2017-13228","published":"2018-02-12T19:00:00.000Z","updated":"2024-09-17T01:20:32.606Z","title":"In function ih264d_ref_idx_reordering of libavc, there is an out-of-bounds write due to modCount being defined as an unsigned character. This could lead to…","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01437,"kevAdded":null},{"id":"CVE-2017-13226","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-17T04:25:16.971Z","title":"An elevation of privilege vulnerability in the MediaTek mtk. Product: Android. Versions: Android kernel. Android ID: A-32591194. References: M-ALPS03149184.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2017-13225","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T18:54:08.354Z","title":"In libMtkOmxVdec.so there is a possible heap buffer overflow. This could lead to a remote elevation of privilege enabling code execution as a privileged…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00892,"kevAdded":null},{"id":"CVE-2017-13222","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-17T00:30:32.822Z","title":"An information disclosure vulnerability in the Upstream kernel kernel. Product: Android. Versions: Android kernel. Android ID: A-38159576.","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00655,"kevAdded":null},{"id":"CVE-2017-13221","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T17:19:01.918Z","title":"An elevation of privilege vulnerability in the Upstream kernel wifi driver. Product: Android. Versions: Android kernel. Android ID: A-64709938.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2017-13220","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T21:58:00.672Z","title":"An elevation of privilege vulnerability in the Upstream kernel bluez. Product: Android. Versions: Android kernel. Android ID: A-63527053.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0028,"kevAdded":null},{"id":"CVE-2017-13219","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-17T02:01:38.127Z","title":"A denial of service vulnerability in the Upstream kernel synaptics touchscreen controller. Product: Android. Versions: Android kernel. Android ID: A-62800865.","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00508,"kevAdded":null},{"id":"CVE-2017-13218","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T20:21:52.303Z","title":"Access to CNTVCT_EL0 in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear could be used for side channel attacks and this could lead…","severity":"MEDIUM","score":4.7,"vendor":"Qualcomm, Inc.","product":"Android for MSM, Firefox OS for MSM, QRD Android","kev":false,"epss":0.00235,"kevAdded":null},{"id":"CVE-2017-13217","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T19:09:18.479Z","title":"In DisplayFtmItem in the bootloader, there is an out-of-bounds write due to reading a string without verifying that it's null-terminated. This could lead to a…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00202,"kevAdded":null},{"id":"CVE-2017-13216","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T20:32:01.232Z","title":"In ashmem_ioctl of ashmem.c, there is an out-of-bounds write due to insufficient locking when accessing asma. This could lead to a local elevation of privilege…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00949,"kevAdded":null},{"id":"CVE-2017-13215","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T17:59:42.805Z","title":"A elevation of privilege vulnerability in the Upstream kernel skcipher. Product: Android. Versions: Android kernel. Android ID: A-64386293. References:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0031,"kevAdded":null},{"id":"CVE-2017-13214","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T17:44:10.881Z","title":"In the hardware HEVC decoder, some media files could cause a page fault. This could lead to a remote denial of service of a critical system process with no…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.02173,"kevAdded":null},{"id":"CVE-2017-13213","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-17T03:43:05.438Z","title":"An elevation of privilege vulnerability in the Broadcom bcmdhd driver. Product: Android. Versions: Android kernel. Android ID: A-63374465. References:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00152,"kevAdded":null},{"id":"CVE-2017-13212","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T22:03:03.815Z","title":"An elevation of privilege vulnerability in the Android system (systemui). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00152,"kevAdded":null},{"id":"CVE-2017-13211","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T18:54:39.593Z","title":"In bta_scan_results_cb_impl of btif_ble_scanner.cc, there is possible resource exhaustion if a large number of repeated BLE scan results are received. This…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.02173,"kevAdded":null},{"id":"CVE-2017-13210","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T21:58:22.710Z","title":"In CameraDeviceClient::submitRequestList of CameraDeviceClient.cpp, there is an out-of-bounds write if metadataSize is too small. This could lead to a local…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00215,"kevAdded":null},{"id":"CVE-2017-13209","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T17:17:48.198Z","title":"In the ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller which could allow an…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00753,"kevAdded":null},{"id":"CVE-2017-13208","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T17:19:18.730Z","title":"In receive_packet of libnetutils/packet.c, there is a possible out-of-bounds write due to a missing bounds check on the DHCP response. This could lead to…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.08533,"kevAdded":null},{"id":"CVE-2017-13207","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T17:38:18.159Z","title":"An information disclosure vulnerability in the Android media framework (stagefright mpeg4writer). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00631,"kevAdded":null},{"id":"CVE-2017-13206","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-17T01:36:29.843Z","title":"An information disclosure vulnerability in the Android media framework (aacdec). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1.…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00631,"kevAdded":null},{"id":"CVE-2017-13205","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-17T02:52:57.741Z","title":"An information disclosure vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID:…","severity":"CRITICAL","score":9.1,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00641,"kevAdded":null},{"id":"CVE-2017-13204","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-17T02:16:14.815Z","title":"An information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID:…","severity":"CRITICAL","score":9.1,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0067,"kevAdded":null},{"id":"CVE-2017-13203","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T20:17:43.501Z","title":"An information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID:…","severity":"CRITICAL","score":9.1,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00684,"kevAdded":null},{"id":"CVE-2017-13202","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-17T00:55:32.044Z","title":"An information disclosure vulnerability in the Android media framework (libeffects). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0,…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00631,"kevAdded":null},{"id":"CVE-2017-13201","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-17T02:05:52.393Z","title":"An information disclosure vulnerability in the Android media framework (mediadrm). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1.…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00514,"kevAdded":null},{"id":"CVE-2017-13200","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T23:15:29.412Z","title":"An information disclosure vulnerability in the Android media framework (av) related to id3 unsynchronization. Product: Android. Versions: 7.0, 7.1.1, 7.1.2,…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00437,"kevAdded":null},{"id":"CVE-2017-13199","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T18:08:02.302Z","title":"In Bitmap.ccp if Bitmap.nativeCreate fails an out of memory exception is not thrown leading to a java.io.IOException later on. This could lead to a remote…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.02173,"kevAdded":null},{"id":"CVE-2017-13198","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T20:27:56.118Z","title":"A vulnerability in the Android media framework (ex) related to composition of frames lacking a color map. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0,…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00585,"kevAdded":null},{"id":"CVE-2017-13197","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T19:10:13.070Z","title":"In the ihevcd_parse_slice.c function, slave threads are not joined if there is an error. This could lead to a remote denial of service of a critical system…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.02173,"kevAdded":null},{"id":"CVE-2017-13196","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T19:47:27.315Z","title":"In several places in ihevcd_decode.c, a dead loop could occur due to incomplete frames which could lead to memory leaks. This could lead to a remote denial of…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.02173,"kevAdded":null},{"id":"CVE-2017-13195","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-17T00:01:03.478Z","title":"In the ihevcd_parse_sps function of ihevcd_parse_headers.c, several parameter values could be negative which could lead to negative indexes which could lead to…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0173,"kevAdded":null},{"id":"CVE-2017-13194","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-17T04:25:14.622Z","title":"A vulnerability in the Android media framework (libvpx) related to odd frame width. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID:…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01805,"kevAdded":null},{"id":"CVE-2017-13193","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T16:49:17.587Z","title":"In ihevcd_decode.c there is a possible infinite loop due to bytes for an sps of unsupported resolution resulting in the same sps being fed in over and over.…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.02173,"kevAdded":null},{"id":"CVE-2017-13192","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T18:59:12.998Z","title":"In the ihevcd_parse_slice_header function of ihevcd_parse_slice_header.c a slice address of zero after the first slice could result in an infinite loop. This…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0173,"kevAdded":null},{"id":"CVE-2017-13191","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T20:42:55.518Z","title":"In the ihevcd_decode function of ihevcd_decode.c, there is an infinite loop due to an incomplete frame error. This could lead to a remote denial of service of…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0173,"kevAdded":null},{"id":"CVE-2017-13190","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-17T02:17:05.895Z","title":"A vulnerability in the Android media framework (libhevc) related to handling ps_codec_obj memory allocation failures. Product: Android. Versions: 7.0, 7.1.1,…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00463,"kevAdded":null},{"id":"CVE-2017-13189","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T20:57:19.680Z","title":"A vulnerability in the Android media framework (libavc) related to handling dec_hdl memory allocation failures. Product: Android. Versions: 7.0, 7.1.1, 7.1.2,…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00463,"kevAdded":null},{"id":"CVE-2017-13188","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T16:24:19.798Z","title":"An information disclosure vulnerability in the Android media framework (aac). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65280786.","severity":"CRITICAL","score":9.1,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00641,"kevAdded":null},{"id":"CVE-2017-13187","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-17T00:02:26.280Z","title":"An information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID:…","severity":"CRITICAL","score":9.1,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00508,"kevAdded":null},{"id":"CVE-2017-13186","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T16:24:06.262Z","title":"A vulnerability in the Android media framework (libavc) related to incorrect use of mmco parameters. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1.…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00463,"kevAdded":null},{"id":"CVE-2017-13185","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-17T03:58:35.202Z","title":"An information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-65123471.","severity":"CRITICAL","score":9.1,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00508,"kevAdded":null},{"id":"CVE-2017-13184","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T17:18:22.069Z","title":"In the enableVSyncInjections function of SurfaceFlinger, there is a possible use after free of mVSyncInjector. This could lead to a local elevation of…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0022,"kevAdded":null},{"id":"CVE-2017-13183","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-17T01:26:48.492Z","title":"In the OMXNodeInstance::useBuffer and IOMX::freeBuffer functions, there is a possible use after free due to a race condition if the user frees the buffer while…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00147,"kevAdded":null},{"id":"CVE-2017-13182","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T19:52:15.231Z","title":"In the sendFormatChange function of ACodec, there is a possible integer overflow which could lead to an out-of-bounds write. This could lead to a local…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.002,"kevAdded":null},{"id":"CVE-2017-13181","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T23:26:21.691Z","title":"In the doGetThumb and getThumbnail functions of MtpServer, there is a possible double free due to not NULLing out a freed pointer. This could lead to an local…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.002,"kevAdded":null},{"id":"CVE-2017-13180","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T18:12:49.078Z","title":"In the onQueueFilled function of SoftAVCDec, there is a possible out-of-bounds write due to a use after free if a bad header causes the decoder to get caught…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00195,"kevAdded":null},{"id":"CVE-2017-13179","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T22:30:04.808Z","title":"In the ihevcd_allocate_static_bufs and ihevcd_create functions of SoftHEVC, there is a possible out-of-bounds write due to a use after free. Both ps_codec_obj…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.02352,"kevAdded":null},{"id":"CVE-2017-13178","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T22:46:14.397Z","title":"In the initDecoder function of SoftAVCDec, there is a possible out-of-bounds write to mCodecCtx due to a use after free when buffer allocation fails. This…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.02352,"kevAdded":null},{"id":"CVE-2017-13177","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T18:44:11.280Z","title":"In several functions of libhevc, NEON registers are not preserved. This could lead to remote code execution as a privileged process with no additional…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0242,"kevAdded":null},{"id":"CVE-2017-13176","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T17:38:00.909Z","title":"In the parseURL function of URLStreamHandler, there is improper input validation of the host field. This could lead to a remote elevation of privilege that…","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01202,"kevAdded":null},{"id":"CVE-2017-0855","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-17T00:00:53.386Z","title":"In MPEG4Extractor.cpp, there are several places where functions return early without cleaning up internal buffers which could lead to memory leaks. This could…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0173,"kevAdded":null},{"id":"CVE-2017-0846","published":"2018-01-12T23:00:00.000Z","updated":"2024-09-16T16:33:50.625Z","title":"An information disclosure vulnerability in the Android framework (clipboardservice). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0.…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2017-0869","published":"2018-01-12T15:00:00.000Z","updated":"2024-09-16T18:43:29.085Z","title":"NVIDIA driver contains an integer overflow vulnerability which could cause a use after free and possibly lead to an elevation of privilege enabling code…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00195,"kevAdded":null},{"id":"CVE-2017-13175","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-16T23:50:25.452Z","title":"An information disclosure vulnerability in the NVIDIA libwilhelm. Product: Android. Versions: Android kernel. Android ID A-64339309. References:…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2017-13174","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-16T23:15:20.408Z","title":"An elevation of privilege vulnerability in the kernel edl. Product: Android. Versions: Android kernel. Android ID A-63100473.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2017-13173","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-16T16:13:41.665Z","title":"An elevation of privilege vulnerability in the MediaTek system server. Product: Android. Versions: Android kernel. Android ID A-28067350. References:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00158,"kevAdded":null},{"id":"CVE-2017-13172","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-16T23:30:28.160Z","title":"An elevation of privilege vulnerability in the MediaTek bluetooth driver. Product: Android. Versions: Android kernel. Android ID A-36493287. References:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2017-13171","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-16T19:19:12.672Z","title":"An elevation of privilege vulnerability in the MediaTek performance service. Product: Android. Versions: Android kernel. Android ID A-64316572. References:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00158,"kevAdded":null},{"id":"CVE-2017-13170","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-16T20:37:09.595Z","title":"An elevation of privilege vulnerability in the MediaTek display driver. Product: Android. Versions: Android kernel. Android ID A-36102397. References:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00158,"kevAdded":null},{"id":"CVE-2017-13169","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-16T18:28:24.694Z","title":"An information disclosure vulnerability in the kernel camera server. Product: Android. Versions: Android kernel. Android ID A-37512375.","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2017-13168","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-16T20:53:17.676Z","title":"An elevation of privilege vulnerability in the kernel scsi driver. Product: Android. Versions: Android kernel. Android ID A-65023233.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00388,"kevAdded":null},{"id":"CVE-2017-13167","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-17T01:31:39.773Z","title":"An elevation of privilege vulnerability in the kernel sound timer. Product: Android. Versions: Android kernel. Android ID A-37240993.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00191,"kevAdded":null},{"id":"CVE-2017-13166","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-16T22:40:26.567Z","title":"An elevation of privilege vulnerability in the kernel v4l2 video driver. Product: Android. Versions: Android kernel. Android ID A-34624167.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00359,"kevAdded":null},{"id":"CVE-2017-13165","published":"2017-12-06T14:00:00.000Z","updated":"2026-05-28T17:58:24.087Z","title":"An elevation of privilege vulnerability in the kernel file system. Product: Android. Versions: Android kernel. Android ID A-31269937.","severity":"MEDIUM","score":5.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2017-13164","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-16T19:56:42.224Z","title":"An information disclosure vulnerability in the kernel binder driver. Product: Android. Versions: Android kernel. Android ID A-36007193.","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00431,"kevAdded":null},{"id":"CVE-2017-13163","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-17T01:00:34.198Z","title":"An elevation of privilege vulnerability in the kernel mtp usb driver. Product: Android. Versions: Android kernel. Android ID A-37429972.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00155,"kevAdded":null},{"id":"CVE-2017-13162","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-17T02:06:35.185Z","title":"An elevation of privilege vulnerability in the kernel binder. Product: Android. Versions: Android kernel. Android ID A-64216036.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00486,"kevAdded":null},{"id":"CVE-2017-13161","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-17T03:43:19.884Z","title":"An elevation of privilege vulnerability in the Broadcom wireless driver. Product: Android. Versions: Android kernel. Android ID A-63930471. References:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2017-13160","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-17T02:56:41.346Z","title":"A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-37160362.","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01778,"kevAdded":null},{"id":"CVE-2017-13159","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-16T22:51:28.056Z","title":"An information disclosure vulnerability in the Android system (activitymanagerservice). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0.…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2017-13158","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-17T00:26:48.812Z","title":"An information disclosure vulnerability in the Android system (activitymanagerservice). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0.…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2017-13157","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-17T01:51:37.017Z","title":"An information disclosure vulnerability in the Android system (activitymanagerservice). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0.…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2017-13156","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-17T02:36:41.237Z","title":"An elevation of privilege vulnerability in the Android system (art). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.20486,"kevAdded":null},{"id":"CVE-2017-13154","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-16T17:07:57.029Z","title":"An elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0.…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00148,"kevAdded":null},{"id":"CVE-2017-13153","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-17T02:41:47.754Z","title":"An elevation of privilege vulnerability in the Android media framework (libaudioservice). Product: Android. Versions: 8.0. Android ID A-65280854.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00158,"kevAdded":null},{"id":"CVE-2017-13152","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-17T00:16:02.025Z","title":"An information disclosure vulnerability in the Android media framework (libmedia drm). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0.…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2017-13151","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-16T20:01:53.971Z","title":"A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID…","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01437,"kevAdded":null},{"id":"CVE-2017-13150","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-16T18:55:39.569Z","title":"An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-38328132.","severity":"CRITICAL","score":9.1,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00462,"kevAdded":null},{"id":"CVE-2017-13149","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-16T20:37:43.362Z","title":"An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-65719872.","severity":"CRITICAL","score":9.1,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00462,"kevAdded":null},{"id":"CVE-2017-13148","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-17T02:11:45.427Z","title":"A denial of service vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID…","severity":"MEDIUM","score":6.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00428,"kevAdded":null},{"id":"CVE-2017-0880","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-16T18:49:34.912Z","title":"A denial of service vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID A-65646012.","severity":"MEDIUM","score":6.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00428,"kevAdded":null},{"id":"CVE-2017-0879","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-17T02:52:31.536Z","title":"An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-65025028.","severity":"CRITICAL","score":9.1,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0059,"kevAdded":null},{"id":"CVE-2017-0878","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-16T23:22:04.358Z","title":"A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 8.0. Android ID A-65186291.","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01437,"kevAdded":null},{"id":"CVE-2017-0877","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-16T18:03:31.744Z","title":"A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0. Android ID A-66372937.","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01437,"kevAdded":null},{"id":"CVE-2017-0876","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-16T17:37:36.636Z","title":"A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0. Android ID A-64964675.","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01437,"kevAdded":null},{"id":"CVE-2017-0874","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-16T20:27:59.503Z","title":"A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID…","severity":"MEDIUM","score":6.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00428,"kevAdded":null},{"id":"CVE-2017-0873","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-16T22:25:13.494Z","title":"A denial of service vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID…","severity":"MEDIUM","score":6.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00428,"kevAdded":null},{"id":"CVE-2017-0872","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-16T19:25:50.452Z","title":"A remote code execution vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-65290323.","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01437,"kevAdded":null},{"id":"CVE-2017-0871","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-16T23:06:32.507Z","title":"An elevation of privilege vulnerability in the Android framework (framework base). Product: Android. Versions: 8.0. Android ID A-65281159.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00158,"kevAdded":null},{"id":"CVE-2017-0870","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-17T03:53:50.091Z","title":"An elevation of privilege vulnerability in the Android framework (libminikin). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00158,"kevAdded":null},{"id":"CVE-2017-0837","published":"2017-12-06T14:00:00.000Z","updated":"2024-09-16T22:35:22.909Z","title":"An elevation of privilege vulnerability in the Android media framework (libaudiopolicymanager). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1,…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00158,"kevAdded":null},{"id":"CVE-2017-0865","published":"2017-11-16T23:00:00.000Z","updated":"2024-09-16T19:40:26.533Z","title":"An elevation of privilege vulnerability in the MediaTek soc driver. Product: Android. Versions: Android kernel. Android ID: A-65025090. References:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2017-0864","published":"2017-11-16T23:00:00.000Z","updated":"2024-09-17T01:26:41.841Z","title":"An elevation of privilege vulnerability in the MediaTek ioctl (flashlight). Product: Android. Versions: Android kernel. Android ID: A-37277147. References:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2017-0863","published":"2017-11-16T23:00:00.000Z","updated":"2024-09-16T16:27:45.140Z","title":"An elevation of privilege vulnerability in the Upstream kernel video driver. Product: Android. Versions: Android kernel. Android ID: A-37950620.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00155,"kevAdded":null},{"id":"CVE-2017-0862","published":"2017-11-16T23:00:00.000Z","updated":"2024-09-17T00:35:42.522Z","title":"An elevation of privilege vulnerability in the Upstream kernel kernel. Product: Android. Versions: Android kernel. Android ID: A-36006779.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00165,"kevAdded":null},{"id":"CVE-2017-0861","published":"2017-11-16T23:00:00.000Z","updated":"2024-09-16T19:09:26.250Z","title":"Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows attackers to gain privileges via unspecified vectors.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00431,"kevAdded":null},{"id":"CVE-2017-0860","published":"2017-11-16T23:00:00.000Z","updated":"2024-09-16T21:08:52.545Z","title":"An elevation of privilege vulnerability in the Android system (inputdispatcher). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2.…","severity":"MEDIUM","score":5.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00129,"kevAdded":null},{"id":"CVE-2017-0859","published":"2017-11-16T23:00:00.000Z","updated":"2024-09-16T23:20:38.785Z","title":"Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36075131.","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00422,"kevAdded":null},{"id":"CVE-2017-0858","published":"2017-11-16T23:00:00.000Z","updated":"2024-09-16T19:05:42.079Z","title":"Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64836894.","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00563,"kevAdded":null},{"id":"CVE-2017-0857","published":"2017-11-16T23:00:00.000Z","updated":"2024-09-16T18:39:29.277Z","title":"Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-65122447.","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00441,"kevAdded":null},{"id":"CVE-2017-0854","published":"2017-11-16T23:00:00.000Z","updated":"2024-09-16T23:35:40.888Z","title":"An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63873837.","severity":"CRITICAL","score":9.1,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00483,"kevAdded":null},{"id":"CVE-2017-0853","published":"2017-11-16T23:00:00.000Z","updated":"2024-09-16T22:45:53.461Z","title":"An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63121644.","severity":"CRITICAL","score":9.1,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00483,"kevAdded":null},{"id":"CVE-2017-0852","published":"2017-11-16T23:00:00.000Z","updated":"2024-09-16T21:57:44.818Z","title":"A denial of service vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0. Android ID: A-62815506.","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00422,"kevAdded":null},{"id":"CVE-2017-0851","published":"2017-11-16T23:00:00.000Z","updated":"2024-09-16T20:07:31.145Z","title":"An information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0.…","severity":"MEDIUM","score":5.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00356,"kevAdded":null},{"id":"CVE-2017-0850","published":"2017-11-16T23:00:00.000Z","updated":"2024-09-17T04:20:38.347Z","title":"An information disclosure vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-64836941.","severity":"MEDIUM","score":5.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00431,"kevAdded":null},{"id":"CVE-2017-0849","published":"2017-11-16T23:00:00.000Z","updated":"2024-09-16T18:23:20.640Z","title":"An information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID:…","severity":"MEDIUM","score":5.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00356,"kevAdded":null},{"id":"CVE-2017-0848","published":"2017-11-16T23:00:00.000Z","updated":"2024-09-16T23:06:36.199Z","title":"An information disclosure vulnerability in the Android media framework (libeffects). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2,…","severity":"MEDIUM","score":5.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00356,"kevAdded":null},{"id":"CVE-2017-0847","published":"2017-11-16T23:00:00.000Z","updated":"2024-09-16T23:20:21.984Z","title":"An elevation of privilege vulnerability in the Android media framework (mediaanalytics). Product: Android. Versions: 8.0. Android ID: A-65540999.","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00426,"kevAdded":null},{"id":"CVE-2017-0845","published":"2017-11-16T23:00:00.000Z","updated":"2024-09-17T03:13:02.310Z","title":"A denial of service vulnerability in the Android framework (syncstorageengine). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2.…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00426,"kevAdded":null},{"id":"CVE-2017-0843","published":"2017-11-16T23:00:00.000Z","updated":"2024-09-16T18:44:04.135Z","title":"An elevation of privilege vulnerability in the MediaTek ccci. Product: Android. Versions: Android kernel. Android ID: A-62670819. References: M-ALPS03361488.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2017-0842","published":"2017-11-16T23:00:00.000Z","updated":"2024-09-17T03:28:40.967Z","title":"An elevation of privilege vulnerability in the Android system (bluetooth). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00165,"kevAdded":null},{"id":"CVE-2017-0841","published":"2017-11-16T23:00:00.000Z","updated":"2024-09-17T03:54:23.493Z","title":"A remote code execution vulnerability in the Android system (libutils). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01367,"kevAdded":null},{"id":"CVE-2017-0840","published":"2017-11-16T23:00:00.000Z","updated":"2024-09-16T19:51:15.117Z","title":"An information disclosure vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1,…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00636,"kevAdded":null},{"id":"CVE-2017-0839","published":"2017-11-16T23:00:00.000Z","updated":"2024-09-17T01:11:41.142Z","title":"An information disclosure vulnerability in the Android media framework (libeffects). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2,…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00636,"kevAdded":null},{"id":"CVE-2017-0838","published":"2017-11-16T23:00:00.000Z","updated":"2024-09-17T03:23:20.451Z","title":"An elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-63522818.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00148,"kevAdded":null},{"id":"CVE-2017-0836","published":"2017-11-16T23:00:00.000Z","updated":"2024-09-16T18:13:26.548Z","title":"A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0.…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01337,"kevAdded":null},{"id":"CVE-2017-0835","published":"2017-11-16T23:00:00.000Z","updated":"2024-09-17T03:23:06.044Z","title":"A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01365,"kevAdded":null},{"id":"CVE-2017-0834","published":"2017-11-16T23:00:00.000Z","updated":"2024-09-17T02:02:07.156Z","title":"A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01365,"kevAdded":null},{"id":"CVE-2017-0833","published":"2017-11-16T23:00:00.000Z","updated":"2024-09-16T23:06:47.331Z","title":"A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01365,"kevAdded":null},{"id":"CVE-2017-0832","published":"2017-11-16T23:00:00.000Z","updated":"2024-09-16T19:36:56.103Z","title":"A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01284,"kevAdded":null},{"id":"CVE-2017-0831","published":"2017-11-16T23:00:00.000Z","updated":"2024-09-17T00:16:41.621Z","title":"An elevation of privilege vulnerability in the Android framework (window manager). Product: Android. Versions: 8.0. Android ID: A-37442941.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00443,"kevAdded":null},{"id":"CVE-2017-0830","published":"2017-11-16T23:00:00.000Z","updated":"2024-09-17T00:11:54.075Z","title":"An elevation of privilege vulnerability in the Android framework (device policy client). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0.…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00433,"kevAdded":null},{"id":"CVE-2017-0866","published":"2017-11-16T22:00:00.000Z","updated":"2024-09-16T18:49:08.667Z","title":"An elevation of privilege vulnerability in the Direct rendering infrastructure of the NVIDIA Tegra X1 where an unchecked input from userspace is passed as a…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00361,"kevAdded":null},{"id":"CVE-2017-0829","published":"2017-10-03T21:00:00.000Z","updated":"2024-09-16T21:02:34.112Z","title":"An elevation of privilege vulnerability in the Motorola bootloader. Product: Android. Versions: Android kernel. Android ID: A-62345044.","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00498,"kevAdded":null},{"id":"CVE-2017-0828","published":"2017-10-03T21:00:00.000Z","updated":"2024-09-16T17:03:48.052Z","title":"An elevation of privilege vulnerability in the Huawei bootloader. Product: Android. Versions: Android kernel. Android ID: A-34622855.","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00498,"kevAdded":null},{"id":"CVE-2017-0827","published":"2017-10-03T21:00:00.000Z","updated":"2024-09-17T00:36:19.741Z","title":"An elevation of privilege vulnerability in the MediaTek soc driver. Product: Android. Versions: Android kernel. Android ID: A-62539960. References:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00416,"kevAdded":null},{"id":"CVE-2017-0826","published":"2017-10-03T21:00:00.000Z","updated":"2024-09-17T01:57:04.819Z","title":"An elevation of privilege vulnerability in the HTC bootloader. Product: Android. Versions: Android kernel. Android ID: A-34949781.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00362,"kevAdded":null},{"id":"CVE-2017-0825","published":"2017-10-03T21:00:00.000Z","updated":"2024-09-16T16:47:48.466Z","title":"An information disclosure vulnerability in the Broadcom wifi driver. Product: Android. Versions: Android kernel. Android ID: A-37305633. References:…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00451,"kevAdded":null},{"id":"CVE-2017-0824","published":"2017-10-03T21:00:00.000Z","updated":"2024-09-16T22:35:33.111Z","title":"An elevation of privilege vulnerability in the Broadcom wifi driver. Product: Android. Versions: Android kernel. Android ID: A-37622847. References:…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00498,"kevAdded":null},{"id":"CVE-2017-0823","published":"2017-10-03T21:00:00.000Z","updated":"2024-09-17T01:52:06.144Z","title":"An information disclosure vulnerability in the Android system (rild). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00591,"kevAdded":null},{"id":"CVE-2017-0822","published":"2017-10-03T21:00:00.000Z","updated":"2024-09-17T01:56:25.042Z","title":"An elevation of privilege vulnerability in the Android system (camera). Product: Android. Versions: 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63787722.","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0057,"kevAdded":null},{"id":"CVE-2017-0820","published":"2017-10-03T21:00:00.000Z","updated":"2024-09-16T16:49:01.135Z","title":"A vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62187433.","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01267,"kevAdded":null},{"id":"CVE-2017-0819","published":"2017-10-03T21:00:00.000Z","updated":"2024-09-16T20:03:11.975Z","title":"A vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63045918.","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01016,"kevAdded":null},{"id":"CVE-2017-0818","published":"2017-10-03T21:00:00.000Z","updated":"2024-08-05T13:18:06.296Z","title":"A vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63581671.","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.01016,"kevAdded":null},{"id":"CVE-2017-0817","published":"2017-10-03T21:00:00.000Z","updated":"2024-09-16T23:32:00.603Z","title":"An information disclosure vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0,…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00777,"kevAdded":null},{"id":"CVE-2017-0816","published":"2017-10-03T21:00:00.000Z","updated":"2024-09-17T04:14:14.194Z","title":"An information disclosure vulnerability in the Android media framework (libeffects). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1,…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0047,"kevAdded":null},{"id":"CVE-2017-0815","published":"2017-10-03T21:00:00.000Z","updated":"2024-09-17T03:17:45.354Z","title":"An information disclosure vulnerability in the Android media framework (libeffects). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1,…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0047,"kevAdded":null},{"id":"CVE-2017-0814","published":"2017-10-03T21:00:00.000Z","updated":"2024-09-16T20:07:50.076Z","title":"An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62800140.","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01206,"kevAdded":null},{"id":"CVE-2017-0813","published":"2017-10-03T21:00:00.000Z","updated":"2024-09-16T17:18:04.319Z","title":"A denial of service vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36531046.","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00933,"kevAdded":null},{"id":"CVE-2017-0812","published":"2017-10-03T21:00:00.000Z","updated":"2024-09-16T19:14:43.588Z","title":"An elevation of privilege vulnerability in the Android media framework (audio hal). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62873231.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00503,"kevAdded":null},{"id":"CVE-2017-0811","published":"2017-10-03T21:00:00.000Z","updated":"2024-09-17T02:42:08.660Z","title":"A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0.…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01624,"kevAdded":null},{"id":"CVE-2017-0810","published":"2017-10-03T21:00:00.000Z","updated":"2024-09-17T03:34:20.489Z","title":"A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01624,"kevAdded":null},{"id":"CVE-2017-0809","published":"2017-10-03T21:00:00.000Z","updated":"2024-09-16T21:03:42.960Z","title":"A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1,…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01576,"kevAdded":null},{"id":"CVE-2017-0808","published":"2017-10-03T21:00:00.000Z","updated":"2024-09-16T22:56:08.855Z","title":"An information disclosure vulnerability in the Android framework (file system). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62301183.","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00622,"kevAdded":null},{"id":"CVE-2017-0807","published":"2017-10-03T21:00:00.000Z","updated":"2024-09-17T03:22:50.998Z","title":"An elevation of privilege vulnerability in the Android framework (ui framework). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1,…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01866,"kevAdded":null},{"id":"CVE-2017-0806","published":"2017-10-03T21:00:00.000Z","updated":"2024-09-16T21:57:19.412Z","title":"An elevation of privilege vulnerability in the Android framework (gatekeeperresponse). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01147,"kevAdded":null},{"id":"CVE-2017-0785","published":"2017-09-14T19:00:00.000Z","updated":"2024-09-16T23:20:57.466Z","title":"A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0.…","severity":"MEDIUM","score":6.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.12388,"kevAdded":null},{"id":"CVE-2017-0783","published":"2017-09-14T19:00:00.000Z","updated":"2024-09-17T04:18:51.494Z","title":"A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0.…","severity":"MEDIUM","score":6.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00422,"kevAdded":null},{"id":"CVE-2017-0782","published":"2017-09-14T19:00:00.000Z","updated":"2024-09-17T03:17:52.858Z","title":"A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0.…","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.02099,"kevAdded":null},{"id":"CVE-2017-0781","published":"2017-09-14T19:00:00.000Z","updated":"2024-09-16T19:09:06.188Z","title":"A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0.…","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.2146,"kevAdded":null},{"id":"CVE-2017-0804","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-16T20:06:49.556Z","title":"A elevation of privilege vulnerability in the MediaTek mmc driver. Product: Android. Versions: Android kernel. Android ID: A-36274676. References:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00368,"kevAdded":null},{"id":"CVE-2017-0803","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-17T02:37:28.283Z","title":"A elevation of privilege vulnerability in the MediaTek accessory detector driver. Product: Android. Versions: Android kernel. Android ID: A-36136137.…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00368,"kevAdded":null},{"id":"CVE-2017-0802","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-16T22:51:12.483Z","title":"A elevation of privilege vulnerability in the MediaTek kernel. Product: Android. Versions: Android kernel. Android ID: A-36232120. References: M-ALPS03384818.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00368,"kevAdded":null},{"id":"CVE-2017-0801","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-16T19:24:35.272Z","title":"A elevation of privilege vulnerability in the MediaTek libmtkomxvdec. Product: Android. Versions: Android kernel. Android ID: A-38447970. References:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00416,"kevAdded":null},{"id":"CVE-2017-0800","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-16T19:52:05.350Z","title":"A elevation of privilege vulnerability in the MediaTek teei. Product: Android. Versions: Android kernel. Android ID: A-37683975. References: M-ALPS03302988.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00416,"kevAdded":null},{"id":"CVE-2017-0799","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-17T00:56:31.821Z","title":"A elevation of privilege vulnerability in the MediaTek lastbus. Product: Android. Versions: Android kernel. Android ID: A-36731602. References: M-ALPS03342072.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00416,"kevAdded":null},{"id":"CVE-2017-0798","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-16T19:46:52.774Z","title":"A elevation of privilege vulnerability in the MediaTek kernel. Product: Android. Versions: Android kernel. Android ID: A-36100671. References: M-ALPS03365532.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00416,"kevAdded":null},{"id":"CVE-2017-0797","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-16T17:58:35.075Z","title":"A elevation of privilege vulnerability in the MediaTek accessory detector driver. Product: Android. Versions: Android kernel. Android ID: A-62459766.…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2017-0796","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-16T17:14:50.408Z","title":"A elevation of privilege vulnerability in the MediaTek auxadc driver. Product: Android. Versions: Android kernel. Android ID: A-62458865. References:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2017-0795","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-17T01:46:44.785Z","title":"A elevation of privilege vulnerability in the MediaTek accessory detector driver. Product: Android. Versions: Android kernel. Android ID: A-36198473.…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2017-0794","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-17T04:24:02.415Z","title":"A elevation of privilege vulnerability in the Upstream kernel scsi driver. Product: Android. Versions: Android kernel. Android ID: A-35644812.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00426,"kevAdded":null},{"id":"CVE-2017-0793","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-16T18:24:28.087Z","title":"A information disclosure vulnerability in the N/A memory subsystem. Product: Android. Versions: Android kernel. Android ID: A-35764946.","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00401,"kevAdded":null},{"id":"CVE-2017-0792","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-16T20:52:14.191Z","title":"A information disclosure vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37305578. References:…","severity":"MEDIUM","score":6.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00232,"kevAdded":null},{"id":"CVE-2017-0791","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-16T18:17:55.853Z","title":"A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37306719. References:…","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00279,"kevAdded":null},{"id":"CVE-2017-0790","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-16T17:15:10.594Z","title":"A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37357704. References:…","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00279,"kevAdded":null},{"id":"CVE-2017-0789","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-17T03:12:41.773Z","title":"A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37685267. References:…","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00279,"kevAdded":null},{"id":"CVE-2017-0788","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-16T18:33:57.751Z","title":"A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37722328. References:…","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00279,"kevAdded":null},{"id":"CVE-2017-0787","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-16T20:31:19.551Z","title":"A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37722970. References:…","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00279,"kevAdded":null},{"id":"CVE-2017-0786","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-17T00:15:42.279Z","title":"A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37351060. References:…","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00442,"kevAdded":null},{"id":"CVE-2017-0784","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-17T03:17:36.000Z","title":"A elevation of privilege vulnerability in the Android system (nfc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID:…","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00269,"kevAdded":null},{"id":"CVE-2017-0780","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-17T01:51:58.077Z","title":"A denial of service vulnerability in the Android runtime (android messenger). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID:…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00331,"kevAdded":null},{"id":"CVE-2017-0779","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-16T22:21:09.689Z","title":"A information disclosure vulnerability in the Android media framework (audioflinger). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1,…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00366,"kevAdded":null},{"id":"CVE-2017-0778","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-17T03:53:40.182Z","title":"A information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-62133227.","severity":"HIGH","score":7.1,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0046,"kevAdded":null},{"id":"CVE-2017-0777","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-16T17:08:53.178Z","title":"A information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-38342499.","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00398,"kevAdded":null},{"id":"CVE-2017-0776","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-16T20:52:15.809Z","title":"A information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-38496660.","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00398,"kevAdded":null},{"id":"CVE-2017-0775","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-17T02:00:57.493Z","title":"A denial of service vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1,…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00331,"kevAdded":null},{"id":"CVE-2017-0774","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-16T22:56:35.565Z","title":"A denial of service vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1,…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00331,"kevAdded":null},{"id":"CVE-2017-0773","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-16T16:48:38.302Z","title":"A denial of service vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0.…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00331,"kevAdded":null},{"id":"CVE-2017-0772","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-17T02:47:59.941Z","title":"A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID:…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00331,"kevAdded":null},{"id":"CVE-2017-0771","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-16T23:30:45.646Z","title":"A denial of service vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-37624243.","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00331,"kevAdded":null},{"id":"CVE-2017-0770","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-17T00:41:34.716Z","title":"A elevation of privilege vulnerability in the Android media framework (libmediaplayerservice). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1,…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2017-0769","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-16T19:35:32.895Z","title":"A elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2017-0768","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-16T17:17:55.287Z","title":"A elevation of privilege vulnerability in the Android media framework (libeffects). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1,…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2017-0767","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-16T22:46:17.004Z","title":"A elevation of privilege vulnerability in the Android media framework (libeffects). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1,…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2017-0766","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-16T23:01:10.445Z","title":"A remote code execution vulnerability in the Android media framework (libjhead). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1,…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01096,"kevAdded":null},{"id":"CVE-2017-0765","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-17T01:17:06.839Z","title":"A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01096,"kevAdded":null},{"id":"CVE-2017-0764","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-16T20:01:29.221Z","title":"A remote code execution vulnerability in the Android media framework (libvorbis). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1,…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01378,"kevAdded":null},{"id":"CVE-2017-0763","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-17T01:31:47.672Z","title":"A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0.…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01096,"kevAdded":null},{"id":"CVE-2017-0762","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-17T03:17:37.999Z","title":"A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2.…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01096,"kevAdded":null},{"id":"CVE-2017-0761","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-16T22:46:49.172Z","title":"A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01378,"kevAdded":null},{"id":"CVE-2017-0760","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-16T17:34:18.171Z","title":"A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01378,"kevAdded":null},{"id":"CVE-2017-0759","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-16T23:41:04.168Z","title":"A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01096,"kevAdded":null},{"id":"CVE-2017-0758","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-16T22:45:24.351Z","title":"A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2.…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01378,"kevAdded":null},{"id":"CVE-2017-0757","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-16T17:49:28.345Z","title":"A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01096,"kevAdded":null},{"id":"CVE-2017-0756","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-17T02:36:50.163Z","title":"A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1,…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00858,"kevAdded":null},{"id":"CVE-2017-0755","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-16T18:14:38.169Z","title":"A elevation of privilege vulnerability in the Android libraries (libminikin). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0.…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00417,"kevAdded":null},{"id":"CVE-2017-0753","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-17T02:56:36.912Z","title":"A remote code execution vulnerability in the Android libraries (libgdx). Product: Android. Versions: 7.1.1, 7.1.2, 8.0. Android ID: A-62218744.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01096,"kevAdded":null},{"id":"CVE-2017-0752","published":"2017-09-08T20:00:00.000Z","updated":"2024-09-16T19:26:02.830Z","title":"A elevation of privilege vulnerability in the Android framework (windowmanager). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1,…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00436,"kevAdded":null},{"id":"CVE-2017-0805","published":"2017-08-24T00:00:00.000Z","updated":"2024-09-16T20:57:36.354Z","title":"A elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0,…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00465,"kevAdded":null},{"id":"CVE-2017-0687","published":"2017-08-18T17:00:00.000Z","updated":"2024-09-17T00:35:39.709Z","title":"A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35583675.","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00343,"kevAdded":null},{"id":"CVE-2017-0750","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-17T00:16:24.418Z","title":"A elevation of privilege vulnerability in the Upstream Linux file system. Product: Android. Versions: Android kernel. Android ID: A-36817013.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00973,"kevAdded":null},{"id":"CVE-2017-0749","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-17T03:22:32.219Z","title":"A elevation of privilege vulnerability in the Upstream Linux linux kernel. Product: Android. Versions: Android kernel. Android ID: A-36007735.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00911,"kevAdded":null},{"id":"CVE-2017-0747","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-16T23:50:29.235Z","title":"A elevation of privilege vulnerability in the Qualcomm proprietary component. Product: Android. Versions: Android kernel. Android ID: A-32524214. References:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00381,"kevAdded":null},{"id":"CVE-2017-0746","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-16T23:36:28.166Z","title":"A elevation of privilege vulnerability in the Qualcomm ipa driver. Product: Android. Versions: Android kernel. Android ID: A-35467471. References:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00381,"kevAdded":null},{"id":"CVE-2017-0745","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-16T18:18:41.031Z","title":"A remote code execution vulnerability in the Android media framework (avc decoder). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1,…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01578,"kevAdded":null},{"id":"CVE-2017-0742","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-16T20:57:35.888Z","title":"A elevation of privilege vulnerability in the MediaTek video driver. Product: Android. Versions: Android kernel. Android ID: A-36074857. References:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00381,"kevAdded":null},{"id":"CVE-2017-0741","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-17T01:26:18.466Z","title":"A elevation of privilege vulnerability in the MediaTek gpu driver. Product: Android. Versions: Android kernel. Android ID: A-32458601. References:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00381,"kevAdded":null},{"id":"CVE-2017-0740","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-16T20:27:23.712Z","title":"A remote code execution vulnerability in the Broadcom networking driver. Product: Android. Versions: Android kernel. Android ID: A-37168488. References:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00839,"kevAdded":null},{"id":"CVE-2017-0739","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-17T00:45:58.919Z","title":"A information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2.…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00436,"kevAdded":null},{"id":"CVE-2017-0738","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-16T23:16:45.235Z","title":"A information disclosure vulnerability in the Android media framework (audioserver). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1,…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00518,"kevAdded":null},{"id":"CVE-2017-0737","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-16T19:14:41.407Z","title":"A elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0,…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00466,"kevAdded":null},{"id":"CVE-2017-0736","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-16T17:18:23.974Z","title":"A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-38487564.","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00354,"kevAdded":null},{"id":"CVE-2017-0735","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-16T19:01:11.931Z","title":"A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-38239864.","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00343,"kevAdded":null},{"id":"CVE-2017-0734","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-17T03:23:32.811Z","title":"A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-38014992.","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00343,"kevAdded":null},{"id":"CVE-2017-0733","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-17T01:35:57.672Z","title":"A denial of service vulnerability in the Android media framework (libmediaplayerservice). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1,…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00343,"kevAdded":null},{"id":"CVE-2017-0732","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-16T22:36:35.329Z","title":"A elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00381,"kevAdded":null},{"id":"CVE-2017-0731","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-17T02:16:12.894Z","title":"A elevation of privilege vulnerability in the Android media framework (mpeg4 encoder). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1,…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00381,"kevAdded":null},{"id":"CVE-2017-0730","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-17T03:23:46.568Z","title":"A denial of service vulnerability in the Android media framework (h264 decoder). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID:…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00343,"kevAdded":null},{"id":"CVE-2017-0729","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-16T18:55:56.459Z","title":"A elevation of privilege vulnerability in the Android media framework (mediadrmserver). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1,…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00381,"kevAdded":null},{"id":"CVE-2017-0728","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-17T02:32:18.094Z","title":"A denial of service vulnerability in the Android media framework (hevc decoder). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2.…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00359,"kevAdded":null},{"id":"CVE-2017-0727","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-17T01:01:53.099Z","title":"A elevation of privilege vulnerability in the Android media framework (libgui). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-33004354.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00303,"kevAdded":null},{"id":"CVE-2017-0726","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-16T17:09:12.595Z","title":"A denial of service vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1,…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00343,"kevAdded":null},{"id":"CVE-2017-0725","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-16T22:36:40.057Z","title":"A denial of service vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-37627194.","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00394,"kevAdded":null},{"id":"CVE-2017-0724","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-16T22:56:46.125Z","title":"A denial of service vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36819262.","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00343,"kevAdded":null},{"id":"CVE-2017-0723","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-17T01:21:07.679Z","title":"A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01256,"kevAdded":null},{"id":"CVE-2017-0722","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-16T16:33:10.227Z","title":"A remote code execution vulnerability in the Android media framework (h263 decoder). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1,…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01578,"kevAdded":null},{"id":"CVE-2017-0721","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-16T20:11:46.222Z","title":"A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01256,"kevAdded":null},{"id":"CVE-2017-0720","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-17T01:41:01.988Z","title":"A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2.…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01578,"kevAdded":null},{"id":"CVE-2017-0719","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-16T16:12:40.402Z","title":"A remote code execution vulnerability in the Android media framework (mpeg2 decoder). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01578,"kevAdded":null},{"id":"CVE-2017-0718","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-16T16:39:00.692Z","title":"A remote code execution vulnerability in the Android media framework (mpeg2 decoder). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01578,"kevAdded":null},{"id":"CVE-2017-0716","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-16T20:17:07.876Z","title":"A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01256,"kevAdded":null},{"id":"CVE-2017-0715","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-17T03:53:37.993Z","title":"A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01256,"kevAdded":null},{"id":"CVE-2017-0714","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-16T23:36:25.854Z","title":"A remote code execution vulnerability in the Android media framework (h263 decoder). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1,…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01578,"kevAdded":null},{"id":"CVE-2017-0713","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-17T01:26:08.494Z","title":"A remote code execution vulnerability in the Android libraries (sfntly). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2.…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00839,"kevAdded":null},{"id":"CVE-2017-0712","published":"2017-08-09T21:00:00.000Z","updated":"2024-09-17T04:14:24.267Z","title":"A elevation of privilege vulnerability in the Android framework (wi-fi service). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2.…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00381,"kevAdded":null},{"id":"CVE-2015-3839","published":"2017-08-07T17:00:00.000Z","updated":"2024-08-06T05:56:16.304Z","title":"The updateMessageStatus function in Android 5.1.1 and earlier allows local users to cause a denial of service (NULL pointer exception and process crash).","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00396,"kevAdded":null},{"id":"CVE-2017-0711","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-16T23:11:06.143Z","title":"A elevation of privilege vulnerability in the MediaTek networking driver. Product: Android. Versions: Android kernel. Android ID: A-36099953. References:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00443,"kevAdded":null},{"id":"CVE-2017-0710","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-16T18:24:50.866Z","title":"A elevation of privilege vulnerability in the Upstream Linux tcb. Product: Android. Versions: Android kernel. Android ID: A-34951864.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00381,"kevAdded":null},{"id":"CVE-2017-0709","published":"2017-07-06T20:00:00.000Z","updated":"2024-08-05T13:18:05.637Z","title":"A information disclosure vulnerability in the HTC sensor hub driver. Product: Android. Versions: Android kernel. Android ID: A-35468048.","severity":"LOW","score":3.3,"vendor":null,"product":null,"kev":false,"epss":0.00325,"kevAdded":null},{"id":"CVE-2017-0708","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-17T03:58:48.422Z","title":"A information disclosure vulnerability in the HTC sound driver. Product: Android. Versions: Android kernel. Android ID: A-35384879.","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00436,"kevAdded":null},{"id":"CVE-2017-0707","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-17T01:46:06.455Z","title":"A elevation of privilege vulnerability in the HTC led driver. Product: Android. Versions: Android kernel. Android ID: A-36088467.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00381,"kevAdded":null},{"id":"CVE-2017-0706","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-16T20:38:02.874Z","title":"A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-35195787. References:…","severity":"MEDIUM","score":6.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00198,"kevAdded":null},{"id":"CVE-2017-0705","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-17T03:13:37.983Z","title":"A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-34973477. References:…","severity":"MEDIUM","score":6.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00199,"kevAdded":null},{"id":"CVE-2017-0704","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-17T03:23:02.788Z","title":"A elevation of privilege vulnerability in the Android system ui. Product: Android. Versions: 7.1.1, 7.1.2. Android ID: A-33059280.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00381,"kevAdded":null},{"id":"CVE-2017-0703","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-16T18:09:21.761Z","title":"A elevation of privilege vulnerability in the Android system ui. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00427,"kevAdded":null},{"id":"CVE-2017-0702","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-16T16:37:57.276Z","title":"A remote code execution vulnerability in the Android system ui. Product: Android. Versions: 7.1.1, 7.1.2. Android ID: A-36621442.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01256,"kevAdded":null},{"id":"CVE-2017-0701","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-16T23:35:33.297Z","title":"A remote code execution vulnerability in the Android system ui. Product: Android. Versions: 7.1.1, 7.1.2. Android ID: A-36385715.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01256,"kevAdded":null},{"id":"CVE-2017-0700","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-16T19:45:49.054Z","title":"A remote code execution vulnerability in the Android system ui. Product: Android. Versions: 7.1.1, 7.1.2. Android ID: A-35639138.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01578,"kevAdded":null},{"id":"CVE-2017-0699","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-17T00:37:04.671Z","title":"A information disclosure vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36490809.","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00392,"kevAdded":null},{"id":"CVE-2017-0698","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-16T16:33:46.860Z","title":"A information disclosure vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35467458.","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00392,"kevAdded":null},{"id":"CVE-2017-0697","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-16T20:27:26.040Z","title":"A denial of service vulnerability in the Android media framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID:…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00343,"kevAdded":null},{"id":"CVE-2017-0696","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-16T18:03:18.350Z","title":"A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37207120.","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00343,"kevAdded":null},{"id":"CVE-2017-0695","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-16T20:13:30.166Z","title":"A denial of service vulnerability in the Android media framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID:…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00343,"kevAdded":null},{"id":"CVE-2017-0694","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-16T19:05:08.996Z","title":"A denial of service vulnerability in the Android media framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID:…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00343,"kevAdded":null},{"id":"CVE-2017-0693","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-16T16:39:10.749Z","title":"A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36993291.","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00343,"kevAdded":null},{"id":"CVE-2017-0692","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-17T00:06:56.567Z","title":"A denial of service vulnerability in the Android media framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID:…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00343,"kevAdded":null},{"id":"CVE-2017-0691","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-16T21:57:56.101Z","title":"A denial of service vulnerability in the Android media framework. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36724453.","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01019,"kevAdded":null},{"id":"CVE-2017-0690","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-16T22:14:29.387Z","title":"A denial of service vulnerability in the Android media framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID:…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00303,"kevAdded":null},{"id":"CVE-2017-0689","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-16T17:18:05.704Z","title":"A denial of service vulnerability in the Android media framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID:…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00343,"kevAdded":null},{"id":"CVE-2017-0688","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-16T19:41:12.155Z","title":"A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35584425.","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00343,"kevAdded":null},{"id":"CVE-2017-0686","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-16T17:28:33.600Z","title":"A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34231231.","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00343,"kevAdded":null},{"id":"CVE-2017-0685","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-17T02:00:40.288Z","title":"A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34203195.","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00343,"kevAdded":null},{"id":"CVE-2017-0684","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-16T23:26:57.864Z","title":"A elevation of privilege vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35421151.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00443,"kevAdded":null},{"id":"CVE-2017-0683","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-17T00:46:17.282Z","title":"A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36591008.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01256,"kevAdded":null},{"id":"CVE-2017-0682","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-16T18:33:40.927Z","title":"A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36588422.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01256,"kevAdded":null},{"id":"CVE-2017-0681","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-17T03:47:45.656Z","title":"A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01256,"kevAdded":null},{"id":"CVE-2017-0680","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-16T17:44:17.402Z","title":"A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37008096.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01256,"kevAdded":null},{"id":"CVE-2017-0679","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-17T04:09:45.924Z","title":"A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36996978.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01256,"kevAdded":null},{"id":"CVE-2017-0678","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-17T01:36:48.149Z","title":"A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36576151.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01578,"kevAdded":null},{"id":"CVE-2017-0677","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-16T17:44:03.673Z","title":"A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36035074.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01256,"kevAdded":null},{"id":"CVE-2017-0676","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-16T18:24:12.668Z","title":"A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01256,"kevAdded":null},{"id":"CVE-2017-0675","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-16T17:23:47.583Z","title":"A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34779227.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01256,"kevAdded":null},{"id":"CVE-2017-0674","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-16T22:15:18.763Z","title":"A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34231163.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01256,"kevAdded":null},{"id":"CVE-2017-0673","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-17T02:41:07.380Z","title":"A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-33974623.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01256,"kevAdded":null},{"id":"CVE-2017-0672","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-16T18:03:56.404Z","title":"A denial of service vulnerability in the Android libraries. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-34778578.","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00293,"kevAdded":null},{"id":"CVE-2017-0671","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-16T17:27:48.195Z","title":"A remote code execution vulnerability in the Android libraries. Product: Android. Versions: 4.4.4. Android ID: A-34514762.","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01046,"kevAdded":null},{"id":"CVE-2017-0670","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-17T03:12:23.484Z","title":"A denial of service vulnerability in the Android framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36104177.","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00366,"kevAdded":null},{"id":"CVE-2017-0669","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-17T03:27:50.452Z","title":"A information disclosure vulnerability in the Android framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34114752.","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2017-0668","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-16T21:57:53.281Z","title":"A information disclosure vulnerability in the Android framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID:…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0041,"kevAdded":null},{"id":"CVE-2017-0667","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-17T02:05:48.355Z","title":"A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2017-0666","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-16T18:34:46.568Z","title":"A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00468,"kevAdded":null},{"id":"CVE-2017-0665","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-16T22:25:08.437Z","title":"A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2017-0664","published":"2017-07-06T20:00:00.000Z","updated":"2024-09-16T22:19:40.540Z","title":"A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID:…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2015-3840","published":"2017-06-27T20:00:00.000Z","updated":"2024-08-06T05:56:15.904Z","title":"The MessageStatusReceiver service in the AndroidManifest.XML in Android 5.1.1 and earlier allows local users to alter sent/received statuses of SMS and MMS…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00209,"kevAdded":null},{"id":"CVE-2017-0663","published":"2017-06-14T13:00:00.000Z","updated":"2026-10-14T06:30:13.447Z","title":"A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.02318,"kevAdded":null},{"id":"CVE-2017-0651","published":"2017-06-14T13:00:00.000Z","updated":"2024-08-05T13:11:06.849Z","title":"An information disclosure vulnerability in the kernel ION subsystem could enable a local malicious application to access data outside of its permission levels.…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01,"kevAdded":null},{"id":"CVE-2017-0650","published":"2017-06-14T13:00:00.000Z","updated":"2024-08-05T13:11:06.912Z","title":"An information disclosure vulnerability in the Synaptics touchscreen driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00742,"kevAdded":null},{"id":"CVE-2017-0649","published":"2017-06-14T13:00:00.000Z","updated":"2024-08-05T13:11:06.946Z","title":"An elevation of privilege vulnerability in the MediaTek sound driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00718,"kevAdded":null},{"id":"CVE-2017-0648","published":"2017-06-14T13:00:00.000Z","updated":"2024-08-05T13:11:06.705Z","title":"An elevation of privilege vulnerability in the kernel FIQ debugger could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01849,"kevAdded":null},{"id":"CVE-2017-0647","published":"2017-06-14T13:00:00.000Z","updated":"2024-08-05T13:11:06.907Z","title":"An information disclosure vulnerability in libziparchive could enable a local malicious application to access data outside of its permission levels. This issue…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00491,"kevAdded":null},{"id":"CVE-2017-0646","published":"2017-06-14T13:00:00.000Z","updated":"2024-08-05T13:11:06.939Z","title":"An information disclosure vulnerability in Bluetooth component could enable a local malicious application to access data outside of its permission levels. This…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00481,"kevAdded":null},{"id":"CVE-2017-0645","published":"2017-06-14T13:00:00.000Z","updated":"2024-08-05T13:11:06.814Z","title":"An elevation of privilege vulnerability in Bluetooth could enable a local malicious application to access data outside of its permission levels. This issue is…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00471,"kevAdded":null},{"id":"CVE-2017-0644","published":"2017-06-14T13:00:00.000Z","updated":"2024-08-05T13:11:06.696Z","title":"A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00694,"kevAdded":null},{"id":"CVE-2017-0643","published":"2017-06-14T13:00:00.000Z","updated":"2024-08-05T13:11:06.707Z","title":"A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00709,"kevAdded":null},{"id":"CVE-2017-0642","published":"2017-06-14T13:00:00.000Z","updated":"2024-09-17T03:28:07.166Z","title":"A remote denial of service vulnerability in libhevc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot.…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00765,"kevAdded":null},{"id":"CVE-2017-0641","published":"2017-06-14T13:00:00.000Z","updated":"2024-08-05T13:11:06.953Z","title":"A remote denial of service vulnerability in libvpx in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot.…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01693,"kevAdded":null},{"id":"CVE-2017-0640","published":"2017-06-14T13:00:00.000Z","updated":"2024-08-05T13:11:06.566Z","title":"A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00709,"kevAdded":null},{"id":"CVE-2017-0639","published":"2017-06-14T13:00:00.000Z","updated":"2024-08-05T13:11:06.898Z","title":"An information disclosure vulnerability in Bluetooth component could enable a local malicious application to access data outside of its permission levels. This…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00486,"kevAdded":null},{"id":"CVE-2017-0638","published":"2017-06-14T13:00:00.000Z","updated":"2024-08-05T13:11:06.934Z","title":"A remote code execution vulnerability in System UI component could enable an attacker using a specially crafted file to execute arbitrary code within the…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01038,"kevAdded":null},{"id":"CVE-2017-0637","published":"2017-06-14T13:00:00.000Z","updated":"2024-08-05T13:11:06.944Z","title":"A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01701,"kevAdded":null},{"id":"CVE-2017-0636","published":"2017-06-14T13:00:00.000Z","updated":"2024-08-05T13:11:06.828Z","title":"An elevation of privilege vulnerability in the MediaTek command queue driver could enable a local malicious application to execute arbitrary code within the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00718,"kevAdded":null},{"id":"CVE-2015-3830","published":"2017-06-06T18:00:00.000Z","updated":"2024-08-06T05:56:15.682Z","title":"The stock Android browser address bar in all Android operating systems suffers from Address Bar Spoofing, which allows remote attackers to trick a victim by…","severity":"MEDIUM","score":6.5,"vendor":null,"product":null,"kev":false,"epss":0.00508,"kevAdded":null},{"id":"CVE-2016-10297","published":"2017-06-06T14:00:00.000Z","updated":"2024-08-06T03:14:42.889Z","title":"In TrustZone in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerability could potentially exist.","severity":"HIGH","score":7,"vendor":"Qualcomm, Inc.","product":"All Qualcomm products","kev":false,"epss":0.00347,"kevAdded":null},{"id":"CVE-2015-9007","published":"2017-06-06T14:00:00.000Z","updated":"2024-08-06T08:36:31.609Z","title":"In TrustZone in all Android releases from CAF using the Linux kernel, a Double Free vulnerability could potentially exist.","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm products","kev":false,"epss":0.00493,"kevAdded":null},{"id":"CVE-2015-9006","published":"2017-06-06T14:00:00.000Z","updated":"2024-08-06T08:36:31.364Z","title":"In Resource Power Manager (RPM) in all Android releases from CAF using the Linux kernel, an Improper Access Control vulnerability could potentially exist.","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm products","kev":false,"epss":0.00474,"kevAdded":null},{"id":"CVE-2015-9005","published":"2017-06-06T14:00:00.000Z","updated":"2024-08-06T08:36:31.699Z","title":"In TrustZone in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflow vulnerability could potentially exist.","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm products","kev":false,"epss":0.00559,"kevAdded":null},{"id":"CVE-2014-9952","published":"2017-06-06T14:00:00.000Z","updated":"2024-08-06T14:02:37.390Z","title":"In the Secure File System in all Android releases from CAF using the Linux kernel, a capture-replay vulnerability could potentially exist.","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm products","kev":false,"epss":0.00474,"kevAdded":null},{"id":"CVE-2014-9951","published":"2017-06-06T14:00:00.000Z","updated":"2024-08-06T14:02:37.754Z","title":"In TrustZone in all Android releases from CAF using the Linux kernel, an Information Exposure Through Timing Discrepancy vulnerability could potentially exist.","severity":"MEDIUM","score":5.5,"vendor":"Qualcomm, Inc.","product":"All Qualcomm products","kev":false,"epss":0.00436,"kevAdded":null},{"id":"CVE-2014-9950","published":"2017-06-06T14:00:00.000Z","updated":"2024-08-06T14:02:37.369Z","title":"In Core Kernel in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist.","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm products","kev":false,"epss":0.00474,"kevAdded":null},{"id":"CVE-2014-9949","published":"2017-06-06T14:00:00.000Z","updated":"2024-08-06T14:02:38.075Z","title":"In TrustZone in all Android releases from CAF using the Linux kernel, an Untrusted Pointer Dereference vulnerability could potentially exist.","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm products","kev":false,"epss":0.00493,"kevAdded":null},{"id":"CVE-2014-9948","published":"2017-06-06T14:00:00.000Z","updated":"2024-08-06T14:02:37.392Z","title":"In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Validation of Array Index vulnerability could potentially exist.","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm products","kev":false,"epss":0.00493,"kevAdded":null},{"id":"CVE-2014-9947","published":"2017-06-06T14:00:00.000Z","updated":"2024-08-06T14:02:37.296Z","title":"In TrustZone in all Android releases from CAF using the Linux kernel, an Information Exposure vulnerability could potentially exist.","severity":"MEDIUM","score":5.5,"vendor":"Qualcomm, Inc.","product":"All Qualcomm products","kev":false,"epss":0.00436,"kevAdded":null},{"id":"CVE-2014-9946","published":"2017-06-06T14:00:00.000Z","updated":"2024-08-06T14:02:37.321Z","title":"In Core Kernel in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm products","kev":false,"epss":0.00493,"kevAdded":null},{"id":"CVE-2014-9945","published":"2017-06-06T14:00:00.000Z","updated":"2024-08-06T14:02:37.462Z","title":"In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist.","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm products","kev":false,"epss":0.00501,"kevAdded":null},{"id":"CVE-2014-9944","published":"2017-06-06T14:00:00.000Z","updated":"2024-08-06T14:02:37.298Z","title":"In the Secure File System in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflow vulnerability could potentially exist.","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm products","kev":false,"epss":0.00559,"kevAdded":null},{"id":"CVE-2014-9943","published":"2017-06-06T14:00:00.000Z","updated":"2024-08-06T14:02:37.249Z","title":"In Core Kernel in all Android releases from CAF using the Linux kernel, a Null Pointer Dereference vulnerability could potentially exist.","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm products","kev":false,"epss":0.00497,"kevAdded":null},{"id":"CVE-2014-9942","published":"2017-06-06T14:00:00.000Z","updated":"2024-08-06T14:02:37.202Z","title":"In Boot in all Android releases from CAF using the Linux kernel, a Use of Uninitialized Variable vulnerability could potentially exist.","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm products","kev":false,"epss":0.00493,"kevAdded":null},{"id":"CVE-2014-9941","published":"2017-06-06T14:00:00.000Z","updated":"2024-08-06T14:02:37.310Z","title":"In the Embedded File System in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerability could potentially…","severity":"HIGH","score":7,"vendor":"Qualcomm, Inc.","product":"All Qualcomm products","kev":false,"epss":0.00351,"kevAdded":null},{"id":"CVE-2014-9930","published":"2017-06-06T14:00:00.000Z","updated":"2024-08-06T14:02:36.690Z","title":"In WCDMA in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm products","kev":false,"epss":0.00493,"kevAdded":null},{"id":"CVE-2014-9929","published":"2017-06-06T14:00:00.000Z","updated":"2024-08-06T14:02:36.844Z","title":"In WCDMA in all Android releases from CAF using the Linux kernel, a Use of Out-of-range Pointer Offset vulnerability could potentially exist.","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm products","kev":false,"epss":0.00493,"kevAdded":null},{"id":"CVE-2014-9928","published":"2017-06-06T14:00:00.000Z","updated":"2024-08-06T14:02:37.208Z","title":"In GERAN in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist.","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm products","kev":false,"epss":0.00493,"kevAdded":null},{"id":"CVE-2014-9927","published":"2017-06-06T14:00:00.000Z","updated":"2024-08-06T14:02:36.806Z","title":"In UIM in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist.","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm products","kev":false,"epss":0.00431,"kevAdded":null},{"id":"CVE-2014-9926","published":"2017-06-06T14:00:00.000Z","updated":"2024-08-06T14:02:37.363Z","title":"In GNSS in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm products","kev":false,"epss":0.00493,"kevAdded":null},{"id":"CVE-2014-9925","published":"2017-06-06T14:00:00.000Z","updated":"2024-08-06T14:02:37.340Z","title":"In HDR in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist.","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm products","kev":false,"epss":0.00493,"kevAdded":null},{"id":"CVE-2014-9924","published":"2017-06-06T14:00:00.000Z","updated":"2024-08-06T14:02:36.635Z","title":"In 1x in all Android releases from CAF using the Linux kernel, a Signed to Unsigned Conversion Error could potentially occur.","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm products","kev":false,"epss":0.00493,"kevAdded":null},{"id":"CVE-2014-9923","published":"2017-06-06T14:00:00.000Z","updated":"2024-08-06T14:02:36.846Z","title":"In NAS in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist.","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm products","kev":false,"epss":0.00493,"kevAdded":null},{"id":"CVE-2016-10242","published":"2017-05-16T14:00:00.000Z","updated":"2024-08-06T03:14:42.778Z","title":"A time-of-check time-of-use race condition could potentially exist in the secure file system in all Android releases from CAF using the Linux kernel.","severity":"HIGH","score":7,"vendor":"Qualcomm, Inc.","product":"All Qualcomm Products","kev":false,"epss":0.00389,"kevAdded":null},{"id":"CVE-2016-10239","published":"2017-05-16T14:00:00.000Z","updated":"2024-08-06T03:14:42.918Z","title":"In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel due to improper input validation an…","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm Products","kev":false,"epss":0.007,"kevAdded":null},{"id":"CVE-2016-10238","published":"2017-05-16T14:00:00.000Z","updated":"2024-08-06T03:14:42.887Z","title":"In QSEE in all Android releases from CAF using the Linux kernel access control may potentially be bypassed due to a page alignment issue.","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm Products","kev":false,"epss":0.00624,"kevAdded":null},{"id":"CVE-2016-10237","published":"2017-05-16T14:00:00.000Z","updated":"2024-08-06T03:14:42.879Z","title":"If shared content protection memory were passed as the secure camera memory buffer by the HLOS to a trusted application (TA) in all Android releases from CAF…","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm Products","kev":false,"epss":0.00596,"kevAdded":null},{"id":"CVE-2015-9003","published":"2017-05-16T14:00:00.000Z","updated":"2024-08-06T08:36:31.025Z","title":"In TrustZone a cryptographic issue can potentially occur in all Android releases from CAF using the Linux kernel.","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm Products","kev":false,"epss":0.00619,"kevAdded":null},{"id":"CVE-2015-9002","published":"2017-05-16T14:00:00.000Z","updated":"2024-08-06T08:36:31.800Z","title":"In TrustZone an out-of-range pointer offset vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm Products","kev":false,"epss":0.00619,"kevAdded":null},{"id":"CVE-2015-9001","published":"2017-05-16T14:00:00.000Z","updated":"2024-08-06T08:36:30.971Z","title":"In TrustZone an information exposure vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.","severity":"MEDIUM","score":5.5,"vendor":"Qualcomm, Inc.","product":"All Qualcomm Products","kev":false,"epss":0.00541,"kevAdded":null},{"id":"CVE-2015-9000","published":"2017-05-16T14:00:00.000Z","updated":"2024-08-06T08:36:31.285Z","title":"In TrustZone an untrusted pointer dereference vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm Products","kev":false,"epss":0.00619,"kevAdded":null},{"id":"CVE-2015-8999","published":"2017-05-16T14:00:00.000Z","updated":"2024-08-06T08:36:31.537Z","title":"In TrustZone a buffer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel while loading an ELF file.","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm Products","kev":false,"epss":0.00669,"kevAdded":null},{"id":"CVE-2015-8998","published":"2017-05-16T14:00:00.000Z","updated":"2024-08-06T08:36:31.259Z","title":"In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm Products","kev":false,"epss":0.00649,"kevAdded":null},{"id":"CVE-2015-8997","published":"2017-05-16T14:00:00.000Z","updated":"2024-08-06T08:36:30.987Z","title":"In TrustZone a time-of-check time-of-use race condition could potentially exist in a listener routine in all Android releases from CAF using the Linux kernel.","severity":"HIGH","score":7,"vendor":"Qualcomm, Inc.","product":"All Qualcomm Products","kev":false,"epss":0.00447,"kevAdded":null},{"id":"CVE-2015-8996","published":"2017-05-16T14:00:00.000Z","updated":"2024-08-06T08:36:31.338Z","title":"In TrustZone a time-of-check time-of-use race condition could potentially exist in a QFPROM routine in all Android releases from CAF using the Linux kernel.","severity":"HIGH","score":7,"vendor":"Qualcomm, Inc.","product":"All Qualcomm Products","kev":false,"epss":0.00447,"kevAdded":null},{"id":"CVE-2015-8995","published":"2017-05-16T14:00:00.000Z","updated":"2024-08-06T08:36:31.088Z","title":"In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm Products","kev":false,"epss":0.00649,"kevAdded":null},{"id":"CVE-2014-9937","published":"2017-05-16T14:00:00.000Z","updated":"2024-08-06T14:02:37.253Z","title":"In TrustZone a buffer overflow vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm Products","kev":false,"epss":0.00669,"kevAdded":null},{"id":"CVE-2014-9936","published":"2017-05-16T14:00:00.000Z","updated":"2024-08-06T14:02:37.305Z","title":"In TrustZone a time-of-check time-of-use race condition could potentially exist in an authentication routine in all Android releases from CAF using the Linux…","severity":"HIGH","score":7,"vendor":"Qualcomm, Inc.","product":"All Qualcomm Products","kev":false,"epss":0.00578,"kevAdded":null},{"id":"CVE-2014-9935","published":"2017-05-16T14:00:00.000Z","updated":"2024-08-06T14:02:36.735Z","title":"In TrustZone an integer overflow vulnerability leading to a buffer overflow could potentially occur in a DRM routine in all Android releases from CAF using the…","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm Products","kev":false,"epss":0.00702,"kevAdded":null},{"id":"CVE-2014-9934","published":"2017-05-16T14:00:00.000Z","updated":"2024-08-06T14:02:37.283Z","title":"A PKCS#1 v1.5 signature verification routine in all Android releases from CAF using the Linux kernel may not check padding.","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm Products","kev":false,"epss":0.00395,"kevAdded":null},{"id":"CVE-2014-9933","published":"2017-05-16T14:00:00.000Z","updated":"2024-08-06T14:02:37.362Z","title":"Due to missing input validation in all Android releases from CAF using the Linux kernel, HLOS can write to fuses for which it should not have access.","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm Products","kev":false,"epss":0.00619,"kevAdded":null},{"id":"CVE-2014-9932","published":"2017-05-16T14:00:00.000Z","updated":"2024-08-06T14:02:36.642Z","title":"In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel due to an improper address range…","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm Products","kev":false,"epss":0.00649,"kevAdded":null},{"id":"CVE-2014-9931","published":"2017-05-16T14:00:00.000Z","updated":"2024-08-06T14:02:37.308Z","title":"A buffer overflow vulnerability in all Android releases from CAF using the Linux kernel can potentially occur if an OEM performs an app region size…","severity":"HIGH","score":7.8,"vendor":"Qualcomm, Inc.","product":"All Qualcomm Products","kev":false,"epss":0.00675,"kevAdded":null},{"id":"CVE-2017-0635","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.897Z","title":"A remote denial of service vulnerability in HevcUtils.cpp in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00456,"kevAdded":null},{"id":"CVE-2017-0634","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.949Z","title":"An information disclosure vulnerability in the Synaptics touchscreen driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":4.7,"vendor":null,"product":null,"kev":false,"epss":0.00876,"kevAdded":null},{"id":"CVE-2017-0633","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.919Z","title":"An information disclosure vulnerability in the Broadcom Wi-Fi driver could enable a local malicious component to access data outside of its permission levels.…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00876,"kevAdded":null},{"id":"CVE-2017-0632","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.938Z","title":"An information disclosure vulnerability in the Qualcomm sound codec driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00876,"kevAdded":null},{"id":"CVE-2017-0631","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.954Z","title":"An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00876,"kevAdded":null},{"id":"CVE-2017-0630","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.835Z","title":"An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01543,"kevAdded":null},{"id":"CVE-2017-0629","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.948Z","title":"An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00876,"kevAdded":null},{"id":"CVE-2017-0628","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.932Z","title":"An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00876,"kevAdded":null},{"id":"CVE-2017-0627","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.701Z","title":"An information disclosure vulnerability in the kernel UVC driver could enable a local malicious application to access data outside of its permission levels.…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01489,"kevAdded":null},{"id":"CVE-2017-0626","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.819Z","title":"An information disclosure vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to access data outside of its…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01017,"kevAdded":null},{"id":"CVE-2017-0625","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.874Z","title":"An information disclosure vulnerability in the MediaTek command queue driver could enable a local malicious application to access data outside of its…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00344,"kevAdded":null},{"id":"CVE-2017-0624","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.693Z","title":"An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01017,"kevAdded":null},{"id":"CVE-2017-0623","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.600Z","title":"An elevation of privilege vulnerability in the HTC bootloader could enable a local malicious application to execute arbitrary code within the context of the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01436,"kevAdded":null},{"id":"CVE-2017-0622","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.823Z","title":"An elevation of privilege vulnerability in the Goodix touchscreen driver could enable a local malicious application to execute arbitrary code within the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01436,"kevAdded":null},{"id":"CVE-2017-0621","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.804Z","title":"An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code within the context…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01467,"kevAdded":null},{"id":"CVE-2017-0620","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.932Z","title":"An elevation of privilege vulnerability in the Qualcomm Secure Channel Manager driver could enable a local malicious application to execute arbitrary code…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00682,"kevAdded":null},{"id":"CVE-2017-0619","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.848Z","title":"An elevation of privilege vulnerability in the Qualcomm pin controller driver could enable a local malicious application to execute arbitrary code within the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00575,"kevAdded":null},{"id":"CVE-2017-0618","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.809Z","title":"An elevation of privilege vulnerability in the MediaTek command queue driver could enable a local malicious application to execute arbitrary code within the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00528,"kevAdded":null},{"id":"CVE-2017-0617","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.795Z","title":"An elevation of privilege vulnerability in the MediaTek video driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00587,"kevAdded":null},{"id":"CVE-2017-0616","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.580Z","title":"An elevation of privilege vulnerability in the MediaTek system management interrupt driver could enable a local malicious application to execute arbitrary code…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00587,"kevAdded":null},{"id":"CVE-2017-0615","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.672Z","title":"An elevation of privilege vulnerability in the MediaTek power driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00587,"kevAdded":null},{"id":"CVE-2017-0614","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.644Z","title":"An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01467,"kevAdded":null},{"id":"CVE-2017-0613","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.832Z","title":"An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01565,"kevAdded":null},{"id":"CVE-2017-0612","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.680Z","title":"An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01467,"kevAdded":null},{"id":"CVE-2017-0611","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.702Z","title":"An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01467,"kevAdded":null},{"id":"CVE-2017-0610","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.694Z","title":"An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01467,"kevAdded":null},{"id":"CVE-2017-0609","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.754Z","title":"An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01467,"kevAdded":null},{"id":"CVE-2017-0608","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.586Z","title":"An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01467,"kevAdded":null},{"id":"CVE-2017-0607","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.645Z","title":"An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01467,"kevAdded":null},{"id":"CVE-2017-0606","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.913Z","title":"An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01467,"kevAdded":null},{"id":"CVE-2017-0604","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.609Z","title":"An elevation of privilege vulnerability in the kernel Qualcomm power driver could enable a local malicious application to execute arbitrary code within the…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00596,"kevAdded":null},{"id":"CVE-2017-0603","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.611Z","title":"A denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot.…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00468,"kevAdded":null},{"id":"CVE-2017-0602","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.797Z","title":"An information disclosure vulnerability in Bluetooth could allow a local malicious application to bypass operating system protections that isolate application…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00395,"kevAdded":null},{"id":"CVE-2017-0601","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.663Z","title":"An Elevation of Privilege vulnerability in Bluetooth could potentially enable a local malicious application to accept harmful files shared via bluetooth…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00383,"kevAdded":null},{"id":"CVE-2017-0600","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.601Z","title":"A remote denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00444,"kevAdded":null},{"id":"CVE-2017-0599","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.613Z","title":"A remote denial of service vulnerability in libhevc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot.…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00692,"kevAdded":null},{"id":"CVE-2017-0598","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.565Z","title":"An information disclosure vulnerability in the Framework APIs could enable a local malicious application to bypass operating system protections that isolate…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2017-0597","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.631Z","title":"An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00722,"kevAdded":null},{"id":"CVE-2017-0596","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.803Z","title":"An elevation of privilege vulnerability in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00814,"kevAdded":null},{"id":"CVE-2017-0595","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.687Z","title":"An elevation of privilege vulnerability in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00834,"kevAdded":null},{"id":"CVE-2017-0594","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.852Z","title":"An elevation of privilege vulnerability in codecs/aacenc/SoftAACEncoder2.cpp in libstagefright in Mediaserver could enable a local malicious application to…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00834,"kevAdded":null},{"id":"CVE-2017-0593","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.755Z","title":"An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to obtain access to custom permissions. This issue is…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00456,"kevAdded":null},{"id":"CVE-2017-0592","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.700Z","title":"A remote code execution vulnerability in FLACExtractor.cpp in libstagefright in Mediaserver could enable an attacker using a specially crafted file to cause…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01532,"kevAdded":null},{"id":"CVE-2017-0591","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.910Z","title":"A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01532,"kevAdded":null},{"id":"CVE-2017-0590","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.743Z","title":"A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01532,"kevAdded":null},{"id":"CVE-2017-0589","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.534Z","title":"A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01532,"kevAdded":null},{"id":"CVE-2017-0588","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.800Z","title":"A remote code execution vulnerability in id3/ID3.cpp in libstagefright in Mediaserver could enable an attacker using a specially crafted file to cause memory…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01532,"kevAdded":null},{"id":"CVE-2017-0587","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:06.588Z","title":"A remote code execution vulnerability in libmpeg2 in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01532,"kevAdded":null},{"id":"CVE-2017-0493","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:11:05.686Z","title":"An information disclosure vulnerability in File-Based Encryption could enable a local malicious attacker to bypass operating system protections for the lock…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00338,"kevAdded":null},{"id":"CVE-2017-0465","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-05T13:03:57.156Z","title":"An elevation of privilege vulnerability in the Qualcomm ADSPRPC driver could enable a local malicious application to execute arbitrary code within the context…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00639,"kevAdded":null},{"id":"CVE-2016-10296","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-06T03:14:42.846Z","title":"An information disclosure vulnerability in the Qualcomm shared memory driver could enable a local malicious application to access data outside of its…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00864,"kevAdded":null},{"id":"CVE-2016-10295","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-06T03:14:42.843Z","title":"An information disclosure vulnerability in the Qualcomm LED driver could enable a local malicious application to access data outside of its permission levels.…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00918,"kevAdded":null},{"id":"CVE-2016-10294","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-06T03:14:42.965Z","title":"An information disclosure vulnerability in the Qualcomm power driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00864,"kevAdded":null},{"id":"CVE-2016-10293","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-06T03:14:42.945Z","title":"An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0088,"kevAdded":null},{"id":"CVE-2016-10292","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-06T03:14:42.908Z","title":"A denial of service vulnerability in the Qualcomm Wi-Fi driver could enable a proximate attacker to cause a denial of service in the Wi-Fi subsystem. This…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0102,"kevAdded":null},{"id":"CVE-2016-10291","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-06T03:14:42.926Z","title":"An elevation of privilege vulnerability in the Qualcomm Slimbus driver could enable a local malicious application to execute arbitrary code within the context…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01467,"kevAdded":null},{"id":"CVE-2016-10290","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-06T03:14:42.972Z","title":"An elevation of privilege vulnerability in the Qualcomm shared memory driver could enable a local malicious application to execute arbitrary code within the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01795,"kevAdded":null},{"id":"CVE-2016-10289","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-06T03:14:42.847Z","title":"An elevation of privilege vulnerability in the Qualcomm crypto driver could enable a local malicious application to execute arbitrary code within the context…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01194,"kevAdded":null},{"id":"CVE-2016-10288","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-06T03:14:42.975Z","title":"An elevation of privilege vulnerability in the Qualcomm LED driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01424,"kevAdded":null},{"id":"CVE-2016-10287","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-06T03:14:42.992Z","title":"An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01467,"kevAdded":null},{"id":"CVE-2016-10286","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-06T03:14:42.964Z","title":"An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01467,"kevAdded":null},{"id":"CVE-2016-10285","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-06T03:14:42.974Z","title":"An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01795,"kevAdded":null},{"id":"CVE-2016-10284","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-06T03:14:42.843Z","title":"An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01467,"kevAdded":null},{"id":"CVE-2016-10283","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-06T03:14:42.944Z","title":"An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01709,"kevAdded":null},{"id":"CVE-2016-10282","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-06T03:14:42.899Z","title":"An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within the context…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00528,"kevAdded":null},{"id":"CVE-2016-10281","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-06T03:14:42.862Z","title":"An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within the context…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00528,"kevAdded":null},{"id":"CVE-2016-10280","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-06T03:14:42.920Z","title":"An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within the context…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00528,"kevAdded":null},{"id":"CVE-2016-10277","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-06T03:14:42.908Z","title":"An elevation of privilege vulnerability in the Motorola bootloader could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.09759,"kevAdded":null},{"id":"CVE-2016-10276","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-06T03:14:42.895Z","title":"An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.006,"kevAdded":null},{"id":"CVE-2016-10275","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-06T03:14:42.967Z","title":"An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00663,"kevAdded":null},{"id":"CVE-2016-10274","published":"2017-05-12T15:00:00.000Z","updated":"2024-08-06T03:14:42.929Z","title":"An elevation of privilege vulnerability in the MediaTek touchscreen driver could enable a local malicious application to execute arbitrary code within the…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00596,"kevAdded":null},{"id":"CVE-2015-9004","published":"2017-05-02T21:00:00.000Z","updated":"2024-08-06T08:36:31.468Z","title":"kernel/events/core.c in the Linux kernel before 3.19 mishandles counter grouping, which allows local users to gain privileges via a crafted application,…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00845,"kevAdded":null},{"id":"CVE-2014-9940","published":"2017-05-02T21:00:00.000Z","updated":"2024-08-06T14:02:37.412Z","title":"The regulator_ena_gpio_free function in drivers/regulator/core.c in the Linux kernel before 3.19 allows local users to gain privileges or cause a denial of…","severity":"HIGH","score":7,"vendor":null,"product":null,"kev":false,"epss":0.01618,"kevAdded":null},{"id":"CVE-2016-2433","published":"2017-04-21T20:00:00.000Z","updated":"2024-08-05T23:24:49.360Z","title":"The Broadcom Wi-Fi driver for Android, as used by BlackBerry smartphones before Build AAE570, allows remote attackers to execute arbitrary code in the context…","severity":"HIGH","score":8.8,"vendor":null,"product":null,"kev":false,"epss":0.00718,"kevAdded":null},{"id":"CVE-2016-0833","published":"2017-04-21T14:00:00.000Z","updated":"2024-08-05T22:30:05.042Z","title":"Android allows users to cause a denial of service.","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00585,"kevAdded":null},{"id":"CVE-2016-6727","published":"2017-04-17T16:00:00.000Z","updated":"2024-08-06T01:36:29.574Z","title":"The Qualcomm GPS subsystem in Android on Android One devices allows remote attackers to execute arbitrary code.","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.02726,"kevAdded":null},{"id":"CVE-2016-6726","published":"2017-04-17T16:00:00.000Z","updated":"2024-08-06T01:36:29.567Z","title":"Unspecified vulnerability in Qualcomm components in Android on Nexus 6 and Android One devices.","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00777,"kevAdded":null},{"id":"CVE-2017-0586","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.599Z","title":"An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01052,"kevAdded":null},{"id":"CVE-2017-0585","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.496Z","title":"An information disclosure vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01281,"kevAdded":null},{"id":"CVE-2017-0584","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.600Z","title":"An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01052,"kevAdded":null},{"id":"CVE-2017-0583","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.574Z","title":"An elevation of privilege vulnerability in the Qualcomm CP access driver could enable a local malicious application to execute arbitrary code within the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01496,"kevAdded":null},{"id":"CVE-2017-0582","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.581Z","title":"An elevation of privilege vulnerability in the HTC OEM fastboot command could enable a local malicious application to execute arbitrary code within the context…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.02087,"kevAdded":null},{"id":"CVE-2017-0581","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.823Z","title":"An elevation of privilege vulnerability in the Synaptics Touchscreen driver could enable a local malicious application to execute arbitrary code within the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01496,"kevAdded":null},{"id":"CVE-2017-0580","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.582Z","title":"An elevation of privilege vulnerability in the Synaptics Touchscreen driver could enable a local malicious application to execute arbitrary code within the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01496,"kevAdded":null},{"id":"CVE-2017-0579","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.679Z","title":"An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01496,"kevAdded":null},{"id":"CVE-2017-0578","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.490Z","title":"An elevation of privilege vulnerability in the DTS sound driver could enable a local malicious application to execute arbitrary code within the context of the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00783,"kevAdded":null},{"id":"CVE-2017-0577","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.332Z","title":"An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01496,"kevAdded":null},{"id":"CVE-2017-0576","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.522Z","title":"An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to execute arbitrary code within the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0153,"kevAdded":null},{"id":"CVE-2017-0575","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.293Z","title":"An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01496,"kevAdded":null},{"id":"CVE-2017-0574","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.547Z","title":"An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01496,"kevAdded":null},{"id":"CVE-2017-0573","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.562Z","title":"An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01496,"kevAdded":null},{"id":"CVE-2017-0572","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.352Z","title":"An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01496,"kevAdded":null},{"id":"CVE-2017-0571","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.603Z","title":"An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01496,"kevAdded":null},{"id":"CVE-2017-0570","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.427Z","title":"An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01496,"kevAdded":null},{"id":"CVE-2017-0569","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.527Z","title":"An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.07686,"kevAdded":null},{"id":"CVE-2017-0568","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.368Z","title":"An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01496,"kevAdded":null},{"id":"CVE-2017-0567","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.610Z","title":"An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01496,"kevAdded":null},{"id":"CVE-2017-0566","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.360Z","title":"An elevation of privilege vulnerability in the MediaTek camera driver could enable a local malicious application to execute arbitrary code within the context…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00783,"kevAdded":null},{"id":"CVE-2017-0565","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.364Z","title":"An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within the context…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00783,"kevAdded":null},{"id":"CVE-2017-0564","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.410Z","title":"An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android Kernel-3.10 Kernel-3.18","kev":false,"epss":0.04245,"kevAdded":null},{"id":"CVE-2017-0563","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.391Z","title":"An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00889,"kevAdded":null},{"id":"CVE-2017-0562","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.359Z","title":"An elevation of privilege vulnerability in the MediaTek touchscreen driver could enable a local malicious application to execute arbitrary code within the…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00847,"kevAdded":null},{"id":"CVE-2017-0561","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.443Z","title":"A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary code within the context of the Wi-Fi…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.29815,"kevAdded":null},{"id":"CVE-2017-0560","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.066Z","title":"An information disclosure vulnerability in the factory reset process could enable a local malicious attacker to access data from the previous owner. This issue…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00479,"kevAdded":null},{"id":"CVE-2017-0559","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.352Z","title":"An information disclosure vulnerability in libskia could enable a local malicious application to access data outside of its permission levels. This issue is…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00541,"kevAdded":null},{"id":"CVE-2017-0558","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.270Z","title":"An information disclosure vulnerability in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00597,"kevAdded":null},{"id":"CVE-2017-0557","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.354Z","title":"An information disclosure vulnerability in libmpeg2 in Mediaserver could enable a local malicious application to access data outside of its permission levels.…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00597,"kevAdded":null},{"id":"CVE-2017-0556","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.296Z","title":"An information disclosure vulnerability in libmpeg2 in Mediaserver could enable a local malicious application to access data outside of its permission levels.…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00524,"kevAdded":null},{"id":"CVE-2017-0555","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.382Z","title":"An information disclosure vulnerability in libavc in Mediaserver could enable a local malicious application to access data outside of its permission levels.…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00533,"kevAdded":null},{"id":"CVE-2017-0554","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.393Z","title":"An elevation of privilege vulnerability in the Telephony component could enable a local malicious application to access capabilities outside of its permission…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01014,"kevAdded":null},{"id":"CVE-2017-0553","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.544Z","title":"An elevation of privilege vulnerability in libnl could enable a local malicious application to execute arbitrary code within the context of the Wi-Fi service.…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.02319,"kevAdded":null},{"id":"CVE-2017-0552","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.298Z","title":"A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot.…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00712,"kevAdded":null},{"id":"CVE-2017-0551","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.428Z","title":"A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot.…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1","kev":false,"epss":0.01166,"kevAdded":null},{"id":"CVE-2017-0550","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.208Z","title":"A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot.…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00712,"kevAdded":null},{"id":"CVE-2017-0549","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.116Z","title":"A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot.…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00712,"kevAdded":null},{"id":"CVE-2017-0548","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.282Z","title":"A remote denial of service vulnerability in libskia could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00795,"kevAdded":null},{"id":"CVE-2017-0547","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.148Z","title":"An information disclosure vulnerability in libmedia in Mediaserver could enable a local malicious application to access data outside of its permission levels.…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00519,"kevAdded":null},{"id":"CVE-2017-0546","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.354Z","title":"An elevation of privilege vulnerability in SurfaceFlinger could enable a local malicious application to execute arbitrary code within the context of a…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00798,"kevAdded":null},{"id":"CVE-2017-0545","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.283Z","title":"An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00798,"kevAdded":null},{"id":"CVE-2017-0544","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.071Z","title":"An elevation of privilege vulnerability in CameraBase could enable a local malicious application to execute arbitrary code. This issue is rated as High because…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00855,"kevAdded":null},{"id":"CVE-2017-0543","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.349Z","title":"A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01575,"kevAdded":null},{"id":"CVE-2017-0542","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.103Z","title":"A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01575,"kevAdded":null},{"id":"CVE-2017-0541","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.116Z","title":"A remote code execution vulnerability in sonivox in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.04971,"kevAdded":null},{"id":"CVE-2017-0540","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.174Z","title":"A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.02318,"kevAdded":null},{"id":"CVE-2017-0539","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.159Z","title":"A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01575,"kevAdded":null},{"id":"CVE-2017-0538","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:11:06.087Z","title":"A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01575,"kevAdded":null},{"id":"CVE-2017-0462","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:03:57.211Z","title":"An elevation of privilege vulnerability in the Qualcomm Seemp driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00995,"kevAdded":null},{"id":"CVE-2017-0454","published":"2017-04-07T22:00:00.000Z","updated":"2024-08-05T13:03:57.205Z","title":"An elevation of privilege vulnerability in the Qualcomm audio driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01496,"kevAdded":null},{"id":"CVE-2016-10229","published":"2017-04-04T04:54:00.000Z","updated":"2025-01-03T12:04:17.698Z","title":"udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.12871,"kevAdded":null},{"id":"CVE-2014-9922","published":"2017-04-04T04:54:00.000Z","updated":"2024-08-06T14:02:36.819Z","title":"The eCryptfs subsystem in the Linux kernel before 3.18 allows local users to gain privileges via a large filesystem stack that includes an overlayfs layer,…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.01269,"kevAdded":null},{"id":"CVE-2017-0537","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.885Z","title":"An information disclosure vulnerability in the kernel USB gadget driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01046,"kevAdded":null},{"id":"CVE-2017-0536","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:06.128Z","title":"An information disclosure vulnerability in the Synaptics touchscreen driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00847,"kevAdded":null},{"id":"CVE-2017-0535","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:06.057Z","title":"An information disclosure vulnerability in the HTC sound codec driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00872,"kevAdded":null},{"id":"CVE-2017-0534","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:06.125Z","title":"An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00866,"kevAdded":null},{"id":"CVE-2017-0533","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.935Z","title":"An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00866,"kevAdded":null},{"id":"CVE-2017-0532","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.840Z","title":"An information disclosure vulnerability in the MediaTek video codec driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0038,"kevAdded":null},{"id":"CVE-2017-0531","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:06.221Z","title":"An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00891,"kevAdded":null},{"id":"CVE-2017-0529","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:06.321Z","title":"An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2017-0528","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:06.314Z","title":"An elevation of privilege vulnerability in the kernel security subsystem could enable a local malicious application to to execute code in the context of a…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01823,"kevAdded":null},{"id":"CVE-2017-0527","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.949Z","title":"An elevation of privilege vulnerability in the HTC Sensor Hub Driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01453,"kevAdded":null},{"id":"CVE-2017-0526","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:06.127Z","title":"An elevation of privilege vulnerability in the HTC Sensor Hub Driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01453,"kevAdded":null},{"id":"CVE-2017-0525","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:06.145Z","title":"An elevation of privilege vulnerability in the Qualcomm IPA driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01486,"kevAdded":null},{"id":"CVE-2017-0524","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.791Z","title":"An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01542,"kevAdded":null},{"id":"CVE-2017-0523","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:06.056Z","title":"An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00746,"kevAdded":null},{"id":"CVE-2017-0522","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:06.005Z","title":"An elevation of privilege vulnerability in a MediaTek APK could enable a local malicious application to execute arbitrary code within the context of a…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00681,"kevAdded":null},{"id":"CVE-2017-0521","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.754Z","title":"An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code within the context…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01794,"kevAdded":null},{"id":"CVE-2017-0520","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:06.015Z","title":"An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to execute arbitrary code within the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01486,"kevAdded":null},{"id":"CVE-2017-0519","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.617Z","title":"An elevation of privilege vulnerability in the Qualcomm fingerprint sensor driver could enable a local malicious application to execute arbitrary code within…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01542,"kevAdded":null},{"id":"CVE-2017-0518","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.648Z","title":"An elevation of privilege vulnerability in the Qualcomm fingerprint sensor driver could enable a local malicious application to execute arbitrary code within…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01755,"kevAdded":null},{"id":"CVE-2017-0517","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:06.177Z","title":"An elevation of privilege vulnerability in the MediaTek hardware sensor driver could enable a local malicious application to execute arbitrary code within the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00725,"kevAdded":null},{"id":"CVE-2017-0516","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.827Z","title":"An elevation of privilege vulnerability in the Qualcomm input hardware driver could enable a local malicious application to execute arbitrary code within the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01755,"kevAdded":null},{"id":"CVE-2017-0510","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.974Z","title":"An elevation of privilege vulnerability in the kernel FIQ debugger could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01839,"kevAdded":null},{"id":"CVE-2017-0509","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.644Z","title":"An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00761,"kevAdded":null},{"id":"CVE-2017-0508","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.716Z","title":"An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01823,"kevAdded":null},{"id":"CVE-2017-0507","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.672Z","title":"An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01823,"kevAdded":null},{"id":"CVE-2017-0506","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.556Z","title":"An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00745,"kevAdded":null},{"id":"CVE-2017-0505","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.903Z","title":"An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01427,"kevAdded":null},{"id":"CVE-2017-0504","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.575Z","title":"An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00863,"kevAdded":null},{"id":"CVE-2017-0503","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.693Z","title":"An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00806,"kevAdded":null},{"id":"CVE-2017-0502","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.762Z","title":"An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00745,"kevAdded":null},{"id":"CVE-2017-0501","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.760Z","title":"An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00745,"kevAdded":null},{"id":"CVE-2017-0500","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.744Z","title":"An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00745,"kevAdded":null},{"id":"CVE-2017-0499","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.983Z","title":"A denial of service vulnerability in Audioserver could enable a local malicious application to cause a device hang or reboot. This issue is rated as Low due to…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00417,"kevAdded":null},{"id":"CVE-2017-0498","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.615Z","title":"A denial of service vulnerability in Setup Wizard could allow a local attacker to require Google account sign-in after a factory reset. This issue is rated as…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00163,"kevAdded":null},{"id":"CVE-2017-0497","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.672Z","title":"A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00531,"kevAdded":null},{"id":"CVE-2017-0496","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.814Z","title":"A denial of service vulnerability in Setup Wizard could allow a local malicious application to temporarily block access to an affected device. This issue is…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00392,"kevAdded":null},{"id":"CVE-2017-0495","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.584Z","title":"An information disclosure vulnerability in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00421,"kevAdded":null},{"id":"CVE-2017-0494","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.666Z","title":"An information disclosure vulnerability in AOSP Messaging could enable a remote attacker using a special crafted file to access data outside of its permission…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00556,"kevAdded":null},{"id":"CVE-2017-0492","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.522Z","title":"An elevation of privilege vulnerability in the System UI could enable a local malicious application to create a UI overlay covering the entire screen. This…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00361,"kevAdded":null},{"id":"CVE-2017-0491","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.579Z","title":"An elevation of privilege vulnerability in Package Manager could enable a local malicious application to prevent users from uninstalling applications or…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00374,"kevAdded":null},{"id":"CVE-2017-0490","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.745Z","title":"An elevation of privilege vulnerability in Wi-Fi could enable a local malicious application to delete user data. This issue is rated as Moderate because it is…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00448,"kevAdded":null},{"id":"CVE-2017-0489","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.764Z","title":"An elevation of privilege vulnerability in Location Manager could enable a local malicious application to bypass operating system protections for location…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00392,"kevAdded":null},{"id":"CVE-2017-0488","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.518Z","title":"A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00759,"kevAdded":null},{"id":"CVE-2017-0487","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.592Z","title":"A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00759,"kevAdded":null},{"id":"CVE-2017-0486","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.510Z","title":"A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00616,"kevAdded":null},{"id":"CVE-2017-0485","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.756Z","title":"A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00616,"kevAdded":null},{"id":"CVE-2017-0484","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.560Z","title":"A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00616,"kevAdded":null},{"id":"CVE-2017-0483","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.587Z","title":"A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00616,"kevAdded":null},{"id":"CVE-2017-0482","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.946Z","title":"A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00616,"kevAdded":null},{"id":"CVE-2017-0481","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.809Z","title":"An elevation of privilege vulnerability in NFC could enable a proximate attacker to execute arbitrary code within the context of a privileged process. This…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00807,"kevAdded":null},{"id":"CVE-2017-0480","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.647Z","title":"An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0076,"kevAdded":null},{"id":"CVE-2017-0479","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.591Z","title":"An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00721,"kevAdded":null},{"id":"CVE-2017-0478","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:06.011Z","title":"A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrary code in the…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0184,"kevAdded":null},{"id":"CVE-2017-0477","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.752Z","title":"A remote code execution vulnerability in libgdx could enable an attacker using a specially crafted file to execute arbitrary code within the context of an…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00948,"kevAdded":null},{"id":"CVE-2017-0476","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.592Z","title":"A remote code execution vulnerability in AOSP Messaging could enable an attacker using a specially crafted file to cause memory corruption during media file…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01049,"kevAdded":null},{"id":"CVE-2017-0475","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.515Z","title":"An elevation of privilege vulnerability in the recovery verifier could enable a local malicious application to execute arbitrary code within the context of the…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0086,"kevAdded":null},{"id":"CVE-2017-0474","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.505Z","title":"A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.02139,"kevAdded":null},{"id":"CVE-2017-0473","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.530Z","title":"A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01422,"kevAdded":null},{"id":"CVE-2017-0472","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.799Z","title":"A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01422,"kevAdded":null},{"id":"CVE-2017-0471","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.544Z","title":"A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01422,"kevAdded":null},{"id":"CVE-2017-0470","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.457Z","title":"A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01422,"kevAdded":null},{"id":"CVE-2017-0469","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.623Z","title":"A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01422,"kevAdded":null},{"id":"CVE-2017-0468","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:11:05.529Z","title":"A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01422,"kevAdded":null},{"id":"CVE-2017-0467","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:03:57.189Z","title":"A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01422,"kevAdded":null},{"id":"CVE-2017-0466","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:03:57.157Z","title":"A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01422,"kevAdded":null},{"id":"CVE-2017-0464","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:03:57.204Z","title":"An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01486,"kevAdded":null},{"id":"CVE-2017-0463","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:03:57.226Z","title":"An elevation of privilege vulnerability in the Qualcomm networking driver could enable a local malicious application to execute arbitrary code within the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01477,"kevAdded":null},{"id":"CVE-2017-0461","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:03:57.223Z","title":"An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00866,"kevAdded":null},{"id":"CVE-2017-0460","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:03:57.171Z","title":"An elevation of privilege vulnerability in the Qualcomm networking driver could enable a local malicious application to execute arbitrary code within the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01486,"kevAdded":null},{"id":"CVE-2017-0459","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:03:57.181Z","title":"An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00866,"kevAdded":null},{"id":"CVE-2017-0458","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:03:57.209Z","title":"An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code within the context…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01576,"kevAdded":null},{"id":"CVE-2017-0457","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:03:57.217Z","title":"An elevation of privilege vulnerability in the Qualcomm ADSPRPC driver could enable a local malicious application to execute arbitrary code within the context…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01453,"kevAdded":null},{"id":"CVE-2017-0456","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:03:57.171Z","title":"An elevation of privilege vulnerability in the Qualcomm IPA driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01542,"kevAdded":null},{"id":"CVE-2017-0455","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:03:57.210Z","title":"An information disclosure vulnerability in the Qualcomm bootloader could help to enable a local malicious application to to execute arbitrary code within the…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0167,"kevAdded":null},{"id":"CVE-2017-0453","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:03:57.157Z","title":"An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01486,"kevAdded":null},{"id":"CVE-2017-0452","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-05T13:03:57.163Z","title":"An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0101,"kevAdded":null},{"id":"CVE-2016-8483","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-06T02:20:31.350Z","title":"An information disclosure vulnerability in the Qualcomm power driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00961,"kevAdded":null},{"id":"CVE-2016-8479","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-06T02:20:31.343Z","title":"An elevation of privilege vulnerability in the Qualcomm GPU driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01606,"kevAdded":null},{"id":"CVE-2016-8478","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-06T02:20:31.334Z","title":"An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01033,"kevAdded":null},{"id":"CVE-2016-8477","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-06T02:20:31.340Z","title":"An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00866,"kevAdded":null},{"id":"CVE-2016-8417","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-06T02:20:31.358Z","title":"An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code within the context…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01486,"kevAdded":null},{"id":"CVE-2016-8416","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-06T02:20:31.323Z","title":"An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01033,"kevAdded":null},{"id":"CVE-2016-8413","published":"2017-03-08T01:00:00.000Z","updated":"2024-08-06T02:20:31.265Z","title":"An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00866,"kevAdded":null},{"id":"CVE-2016-10200","published":"2017-03-07T21:00:00.000Z","updated":"2024-08-06T03:14:42.877Z","title":"Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service…","severity":"HIGH","score":7,"vendor":null,"product":null,"kev":false,"epss":0.00296,"kevAdded":null},{"id":"CVE-2017-0451","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.209Z","title":"An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00574,"kevAdded":null},{"id":"CVE-2017-0450","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.181Z","title":"An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00884,"kevAdded":null},{"id":"CVE-2017-0449","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.168Z","title":"An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00863,"kevAdded":null},{"id":"CVE-2017-0448","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.168Z","title":"An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels.…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00545,"kevAdded":null},{"id":"CVE-2017-0447","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.195Z","title":"An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00863,"kevAdded":null},{"id":"CVE-2017-0446","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.169Z","title":"An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00863,"kevAdded":null},{"id":"CVE-2017-0445","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.201Z","title":"An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0098,"kevAdded":null},{"id":"CVE-2017-0444","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.144Z","title":"An elevation of privilege vulnerability in the Realtek sound driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01741,"kevAdded":null},{"id":"CVE-2017-0443","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.149Z","title":"An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00882,"kevAdded":null},{"id":"CVE-2017-0442","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.182Z","title":"An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00863,"kevAdded":null},{"id":"CVE-2017-0441","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.196Z","title":"An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00882,"kevAdded":null},{"id":"CVE-2017-0440","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.139Z","title":"An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00863,"kevAdded":null},{"id":"CVE-2017-0439","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.135Z","title":"An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0089,"kevAdded":null},{"id":"CVE-2017-0438","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.154Z","title":"An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0087,"kevAdded":null},{"id":"CVE-2017-0437","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.145Z","title":"An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0087,"kevAdded":null},{"id":"CVE-2017-0436","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.169Z","title":"An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0087,"kevAdded":null},{"id":"CVE-2017-0435","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.178Z","title":"An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00773,"kevAdded":null},{"id":"CVE-2017-0434","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.144Z","title":"An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0087,"kevAdded":null},{"id":"CVE-2017-0433","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.154Z","title":"An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0101,"kevAdded":null},{"id":"CVE-2017-0432","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.179Z","title":"An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.02105,"kevAdded":null},{"id":"CVE-2017-0430","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.162Z","title":"An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00888,"kevAdded":null},{"id":"CVE-2017-0429","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.135Z","title":"An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00908,"kevAdded":null},{"id":"CVE-2017-0428","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.125Z","title":"An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00908,"kevAdded":null},{"id":"CVE-2017-0427","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.181Z","title":"An elevation of privilege vulnerability in the kernel file system could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00976,"kevAdded":null},{"id":"CVE-2017-0426","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.151Z","title":"An information disclosure vulnerability in the Filesystem could enable a local malicious application to access data outside of its permission levels. This…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00627,"kevAdded":null},{"id":"CVE-2017-0425","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.212Z","title":"An information disclosure vulnerability in Audioserver could enable a local malicious application to access data outside of its permission levels. This issue…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00564,"kevAdded":null},{"id":"CVE-2017-0424","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.201Z","title":"An information disclosure vulnerability in AOSP Messaging could enable a remote attacker using a special crafted file to access data outside of its permission…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00802,"kevAdded":null},{"id":"CVE-2017-0423","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.152Z","title":"An elevation of privilege vulnerability in Bluetooth could enable a proximate attacker to manage access to documents on the device. This issue is rated as…","severity":"MEDIUM","score":5.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00329,"kevAdded":null},{"id":"CVE-2017-0422","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.174Z","title":"A denial of service vulnerability in Bionic DNS could enable a remote attacker to use a specially crafted network packet to cause a device hang or reboot. This…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01596,"kevAdded":null},{"id":"CVE-2017-0421","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.187Z","title":"An information disclosure vulnerability in the Framework APIs could enable a local malicious application to bypass operating system protections that isolate…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00564,"kevAdded":null},{"id":"CVE-2017-0420","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.164Z","title":"An information disclosure vulnerability in AOSP Mail could enable a local malicious application to bypass operating system protections that isolate application…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00653,"kevAdded":null},{"id":"CVE-2017-0419","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.148Z","title":"An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00911,"kevAdded":null},{"id":"CVE-2017-0418","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.197Z","title":"An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00911,"kevAdded":null},{"id":"CVE-2017-0417","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.149Z","title":"An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00911,"kevAdded":null},{"id":"CVE-2017-0416","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.107Z","title":"An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00911,"kevAdded":null},{"id":"CVE-2017-0415","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.123Z","title":"An elevation of privilege vulnerability in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00911,"kevAdded":null},{"id":"CVE-2017-0414","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.148Z","title":"An information disclosure vulnerability in AOSP Messaging could enable a local malicious application to bypass operating system protections that isolate…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00558,"kevAdded":null},{"id":"CVE-2017-0413","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.153Z","title":"An information disclosure vulnerability in AOSP Messaging could enable a local malicious application to bypass operating system protections that isolate…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00653,"kevAdded":null},{"id":"CVE-2017-0412","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.057Z","title":"An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.02535,"kevAdded":null},{"id":"CVE-2017-0411","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.145Z","title":"An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.02866,"kevAdded":null},{"id":"CVE-2017-0410","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.145Z","title":"An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00809,"kevAdded":null},{"id":"CVE-2017-0409","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.156Z","title":"A remote code execution vulnerability in libstagefright could enable an attacker using a specially crafted file to execute arbitrary code in the context of an…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0121,"kevAdded":null},{"id":"CVE-2017-0408","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.109Z","title":"A remote code execution vulnerability in libgdx could enable an attacker using a specially crafted file to execute arbitrary code in the context of an…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01235,"kevAdded":null},{"id":"CVE-2017-0407","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.141Z","title":"A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01856,"kevAdded":null},{"id":"CVE-2017-0406","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.104Z","title":"A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01856,"kevAdded":null},{"id":"CVE-2017-0405","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-05T13:03:57.146Z","title":"A remote code execution vulnerability in Surfaceflinger could enable an attacker using a specially crafted file to cause memory corruption during media file…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01818,"kevAdded":null},{"id":"CVE-2016-8481","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-06T02:20:31.442Z","title":"An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00845,"kevAdded":null},{"id":"CVE-2016-8480","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-06T02:20:31.329Z","title":"An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00818,"kevAdded":null},{"id":"CVE-2016-8476","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-06T02:20:31.332Z","title":"An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00845,"kevAdded":null},{"id":"CVE-2016-8421","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-06T02:20:31.328Z","title":"An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00845,"kevAdded":null},{"id":"CVE-2016-8420","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-06T02:20:31.299Z","title":"An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00845,"kevAdded":null},{"id":"CVE-2016-8419","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-06T02:20:31.322Z","title":"An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00845,"kevAdded":null},{"id":"CVE-2016-8418","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-06T02:20:31.247Z","title":"A remote code execution vulnerability in the Qualcomm crypto driver could enable a remote attacker to execute arbitrary code within the context of the kernel.…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0273,"kevAdded":null},{"id":"CVE-2016-8414","published":"2017-02-08T15:00:00.000Z","updated":"2024-08-06T02:20:31.332Z","title":"An information disclosure vulnerability in the Qualcomm Secure Execution Environment Communicator could enable a local malicious application to access data…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00672,"kevAdded":null},{"id":"CVE-2016-10044","published":"2017-02-07T07:02:00.000Z","updated":"2024-10-21T13:14:17.686Z","title":"The aio_mount function in fs/aio.c in the Linux kernel before 4.7.7 does not properly restrict execute access, which makes it easier for local users to bypass…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00301,"kevAdded":null},{"id":"CVE-2014-9914","published":"2017-02-07T07:02:00.000Z","updated":"2024-08-06T14:02:37.313Z","title":"Race condition in the ip4_datagram_release_cb function in net/ipv4/datagram.c in the Linux kernel before 3.15.2 allows local users to gain privileges or cause…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00274,"kevAdded":null},{"id":"CVE-2016-8411","published":"2017-01-27T17:00:00.000Z","updated":"2024-08-06T02:20:31.276Z","title":"Buffer overflow vulnerability while processing QMI QOS TLVs. Product: Android. Versions: versions that have qmi_qos_srvc.c. Android ID: 31805216. References:…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00888,"kevAdded":null},{"id":"CVE-2014-9910","published":"2017-01-18T17:00:00.000Z","updated":"2024-08-06T14:02:38.194Z","title":"An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00628,"kevAdded":null},{"id":"CVE-2014-9909","published":"2017-01-18T17:00:00.000Z","updated":"2024-08-06T14:02:37.989Z","title":"An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0062,"kevAdded":null},{"id":"CVE-2017-0398","published":"2017-01-13T16:00:00.000Z","updated":"2024-08-05T13:03:57.035Z","title":"An information disclosure vulnerability in Audioserver could enable a local malicious application to access data outside of its permission levels. This issue…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00566,"kevAdded":null},{"id":"CVE-2016-8467","published":"2017-01-13T16:00:00.000Z","updated":"2024-08-06T02:20:31.408Z","title":"An elevation of privilege vulnerability in the bootloader could enable a local attacker to execute arbitrary modem commands on the device. This issue is rated…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0038,"kevAdded":null},{"id":"CVE-2017-0404","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-05T13:03:57.099Z","title":"An elevation of privilege vulnerability in the kernel sound subsystem could enable a local malicious application to execute arbitrary code within the context…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01655,"kevAdded":null},{"id":"CVE-2017-0403","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-05T13:03:57.058Z","title":"An elevation of privilege vulnerability in the kernel performance subsystem could enable a local malicious application to execute arbitrary code within the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01655,"kevAdded":null},{"id":"CVE-2017-0402","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-05T13:03:57.110Z","title":"An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable a local malicious application to…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00572,"kevAdded":null},{"id":"CVE-2017-0401","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-05T13:03:57.151Z","title":"An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in the Qualcomm audio post processor could enable a local…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00555,"kevAdded":null},{"id":"CVE-2017-0400","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-05T13:03:57.025Z","title":"An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable a local malicious application to…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00458,"kevAdded":null},{"id":"CVE-2017-0399","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-05T13:03:57.060Z","title":"An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in the Qualcomm audio post processor could enable a local…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00544,"kevAdded":null},{"id":"CVE-2017-0397","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-05T13:03:57.083Z","title":"An information disclosure vulnerability in id3/ID3.cpp in libstagefright in Mediaserver could enable a local malicious application to access data outside of…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00467,"kevAdded":null},{"id":"CVE-2017-0396","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-05T13:03:57.083Z","title":"An information disclosure vulnerability in visualizer/EffectVisualizer.cpp in libeffects in Mediaserver could enable a local malicious application to access…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00458,"kevAdded":null},{"id":"CVE-2017-0395","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-05T13:03:57.052Z","title":"An elevation of privilege vulnerability in Contacts could enable a local malicious application to silently create contact information. This issue is rated as…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00335,"kevAdded":null},{"id":"CVE-2017-0394","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-05T13:03:57.054Z","title":"A denial of service vulnerability in Telephony could enable a remote attacker to cause a device hang or reboot. This issue is rated as High due to the…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0092,"kevAdded":null},{"id":"CVE-2017-0393","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-05T13:03:57.061Z","title":"A denial of service vulnerability in libvpx in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot.…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00892,"kevAdded":null},{"id":"CVE-2017-0392","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-05T13:03:56.975Z","title":"A denial of service vulnerability in VBRISeeker.cpp in libstagefright in Mediaserver could enable a remote attacker to use a specially crafted file to cause a…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00675,"kevAdded":null},{"id":"CVE-2017-0391","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-05T13:03:57.060Z","title":"A denial of service vulnerability in decoder/ihevcd_decode.c in libhevc in Mediaserver could enable a remote attacker to use a specially crafted file to cause…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00807,"kevAdded":null},{"id":"CVE-2017-0390","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-05T13:03:57.016Z","title":"A denial of service vulnerability in Tremolo/dpen.s in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00675,"kevAdded":null},{"id":"CVE-2017-0389","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-05T13:03:56.999Z","title":"A denial of service vulnerability in core networking could enable a remote attacker to use specially crafted network packet to cause a device hang or reboot.…","severity":"HIGH","score":7.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00772,"kevAdded":null},{"id":"CVE-2017-0388","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-05T13:03:57.074Z","title":"An elevation of privilege vulnerability in the External Storage Provider could enable a local secondary user to read data from an external storage SD card…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00186,"kevAdded":null},{"id":"CVE-2017-0387","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-05T13:03:56.980Z","title":"An elevation of privilege vulnerability in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00896,"kevAdded":null},{"id":"CVE-2017-0386","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-05T13:03:57.059Z","title":"An elevation of privilege vulnerability in the libnl library could enable a local malicious application to execute arbitrary code within the context of a…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01149,"kevAdded":null},{"id":"CVE-2017-0385","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-05T13:03:57.080Z","title":"An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00689,"kevAdded":null},{"id":"CVE-2017-0384","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-05T13:03:56.998Z","title":"An elevation of privilege vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable a local malicious application to…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00828,"kevAdded":null},{"id":"CVE-2017-0383","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-05T13:03:57.009Z","title":"An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00823,"kevAdded":null},{"id":"CVE-2017-0382","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-05T13:03:57.051Z","title":"A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrary code in the…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01119,"kevAdded":null},{"id":"CVE-2017-0381","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-05T13:03:57.096Z","title":"An information disclosure vulnerability in silk/NLSF_stabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01134,"kevAdded":null},{"id":"CVE-2016-8475","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.339Z","title":"An information disclosure vulnerability in the HTC input driver could enable a local malicious application to access data outside of its permission levels.…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00764,"kevAdded":null},{"id":"CVE-2016-8474","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.405Z","title":"An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00764,"kevAdded":null},{"id":"CVE-2016-8473","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.367Z","title":"An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00764,"kevAdded":null},{"id":"CVE-2016-8472","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.337Z","title":"An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00374,"kevAdded":null},{"id":"CVE-2016-8471","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.406Z","title":"An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00374,"kevAdded":null},{"id":"CVE-2016-8470","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.354Z","title":"An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00374,"kevAdded":null},{"id":"CVE-2016-8469","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.344Z","title":"An information disclosure vulnerability in the camera driver could enable a local malicious application to access data outside of its permission levels. This…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00764,"kevAdded":null},{"id":"CVE-2016-8468","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.406Z","title":"An elevation of privilege vulnerability in Binder could enable a local malicious application to execute arbitrary code within the context of a privileged…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01286,"kevAdded":null},{"id":"CVE-2016-8466","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.308Z","title":"An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":null,"product":"Android Kernel-3.10 Kernel-3.18","kev":false,"epss":0.01313,"kevAdded":null},{"id":"CVE-2016-8465","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.355Z","title":"An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01632,"kevAdded":null},{"id":"CVE-2016-8464","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.327Z","title":"An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0152,"kevAdded":null},{"id":"CVE-2016-8463","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.320Z","title":"A denial of service vulnerability in the Qualcomm FUSE file system could enable a remote attacker to use a specially crafted file to cause a device hang or…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01228,"kevAdded":null},{"id":"CVE-2016-8462","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.338Z","title":"An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. This issue is rated as…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0033,"kevAdded":null},{"id":"CVE-2016-8461","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.336Z","title":"An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. This issue is rated as…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android Kernel-3.18","kev":false,"epss":0.00329,"kevAdded":null},{"id":"CVE-2016-8460","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.332Z","title":"An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels.…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00781,"kevAdded":null},{"id":"CVE-2016-8459","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.405Z","title":"Possible buffer overflow in storage subsystem. Bad parameters as part of listener responses to RPMB commands could lead to buffer overflow. Product: Android.…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01714,"kevAdded":null},{"id":"CVE-2016-8458","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.336Z","title":"An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0151,"kevAdded":null},{"id":"CVE-2016-8457","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.342Z","title":"An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0151,"kevAdded":null},{"id":"CVE-2016-8456","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.364Z","title":"An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0151,"kevAdded":null},{"id":"CVE-2016-8455","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.372Z","title":"An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01477,"kevAdded":null},{"id":"CVE-2016-8454","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.358Z","title":"An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":null,"product":"Android Kernel-3.10 Kernel-3.18","kev":false,"epss":0.01313,"kevAdded":null},{"id":"CVE-2016-8453","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.359Z","title":"An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01472,"kevAdded":null},{"id":"CVE-2016-8452","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.372Z","title":"An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01356,"kevAdded":null},{"id":"CVE-2016-8451","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.368Z","title":"An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01506,"kevAdded":null},{"id":"CVE-2016-8450","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.340Z","title":"An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01313,"kevAdded":null},{"id":"CVE-2016-8449","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.342Z","title":"An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01496,"kevAdded":null},{"id":"CVE-2016-8448","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.373Z","title":"An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local malicious application to…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00663,"kevAdded":null},{"id":"CVE-2016-8447","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.364Z","title":"An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local malicious application to…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00646,"kevAdded":null},{"id":"CVE-2016-8446","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.339Z","title":"An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local malicious application to…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00646,"kevAdded":null},{"id":"CVE-2016-8445","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.344Z","title":"An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local malicious application to…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00718,"kevAdded":null},{"id":"CVE-2016-8444","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.349Z","title":"An elevation of privilege vulnerability in the Qualcomm camera could enable a local malicious application to execute arbitrary code within the context of the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01431,"kevAdded":null},{"id":"CVE-2016-8443","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.337Z","title":"Possible unauthorized memory access in the hypervisor. Incorrect configuration provides access to subsystem page tables. Product: Android. Versions: Kernel…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00321,"kevAdded":null},{"id":"CVE-2016-8442","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.301Z","title":"Possible unauthorized memory access in the hypervisor. Lack of input validation could allow hypervisor memory to be accessed by the HLOS. Product: Android.…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00368,"kevAdded":null},{"id":"CVE-2016-8441","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.335Z","title":"Possible buffer overflow in the hypervisor. Inappropriate usage of a static array could lead to a buffer overrun. Product: Android. Versions: Kernel 3.18.…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00398,"kevAdded":null},{"id":"CVE-2016-8440","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.340Z","title":"Possible buffer overflow in SMMU system call. Improper input validation in ADSP SID2CB system call may result in hypervisor memory overwrite. Product: Android.…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.02196,"kevAdded":null},{"id":"CVE-2016-8439","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.331Z","title":"Possible buffer overflow in trust zone access control API. Buffer overflow may occur due to lack of buffer size checking. Product: Android. Versions: Kernel…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01714,"kevAdded":null},{"id":"CVE-2016-8438","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.338Z","title":"Integer overflow leading to a TOCTOU condition in hypervisor PIL. An integer overflow exposes a race condition that may be used to bypass (Peripheral Image…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.02294,"kevAdded":null},{"id":"CVE-2016-8437","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.314Z","title":"Improper input validation in Access Control APIs. Access control API may return memory range checking incorrectly. Product: Android. Versions: Kernel 3.18.…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01585,"kevAdded":null},{"id":"CVE-2016-8436","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.337Z","title":"An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00802,"kevAdded":null},{"id":"CVE-2016-8435","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.360Z","title":"An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01229,"kevAdded":null},{"id":"CVE-2016-8434","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.318Z","title":"An elevation of privilege vulnerability in the Qualcomm GPU driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01217,"kevAdded":null},{"id":"CVE-2016-8433","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.358Z","title":"An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00709,"kevAdded":null},{"id":"CVE-2016-8432","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.341Z","title":"An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01531,"kevAdded":null},{"id":"CVE-2016-8431","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.364Z","title":"An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01531,"kevAdded":null},{"id":"CVE-2016-8430","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.335Z","title":"An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01711,"kevAdded":null},{"id":"CVE-2016-8429","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.321Z","title":"An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01606,"kevAdded":null},{"id":"CVE-2016-8428","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.335Z","title":"An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01606,"kevAdded":null},{"id":"CVE-2016-8427","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.299Z","title":"An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01606,"kevAdded":null},{"id":"CVE-2016-8426","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.339Z","title":"An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01606,"kevAdded":null},{"id":"CVE-2016-8425","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.327Z","title":"An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01606,"kevAdded":null},{"id":"CVE-2016-8424","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.296Z","title":"An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android Kernel-3.10","kev":false,"epss":0.01606,"kevAdded":null},{"id":"CVE-2016-8423","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.338Z","title":"An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00709,"kevAdded":null},{"id":"CVE-2016-8422","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.300Z","title":"An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00709,"kevAdded":null},{"id":"CVE-2016-8415","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.335Z","title":"An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01244,"kevAdded":null},{"id":"CVE-2016-8412","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.320Z","title":"An elevation of privilege vulnerability in the Qualcomm camera could enable a local malicious application to execute arbitrary code within the context of the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01244,"kevAdded":null},{"id":"CVE-2016-8398","published":"2017-01-12T20:00:00.000Z","updated":"2024-08-06T02:20:31.286Z","title":"Unauthenticated messages processed by the UE. Certain NAS messages are processed when no EPS security context exists in the UE. Product: Android. Versions:…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01585,"kevAdded":null},{"id":"CVE-2016-8410","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T02:20:31.285Z","title":"An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00874,"kevAdded":null},{"id":"CVE-2016-8409","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T02:20:31.331Z","title":"An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels.…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00874,"kevAdded":null},{"id":"CVE-2016-8408","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T02:20:31.436Z","title":"An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels.…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00874,"kevAdded":null},{"id":"CVE-2016-8407","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T02:20:31.321Z","title":"An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01037,"kevAdded":null},{"id":"CVE-2016-8406","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T02:20:31.307Z","title":"An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01037,"kevAdded":null},{"id":"CVE-2016-8405","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T02:20:31.297Z","title":"An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0169,"kevAdded":null},{"id":"CVE-2016-8404","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T02:20:31.300Z","title":"An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local…","severity":"MEDIUM","score":4.7,"vendor":null,"product":"Android Kernel-3.10","kev":false,"epss":0.01037,"kevAdded":null},{"id":"CVE-2016-8403","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T02:20:31.244Z","title":"An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01037,"kevAdded":null},{"id":"CVE-2016-8402","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T02:20:31.213Z","title":"An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01037,"kevAdded":null},{"id":"CVE-2016-8401","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T02:20:31.119Z","title":"An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01037,"kevAdded":null},{"id":"CVE-2016-8400","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T02:20:31.297Z","title":"An information disclosure vulnerability in the NVIDIA librm library (libnvrm) could enable a local malicious application to access data outside of its…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0092,"kevAdded":null},{"id":"CVE-2016-8399","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T02:20:31.231Z","title":"An elevation of privilege vulnerability in the kernel networking subsystem could enable a local malicious application to execute arbitrary code within the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.02341,"kevAdded":null},{"id":"CVE-2016-8397","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T02:20:31.091Z","title":"An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels.…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01133,"kevAdded":null},{"id":"CVE-2016-8396","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T02:20:31.172Z","title":"An information disclosure vulnerability in the MediaTek video driver could enable a local malicious application to access data outside of its permission…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00409,"kevAdded":null},{"id":"CVE-2016-8395","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T02:20:31.221Z","title":"A denial of service vulnerability in the NVIDIA camera driver could enable an attacker to cause a local permanent denial of service, which may require…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0078,"kevAdded":null},{"id":"CVE-2016-8394","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T02:20:31.195Z","title":"An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0145,"kevAdded":null},{"id":"CVE-2016-8393","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T02:20:31.231Z","title":"An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0144,"kevAdded":null},{"id":"CVE-2016-8392","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T02:20:31.196Z","title":"An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01208,"kevAdded":null},{"id":"CVE-2016-8391","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T02:20:31.145Z","title":"An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01208,"kevAdded":null},{"id":"CVE-2016-6791","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:37.928Z","title":"An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01208,"kevAdded":null},{"id":"CVE-2016-6790","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:37.666Z","title":"An elevation of privilege vulnerability in the NVIDIA libomx library (libnvomx) could enable a local malicious application to execute arbitrary code within the…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android Kernel-3.18","kev":false,"epss":0.01637,"kevAdded":null},{"id":"CVE-2016-6789","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:38.034Z","title":"An elevation of privilege vulnerability in the NVIDIA libomx library (libnvomx) could enable a local malicious application to execute arbitrary code within the…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0179,"kevAdded":null},{"id":"CVE-2016-6788","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:37.891Z","title":"An elevation of privilege vulnerability in the MediaTek I2C driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00587,"kevAdded":null},{"id":"CVE-2016-6785","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:37.915Z","title":"An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0136,"kevAdded":null},{"id":"CVE-2016-6784","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:37.871Z","title":"An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the…","severity":"HIGH","score":7,"vendor":null,"product":"Android Android-N/A","kev":false,"epss":0.00502,"kevAdded":null},{"id":"CVE-2016-6783","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:37.782Z","title":"An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00559,"kevAdded":null},{"id":"CVE-2016-6782","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:38.035Z","title":"An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0136,"kevAdded":null},{"id":"CVE-2016-6781","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:37.890Z","title":"An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0136,"kevAdded":null},{"id":"CVE-2016-6780","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:38.320Z","title":"An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code within the context…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0139,"kevAdded":null},{"id":"CVE-2016-6779","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:37.986Z","title":"An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code within the context…","severity":"HIGH","score":7,"vendor":null,"product":"Android Kernel-3.10","kev":false,"epss":0.0139,"kevAdded":null},{"id":"CVE-2016-6778","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:37.668Z","title":"An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code within the context…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0139,"kevAdded":null},{"id":"CVE-2016-6777","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:37.764Z","title":"An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0179,"kevAdded":null},{"id":"CVE-2016-6776","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:37.977Z","title":"An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0179,"kevAdded":null},{"id":"CVE-2016-6775","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:37.909Z","title":"An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0179,"kevAdded":null},{"id":"CVE-2016-6774","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:37.862Z","title":"An information disclosure vulnerability in Package Manager could enable a local malicious application to bypass operating system protections that isolate…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00308,"kevAdded":null},{"id":"CVE-2016-6773","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:37.977Z","title":"An information disclosure vulnerability in the ih264d decoder in Mediaserver could enable a local malicious application to access data outside of its…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00455,"kevAdded":null},{"id":"CVE-2016-6772","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:37.891Z","title":"An elevation of privilege vulnerability in Wi-Fi could enable a local malicious application to execute arbitrary code within the context of a privileged…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.02797,"kevAdded":null},{"id":"CVE-2016-6771","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:37.906Z","title":"An elevation of privilege vulnerability in Telephony could enable a local malicious application to access system functions beyond its access level. This issue…","severity":"MEDIUM","score":5.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00227,"kevAdded":null},{"id":"CVE-2016-6770","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:37.715Z","title":"An elevation of privilege vulnerability in the Framework API could enable a local malicious application to access system functions beyond its access level.…","severity":"LOW","score":3.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00265,"kevAdded":null},{"id":"CVE-2016-6769","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:37.836Z","title":"An elevation of privilege vulnerability in Smart Lock could enable a local malicious user to access Smart Lock settings without a PIN. This issue is rated as…","severity":"MEDIUM","score":4.6,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2016-6768","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:38.167Z","title":"A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrary code in the…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00808,"kevAdded":null},{"id":"CVE-2016-6767","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:37.641Z","title":"A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00529,"kevAdded":null},{"id":"CVE-2016-6766","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:37.790Z","title":"A denial of service vulnerability in libmedia and libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00626,"kevAdded":null},{"id":"CVE-2016-6765","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:37.779Z","title":"A denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot.…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00529,"kevAdded":null},{"id":"CVE-2016-6764","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:38.141Z","title":"A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00506,"kevAdded":null},{"id":"CVE-2016-6763","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:37.900Z","title":"A denial of service vulnerability in Telephony could enable a local malicious application to use a specially crafted file to cause a device hang or reboot.…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00341,"kevAdded":null},{"id":"CVE-2016-6762","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:37.851Z","title":"An elevation of privilege vulnerability in the libziparchive library could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00789,"kevAdded":null},{"id":"CVE-2016-6761","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:37.868Z","title":"An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code within the context of a…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01606,"kevAdded":null},{"id":"CVE-2016-6760","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:37.780Z","title":"An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code within the context of a…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01606,"kevAdded":null},{"id":"CVE-2016-6759","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:37.880Z","title":"An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code within the context of a…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01606,"kevAdded":null},{"id":"CVE-2016-6758","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:37.713Z","title":"An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code within the context of a…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01606,"kevAdded":null},{"id":"CVE-2016-6757","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:37.985Z","title":"An information disclosure vulnerability in Qualcomm components including the camera driver and video driver could enable a local malicious application to…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00742,"kevAdded":null},{"id":"CVE-2016-6756","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:37.868Z","title":"An information disclosure vulnerability in Qualcomm components including the camera driver and video driver could enable a local malicious application to…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00742,"kevAdded":null},{"id":"CVE-2016-6755","published":"2017-01-12T15:00:00.000Z","updated":"2024-08-06T01:43:37.894Z","title":"An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code within the context…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01208,"kevAdded":null},{"id":"CVE-2016-9754","published":"2017-01-05T11:00:00.000Z","updated":"2024-08-06T02:59:03.555Z","title":"The ring_buffer_resize function in kernel/trace/ring_buffer.c in the profiling subsystem in the Linux kernel before 4.6.1 mishandles certain integer…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00532,"kevAdded":null},{"id":"CVE-2016-6787","published":"2016-12-28T07:42:00.000Z","updated":"2024-08-06T01:43:37.789Z","title":"kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks during certain migrations, which allows local users to gain…","severity":"HIGH","score":7,"vendor":null,"product":null,"kev":false,"epss":0.00429,"kevAdded":null},{"id":"CVE-2016-6786","published":"2016-12-28T07:42:00.000Z","updated":"2024-08-06T01:43:37.770Z","title":"kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks during certain migrations, which allows local users to gain…","severity":"HIGH","score":7,"vendor":null,"product":null,"kev":false,"epss":0.00417,"kevAdded":null},{"id":"CVE-2016-6722","published":"2016-12-13T19:00:00.000Z","updated":"2024-08-06T01:36:29.559Z","title":"An information disclosure vulnerability in libstagefright in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00467,"kevAdded":null},{"id":"CVE-2016-6720","published":"2016-12-13T19:00:00.000Z","updated":"2024-08-06T01:36:29.611Z","title":"An information disclosure vulnerability in libstagefright in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00674,"kevAdded":null},{"id":"CVE-2016-6712","published":"2016-12-13T19:00:00.000Z","updated":"2024-08-06T01:36:29.585Z","title":"A remote denial of service vulnerability in libvpx in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00722,"kevAdded":null},{"id":"CVE-2016-6711","published":"2016-12-13T19:00:00.000Z","updated":"2024-08-06T01:36:29.542Z","title":"A remote denial of service vulnerability in libvpx in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00679,"kevAdded":null},{"id":"CVE-2016-6706","published":"2016-12-13T19:00:00.000Z","updated":"2024-08-06T01:36:29.560Z","title":"An elevation of privilege vulnerability in libstagefright in Mediaserver in Android 7.0 before 2016-11-01 could enable a local malicious application to execute…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00749,"kevAdded":null},{"id":"CVE-2016-6699","published":"2016-12-13T19:00:00.000Z","updated":"2024-08-06T01:36:29.638Z","title":"A remote code execution vulnerability in libstagefright in Mediaserver in Android 7.0 before 2016-11-01 could enable an attacker using a specially crafted file…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.0132,"kevAdded":null},{"id":"CVE-2016-9120","published":"2016-12-08T21:00:00.000Z","updated":"2024-08-06T02:42:10.935Z","title":"Race condition in the ion_ioctl function in drivers/staging/android/ion/ion.c in the Linux kernel before 4.6 allows local users to gain privileges or cause a…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.01736,"kevAdded":null},{"id":"CVE-2015-8967","published":"2016-12-08T21:00:00.000Z","updated":"2024-08-06T08:36:30.608Z","title":"arch/arm64/kernel/sys.c in the Linux kernel before 4.0 allows local users to bypass the \"strict page permissions\" protection mechanism and modify the…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00833,"kevAdded":null},{"id":"CVE-2015-8966","published":"2016-12-08T21:00:00.000Z","updated":"2024-08-06T08:36:30.464Z","title":"arch/arm/kernel/sys_oabi-compat.c in the Linux kernel before 4.4 allows local users to gain privileges via a crafted (1) F_OFD_GETLK, (2) F_OFD_SETLK, or (3)…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00542,"kevAdded":null},{"id":"CVE-2016-6754","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:43:37.841Z","title":"A remote code execution vulnerability in Webview in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-05 could enable a remote attacker to…","severity":"HIGH","score":8.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.04587,"kevAdded":null},{"id":"CVE-2016-6753","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:43:37.658Z","title":"An information disclosure vulnerability in kernel components, including the process-grouping subsystem and the networking subsystem, in Android before…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00477,"kevAdded":null},{"id":"CVE-2016-6752","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.566Z","title":"An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00367,"kevAdded":null},{"id":"CVE-2016-6751","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.567Z","title":"An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00367,"kevAdded":null},{"id":"CVE-2016-6750","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.545Z","title":"An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2016-6749","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.557Z","title":"An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00367,"kevAdded":null},{"id":"CVE-2016-6748","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.675Z","title":"An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00367,"kevAdded":null},{"id":"CVE-2016-6747","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.578Z","title":"A denial of service vulnerability in Mediaserver in Android before 2016-11-05 could enable an attacker to use a specially crafted file to cause a device hang…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00544,"kevAdded":null},{"id":"CVE-2016-6746","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.584Z","title":"An information disclosure vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to access data outside…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00359,"kevAdded":null},{"id":"CVE-2016-6745","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.574Z","title":"An elevation of privilege vulnerability in the Synaptics touchscreen driver in Android before 2016-11-05 could enable a local malicious application to execute…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00724,"kevAdded":null},{"id":"CVE-2016-6744","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.544Z","title":"An elevation of privilege vulnerability in the Synaptics touchscreen driver in Android before 2016-11-05 could enable a local malicious application to execute…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00724,"kevAdded":null},{"id":"CVE-2016-6743","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.720Z","title":"An elevation of privilege vulnerability in the Synaptics touchscreen driver in Android before 2016-11-05 could enable a local malicious application to execute…","severity":"HIGH","score":7.8,"vendor":null,"product":"Android Kernel-3.10","kev":false,"epss":0.00649,"kevAdded":null},{"id":"CVE-2016-6742","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.645Z","title":"An elevation of privilege vulnerability in the Synaptics touchscreen driver in Android before 2016-11-05 could enable a local malicious application to execute…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00724,"kevAdded":null},{"id":"CVE-2016-6741","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.576Z","title":"An elevation of privilege vulnerability in the Qualcomm camera driver in Android before 2016-11-05 could enable a local malicious application to execute…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00724,"kevAdded":null},{"id":"CVE-2016-6740","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.578Z","title":"An elevation of privilege vulnerability in the Qualcomm camera driver in Android before 2016-11-05 could enable a local malicious application to execute…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00724,"kevAdded":null},{"id":"CVE-2016-6739","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.550Z","title":"An elevation of privilege vulnerability in the Qualcomm camera driver in Android before 2016-11-05 could enable a local malicious application to execute…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00649,"kevAdded":null},{"id":"CVE-2016-6738","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.543Z","title":"An elevation of privilege vulnerability in the Qualcomm crypto engine driver in Android before 2016-11-05 could enable a local malicious application to execute…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00724,"kevAdded":null},{"id":"CVE-2016-6737","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.549Z","title":"An elevation of privilege vulnerability in the kernel ION subsystem in Android before 2016-11-05 could enable a local malicious application to execute…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00649,"kevAdded":null},{"id":"CVE-2016-6736","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.633Z","title":"An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00649,"kevAdded":null},{"id":"CVE-2016-6735","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.560Z","title":"An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00686,"kevAdded":null},{"id":"CVE-2016-6734","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.471Z","title":"An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00686,"kevAdded":null},{"id":"CVE-2016-6733","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.578Z","title":"An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary…","severity":"HIGH","score":7.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00666,"kevAdded":null},{"id":"CVE-2016-6732","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.534Z","title":"An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary…","severity":"HIGH","score":7.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00666,"kevAdded":null},{"id":"CVE-2016-6731","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.571Z","title":"An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary…","severity":"HIGH","score":7.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00666,"kevAdded":null},{"id":"CVE-2016-6730","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.568Z","title":"An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary…","severity":"HIGH","score":7.3,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00666,"kevAdded":null},{"id":"CVE-2016-6729","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.462Z","title":"An elevation of privilege vulnerability in the Qualcomm bootloader in Android before 2016-11-05 could enable a local malicious application to execute arbitrary…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00636,"kevAdded":null},{"id":"CVE-2016-6728","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.596Z","title":"An elevation of privilege vulnerability in the kernel ION subsystem in Android before 2016-11-05 could enable a local malicious application to execute…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01468,"kevAdded":null},{"id":"CVE-2016-6725","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.614Z","title":"A remote code execution vulnerability in the Qualcomm crypto driver in Android before 2016-11-05 could enable a remote attacker to execute arbitrary code…","severity":"CRITICAL","score":9.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.026,"kevAdded":null},{"id":"CVE-2016-6724","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.594Z","title":"A denial of service vulnerability in the Input Manager Service in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00396,"kevAdded":null},{"id":"CVE-2016-6723","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.564Z","title":"A denial of service vulnerability in Proxy Auto Config in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0…","severity":"MEDIUM","score":4.7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00611,"kevAdded":null},{"id":"CVE-2016-6721","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.566Z","title":"An information disclosure vulnerability in Mediaserver in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could enable a local malicious application to…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0041,"kevAdded":null},{"id":"CVE-2016-6719","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.565Z","title":"An elevation of privilege vulnerability in the Bluetooth component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01,…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00342,"kevAdded":null},{"id":"CVE-2016-6718","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.566Z","title":"An elevation of privilege vulnerability in the Account Manager Service in Android 7.0 before 2016-11-01 could enable a local malicious application to retrieve…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00402,"kevAdded":null},{"id":"CVE-2016-6717","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.595Z","title":"An elevation of privilege vulnerability in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0…","severity":"HIGH","score":7,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00645,"kevAdded":null},{"id":"CVE-2016-6716","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.532Z","title":"An elevation of privilege vulnerability in the AOSP Launcher in Android 7.0 before 2016-11-01 could allow a local malicious application to create shortcuts…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00342,"kevAdded":null},{"id":"CVE-2016-6715","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.569Z","title":"An elevation of privilege vulnerability in the Framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00345,"kevAdded":null},{"id":"CVE-2016-6714","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.563Z","title":"A remote denial of service vulnerability in Mediaserver in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could enable an attacker to use a specially…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00521,"kevAdded":null},{"id":"CVE-2016-6713","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.528Z","title":"A remote denial of service vulnerability in Mediaserver in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could enable an attacker to use a specially…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00617,"kevAdded":null},{"id":"CVE-2016-6710","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.492Z","title":"An information disclosure vulnerability in the download manager in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0046,"kevAdded":null},{"id":"CVE-2016-6709","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.567Z","title":"An information disclosure vulnerability in Conscrypt and BoringSSL in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could enable a man-in-the-middle…","severity":"MEDIUM","score":5.9,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00521,"kevAdded":null},{"id":"CVE-2016-6708","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.475Z","title":"An elevation of privilege in the System UI in Android 7.0 before 2016-11-01 could enable a local malicious user to bypass the security prompt of your work…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00152,"kevAdded":null},{"id":"CVE-2016-6707","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.542Z","title":"An elevation of privilege vulnerability in System Server in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could enable a local malicious application…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0415,"kevAdded":null},{"id":"CVE-2016-6705","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.476Z","title":"An elevation of privilege vulnerability in Mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00751,"kevAdded":null},{"id":"CVE-2016-6704","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.469Z","title":"An elevation of privilege vulnerability in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.0091,"kevAdded":null},{"id":"CVE-2016-6703","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.368Z","title":"A remote code execution vulnerability in an Android runtime library in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00963,"kevAdded":null},{"id":"CVE-2016-6702","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.563Z","title":"A remote code execution vulnerability in libjpeg in Android 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.1 could enable an attacker using a…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.01054,"kevAdded":null},{"id":"CVE-2016-6701","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.575Z","title":"A remote code execution vulnerability in libskia in Android 7.0 before 2016-11-01 could enable an attacker using a specially crafted file to cause memory…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00927,"kevAdded":null},{"id":"CVE-2016-6700","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.425Z","title":"An elevation of privilege vulnerability in libzipfile in Android 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.1 could enable a local malicious…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00836,"kevAdded":null},{"id":"CVE-2016-6698","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T01:36:29.594Z","title":"An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2016-3907","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T00:10:31.864Z","title":"An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android…","severity":"MEDIUM","score":5.5,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00367,"kevAdded":null},{"id":"CVE-2016-3906","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T00:10:31.921Z","title":"An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android…","severity":"MEDIUM","score":5.5,"vendor":null,"product":"Android Kernel-3.10","kev":false,"epss":0.00424,"kevAdded":null},{"id":"CVE-2016-3904","published":"2016-11-25T16:00:00.000Z","updated":"2024-08-06T00:10:31.865Z","title":"An elevation of privilege vulnerability in the Qualcomm bus driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary…","severity":"HIGH","score":7.8,"vendor":"Google Inc.","product":"Android","kev":false,"epss":0.00638,"kevAdded":null},{"id":"CVE-2016-7917","published":"2016-11-16T04:49:00.000Z","updated":"2024-08-06T02:13:20.955Z","title":"The nfnetlink_rcv_batch function in net/netfilter/nfnetlink.c in the Linux kernel before 4.5 does not check whether a batch message's length field is large…","severity":"MEDIUM","score":5,"vendor":null,"product":null,"kev":false,"epss":0.01507,"kevAdded":null},{"id":"CVE-2016-7916","published":"2016-11-16T04:49:00.000Z","updated":"2024-08-06T02:13:20.801Z","title":"Race condition in the environ_read function in fs/proc/base.c in the Linux kernel before 4.5.4 allows local users to obtain sensitive information from kernel…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00388,"kevAdded":null},{"id":"CVE-2016-7915","published":"2016-11-16T04:49:00.000Z","updated":"2024-08-06T02:13:20.857Z","title":"The hid_input_field function in drivers/hid/hid-core.c in the Linux kernel before 4.6 allows physically proximate attackers to obtain sensitive information…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.019,"kevAdded":null},{"id":"CVE-2016-7914","published":"2016-11-16T04:49:00.000Z","updated":"2024-08-06T02:13:20.798Z","title":"The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.5.3 does not check whether a slot is a leaf, which allows…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.02032,"kevAdded":null},{"id":"CVE-2016-7913","published":"2016-11-16T04:49:00.000Z","updated":"2024-08-06T02:13:20.821Z","title":"The xc2028_set_config function in drivers/media/tuners/tuner-xc2028.c in the Linux kernel before 4.6 allows local users to gain privileges or cause a denial of…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.02156,"kevAdded":null},{"id":"CVE-2016-7912","published":"2016-11-16T04:49:00.000Z","updated":"2024-08-06T02:13:20.886Z","title":"Use-after-free vulnerability in the ffs_user_copy_worker function in drivers/usb/gadget/function/f_fs.c in the Linux kernel before 4.5.3 allows local users to…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.0211,"kevAdded":null},{"id":"CVE-2016-7911","published":"2016-11-16T04:49:00.000Z","updated":"2024-08-06T02:13:20.819Z","title":"Race condition in the get_task_ioprio function in block/ioprio.c in the Linux kernel before 4.6.6 allows local users to gain privileges or cause a denial of…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.01541,"kevAdded":null},{"id":"CVE-2016-7910","published":"2016-11-16T04:49:00.000Z","updated":"2024-08-06T02:13:20.882Z","title":"Use-after-free vulnerability in the disk_seqf_stop function in block/genhd.c in the Linux kernel before 4.7.1 allows local users to gain privileges by…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.02966,"kevAdded":null},{"id":"CVE-2015-8964","published":"2016-11-16T04:49:00.000Z","updated":"2024-08-06T08:36:30.376Z","title":"The tty_set_termios_ldisc function in drivers/tty/tty_ldisc.c in the Linux kernel before 4.5 allows local users to obtain sensitive information from kernel…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.0149,"kevAdded":null},{"id":"CVE-2015-8963","published":"2016-11-16T04:49:00.000Z","updated":"2024-10-15T19:01:34.663Z","title":"Race condition in kernel/events/core.c in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (use-after-free) by…","severity":"HIGH","score":7,"vendor":null,"product":null,"kev":false,"epss":0.0143,"kevAdded":null},{"id":"CVE-2015-8962","published":"2016-11-16T04:49:00.000Z","updated":"2024-08-06T08:36:30.694Z","title":"Double free vulnerability in the sg_common_write function in drivers/scsi/sg.c in the Linux kernel before 4.4 allows local users to gain privileges or cause a…","severity":"HIGH","score":7.3,"vendor":null,"product":null,"kev":false,"epss":0.018,"kevAdded":null},{"id":"CVE-2015-8961","published":"2016-11-16T04:49:00.000Z","updated":"2024-08-06T08:36:31.135Z","title":"The __ext4_journal_stop function in fs/ext4/ext4_jbd2.c in the Linux kernel before 4.3.3 allows local users to gain privileges or cause a denial of service…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.01999,"kevAdded":null},{"id":"CVE-2016-7117","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T01:50:47.546Z","title":"Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.23558,"kevAdded":null},{"id":"CVE-2016-6696","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T01:36:29.467Z","title":"sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00949,"kevAdded":null},{"id":"CVE-2016-6695","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T01:36:29.539Z","title":"sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.01255,"kevAdded":null},{"id":"CVE-2016-6694","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T01:36:29.427Z","title":"sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00949,"kevAdded":null},{"id":"CVE-2016-6693","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T01:36:29.468Z","title":"sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00949,"kevAdded":null},{"id":"CVE-2016-6692","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T01:36:29.475Z","title":"drivers/video/msm/mdss/mdss_mdp_pp.c in the Qualcomm MDSS driver in Android before 2016-10-05 allows attackers to cause a denial of service (invalid pointer…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00949,"kevAdded":null},{"id":"CVE-2016-6691","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T01:36:29.461Z","title":"service/jni/com_android_server_wifi_Gbk2Utf.cpp in the Qualcomm Wi-Fi gbk2utf module in Android before 2016-10-05 allows remote attackers to cause a denial of…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.01299,"kevAdded":null},{"id":"CVE-2016-6690","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T01:36:29.493Z","title":"The sound driver in the kernel in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Nexus Player devices allows attackers to cause a…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00341,"kevAdded":null},{"id":"CVE-2016-6689","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T01:36:29.563Z","title":"Binder in the kernel in Android before 2016-10-05 on Nexus devices allows attackers to obtain sensitive information via a crafted application, aka internal bug…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.02,"kevAdded":null},{"id":"CVE-2016-6688","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T01:36:29.430Z","title":"The NVIDIA profiler in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka internal…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00392,"kevAdded":null},{"id":"CVE-2016-6687","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T01:36:29.537Z","title":"The NVIDIA profiler in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka internal…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00392,"kevAdded":null},{"id":"CVE-2016-6686","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T01:36:29.580Z","title":"The NVIDIA profiler in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka internal…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00392,"kevAdded":null},{"id":"CVE-2016-6685","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T01:36:29.417Z","title":"The kernel in Android before 2016-10-05 on Nexus 6P devices allows attackers to obtain sensitive information via a crafted application, aka internal bug…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00392,"kevAdded":null},{"id":"CVE-2016-6684","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T01:36:29.640Z","title":"The kernel in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, Nexus 9, Nexus Player, and Android One devices allows attackers to obtain…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00392,"kevAdded":null},{"id":"CVE-2016-6683","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T01:36:29.509Z","title":"The kernel in Android before 2016-10-05 on Nexus devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30143283.","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2016-6682","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T01:36:29.497Z","title":"drivers/misc/qcom/qdsp6v2/audio_utils.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One devices does not…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00577,"kevAdded":null},{"id":"CVE-2016-6681","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T01:36:29.589Z","title":"drivers/misc/qcom/qdsp6v2/audio_utils.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One devices does not…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00577,"kevAdded":null},{"id":"CVE-2016-6680","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T01:36:29.560Z","title":"CORE/HDD/src/wlan_hdd_wext.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to obtain sensitive…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00546,"kevAdded":null},{"id":"CVE-2016-6679","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T01:36:29.615Z","title":"CORE/HDD/src/wlan_hdd_hostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to obtain…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00559,"kevAdded":null},{"id":"CVE-2016-6678","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T01:36:29.644Z","title":"The Motorola USBNet driver in Android before 2016-10-05 on Nexus 6 devices allows attackers to obtain sensitive information via a crafted application, aka…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00475,"kevAdded":null},{"id":"CVE-2016-6677","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T01:36:29.476Z","title":"The NVIDIA GPU driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka internal…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00392,"kevAdded":null},{"id":"CVE-2016-6676","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T01:36:29.514Z","title":"Off-by-one error in CORE/HDD/src/wlan_hdd_cfg.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00704,"kevAdded":null},{"id":"CVE-2016-6675","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T01:36:29.425Z","title":"Off-by-one error in CORE/HDD/src/wlan_hdd_hostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00704,"kevAdded":null},{"id":"CVE-2016-6674","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T01:36:29.442Z","title":"system_server in Android before 2016-10-05 on Nexus devices allows attackers to gain privileges via a crafted application, aka internal bug 30445380.","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00407,"kevAdded":null},{"id":"CVE-2016-6673","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T01:36:29.496Z","title":"The NVIDIA camera driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00389,"kevAdded":null},{"id":"CVE-2016-6672","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T01:36:29.492Z","title":"The Synaptics touchscreen driver in Android before 2016-10-05 on Nexus 5X devices allows attackers to gain privileges via a crafted application, aka internal…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00389,"kevAdded":null},{"id":"CVE-2016-3940","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.920Z","title":"The Synaptics touchscreen driver in Android before 2016-10-05 on Nexus 6P and Android One devices allows attackers to gain privileges via a crafted…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00389,"kevAdded":null},{"id":"CVE-2016-3939","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.843Z","title":"drivers/video/msm/mdss/mdss_debug.c in the Qualcomm video driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allows…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00439,"kevAdded":null},{"id":"CVE-2016-3938","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:32.022Z","title":"drivers/video/msm/mdss/mdss_mdp_overlay.c in the Qualcomm video driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00539,"kevAdded":null},{"id":"CVE-2016-3937","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.874Z","title":"The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 30030994 and…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00501,"kevAdded":null},{"id":"CVE-2016-3936","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.958Z","title":"The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 30019037 and…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00501,"kevAdded":null},{"id":"CVE-2016-3935","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.994Z","title":"Multiple integer overflows in drivers/crypto/msm/qcedev.c in the Qualcomm cryptographic engine driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00543,"kevAdded":null},{"id":"CVE-2016-3934","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.951Z","title":"drivers/media/platform/msm/camera_v2/sensor/io/msm_camera_cci_i2c.c in the Qualcomm camera driver in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6,…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00603,"kevAdded":null},{"id":"CVE-2016-3933","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.947Z","title":"mediaserver in Android before 2016-10-05 on Nexus 9 and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00411,"kevAdded":null},{"id":"CVE-2016-3932","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.947Z","title":"mediaserver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 29161895 and MediaTek internal…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00411,"kevAdded":null},{"id":"CVE-2016-3931","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.947Z","title":"drivers/misc/qseecom.c in the Qualcomm QSEE Communicator driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allows…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00574,"kevAdded":null},{"id":"CVE-2016-3930","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:32.022Z","title":"The NVIDIA MMC test driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00465,"kevAdded":null},{"id":"CVE-2016-3929","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.878Z","title":"Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices has unknown impact and attack vectors, aka internal…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00632,"kevAdded":null},{"id":"CVE-2016-3928","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.847Z","title":"The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 30019362 and…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00501,"kevAdded":null},{"id":"CVE-2016-3927","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.881Z","title":"Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices has unknown impact and attack vectors, aka internal…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00632,"kevAdded":null},{"id":"CVE-2016-3926","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.911Z","title":"Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5, 5X, 6, and 6P devices has unknown impact and attack vectors, aka…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00742,"kevAdded":null},{"id":"CVE-2016-3925","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.906Z","title":"server/wifi/anqp/ANQPFactory.java in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 allows attackers to cause a denial of service (blocked Wi-Fi…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00363,"kevAdded":null},{"id":"CVE-2016-3924","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.891Z","title":"services/audioflinger/Effects.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00454,"kevAdded":null},{"id":"CVE-2016-3923","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.884Z","title":"The Accessibility services in Android 7.0 before 2016-10-01 mishandle motion events, which allows attackers to conduct touchjacking attacks and consequently…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2016-3922","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.842Z","title":"libril/RilSapSocket.cpp in Telephony in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 relies on variable-length arrays, which allows attackers to…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00385,"kevAdded":null},{"id":"CVE-2016-3921","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.884Z","title":"libsysutils/src/FrameworkListener.cpp in Framework Listener in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.0053,"kevAdded":null},{"id":"CVE-2016-3920","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.875Z","title":"id3/ID3.cpp in libstagefright in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows remote…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00722,"kevAdded":null},{"id":"CVE-2016-3918","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.877Z","title":"email/provider/AttachmentProvider.java in AOSP Mail in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00464,"kevAdded":null},{"id":"CVE-2016-3917","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.932Z","title":"The fingerprint login feature in Android 6.0.1 before 2016-10-01 and 7.0 before 2016-10-01 does not track the user account during the authentication process,…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2016-3916","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.854Z","title":"camera/src/camera_metadata.c in the Camera service in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.0053,"kevAdded":null},{"id":"CVE-2016-3915","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.857Z","title":"camera/src/camera_metadata.c in the Camera service in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.0053,"kevAdded":null},{"id":"CVE-2016-3914","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.872Z","title":"Race condition in providers/telephony/MmsProvider.java in Telephony in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01,…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00424,"kevAdded":null},{"id":"CVE-2016-3913","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.882Z","title":"media/libmediaplayerservice/MediaPlayerService.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01,…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.0053,"kevAdded":null},{"id":"CVE-2016-3912","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.779Z","title":"The framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allow attackers to…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.0053,"kevAdded":null},{"id":"CVE-2016-3911","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.900Z","title":"core/java/android/os/Process.java in Zygote in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00524,"kevAdded":null},{"id":"CVE-2016-3910","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.860Z","title":"services/soundtrigger/SoundTriggerHwService.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00458,"kevAdded":null},{"id":"CVE-2016-3909","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.802Z","title":"The SoftMPEG4 component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00557,"kevAdded":null},{"id":"CVE-2016-3908","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.841Z","title":"The Lock Settings Service in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 allows attackers to remove a device's PIN or password, and consequently…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00369,"kevAdded":null},{"id":"CVE-2016-3905","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.895Z","title":"CORE/HDD/src/wlan_hdd_main.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X devices allows attackers to gain privileges via a crafted…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00513,"kevAdded":null},{"id":"CVE-2016-3903","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.896Z","title":"drivers/media/platform/msm/camera_v2/sensor/csid/msm_csid.c in the Qualcomm camera driver in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P,…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00574,"kevAdded":null},{"id":"CVE-2016-3902","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.761Z","title":"drivers/platform/msm/ipa/ipa_qmi_service.c in the Qualcomm IPA driver in Android before 2016-10-05 on Nexus 5X and 6P devices allows attackers to obtain…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00498,"kevAdded":null},{"id":"CVE-2016-3901","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.927Z","title":"Multiple integer overflows in drivers/crypto/msm/qcedev.c in the Qualcomm cryptographic engine driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00519,"kevAdded":null},{"id":"CVE-2016-3900","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.821Z","title":"cmds/servicemanager/service_manager.c in ServiceManager in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00557,"kevAdded":null},{"id":"CVE-2016-3882","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.332Z","title":"Off-by-one error in server/wifi/anqp/VenueNameElement.java in Wi-Fi in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 allows remote attackers to cause…","severity":"MEDIUM","score":6.5,"vendor":null,"product":null,"kev":false,"epss":0.00442,"kevAdded":null},{"id":"CVE-2016-3860","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T00:10:31.302Z","title":"sound/soc/msm/qdsp6v2/audio_calibration.c in the Qualcomm sound driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One devices allows…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00449,"kevAdded":null},{"id":"CVE-2015-8956","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T08:36:31.038Z","title":"The rfcomm_sock_bind function in net/bluetooth/rfcomm/sock.c in the Linux kernel before 4.2 allows local users to obtain sensitive information or cause a…","severity":"MEDIUM","score":6.1,"vendor":null,"product":null,"kev":false,"epss":0.00223,"kevAdded":null},{"id":"CVE-2015-8955","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T08:36:30.864Z","title":"arch/arm64/kernel/perf_event.c in the Linux kernel before 4.1 on arm64 platforms allows local users to gain privileges or cause a denial of service (invalid…","severity":"HIGH","score":7.3,"vendor":null,"product":null,"kev":false,"epss":0.00207,"kevAdded":null},{"id":"CVE-2015-8951","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T08:36:31.652Z","title":"Multiple use-after-free vulnerabilities in sound/soc/msm/qdsp6v2/msm-lsm-client.c in the Qualcomm sound driver in Android before 2016-10-05 on Nexus 5X, Nexus…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00498,"kevAdded":null},{"id":"CVE-2015-8950","published":"2016-10-10T10:00:00.000Z","updated":"2024-08-06T08:36:30.390Z","title":"arch/arm64/mm/dma-mapping.c in the Linux kernel before 4.0.3, as used in the ION subsystem in Android and other products, does not initialize certain data…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.01457,"kevAdded":null},{"id":"CVE-2016-3899","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.785Z","title":"OMXCodec.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00701,"kevAdded":null},{"id":"CVE-2016-3898","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.765Z","title":"Telephony in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allows attackers to cause a denial of service…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.0042,"kevAdded":null},{"id":"CVE-2016-3897","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.842Z","title":"The WifiEnterpriseConfig class in net/wifi/WifiEnterpriseConfig.java in Wi-Fi in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00605,"kevAdded":null},{"id":"CVE-2016-3896","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.801Z","title":"AOSP Mail in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 allows attackers to obtain sensitive…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00477,"kevAdded":null},{"id":"CVE-2016-3895","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.804Z","title":"Integer overflow in the Region::unflatten function in libs/ui/Region.cpp in mediaserver in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00454,"kevAdded":null},{"id":"CVE-2016-3894","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.849Z","title":"The Qualcomm DMA component in Android before 2016-09-05 on Nexus 6 devices allows attackers to obtain sensitive information via a crafted application, aka…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2016-3893","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.761Z","title":"The wcdcal_hwdep_ioctl_shared function in sound/soc/codecs/wcdcal-hwdep.c in the Qualcomm sound codec in Android before 2016-09-05 on Nexus 6P devices does not…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00496,"kevAdded":null},{"id":"CVE-2016-3892","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.866Z","title":"The Qualcomm SPMI driver in Android before 2016-09-05 on Nexus 5, 5X, 6, and 6P devices allows attackers to obtain sensitive information via a crafted…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00487,"kevAdded":null},{"id":"CVE-2016-3890","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.755Z","title":"The Java Debug Wire Protocol (JDWP) implementation in adb/sockets.cpp in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before…","severity":"HIGH","score":7,"vendor":null,"product":null,"kev":false,"epss":0.00745,"kevAdded":null},{"id":"CVE-2016-3889","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.795Z","title":"Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism by…","severity":"MEDIUM","score":6.8,"vendor":null,"product":null,"kev":false,"epss":0.00244,"kevAdded":null},{"id":"CVE-2016-3888","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.805Z","title":"internal/telephony/SMSDispatcher.java in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01…","severity":"LOW","score":2.1,"vendor":null,"product":null,"kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2016-3887","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.690Z","title":"providers/settings/SettingsProvider.java in Android 7.0 before 2016-09-01 does not properly enforce the DISALLOW_CONFIG_VPN setting, which allows attackers to…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00476,"kevAdded":null},{"id":"CVE-2016-3886","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.390Z","title":"systemui/statusbar/phone/QuickStatusBarHeader.java in the System UI Tuner in Android 7.0 before 2016-09-01 does not prevent tuner changes on the lockscreen,…","severity":"MEDIUM","score":6.8,"vendor":null,"product":null,"kev":false,"epss":0.00198,"kevAdded":null},{"id":"CVE-2016-3885","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.664Z","title":"debuggerd/debuggerd.cpp in Debuggerd in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 mishandles the…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.01214,"kevAdded":null},{"id":"CVE-2016-3884","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.448Z","title":"server/notification/NotificationManagerService.java in the Notification Manager Service in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 lacks uid…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00439,"kevAdded":null},{"id":"CVE-2016-3883","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.685Z","title":"internal/telephony/SMSDispatcher.java in Telephony in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.0044,"kevAdded":null},{"id":"CVE-2016-3881","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.322Z","title":"The decoder_peek_si_internal function in vp9/vp9_dx_iface.c in libvpx in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00733,"kevAdded":null},{"id":"CVE-2016-3880","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.389Z","title":"Multiple buffer overflows in rtsp/ASessionDescription.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1,…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00758,"kevAdded":null},{"id":"CVE-2016-3879","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.298Z","title":"arm-wt-22k/lib_src/eas_mdls.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 allows remote…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00707,"kevAdded":null},{"id":"CVE-2016-3878","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.389Z","title":"decoder/ih264d_api.c in mediaserver in Android 6.x before 2016-09-01 mishandles the case of decoding zero MBs, which allows remote attackers to cause a denial…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00701,"kevAdded":null},{"id":"CVE-2016-3877","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.290Z","title":"Unspecified vulnerability in Android before 2016-09-01 has unknown impact and attack vectors.","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00668,"kevAdded":null},{"id":"CVE-2016-3876","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.408Z","title":"providers/settings/SettingsProvider.java in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows physically proximate attackers to bypass the…","severity":"MEDIUM","score":6.8,"vendor":null,"product":null,"kev":false,"epss":0.00203,"kevAdded":null},{"id":"CVE-2016-3875","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.367Z","title":"server/wm/WindowManagerService.java in Android 6.x before 2016-09-01 does not enforce the DISALLOW_SAFE_BOOT setting, which allows physically proximate…","severity":"MEDIUM","score":6.8,"vendor":null,"product":null,"kev":false,"epss":0.00197,"kevAdded":null},{"id":"CVE-2016-3874","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.312Z","title":"CORE/HDD/src/wlan_hdd_wext.c in the Qualcomm Wi-Fi driver in Android before 2016-09-05 on Nexus 5X devices does not properly validate the arguments array,…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.0082,"kevAdded":null},{"id":"CVE-2016-3873","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.289Z","title":"The NVIDIA kernel in Android before 2016-09-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 29518457.","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00628,"kevAdded":null},{"id":"CVE-2016-3872","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.390Z","title":"Buffer overflow in codecs/on2/dec/SoftVPX.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.0059,"kevAdded":null},{"id":"CVE-2016-3871","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.553Z","title":"Multiple buffer overflows in codecs/mp3dec/SoftMP3.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1,…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00886,"kevAdded":null},{"id":"CVE-2016-3870","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.263Z","title":"omx/SimpleSoftOMXComponent.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00519,"kevAdded":null},{"id":"CVE-2016-3869","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.268Z","title":"The Broadcom Wi-Fi driver in Android before 2016-09-05 on Nexus 5, Nexus 6, Nexus 6P, Nexus 9, Nexus Player, and Pixel C devices allows attackers to gain…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00623,"kevAdded":null},{"id":"CVE-2016-3868","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.222Z","title":"The Qualcomm power driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka Android…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00623,"kevAdded":null},{"id":"CVE-2016-3867","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.411Z","title":"The Qualcomm IPA driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka Android…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00806,"kevAdded":null},{"id":"CVE-2016-3866","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.316Z","title":"The Qualcomm sound driver in Android before 2016-09-05 on Nexus 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00469,"kevAdded":null},{"id":"CVE-2016-3865","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.403Z","title":"The Synaptics touchscreen driver in Android before 2016-09-05 on Nexus 5X and 9 devices allows attackers to gain privileges via a crafted application, aka…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00571,"kevAdded":null},{"id":"CVE-2016-3864","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.410Z","title":"The Qualcomm radio interface layer in Android before 2016-09-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allows attackers to gain…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00471,"kevAdded":null},{"id":"CVE-2016-3863","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.218Z","title":"Multiple stack-based buffer overflows in the AVCC reassembly implementation in Utils.cpp in libstagefright in MediaMuxer in Android 4.x before 4.4.4, 5.0.x…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.01143,"kevAdded":null},{"id":"CVE-2016-3862","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.381Z","title":"media/ExifInterface.java in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 does not properly…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.01559,"kevAdded":null},{"id":"CVE-2016-3861","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.316Z","title":"LibUtils in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 mishandles conversions between…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.08288,"kevAdded":null},{"id":"CVE-2016-3859","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.306Z","title":"The Qualcomm camera driver in Android before 2016-09-05 on Nexus 5, 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00471,"kevAdded":null},{"id":"CVE-2016-3858","published":"2016-09-11T21:00:00.000Z","updated":"2024-08-06T00:10:31.353Z","title":"Buffer overflow in drivers/soc/qcom/subsystem_restart.c in the Qualcomm subsystem driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.0053,"kevAdded":null},{"id":"CVE-2015-3854","published":"2016-08-07T21:00:00.000Z","updated":"2024-08-06T05:56:15.908Z","title":"packages/SystemUI/src/com/android/systemui/power/PowerNotificationWarnings.java in Android 5.x allows attackers to bypass a DEVICE_POWER permission requirement…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00543,"kevAdded":null},{"id":"CVE-2016-3841","published":"2016-08-06T20:00:00.000Z","updated":"2024-08-06T00:10:31.094Z","title":"The IPv6 stack in the Linux kernel before 4.3.3 mishandles options data, which allows local users to gain privileges or cause a denial of service…","severity":"HIGH","score":7.3,"vendor":null,"product":null,"kev":false,"epss":0.00299,"kevAdded":null},{"id":"CVE-2016-3856","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T00:10:31.257Z","title":"netd in Android before 2016-08-05 mishandles tethering and stdio streams, which allows attackers to cause a denial of service or possibly have unspecified…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00399,"kevAdded":null},{"id":"CVE-2016-3855","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T00:10:31.213Z","title":"drivers/thermal/supply_lm_core.c in the Qualcomm components in Android before 2016-08-05 does not validate a certain count parameter, which allows attackers to…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00385,"kevAdded":null},{"id":"CVE-2016-3854","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T00:10:31.581Z","title":"drivers/media/video/msm/msm_mctl_buf.c in the Qualcomm components in Android before 2016-08-05 does not validate the image mode, which allows attackers to…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00385,"kevAdded":null},{"id":"CVE-2015-8944","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T08:36:30.404Z","title":"The ioresources_init function in kernel/resource.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 6 and 7 (2013) devices, uses…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.0058,"kevAdded":null},{"id":"CVE-2015-8943","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T08:36:31.202Z","title":"drivers/video/msm/mdss/mdss_mdp_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not verify that a mapping exists before…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00454,"kevAdded":null},{"id":"CVE-2015-8942","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T08:36:30.904Z","title":"drivers/media/platform/msm/camera_v2/pproc/cpp/msm_cpp.c in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices does not validate the…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00532,"kevAdded":null},{"id":"CVE-2015-8941","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T08:36:30.582Z","title":"drivers/media/platform/msm/camera_v2/isp/msm_isp_axi_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 6 and 7 (2013) devices does not…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.0053,"kevAdded":null},{"id":"CVE-2015-8940","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T08:36:31.340Z","title":"Integer overflow in sound/soc/msm/qdsp6v2/q6lsm.c in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices allows attackers to gain…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00544,"kevAdded":null},{"id":"CVE-2015-8939","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T08:36:30.466Z","title":"drivers/video/msm/mdp4_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices does not validate r stages, g stages, or b…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.0053,"kevAdded":null},{"id":"CVE-2015-8938","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T08:36:30.587Z","title":"The MSM camera driver in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices does not validate input parameters, which allows attackers to…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00544,"kevAdded":null},{"id":"CVE-2015-8937","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T08:36:30.391Z","title":"drivers/char/diag/diagchar_core.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5, 6, and 7 (2013) devices mishandles a socket process,…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00466,"kevAdded":null},{"id":"CVE-2014-9900","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T14:02:37.856Z","title":"The ethtool_get_wol function in net/core/ethtool.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, does…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00523,"kevAdded":null},{"id":"CVE-2014-9899","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T14:02:38.161Z","title":"drivers/usb/host/ehci-msm2.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices omits certain minimum calculations before copying data,…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.0046,"kevAdded":null},{"id":"CVE-2014-9898","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T14:02:37.329Z","title":"arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not properly validate…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.0046,"kevAdded":null},{"id":"CVE-2014-9897","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T14:02:36.621Z","title":"sound/soc/msm/qdsp6v2/msm-lsm-client.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate certain user-space data,…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.0046,"kevAdded":null},{"id":"CVE-2014-9896","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T14:02:36.702Z","title":"drivers/char/adsprpc.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not properly validate parameters and return…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.0046,"kevAdded":null},{"id":"CVE-2014-9895","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T14:02:36.554Z","title":"drivers/media/media-device.c in the Linux kernel before 3.11, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, does not properly…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00723,"kevAdded":null},{"id":"CVE-2014-9894","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T14:02:36.576Z","title":"drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices does not ensure that certain name strings end in a…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.0046,"kevAdded":null},{"id":"CVE-2014-9893","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T14:02:38.042Z","title":"drivers/video/msm/mdss/mdss_mdp_pp.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not properly determine the size of Gamut…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.0046,"kevAdded":null},{"id":"CVE-2014-9892","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T14:02:36.578Z","title":"The snd_compr_tstamp function in sound/core/compress_offload.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013)…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00499,"kevAdded":null},{"id":"CVE-2014-9891","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T14:02:36.578Z","title":"drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate certain buffer addresses, which allows…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.0053,"kevAdded":null},{"id":"CVE-2014-9890","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T14:02:36.569Z","title":"Off-by-one error in drivers/media/platform/msm/camera_v2/sensor/cci/msm_cci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013)…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.0053,"kevAdded":null},{"id":"CVE-2014-9889","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T14:02:36.553Z","title":"drivers/media/platform/msm/camera_v2/pproc/cpp/msm_cpp.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate CPP frame…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00454,"kevAdded":null},{"id":"CVE-2014-9888","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T14:02:36.640Z","title":"arch/arm/mm/dma-mapping.c in the Linux kernel before 3.13 on ARM platforms, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, does not…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00395,"kevAdded":null},{"id":"CVE-2014-9887","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T14:02:36.623Z","title":"drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not validate certain length values, which…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.0053,"kevAdded":null},{"id":"CVE-2014-9886","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T14:02:36.701Z","title":"arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not properly validate…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00454,"kevAdded":null},{"id":"CVE-2014-9885","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T14:02:36.818Z","title":"Format string vulnerability in drivers/thermal/qpnp-adc-tm.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices allows attackers to…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00454,"kevAdded":null},{"id":"CVE-2014-9884","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T14:02:36.699Z","title":"drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not validate certain pointers, which allows…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00454,"kevAdded":null},{"id":"CVE-2014-9883","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T14:02:36.587Z","title":"Integer overflow in drivers/char/diag/diag_dci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices allows attackers to…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00454,"kevAdded":null},{"id":"CVE-2014-9882","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T14:02:36.602Z","title":"Buffer overflow in drivers/media/radio/radio-iris.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00519,"kevAdded":null},{"id":"CVE-2014-9881","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T14:02:36.561Z","title":"drivers/media/radio/radio-iris.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices uses an incorrect integer data type, which…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00481,"kevAdded":null},{"id":"CVE-2014-9880","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T13:55:04.735Z","title":"drivers/video/msm/vidc/common/enc/venc.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices does not validate…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00454,"kevAdded":null},{"id":"CVE-2014-9879","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T13:55:04.960Z","title":"The mdss mdp3 driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate user-space data, which allows attackers to…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00454,"kevAdded":null},{"id":"CVE-2014-9878","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T13:55:04.802Z","title":"drivers/mmc/card/mmc_block_test.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not reject kernel-space buffer addresses,…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00454,"kevAdded":null},{"id":"CVE-2014-9877","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T13:55:04.687Z","title":"drivers/media/platform/msm/camera_v2/sensor/actuator/msm_actuator.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00454,"kevAdded":null},{"id":"CVE-2014-9876","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T13:55:05.082Z","title":"drivers/char/diag/diagfwd.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5, 5X, 6, 6P, and 7 (2013) devices mishandles certain integer…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00466,"kevAdded":null},{"id":"CVE-2014-9875","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T13:55:04.607Z","title":"drivers/char/diag/diag_dci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00454,"kevAdded":null},{"id":"CVE-2014-9874","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T13:55:04.802Z","title":"Buffer overflow in the Qualcomm components in Android before 2016-08-05 on Nexus 5, 5X, 6P, and 7 (2013) devices allows attackers to gain privileges via a…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00481,"kevAdded":null},{"id":"CVE-2014-9873","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T13:55:04.633Z","title":"Integer underflow in drivers/char/diag/diag_dci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices allows attackers to…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00454,"kevAdded":null},{"id":"CVE-2014-9872","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T13:55:04.590Z","title":"The diag driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not ensure unique identifiers in a DCI client table, which…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00454,"kevAdded":null},{"id":"CVE-2014-9871","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T13:55:04.606Z","title":"Multiple buffer overflows in drivers/media/platform/msm/camera_v2/isp/msm_isp_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00561,"kevAdded":null},{"id":"CVE-2014-9870","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T13:55:04.742Z","title":"The Linux kernel before 3.11 on ARM platforms, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, does not properly consider user-space…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.01017,"kevAdded":null},{"id":"CVE-2014-9869","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T13:55:04.803Z","title":"drivers/media/platform/msm/camera_v2/isp/msm_isp_stats_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00557,"kevAdded":null},{"id":"CVE-2014-9868","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T13:55:04.550Z","title":"drivers/media/platform/msm/camera_v2/sensor/csiphy/msm_csiphy.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices allows…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00216,"kevAdded":null},{"id":"CVE-2014-9867","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T13:55:04.798Z","title":"drivers/media/platform/msm/camera_v2/isp/msm_isp_axi_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00544,"kevAdded":null},{"id":"CVE-2014-9866","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T13:55:04.626Z","title":"drivers/media/platform/msm/camera_v2/sensor/csid/msm_csid.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00544,"kevAdded":null},{"id":"CVE-2014-9865","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T13:55:04.654Z","title":"drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not properly restrict user-space input,…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00523,"kevAdded":null},{"id":"CVE-2014-9864","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T13:55:04.579Z","title":"drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not validate ioctl calls, which allows…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00544,"kevAdded":null},{"id":"CVE-2014-9863","published":"2016-08-06T10:00:00.000Z","updated":"2024-08-06T13:55:04.615Z","title":"Integer underflow in the diag driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices allows attackers to gain…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00544,"kevAdded":null},{"id":"CVE-2016-3857","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:31.166Z","title":"The kernel in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 28522518.","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00582,"kevAdded":null},{"id":"CVE-2016-3853","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:31.223Z","title":"Google Play services in Android before 2016-08-05 on Nexus devices allow local users to bypass the Factory Reset Protection protection mechanism and delete…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00142,"kevAdded":null},{"id":"CVE-2016-3852","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:31.239Z","title":"The MediaTek Wi-Fi driver in Android before 2016-08-05 on Android One devices allows attackers to obtain sensitive information via a crafted application, aka…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00344,"kevAdded":null},{"id":"CVE-2016-3851","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:31.194Z","title":"The LG Electronics bootloader Android before 2016-08-05 on Nexus 5X devices allows attackers to gain privileges by leveraging access to a privileged process,…","severity":"HIGH","score":8.1,"vendor":null,"product":null,"kev":false,"epss":0.00527,"kevAdded":null},{"id":"CVE-2016-3850","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:31.278Z","title":"Integer overflow in app/aboot/aboot.c in the Qualcomm bootloader in Android before 2016-08-05 on Nexus 5, 5X, 6P, and 7 (2013) devices allows attackers to gain…","severity":"HIGH","score":7.3,"vendor":null,"product":null,"kev":false,"epss":0.00203,"kevAdded":null},{"id":"CVE-2016-3849","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:31.296Z","title":"The ION driver in Android before 2016-08-05 on Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 28939740.","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00174,"kevAdded":null},{"id":"CVE-2016-3848","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:31.218Z","title":"The NVIDIA media driver in Android before 2016-08-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug…","severity":"HIGH","score":7,"vendor":null,"product":null,"kev":false,"epss":0.00346,"kevAdded":null},{"id":"CVE-2016-3847","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:31.290Z","title":"The NVIDIA media driver in Android before 2016-08-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00194,"kevAdded":null},{"id":"CVE-2016-3846","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:31.093Z","title":"The Serial Peripheral Interface driver in Android before 2016-08-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application,…","severity":"HIGH","score":7,"vendor":null,"product":null,"kev":false,"epss":0.00346,"kevAdded":null},{"id":"CVE-2016-3845","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:31.404Z","title":"The video driver in the kernel in Android before 2016-08-05 on Nexus 5 devices allows attackers to gain privileges via a crafted application, aka internal bug…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00411,"kevAdded":null},{"id":"CVE-2016-3844","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:31.035Z","title":"mediaserver in Android before 2016-08-05 on Nexus 9 and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2016-3843","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:31.071Z","title":"Android before 2016-08-05 does not properly restrict code execution in a kernel context, which allows attackers to gain privileges via a crafted application,…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.0079,"kevAdded":null},{"id":"CVE-2016-3842","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:31.071Z","title":"The Qualcomm GPU driver in Android before 2016-08-05 on Nexus 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka Android…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00411,"kevAdded":null},{"id":"CVE-2016-3840","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:31.194Z","title":"Conscrypt in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-05 does not properly identify session reuse, which allows…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.02136,"kevAdded":null},{"id":"CVE-2016-3839","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:31.165Z","title":"Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows attackers to cause a denial of service (loss of…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00429,"kevAdded":null},{"id":"CVE-2016-3838","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:31.163Z","title":"Android 6.x before 2016-08-01 allows attackers to cause a denial of service (loss of locked-screen 911 functionality) via a crafted application that uses the…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00363,"kevAdded":null},{"id":"CVE-2016-3837","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:30.996Z","title":"service/jni/com_android_server_wifi_WifiNative.cpp in Wi-Fi in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows attackers to…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00454,"kevAdded":null},{"id":"CVE-2016-3836","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:31.080Z","title":"The SurfaceFlinger service in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows attackers to obtain sensitive information via a…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00454,"kevAdded":null},{"id":"CVE-2016-3835","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:31.296Z","title":"The secure-session feature in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00464,"kevAdded":null},{"id":"CVE-2016-3834","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:31.182Z","title":"The camera APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allow attackers to bypass intended access…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00401,"kevAdded":null},{"id":"CVE-2016-3833","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:31.284Z","title":"The Shell component in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 does not properly manage the MANAGE_USERS and CREATE_USERS…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00476,"kevAdded":null},{"id":"CVE-2016-3832","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:30.987Z","title":"The framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 do not ensure that package data originated…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2016-3831","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:31.193Z","title":"The telephony component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remote attackers to cause a…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00773,"kevAdded":null},{"id":"CVE-2016-3830","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:31.147Z","title":"codecs/aacdec/SoftAAC2.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00574,"kevAdded":null},{"id":"CVE-2016-3829","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:31.257Z","title":"The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 does not initialize certain structure members, which allows remote attackers to cause a…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00574,"kevAdded":null},{"id":"CVE-2016-3828","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:31.283Z","title":"decoder/ih264d_api.c in mediaserver in Android 6.x before 2016-08-01 mishandles invalid PPS and SPS NAL units, which allows remote attackers to cause a denial…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00574,"kevAdded":null},{"id":"CVE-2016-3827","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:31.143Z","title":"codecs/hevcdec/SoftHEVC.cpp in libstagefright in mediaserver in Android 6.0.1 before 2016-08-01 mishandles decoder errors, which allows remote attackers to…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00574,"kevAdded":null},{"id":"CVE-2016-3826","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:31.145Z","title":"services/audioflinger/Effects.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 does not…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.002,"kevAdded":null},{"id":"CVE-2016-3825","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:31.072Z","title":"mm-video-v4l2/vidc/venc/src/omx_video_base.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allocates an…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.002,"kevAdded":null},{"id":"CVE-2016-3824","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:31.141Z","title":"omx/OMXNodeInstance.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 does…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00204,"kevAdded":null},{"id":"CVE-2016-3823","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:30.970Z","title":"The secure-session feature in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.002,"kevAdded":null},{"id":"CVE-2016-3822","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:31.186Z","title":"exif.c in Matthias Wandel jhead 2.87, as used in libjhead in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01,…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.01267,"kevAdded":null},{"id":"CVE-2016-3821","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:30.826Z","title":"libmedia in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 has certain incorrect declarations,…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.01764,"kevAdded":null},{"id":"CVE-2016-3820","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:30.659Z","title":"The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 mishandles slice numbers, which allows remote attackers to execute arbitrary code or cause a…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.01339,"kevAdded":null},{"id":"CVE-2016-3819","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T00:10:31.175Z","title":"Integer overflow in codecs/on2/h264dec/source/h264bsd_dpb.c in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.01749,"kevAdded":null},{"id":"CVE-2016-2504","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-05T23:32:20.701Z","title":"The Qualcomm GPU driver in Android before 2016-08-05 on Nexus 5, 5X, 6, 6P, and 7 (2013) devices allows attackers to gain privileges via a crafted application,…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00226,"kevAdded":null},{"id":"CVE-2016-2497","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-05T23:32:20.125Z","title":"services/core/java/com/android/server/pm/PackageManagerService.java in the framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1,…","severity":"HIGH","score":7.3,"vendor":null,"product":null,"kev":false,"epss":0.00595,"kevAdded":null},{"id":"CVE-2014-9902","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T14:02:38.051Z","title":"Buffer overflow in CORE/SYS/legacy/src/utils/src/dot11f.c in the Qualcomm Wi-Fi driver in Android before 2016-08-05 on Nexus 7 (2013) devices allows remote…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.0252,"kevAdded":null},{"id":"CVE-2014-9901","published":"2016-08-05T20:00:00.000Z","updated":"2024-08-06T14:02:37.658Z","title":"The Qualcomm Wi-Fi driver in Android before 2016-08-05 on Nexus 7 (2013) devices makes incorrect snprintf calls, which allows remote attackers to cause a…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00881,"kevAdded":null},{"id":"CVE-2016-3818","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:30.975Z","title":"libc in Android 4.x before 4.4.4 allows remote attackers to cause a denial of service (device hang or reboot) via a crafted file, aka internal bug 28740702.","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00447,"kevAdded":null},{"id":"CVE-2016-3816","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:31.103Z","title":"The MediaTek display driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitive information via a crafted application, aka…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00352,"kevAdded":null},{"id":"CVE-2016-3815","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:31.015Z","title":"The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00435,"kevAdded":null},{"id":"CVE-2016-3814","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:31.039Z","title":"The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00367,"kevAdded":null},{"id":"CVE-2016-3813","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:30.992Z","title":"The Qualcomm USB driver in Android before 2016-07-05 on Nexus 5, 5X, 6, and 6P devices allows attackers to obtain sensitive information via a crafted…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00426,"kevAdded":null},{"id":"CVE-2016-3812","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:31.145Z","title":"The MediaTek video codec driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitive information via a crafted application,…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00352,"kevAdded":null},{"id":"CVE-2016-3811","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:31.101Z","title":"The kernel video driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2016-3810","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:30.881Z","title":"The MediaTek Wi-Fi driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitive information via a crafted application, aka…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.0036,"kevAdded":null},{"id":"CVE-2016-3809","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:31.050Z","title":"The networking component in Android before 2016-07-05 on Android One, Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, Nexus 7 (2013), Nexus 9, Nexus Player, and Pixel C…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00352,"kevAdded":null},{"id":"CVE-2016-3808","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:31.019Z","title":"The serial peripheral interface driver in Android before 2016-07-05 on Pixel C devices allows attackers to gain privileges via a crafted application, aka…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2016-3807","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:30.687Z","title":"The serial peripheral interface driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application,…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00421,"kevAdded":null},{"id":"CVE-2016-3806","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:31.085Z","title":"The MediaTek display driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2016-3805","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:30.647Z","title":"The MediaTek power management driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00421,"kevAdded":null},{"id":"CVE-2016-3804","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:31.006Z","title":"The MediaTek power management driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00421,"kevAdded":null},{"id":"CVE-2016-3803","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:30.671Z","title":"The kernel filesystem implementation in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00502,"kevAdded":null},{"id":"CVE-2016-3802","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:30.785Z","title":"The kernel filesystem implementation in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00502,"kevAdded":null},{"id":"CVE-2016-3801","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:30.651Z","title":"The MediaTek GPS driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2016-3800","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:30.685Z","title":"The MediaTek video driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00421,"kevAdded":null},{"id":"CVE-2016-3799","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:30.643Z","title":"The MediaTek video driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00421,"kevAdded":null},{"id":"CVE-2016-3798","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:31.013Z","title":"The MediaTek hardware sensor driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2016-3797","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:31.054Z","title":"The Qualcomm Wi-Fi driver in Android before 2016-07-05 on Nexus 5X devices allows attackers to gain privileges via a crafted application, aka Android internal…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00502,"kevAdded":null},{"id":"CVE-2016-3796","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:30.651Z","title":"The MediaTek power driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00421,"kevAdded":null},{"id":"CVE-2016-3795","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:30.690Z","title":"The MediaTek power driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00421,"kevAdded":null},{"id":"CVE-2016-3793","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:30.753Z","title":"The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka Android internal…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2016-3792","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:30.615Z","title":"CORE/HDD/src/wlan_hdd_hostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-07-05 on Nexus 7 (2013) devices mishandles userspace data copying, which…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00439,"kevAdded":null},{"id":"CVE-2016-3775","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:30.706Z","title":"The kernel filesystem implementation in Android before 2016-07-05 on Nexus 5X, Nexus 6, Nexus 6P, Nexus Player, and Pixel C devices allows attackers to gain…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00502,"kevAdded":null},{"id":"CVE-2016-3774","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:30.644Z","title":"The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00421,"kevAdded":null},{"id":"CVE-2016-3773","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:30.725Z","title":"The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00421,"kevAdded":null},{"id":"CVE-2016-3772","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:31.011Z","title":"The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00421,"kevAdded":null},{"id":"CVE-2016-3771","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:30.997Z","title":"The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00421,"kevAdded":null},{"id":"CVE-2016-3770","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:30.659Z","title":"The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00421,"kevAdded":null},{"id":"CVE-2016-3769","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:30.877Z","title":"The NVIDIA video driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka Android internal bug…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00421,"kevAdded":null},{"id":"CVE-2016-3768","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:10:30.698Z","title":"The Qualcomm performance component in Android before 2016-07-05 on Nexus 5, 6, 5X, 6P, and 7 (2013) devices allows attackers to gain privileges via a crafted…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2016-3767","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:03:34.532Z","title":"The MediaTek Wi-Fi driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2016-3766","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:03:34.481Z","title":"MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00961,"kevAdded":null},{"id":"CVE-2016-3765","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:03:34.531Z","title":"decoder/impeg2d_bitstream.c in mediaserver in Android 6.x before 2016-07-01 allows attackers to obtain sensitive information from process memory or cause a…","severity":"HIGH","score":7.7,"vendor":null,"product":null,"kev":false,"epss":0.00391,"kevAdded":null},{"id":"CVE-2016-3764","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:03:34.450Z","title":"media/libmediaplayerservice/MetadataRetrieverClient.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before…","severity":"MEDIUM","score":4,"vendor":null,"product":null,"kev":false,"epss":0.00322,"kevAdded":null},{"id":"CVE-2016-3763","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:03:34.493Z","title":"net/PacProxySelector.java in the Proxy Auto-Config (PAC) feature in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01…","severity":"LOW","score":3.3,"vendor":null,"product":null,"kev":false,"epss":0.00512,"kevAdded":null},{"id":"CVE-2016-3762","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:03:34.527Z","title":"The sockets subsystem in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to gain privileges via a crafted…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00389,"kevAdded":null},{"id":"CVE-2016-3761","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:03:34.573Z","title":"NfcService.java in NFC in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to obtain sensitive…","severity":"MEDIUM","score":4,"vendor":null,"product":null,"kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2016-3760","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:03:34.457Z","title":"Bluetooth in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows local users to gain privileges by establishing a pairing that…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00246,"kevAdded":null},{"id":"CVE-2016-3759","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:03:34.457Z","title":"The Framework APIs in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to read backup data via a crafted application…","severity":"LOW","score":3.3,"vendor":null,"product":null,"kev":false,"epss":0.00313,"kevAdded":null},{"id":"CVE-2016-3758","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:03:34.548Z","title":"Multiple buffer overflows in libdex/OptInvocation.cpp in DexClassLoader in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00444,"kevAdded":null},{"id":"CVE-2016-3757","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:03:34.573Z","title":"The print_maps function in toolbox/lsof.c in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows user-assisted…","severity":"HIGH","score":7,"vendor":null,"product":null,"kev":false,"epss":0.00183,"kevAdded":null},{"id":"CVE-2016-3756","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:03:34.428Z","title":"Tremolo/res012.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate the number of…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00679,"kevAdded":null},{"id":"CVE-2016-3755","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:03:34.453Z","title":"decoder/ih264d_parse_pslice.c in mediaserver in Android 6.x before 2016-07-01 does not properly select concealment frames, which allows remote attackers to…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00679,"kevAdded":null},{"id":"CVE-2016-3754","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:03:34.455Z","title":"mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not limit process-memory usage, which allows…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00941,"kevAdded":null},{"id":"CVE-2016-3753","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:03:34.446Z","title":"mediaserver in Android 4.x before 4.4.4 allows remote attackers to obtain sensitive information via unspecified vectors, aka internal bug 27210135.","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00693,"kevAdded":null},{"id":"CVE-2016-3752","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:03:34.528Z","title":"internal/app/ChooserActivity.java in the ChooserTarget service in Android 6.x before 2016-07-01 mishandles target security checks, which allows attackers to…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2016-3751","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:03:34.421Z","title":"Unspecified vulnerability in libpng before 1.6.20, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01,…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00461,"kevAdded":null},{"id":"CVE-2016-3750","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:03:34.486Z","title":"libs/binder/Parcel.cpp in the Parcels Framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00361,"kevAdded":null},{"id":"CVE-2016-3749","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:03:34.474Z","title":"server/LockSettingsService.java in LockSettingsService in Android 6.x before 2016-07-01 allows attackers to modify the screen-lock password or pattern via a…","severity":"HIGH","score":8.4,"vendor":null,"product":null,"kev":false,"epss":0.00269,"kevAdded":null},{"id":"CVE-2016-3748","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:03:34.527Z","title":"The sockets subsystem in Android 6.x before 2016-07-01 allows attackers to bypass intended system-call restrictions via a crafted application that makes an…","severity":"HIGH","score":8.4,"vendor":null,"product":null,"kev":false,"epss":0.00367,"kevAdded":null},{"id":"CVE-2016-3747","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:03:34.534Z","title":"Use-after-free vulnerability in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00424,"kevAdded":null},{"id":"CVE-2016-3746","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:03:34.592Z","title":"Use-after-free vulnerability in the mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00365,"kevAdded":null},{"id":"CVE-2016-3745","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:03:34.550Z","title":"Multiple buffer overflows in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to gain…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00579,"kevAdded":null},{"id":"CVE-2016-3744","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:03:34.574Z","title":"Buffer overflow in the create_pbuf function in btif/src/btif_hh.c in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00357,"kevAdded":null},{"id":"CVE-2016-3743","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:03:34.423Z","title":"decoder/ih264d_api.c in mediaserver in Android 6.x before 2016-07-01 does not initialize certain data structures, which allows remote attackers to execute…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.01075,"kevAdded":null},{"id":"CVE-2016-3742","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:03:34.620Z","title":"decoder/ih264d_process_intra_mb.c in mediaserver in Android 6.x before 2016-07-01 mishandles intra mode, which allows remote attackers to execute arbitrary…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.01075,"kevAdded":null},{"id":"CVE-2016-3741","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T00:03:34.613Z","title":"The H.264 decoder in mediaserver in Android 6.x before 2016-07-01 does not initialize certain slice data, which allows remote attackers to execute arbitrary…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.01412,"kevAdded":null},{"id":"CVE-2016-2508","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-05T23:32:20.347Z","title":"media/libmediaplayerservice/nuplayer/GenericSource.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.01403,"kevAdded":null},{"id":"CVE-2016-2507","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-05T23:32:20.466Z","title":"Integer overflow in codecs/on2/h264dec/source/h264bsd_storage.c in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.0116,"kevAdded":null},{"id":"CVE-2016-2506","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-05T23:32:20.468Z","title":"DRMExtractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.01666,"kevAdded":null},{"id":"CVE-2016-2505","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-05T23:32:20.163Z","title":"mpeg2ts/ATSParser.cpp in libstagefright in mediaserver in Android 6.x before 2016-07-01 does not validate a certain section length, which allows remote…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.01136,"kevAdded":null},{"id":"CVE-2016-2503","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-05T23:32:20.871Z","title":"The Qualcomm GPU driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka Android…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00479,"kevAdded":null},{"id":"CVE-2016-2502","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-05T23:32:20.449Z","title":"drivers/usb/gadget/f_serial.c in the Qualcomm USB driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00473,"kevAdded":null},{"id":"CVE-2016-2501","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-05T23:32:20.111Z","title":"The Qualcomm camera driver in Android before 2016-07-05 on Nexus 5X, 6, 6P, and 7 (2013) devices allows attackers to gain privileges via a crafted application,…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00502,"kevAdded":null},{"id":"CVE-2015-8893","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T08:29:22.190Z","title":"app/aboot/aboot.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allows attackers to cause a denial of service (OS…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.0036,"kevAdded":null},{"id":"CVE-2015-8892","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T08:29:22.039Z","title":"platform/msm_shared/boot_verifier.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to bypass intended…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00551,"kevAdded":null},{"id":"CVE-2015-8891","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T08:29:22.116Z","title":"Multiple integer overflows in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allow attackers to…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00543,"kevAdded":null},{"id":"CVE-2015-8890","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T08:29:22.117Z","title":"platform/msm_shared/partition_parser.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate certain GUID…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00543,"kevAdded":null},{"id":"CVE-2015-8889","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T08:29:22.080Z","title":"The aboot implementation in the Qualcomm components in Android before 2016-07-05 on Nexus 6P devices omits the recovery PIN feature, which has unspecified…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00545,"kevAdded":null},{"id":"CVE-2015-8888","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T08:29:22.103Z","title":"Integer overflow in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to bypass intended access…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00543,"kevAdded":null},{"id":"CVE-2014-9803","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T13:55:04.434Z","title":"arch/arm64/include/asm/pgtable.h in the Linux kernel before 3.15-rc5-next-20140519, as used in Android before 2016-07-05 on Nexus 5X and 6P devices, mishandles…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00635,"kevAdded":null},{"id":"CVE-2014-9802","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T13:55:04.527Z","title":"Multiple integer overflows in lib/libfdt/fdt.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allow attackers to gain…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00557,"kevAdded":null},{"id":"CVE-2014-9801","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T13:55:04.461Z","title":"Multiple integer overflows in lib/libfdt/fdt_rw.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allow attackers to gain privileges…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00557,"kevAdded":null},{"id":"CVE-2014-9800","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T13:55:04.543Z","title":"Integer overflow in lib/heap/heap.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allows attackers to gain privileges…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00545,"kevAdded":null},{"id":"CVE-2014-9799","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T13:55:04.563Z","title":"The makefile in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices omits the -fno-strict-overflow option to gcc, which might…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00545,"kevAdded":null},{"id":"CVE-2014-9798","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T13:55:04.544Z","title":"platform/msm_shared/dev_tree.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 devices does not check the relationship between tags…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00365,"kevAdded":null},{"id":"CVE-2014-9796","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T13:55:04.462Z","title":"app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate the page size in the kernel header,…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00551,"kevAdded":null},{"id":"CVE-2014-9795","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T13:55:04.597Z","title":"app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices does not properly check for an integer overflow, which allows…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00584,"kevAdded":null},{"id":"CVE-2014-9793","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T13:55:04.638Z","title":"platform/msm_shared/mmc.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices mishandles the power-on write-protect feature,…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00545,"kevAdded":null},{"id":"CVE-2014-9792","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T13:55:04.586Z","title":"arch/arm/mach-msm/ipc_router.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices uses an incorrect integer data type, which allows…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00481,"kevAdded":null},{"id":"CVE-2014-9790","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T13:55:04.537Z","title":"drivers/mmc/core/debugfs.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate pointers used in read and…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00482,"kevAdded":null},{"id":"CVE-2014-9789","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T13:55:04.637Z","title":"The (1) alloc and (2) free APIs in arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices do not…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00711,"kevAdded":null},{"id":"CVE-2014-9788","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T13:55:04.584Z","title":"Multiple buffer overflows in the voice drivers in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allow attackers to gain privileges…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00573,"kevAdded":null},{"id":"CVE-2014-9787","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T13:55:04.481Z","title":"Integer overflow in drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices allows attackers to gain…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00571,"kevAdded":null},{"id":"CVE-2014-9786","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T13:55:04.609Z","title":"Heap-based buffer overflow in drivers/media/platform/msm/camera_v2/sensor/actuator/msm_actuator.c in the Qualcomm components in Android before 2016-07-05 on…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00605,"kevAdded":null},{"id":"CVE-2014-9785","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T13:55:04.556Z","title":"drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices does not validate addresses before copying data, which…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00571,"kevAdded":null},{"id":"CVE-2014-9784","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T13:55:04.561Z","title":"Multiple buffer overflows in drivers/char/diag/diag_debugfs.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allow…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00605,"kevAdded":null},{"id":"CVE-2014-9783","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T13:55:04.338Z","title":"drivers/media/platform/msm/camera_v2/sensor/cci/msm_cci.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices does not validate…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00584,"kevAdded":null},{"id":"CVE-2014-9782","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T13:55:04.526Z","title":"drivers/media/platform/msm/camera_v2/sensor/actuator/msm_actuator.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00571,"kevAdded":null},{"id":"CVE-2014-9781","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T13:55:05.161Z","title":"Buffer overflow in drivers/video/fbcmap.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices allows attackers to gain privileges…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00605,"kevAdded":null},{"id":"CVE-2014-9780","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T13:55:04.643Z","title":"drivers/video/msm/mdss/mdp3_ctrl.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5, 5X, and 6P devices does not validate start and length…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00571,"kevAdded":null},{"id":"CVE-2014-9779","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T13:55:04.552Z","title":"arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to obtain sensitive…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00571,"kevAdded":null},{"id":"CVE-2014-9778","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T13:55:04.614Z","title":"The vid_dec_set_h264_mv_buffers function in drivers/video/msm/vidc/common/dec/vdec.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00571,"kevAdded":null},{"id":"CVE-2014-9777","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T13:55:04.458Z","title":"The vid_dec_set_meta_buffers function in drivers/video/msm/vidc/common/dec/vdec.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00571,"kevAdded":null},{"id":"CVE-2013-7457","published":"2016-07-11T01:00:00.000Z","updated":"2024-08-06T18:09:16.883Z","title":"Unspecified vulnerability in the Qualcomm components in Android before 2016-07-05 allows attackers to gain privileges via a crafted application.","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00417,"kevAdded":null},{"id":"CVE-2014-9904","published":"2016-06-27T10:00:00.000Z","updated":"2024-08-06T14:02:37.888Z","title":"The snd_compress_check_input function in sound/core/compress_offload.c in the ALSA subsystem in the Linux kernel before 3.17 does not properly check for an…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00384,"kevAdded":null},{"id":"CVE-2014-9903","published":"2016-06-27T10:00:00.000Z","updated":"2024-08-06T14:02:36.608Z","title":"The sched_read_attr function in kernel/sched/core.c in the Linux kernel 3.14-rc before 3.14-rc4 uses an incorrect size, which allows local users to obtain…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00364,"kevAdded":null},{"id":"CVE-2016-2500","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.336Z","title":"Activity Manager in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not properly terminate process groups, which allows…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00359,"kevAdded":null},{"id":"CVE-2016-2499","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.465Z","title":"AudioSource.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00359,"kevAdded":null},{"id":"CVE-2016-2498","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.242Z","title":"The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to bypass intended data-access restrictions via a crafted…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00356,"kevAdded":null},{"id":"CVE-2016-2496","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.131Z","title":"The Framework UI permission-dialog implementation in Android 6.x before 2016-06-01 allows attackers to conduct tapjacking attacks and access arbitrary…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00912,"kevAdded":null},{"id":"CVE-2016-2495","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.466Z","title":"SampleTable.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows remote…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00616,"kevAdded":null},{"id":"CVE-2016-2494","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.088Z","title":"Off-by-one error in sdcard/sdcard.c in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows attackers to gain…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.02152,"kevAdded":null},{"id":"CVE-2016-2493","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.334Z","title":"The Broadcom Wi-Fi driver in Android before 2016-06-01 on Nexus 5, Nexus 6, Nexus 6P, Nexus 7 (2013), Nexus Player, and Pixel C devices allows attackers to…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2016-2492","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.230Z","title":"The MediaTek power-management driver in Android before 2016-06-01 on Android One devices allows attackers to gain privileges via a crafted application, aka…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2016-2491","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.118Z","title":"The NVIDIA camera driver in Android before 2016-06-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2016-2490","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.693Z","title":"The NVIDIA camera driver in Android before 2016-06-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00421,"kevAdded":null},{"id":"CVE-2016-2489","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.233Z","title":"The Qualcomm video driver in Android before 2016-06-01 on Nexus 5, 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00502,"kevAdded":null},{"id":"CVE-2016-2488","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.501Z","title":"The Qualcomm camera driver in Android before 2016-06-01 on Nexus 5, 5X, 6, 6P, and 7 (2013) devices allows attackers to gain privileges via a crafted…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2016-2487","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.438Z","title":"libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows attackers to gain…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00492,"kevAdded":null},{"id":"CVE-2016-2486","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.224Z","title":"mp3dec/SoftMP3.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00411,"kevAdded":null},{"id":"CVE-2016-2485","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.063Z","title":"libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX buffer sizes…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2016-2484","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.075Z","title":"libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX buffer sizes…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2016-2483","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.086Z","title":"The mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2016-2482","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.364Z","title":"The mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2016-2481","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.326Z","title":"The mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2016-2480","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.143Z","title":"The mm-video-v4l2 vidc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2016-2479","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.122Z","title":"The mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00473,"kevAdded":null},{"id":"CVE-2016-2478","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.239Z","title":"mm-video-v4l2/vidc/vdec/src/omx_vdec_msm8974.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2016-2477","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.142Z","title":"mm-video-v4l2/vidc/vdec/src/omx_vdec_msm8974.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00473,"kevAdded":null},{"id":"CVE-2016-2476","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.469Z","title":"mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX buffer sizes, which allows…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00798,"kevAdded":null},{"id":"CVE-2016-2475","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.324Z","title":"The Broadcom Wi-Fi driver in Android before 2016-06-01 on Nexus 5, Nexus 6, Nexus 6P, Nexus 7 (2013), Nexus 9, Nexus Player, and Pixel C devices allows…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00525,"kevAdded":null},{"id":"CVE-2016-2474","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.483Z","title":"The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 5X devices allows attackers to gain privileges via a crafted application, aka internal bug…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00502,"kevAdded":null},{"id":"CVE-2016-2473","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.122Z","title":"The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00653,"kevAdded":null},{"id":"CVE-2016-2472","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.599Z","title":"The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00421,"kevAdded":null},{"id":"CVE-2016-2471","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.803Z","title":"The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00421,"kevAdded":null},{"id":"CVE-2016-2470","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.168Z","title":"The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00421,"kevAdded":null},{"id":"CVE-2016-2469","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.076Z","title":"The Qualcomm sound driver in Android before 2016-06-01 on Nexus 5, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00623,"kevAdded":null},{"id":"CVE-2016-2468","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.144Z","title":"The Qualcomm GPU driver in Android before 2016-06-01 on Nexus 5, 5X, 6, 6P, and 7 devices allows attackers to gain privileges via a crafted application, aka…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00762,"kevAdded":null},{"id":"CVE-2016-2467","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.108Z","title":"The Qualcomm sound driver in Android before 2016-06-01 on Nexus 5 devices allows attackers to gain privileges via a crafted application, aka internal bug…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00421,"kevAdded":null},{"id":"CVE-2016-2466","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.683Z","title":"The Qualcomm sound driver in Android before 2016-06-01 on Nexus 6 devices allows attackers to gain privileges via a crafted application, aka internal bug…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00421,"kevAdded":null},{"id":"CVE-2016-2465","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.166Z","title":"The Qualcomm video driver in Android before 2016-06-01 on Nexus 5, 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00502,"kevAdded":null},{"id":"CVE-2016-2464","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.318Z","title":"libvpx in libwebm in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows remote attackers to…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.01753,"kevAdded":null},{"id":"CVE-2016-2463","published":"2016-06-13T01:00:00.000Z","updated":"2024-08-05T23:32:20.143Z","title":"Multiple integer overflows in the h264dec component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and…","severity":"HIGH","score":8.4,"vendor":null,"product":null,"kev":false,"epss":0.00868,"kevAdded":null},{"id":"CVE-2016-2462","published":"2016-05-09T10:00:00.000Z","updated":"2024-08-05T23:32:20.103Z","title":"OpenSSLCipher.java in Conscrypt in Android 6.x before 2016-05-01 mishandles updates of the Additional Authenticated Data (AAD) array, which allows attackers to…","severity":"HIGH","score":7,"vendor":null,"product":null,"kev":false,"epss":0.00391,"kevAdded":null},{"id":"CVE-2016-2461","published":"2016-05-09T10:00:00.000Z","updated":"2024-08-05T23:32:20.094Z","title":"OpenSSLCipher.java in Conscrypt in Android 6.x before 2016-05-01 mishandles resets of the Additional Authenticated Data (AAD) array, which allows attackers to…","severity":"HIGH","score":7,"vendor":null,"product":null,"kev":false,"epss":0.00455,"kevAdded":null},{"id":"CVE-2016-2460","published":"2016-05-09T10:00:00.000Z","updated":"2024-08-05T23:32:20.167Z","title":"mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not initialize certain data structures, which…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00418,"kevAdded":null},{"id":"CVE-2016-2459","published":"2016-05-09T10:00:00.000Z","updated":"2024-08-05T23:32:20.151Z","title":"mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not initialize certain data structures, which…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2016-2458","published":"2016-05-09T10:00:00.000Z","updated":"2024-08-05T23:32:20.444Z","title":"The compose functionality in AOSP Mail in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not properly restrict attachments,…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00471,"kevAdded":null},{"id":"CVE-2016-2457","published":"2016-05-09T10:00:00.000Z","updated":"2024-08-05T23:32:20.081Z","title":"server/pm/UserManagerService.java in Wi-Fi in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows attackers to bypass intended…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.0019,"kevAdded":null},{"id":"CVE-2016-2456","published":"2016-05-09T10:00:00.000Z","updated":"2024-08-05T23:32:20.100Z","title":"The MediaTek Wi-Fi driver in Android before 2016-05-01 on Android One devices allows attackers to gain privileges via a crafted application, aka internal bug…","severity":"HIGH","score":7,"vendor":null,"product":null,"kev":false,"epss":0.00311,"kevAdded":null},{"id":"CVE-2016-2454","published":"2016-05-09T10:00:00.000Z","updated":"2024-08-05T23:32:20.088Z","title":"The Qualcomm hardware video codec in Android before 2016-05-01 on Nexus 5 devices allows remote attackers to cause a denial of service (reboot) via a crafted…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00455,"kevAdded":null},{"id":"CVE-2016-2453","published":"2016-05-09T10:00:00.000Z","updated":"2024-08-05T23:32:20.294Z","title":"The MediaTek Wi-Fi driver in Android before 2016-05-01 on Android One devices allows attackers to gain privileges via a crafted application, aka internal bug…","severity":"HIGH","score":7,"vendor":null,"product":null,"kev":false,"epss":0.00367,"kevAdded":null},{"id":"CVE-2016-2452","published":"2016-05-09T10:00:00.000Z","updated":"2024-08-05T23:32:20.554Z","title":"codecs/amrnb/dec/SoftAMR.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00492,"kevAdded":null},{"id":"CVE-2016-2451","published":"2016-05-09T10:00:00.000Z","updated":"2024-08-05T23:32:20.465Z","title":"codecs/on2/dec/SoftVPX.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2016-2450","published":"2016-05-09T10:00:00.000Z","updated":"2024-08-05T23:32:20.236Z","title":"codecs/on2/enc/SoftVPXEncoder.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2016-2449","published":"2016-05-09T10:00:00.000Z","updated":"2024-08-05T23:32:20.073Z","title":"services/camera/libcameraservice/device3/Camera3Device.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00411,"kevAdded":null},{"id":"CVE-2016-2448","published":"2016-05-09T10:00:00.000Z","updated":"2024-08-05T23:32:20.314Z","title":"media/libmediaplayerservice/nuplayer/NuPlayerStreamListener.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00411,"kevAdded":null},{"id":"CVE-2016-2446","published":"2016-05-09T10:00:00.000Z","updated":"2024-08-05T23:32:20.407Z","title":"The NVIDIA media driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug…","severity":"HIGH","score":7,"vendor":null,"product":null,"kev":false,"epss":0.00421,"kevAdded":null},{"id":"CVE-2016-2445","published":"2016-05-09T10:00:00.000Z","updated":"2024-08-05T23:32:20.091Z","title":"The NVIDIA media driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug…","severity":"HIGH","score":7,"vendor":null,"product":null,"kev":false,"epss":0.00457,"kevAdded":null},{"id":"CVE-2016-2444","published":"2016-05-09T10:00:00.000Z","updated":"2024-08-05T23:32:20.075Z","title":"The NVIDIA media driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug…","severity":"HIGH","score":7,"vendor":null,"product":null,"kev":false,"epss":0.00367,"kevAdded":null},{"id":"CVE-2016-2443","published":"2016-05-09T10:00:00.000Z","updated":"2024-08-05T23:32:20.229Z","title":"The Qualcomm MDP driver in Android before 2016-05-01 on Nexus 5 and Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka…","severity":"HIGH","score":7,"vendor":null,"product":null,"kev":false,"epss":0.0038,"kevAdded":null},{"id":"CVE-2016-2442","published":"2016-05-09T10:00:00.000Z","updated":"2024-08-05T23:32:20.087Z","title":"The Qualcomm buspm driver in Android before 2016-05-01 on Nexus 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka…","severity":"HIGH","score":7,"vendor":null,"product":null,"kev":false,"epss":0.00371,"kevAdded":null},{"id":"CVE-2016-2441","published":"2016-05-09T10:00:00.000Z","updated":"2024-08-05T23:32:20.296Z","title":"The Qualcomm buspm driver in Android before 2016-05-01 on Nexus 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka…","severity":"HIGH","score":7,"vendor":null,"product":null,"kev":false,"epss":0.00425,"kevAdded":null},{"id":"CVE-2016-2440","published":"2016-05-09T10:00:00.000Z","updated":"2024-08-05T23:24:49.359Z","title":"libs/binder/IPCThreadState.cpp in Binder in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 mishandles object…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00464,"kevAdded":null},{"id":"CVE-2016-2439","published":"2016-05-09T10:00:00.000Z","updated":"2024-08-05T23:24:49.381Z","title":"Buffer overflow in btif/src/btif_dm.c in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows remote…","severity":"HIGH","score":8.8,"vendor":null,"product":null,"kev":false,"epss":0.00516,"kevAdded":null},{"id":"CVE-2016-2437","published":"2016-05-09T10:00:00.000Z","updated":"2024-08-05T23:24:49.362Z","title":"The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00502,"kevAdded":null},{"id":"CVE-2016-2436","published":"2016-05-09T10:00:00.000Z","updated":"2024-08-05T23:24:49.378Z","title":"The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00421,"kevAdded":null},{"id":"CVE-2016-2435","published":"2016-05-09T10:00:00.000Z","updated":"2024-08-05T23:24:49.352Z","title":"The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.0052,"kevAdded":null},{"id":"CVE-2016-2434","published":"2016-05-09T10:00:00.000Z","updated":"2024-08-05T23:24:49.358Z","title":"The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.0125,"kevAdded":null},{"id":"CVE-2016-2432","published":"2016-05-09T10:00:00.000Z","updated":"2024-08-05T23:24:49.387Z","title":"The Qualcomm TrustZone component in Android before 2016-05-01 on Nexus 6 and Android One devices allows attackers to gain privileges via a crafted application,…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.0039,"kevAdded":null},{"id":"CVE-2016-2431","published":"2016-05-09T10:00:00.000Z","updated":"2024-08-05T23:24:49.379Z","title":"The Qualcomm TrustZone component in Android before 2016-05-01 on Nexus 5, Nexus 6, Nexus 7 (2013), and Android One devices allows attackers to gain privileges…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.01971,"kevAdded":null},{"id":"CVE-2016-2430","published":"2016-05-09T10:00:00.000Z","updated":"2024-08-05T23:24:49.353Z","title":"libbacktrace/Backtrace.cpp in debuggerd in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows attackers to gain…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00411,"kevAdded":null},{"id":"CVE-2016-2429","published":"2016-05-09T10:00:00.000Z","updated":"2024-08-05T23:24:49.357Z","title":"libFLAC/stream_decoder.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not prevent free…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.02018,"kevAdded":null},{"id":"CVE-2016-2428","published":"2016-05-09T10:00:00.000Z","updated":"2024-08-05T23:24:49.371Z","title":"libAACdec/src/aacdec_drc.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not properly…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.0206,"kevAdded":null},{"id":"CVE-2016-2427","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T23:24:49.369Z","title":"The AES-GCM specification in RFC 5084, as used in Android 5.x and 6.x, recommends 12 octets for the aes-ICVlen parameter field, which might make it easier for…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00417,"kevAdded":null},{"id":"CVE-2016-2426","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T23:24:49.351Z","title":"server/content/ContentService.java in the Framework component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00388,"kevAdded":null},{"id":"CVE-2016-2425","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T23:24:49.343Z","title":"mail/compose/ComposeActivity.java in AOSP Mail in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 supports…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00471,"kevAdded":null},{"id":"CVE-2016-2424","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T23:24:49.340Z","title":"server/content/SyncStorageEngine.java in SyncStorageEngine in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00358,"kevAdded":null},{"id":"CVE-2016-2423","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T23:24:49.287Z","title":"server/telecom/CallsManager.java in Telephony in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not properly…","severity":"MEDIUM","score":6.1,"vendor":null,"product":null,"kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2016-2422","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T23:24:49.281Z","title":"Wi-Fi in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not prevent use of a Wi-Fi CA certificate in an…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00389,"kevAdded":null},{"id":"CVE-2016-2421","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T23:24:49.347Z","title":"Setup Wizard in Android 5.1.x before 5.1.1 and 6.x before 2016-04-01 allows physically proximate attackers to bypass the Factory Reset Protection protection…","severity":"MEDIUM","score":6.1,"vendor":null,"product":null,"kev":false,"epss":0.00168,"kevAdded":null},{"id":"CVE-2016-2420","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T23:24:49.362Z","title":"rootdir/init.rc in Android 4.x before 4.4.4 does not ensure that the /data/tombstones directory exists for the Debuggerd component, which allows attackers to…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00471,"kevAdded":null},{"id":"CVE-2016-2419","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T23:24:49.286Z","title":"media/libmedia/IDrm.cpp in mediaserver in Android 6.x before 2016-04-01 does not initialize a certain key-request data structure, which allows attackers to…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00801,"kevAdded":null},{"id":"CVE-2016-2418","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T23:24:49.292Z","title":"media/libmedia/IOMX.cpp in mediaserver in Android 6.x before 2016-04-01 does not initialize certain metadata buffer pointers, which allows attackers to obtain…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.008,"kevAdded":null},{"id":"CVE-2016-2417","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T23:24:49.354Z","title":"media/libmedia/IOMX.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not initialize a…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.05065,"kevAdded":null},{"id":"CVE-2016-2416","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T23:24:49.341Z","title":"libs/gui/BufferQueueConsumer.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not check…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.01058,"kevAdded":null},{"id":"CVE-2016-2415","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T23:24:49.309Z","title":"exchange/eas/EasAutoDiscover.java in the Autodiscover implementation in Exchange ActiveSync in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00425,"kevAdded":null},{"id":"CVE-2016-2414","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T23:24:49.320Z","title":"The Minikin library in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not properly consider negative size values in font data,…","severity":"MEDIUM","score":6.2,"vendor":null,"product":null,"kev":false,"epss":0.00405,"kevAdded":null},{"id":"CVE-2016-2413","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T23:24:49.271Z","title":"media/libmedia/IOMX.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not initialize a handle pointer, which…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00473,"kevAdded":null},{"id":"CVE-2016-2412","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T23:24:49.290Z","title":"include/core/SkPostConfig.h in Skia, as used in System_server in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01,…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00473,"kevAdded":null},{"id":"CVE-2016-2411","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T23:24:49.332Z","title":"A Qualcomm Power Management kernel driver in Android 6.x before 2016-04-01 allows attackers to gain privileges via a crafted application that leverages root…","severity":"MEDIUM","score":6.5,"vendor":null,"product":null,"kev":false,"epss":0.00502,"kevAdded":null},{"id":"CVE-2016-2410","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T23:24:49.307Z","title":"A Qualcomm video kernel driver in Android 6.x before 2016-04-01 allows attackers to gain privileges via a crafted application that leverages control over a…","severity":"HIGH","score":7.4,"vendor":null,"product":null,"kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2016-2409","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T23:24:49.339Z","title":"A Texas Instruments (TI) haptic kernel driver in Android 6.x before 2016-04-01 allows attackers to gain privileges via a crafted application that leverages…","severity":"HIGH","score":8.1,"vendor":null,"product":null,"kev":false,"epss":0.00533,"kevAdded":null},{"id":"CVE-2016-0850","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T22:30:05.125Z","title":"The PORCHE_PAIRING_CONFLICT feature in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows remote…","severity":"HIGH","score":8.8,"vendor":null,"product":null,"kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2016-0849","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T22:30:05.064Z","title":"Multiple integer overflows in minzip/SysUtil.c in the Recovery Procedure in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allow…","severity":"HIGH","score":8.4,"vendor":null,"product":null,"kev":false,"epss":0.00218,"kevAdded":null},{"id":"CVE-2016-0848","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T22:30:05.034Z","title":"Race condition in Download Manager in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows attackers to bypass…","severity":"HIGH","score":8.4,"vendor":null,"product":null,"kev":false,"epss":0.00159,"kevAdded":null},{"id":"CVE-2016-0847","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T22:30:05.131Z","title":"The Telecom Component in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows attackers to spoof the originating telephone number…","severity":"HIGH","score":8.4,"vendor":null,"product":null,"kev":false,"epss":0.00233,"kevAdded":null},{"id":"CVE-2016-0846","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T22:30:05.106Z","title":"libs/binder/IMemory.cpp in the IMemory Native Interface in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not…","severity":"HIGH","score":8.4,"vendor":null,"product":null,"kev":false,"epss":0.01306,"kevAdded":null},{"id":"CVE-2016-0844","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T22:30:05.143Z","title":"The Qualcomm RF driver in Android 6.x before 2016-04-01 does not properly restrict access to socket ioctl calls, which allows attackers to gain privileges via…","severity":"HIGH","score":8.4,"vendor":null,"product":null,"kev":false,"epss":0.00217,"kevAdded":null},{"id":"CVE-2016-0843","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T22:30:05.033Z","title":"The Qualcomm ARM processor performance-event manager in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows…","severity":"HIGH","score":8.4,"vendor":null,"product":null,"kev":false,"epss":0.00207,"kevAdded":null},{"id":"CVE-2016-0842","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T22:30:05.203Z","title":"The H.264 decoder in libstagefright in Android 6.x before 2016-04-01 mishandles Memory Management Control Operation (MMCO) data, which allows remote attackers…","severity":"HIGH","score":8.4,"vendor":null,"product":null,"kev":false,"epss":0.01667,"kevAdded":null},{"id":"CVE-2016-0841","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T22:30:05.149Z","title":"media/libmedia/mediametadataretriever.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.0206,"kevAdded":null},{"id":"CVE-2016-0840","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T22:30:05.087Z","title":"Multiple stack-based buffer underflows in decoder/ih264d_parse_cavlc.c in mediaserver in Android 6.x before 2016-04-01 allow remote attackers to execute…","severity":"HIGH","score":8.4,"vendor":null,"product":null,"kev":false,"epss":0.01652,"kevAdded":null},{"id":"CVE-2016-0839","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T22:30:05.054Z","title":"post_proc/volume_listener.c in mediaserver in Android 6.x before 2016-04-01 mishandles deleted effect context, which allows remote attackers to execute…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.0206,"kevAdded":null},{"id":"CVE-2016-0838","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T22:30:05.062Z","title":"Sonivox in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not check for a negative number of…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.02822,"kevAdded":null},{"id":"CVE-2016-0837","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T22:30:05.204Z","title":"MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.02018,"kevAdded":null},{"id":"CVE-2016-0836","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T22:30:05.060Z","title":"Stack-based buffer overflow in decoder/impeg2d_vld.c in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.01788,"kevAdded":null},{"id":"CVE-2016-0835","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T22:30:05.044Z","title":"decoder/impeg2d_dec_hdr.c in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.02822,"kevAdded":null},{"id":"CVE-2016-0834","published":"2016-04-18T00:00:00.000Z","updated":"2024-08-05T22:30:05.001Z","title":"An unspecified media codec in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service…","severity":"HIGH","score":8.4,"vendor":null,"product":null,"kev":false,"epss":0.01272,"kevAdded":null},{"id":"CVE-2016-0832","published":"2016-03-12T21:00:00.000Z","updated":"2024-08-05T22:30:05.164Z","title":"Setup Wizard in Android 5.1.x before LMY49H and 6.x before 2016-03-01 allows physically proximate attackers to bypass the Factory Reset Protection protection…","severity":"MEDIUM","score":6.1,"vendor":null,"product":null,"kev":false,"epss":0.00178,"kevAdded":null},{"id":"CVE-2016-0831","published":"2016-03-12T21:00:00.000Z","updated":"2024-08-05T22:30:05.135Z","title":"The getDeviceIdForPhone function in internal/telephony/PhoneSubInfoController.java in Telephony in Android 5.x before 5.1.1 LMY49H and 6.x before 2016-03-01…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00477,"kevAdded":null},{"id":"CVE-2016-0830","published":"2016-03-12T21:00:00.000Z","updated":"2024-08-05T22:30:05.165Z","title":"btif_config.c in Bluetooth in Android 6.x before 2016-03-01 allows remote attackers to cause a denial of service (memory corruption and persistent daemon…","severity":"MEDIUM","score":6.5,"vendor":null,"product":null,"kev":false,"epss":0.00531,"kevAdded":null},{"id":"CVE-2016-0829","published":"2016-03-12T21:00:00.000Z","updated":"2024-08-05T22:30:05.052Z","title":"The BnGraphicBufferProducer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H,…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00749,"kevAdded":null},{"id":"CVE-2016-0828","published":"2016-03-12T21:00:00.000Z","updated":"2024-08-05T22:30:05.042Z","title":"The BnGraphicBufferConsumer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in mediaserver in Android 5.x before 5.1.1 LMY49H and 6.x before…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00749,"kevAdded":null},{"id":"CVE-2016-0827","published":"2016-03-12T21:00:00.000Z","updated":"2024-08-05T22:30:05.071Z","title":"Multiple integer overflows in libeffects in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allow attackers to gain…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00545,"kevAdded":null},{"id":"CVE-2016-0826","published":"2016-03-12T21:00:00.000Z","updated":"2024-08-05T22:30:05.147Z","title":"libcameraservice in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 does not require use of the…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00569,"kevAdded":null},{"id":"CVE-2016-0825","published":"2016-03-12T21:00:00.000Z","updated":"2024-08-05T22:30:05.167Z","title":"The Widevine Trusted Application in Android 6.0.1 before 2016-03-01 allows attackers to obtain sensitive TrustZone secure-storage information by leveraging…","severity":"MEDIUM","score":5.3,"vendor":null,"product":null,"kev":false,"epss":0.00486,"kevAdded":null},{"id":"CVE-2016-0824","published":"2016-03-12T21:00:00.000Z","updated":"2024-08-05T22:30:05.143Z","title":"libmpeg2 in libstagefright in Android 6.x before 2016-03-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection…","severity":"MEDIUM","score":5.3,"vendor":null,"product":null,"kev":false,"epss":0.00649,"kevAdded":null},{"id":"CVE-2016-0823","published":"2016-03-12T21:00:00.000Z","updated":"2024-08-05T22:30:05.021Z","title":"The pagemap_open function in fs/proc/task_mmu.c in the Linux kernel before 3.19.3, as used in Android 6.0.1 before 2016-03-01, allows local users to obtain…","severity":"MEDIUM","score":4,"vendor":null,"product":null,"kev":false,"epss":0.00312,"kevAdded":null},{"id":"CVE-2016-0822","published":"2016-03-12T21:00:00.000Z","updated":"2024-08-05T22:30:05.061Z","title":"The MediaTek connectivity kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privileges via a crafted application that leverages…","severity":"HIGH","score":7,"vendor":null,"product":null,"kev":false,"epss":0.00465,"kevAdded":null},{"id":"CVE-2016-0821","published":"2016-03-12T21:00:00.000Z","updated":"2024-08-05T22:30:05.117Z","title":"The LIST_POISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-03-01, does not properly consider the…","severity":"MEDIUM","score":5.5,"vendor":null,"product":null,"kev":false,"epss":0.00377,"kevAdded":null},{"id":"CVE-2016-0820","published":"2016-03-12T21:00:00.000Z","updated":"2024-08-05T22:30:05.108Z","title":"The MediaTek Wi-Fi kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privileges via a crafted application, aka internal bug 26267358.","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00522,"kevAdded":null},{"id":"CVE-2016-0819","published":"2016-03-12T21:00:00.000Z","updated":"2024-08-05T22:30:05.099Z","title":"The Qualcomm performance component in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allows attackers to gain privileges via a…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00492,"kevAdded":null},{"id":"CVE-2016-0818","published":"2016-03-12T21:00:00.000Z","updated":"2024-08-05T22:30:04.993Z","title":"The caching functionality in the TrustManagerImpl class in TrustManagerImpl.java in Conscrypt in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x…","severity":"MEDIUM","score":5.9,"vendor":null,"product":null,"kev":false,"epss":0.00268,"kevAdded":null},{"id":"CVE-2016-0816","published":"2016-03-12T21:00:00.000Z","updated":"2024-08-05T22:30:05.023Z","title":"mediaserver in Android 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.02822,"kevAdded":null},{"id":"CVE-2016-0815","published":"2016-03-12T21:00:00.000Z","updated":"2024-08-05T22:30:05.148Z","title":"The MPEG4Source::fragmentedRead function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.02822,"kevAdded":null},{"id":"CVE-2016-0813","published":"2016-02-07T01:00:00.000Z","updated":"2024-08-05T22:30:05.015Z","title":"packages/SystemUI/src/com/android/systemui/recents/AlternateRecentsComponent.java in Setup Wizard in Android 5.1.x before 5.1.1 LMY49G and 6.x before…","severity":"MEDIUM","score":6.1,"vendor":null,"product":null,"kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2016-0812","published":"2016-02-07T01:00:00.000Z","updated":"2024-08-05T22:30:05.083Z","title":"The interceptKeyBeforeDispatching function in policy/src/com/android/internal/policy/impl/PhoneWindowManager.java in Setup Wizard in Android 5.1.x before 5.1.1…","severity":"MEDIUM","score":6.1,"vendor":null,"product":null,"kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2016-0811","published":"2016-02-07T01:00:00.000Z","updated":"2024-08-05T22:30:05.123Z","title":"Integer overflow in the BnCrypto::onTransact function in media/libmedia/ICrypto.cpp in libmediaplayerservice in Android 6.x before 2016-02-01 allows attackers…","severity":"HIGH","score":7.5,"vendor":null,"product":null,"kev":false,"epss":0.00675,"kevAdded":null},{"id":"CVE-2016-0810","published":"2016-02-07T01:00:00.000Z","updated":"2024-08-05T22:30:05.161Z","title":"media/libmedia/SoundPool.cpp in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 mishandles locking requirements,…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.0023,"kevAdded":null},{"id":"CVE-2016-0809","published":"2016-02-07T01:00:00.000Z","updated":"2024-08-05T22:30:05.032Z","title":"Use-after-free vulnerability in the wifi_cleanup function in bcmdhd/wifi_hal/wifi_hal.cpp in Wi-Fi in Android 6.x before 2016-02-01 allows attackers to gain…","severity":"HIGH","score":8.8,"vendor":null,"product":null,"kev":false,"epss":0.00555,"kevAdded":null},{"id":"CVE-2016-0808","published":"2016-02-07T01:00:00.000Z","updated":"2024-08-05T22:30:05.035Z","title":"Integer overflow in the getCoverageFormat12 function in CmapCoverage.cpp in the Minikin library in Android 5.x before 5.1.1 LMY49G and 6.x before 2016-02-01…","severity":"MEDIUM","score":6.2,"vendor":null,"product":null,"kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2016-0807","published":"2016-02-07T01:00:00.000Z","updated":"2024-08-05T22:30:05.000Z","title":"The get_build_id function in elf_utils.cpp in Debuggerd in Android 6.x before 2016-02-01 allows attackers to gain privileges via a crafted application that…","severity":"HIGH","score":8.4,"vendor":null,"product":null,"kev":false,"epss":0.00215,"kevAdded":null},{"id":"CVE-2016-0806","published":"2016-02-07T01:00:00.000Z","updated":"2024-08-05T22:30:05.054Z","title":"The Qualcomm Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows attackers to gain privileges via…","severity":"HIGH","score":8.4,"vendor":null,"product":null,"kev":false,"epss":0.00207,"kevAdded":null},{"id":"CVE-2016-0805","published":"2016-02-07T01:00:00.000Z","updated":"2024-08-05T22:30:05.163Z","title":"The performance event manager for Qualcomm ARM processors in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows attackers to…","severity":"HIGH","score":8.4,"vendor":null,"product":null,"kev":false,"epss":0.00415,"kevAdded":null},{"id":"CVE-2016-0804","published":"2016-02-07T01:00:00.000Z","updated":"2024-08-05T22:30:05.047Z","title":"The NuPlayer::GenericSource::notifyPreparedAndCleanup function in media/libmediaplayerservice/nuplayer/GenericSource.cpp in mediaserver in Android 5.x before…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.02018,"kevAdded":null},{"id":"CVE-2016-0803","published":"2016-02-07T01:00:00.000Z","updated":"2024-08-05T22:30:05.172Z","title":"libstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.02062,"kevAdded":null},{"id":"CVE-2016-0802","published":"2016-02-07T01:00:00.000Z","updated":"2024-08-05T22:30:05.207Z","title":"The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute…","severity":"HIGH","score":8.8,"vendor":null,"product":null,"kev":false,"epss":0.01701,"kevAdded":null},{"id":"CVE-2016-0801","published":"2016-02-07T01:00:00.000Z","updated":"2024-08-05T22:30:04.977Z","title":"The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.33367,"kevAdded":null},{"id":"CVE-2015-6646","published":"2016-01-06T19:00:00.000Z","updated":"2024-08-06T07:29:23.373Z","title":"The System V IPC implementation in the kernel in Android before 6.0 2016-01-01 allows attackers to cause a denial of service (global kernel resource…","severity":"MEDIUM","score":6.2,"vendor":null,"product":null,"kev":false,"epss":0.00491,"kevAdded":null},{"id":"CVE-2015-6645","published":"2016-01-06T19:00:00.000Z","updated":"2024-08-06T07:29:24.026Z","title":"SyncManager in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to cause a denial of service (continuous rebooting) via a crafted…","severity":"MEDIUM","score":5,"vendor":null,"product":null,"kev":false,"epss":0.00336,"kevAdded":null},{"id":"CVE-2015-6644","published":"2016-01-06T19:00:00.000Z","updated":"2024-08-06T07:29:24.276Z","title":"Bouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information via a crafted application, aka internal…","severity":"LOW","score":3.3,"vendor":null,"product":null,"kev":false,"epss":0.00934,"kevAdded":null},{"id":"CVE-2015-6643","published":"2016-01-06T19:00:00.000Z","updated":"2024-08-06T07:29:24.150Z","title":"Setup Wizard in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows physically proximate attackers to modify settings or bypass a reset protection…","severity":"MEDIUM","score":6.6,"vendor":null,"product":null,"kev":false,"epss":0.0019,"kevAdded":null},{"id":"CVE-2015-6642","published":"2016-01-06T19:00:00.000Z","updated":"2024-08-06T07:29:24.335Z","title":"The kernel in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.00715,"kevAdded":null},{"id":"CVE-2015-6641","published":"2016-01-06T19:00:00.000Z","updated":"2024-08-06T07:29:24.444Z","title":"Bluetooth in Android 6.0 before 2016-01-01 allows remote attackers to obtain sensitive Contacts information by leveraging pairing, aka internal bug 23607427.","severity":"LOW","score":3.1,"vendor":null,"product":null,"kev":false,"epss":0.00369,"kevAdded":null},{"id":"CVE-2015-6640","published":"2016-01-06T19:00:00.000Z","updated":"2024-08-06T07:29:24.295Z","title":"The prctl_set_vma_anon_name function in kernel/sys.c in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 does not ensure that only one vma is accessed in…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00729,"kevAdded":null},{"id":"CVE-2015-6638","published":"2016-01-06T19:00:00.000Z","updated":"2024-08-06T07:29:24.697Z","title":"The Imagination Technologies driver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application,…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00473,"kevAdded":null},{"id":"CVE-2015-6637","published":"2016-01-06T19:00:00.000Z","updated":"2024-08-06T07:29:24.523Z","title":"The MediaTek misc-sd driver in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application, aka…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.00633,"kevAdded":null},{"id":"CVE-2015-6636","published":"2016-01-06T19:00:00.000Z","updated":"2024-08-06T07:29:24.621Z","title":"mediaserver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory…","severity":"CRITICAL","score":9.8,"vendor":null,"product":null,"kev":false,"epss":0.0206,"kevAdded":null},{"id":"CVE-2015-6647","published":"2016-01-06T00:00:00.000Z","updated":"2025-02-13T16:27:13.475Z","title":"The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.0069,"kevAdded":null},{"id":"CVE-2015-6639","published":"2016-01-06T00:00:00.000Z","updated":"2025-02-13T16:27:12.925Z","title":"The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted…","severity":"HIGH","score":7.8,"vendor":null,"product":null,"kev":false,"epss":0.06962,"kevAdded":null},{"id":"CVE-2015-8507","published":"2015-12-08T23:00:00.000Z","updated":"2024-08-06T08:20:42.472Z","title":"mediaserver in Android 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…","severity":"HIGH","score":9.3,"vendor":null,"product":null,"kev":false,"epss":0.02011,"kevAdded":null},{"id":"CVE-2015-8506","published":"2015-12-08T23:00:00.000Z","updated":"2024-08-06T08:20:42.425Z","title":"mediaserver in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory…","severity":"HIGH","score":9.3,"vendor":null,"product":null,"kev":false,"epss":0.01991,"kevAdded":null},{"id":"CVE-2015-8505","published":"2015-12-08T23:00:00.000Z","updated":"2024-08-06T08:20:41.770Z","title":"mediaserver in Android before 5.1.1 LMY48Z allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…","severity":"HIGH","score":9.3,"vendor":null,"product":null,"kev":false,"epss":0.01991,"kevAdded":null},{"id":"CVE-2015-6634","published":"2015-12-08T23:00:00.000Z","updated":"2024-08-06T07:29:24.507Z","title":"The display drivers in Android before 5.1.1 LMY48Z allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…","severity":"HIGH","score":9.3,"vendor":null,"product":null,"kev":false,"epss":0.01858,"kevAdded":null},{"id":"CVE-2015-6633","published":"2015-12-08T23:00:00.000Z","updated":"2024-08-06T07:29:24.423Z","title":"The display drivers in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allow remote attackers to execute arbitrary code or cause a denial of service…","severity":"HIGH","score":9.3,"vendor":null,"product":null,"kev":false,"epss":0.01837,"kevAdded":null},{"id":"CVE-2015-6632","published":"2015-12-08T23:00:00.000Z","updated":"2024-08-06T07:29:24.756Z","title":"libstagefright in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to obtain sensitive information, and consequently bypass an…","severity":"MEDIUM","score":5,"vendor":null,"product":null,"kev":false,"epss":0.00643,"kevAdded":null},{"id":"CVE-2015-6631","published":"2015-12-08T23:00:00.000Z","updated":"2024-08-06T07:29:24.249Z","title":"libstagefright in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to obtain sensitive information, and consequently bypass an…","severity":"MEDIUM","score":5,"vendor":null,"product":null,"kev":false,"epss":0.00751,"kevAdded":null},{"id":"CVE-2015-6630","published":"2015-12-08T23:00:00.000Z","updated":"2024-08-06T07:29:23.385Z","title":"SystemUI in Android 5.x before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to read screenshots and consequently gain privileges via a crafted…","severity":"MEDIUM","score":4.3,"vendor":null,"product":null,"kev":false,"epss":0.0043,"kevAdded":null},{"id":"CVE-2015-6629","published":"2015-12-08T23:00:00.000Z","updated":"2024-08-06T07:29:22.524Z","title":"Wi-Fi in Android 5.x before 5.1.1 LMY48Z allows attackers to obtain sensitive information via unspecified vectors, as demonstrated by obtaining Signature or…","severity":"MEDIUM","score":5,"vendor":null,"product":null,"kev":false,"epss":0.00435,"kevAdded":null},{"id":"CVE-2015-6628","published":"2015-12-08T23:00:00.000Z","updated":"2024-08-06T07:29:23.417Z","title":"Media Framework in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to obtain sensitive information, and consequently bypass an…","severity":"MEDIUM","score":5,"vendor":null,"product":null,"kev":false,"epss":0.00458,"kevAdded":null},{"id":"CVE-2015-6627","published":"2015-12-08T23:00:00.000Z","updated":"2024-08-06T07:29:24.296Z","title":"The Audio component in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to obtain sensitive information via a crafted audio file,…","severity":"LOW","score":2.6,"vendor":null,"product":null,"kev":false,"epss":0.00523,"kevAdded":null},{"id":"CVE-2015-6626","published":"2015-12-08T23:00:00.000Z","updated":"2024-08-06T07:29:24.581Z","title":"libstagefright in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to obtain sensitive information, and consequently bypass an…","severity":"MEDIUM","score":5,"vendor":null,"product":null,"kev":false,"epss":0.00636,"kevAdded":null},{"id":"CVE-2015-6625","published":"2015-12-08T23:00:00.000Z","updated":"2024-08-06T07:29:22.567Z","title":"System Server in Android 6.0 before 2015-12-01 allows attackers to obtain sensitive information and consequently gain privileges via a crafted application, aka…","severity":"MEDIUM","score":4.3,"vendor":null,"product":null,"kev":false,"epss":0.0043,"kevAdded":null},{"id":"CVE-2015-6624","published":"2015-12-08T23:00:00.000Z","updated":"2024-08-06T07:29:23.440Z","title":"System Server in Android 6.0 before 2015-12-01 allows attackers to obtain sensitive information via a crafted application, as demonstrated by obtaining…","severity":"MEDIUM","score":4.3,"vendor":null,"product":null,"kev":false,"epss":0.0043,"kevAdded":null},{"id":"CVE-2015-6623","published":"2015-12-08T23:00:00.000Z","updated":"2024-08-06T07:29:22.529Z","title":"Wi-Fi in Android 6.0 before 2015-12-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or…","severity":"HIGH","score":9.3,"vendor":null,"product":null,"kev":false,"epss":0.00591,"kevAdded":null},{"id":"CVE-2015-6622","published":"2015-12-08T23:00:00.000Z","updated":"2024-08-06T07:29:24.123Z","title":"The Native Frameworks Library in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to obtain sensitive information, and consequently…","severity":"MEDIUM","score":5,"vendor":null,"product":null,"kev":false,"epss":0.00474,"kevAdded":null},{"id":"CVE-2015-6621","published":"2015-12-08T23:00:00.000Z","updated":"2024-08-06T07:29:23.318Z","title":"SystemUI in Android 5.x before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to gain privileges via a crafted application, as demonstrated by…","severity":"HIGH","score":9.3,"vendor":null,"product":null,"kev":false,"epss":0.00591,"kevAdded":null},{"id":"CVE-2015-6620","published":"2015-12-08T23:00:00.000Z","updated":"2024-08-06T07:29:24.408Z","title":"libstagefright in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to gain privileges via a crafted application, as demonstrated by…","severity":"HIGH","score":9.3,"vendor":null,"product":null,"kev":false,"epss":0.01676,"kevAdded":null},{"id":"CVE-2015-6619","published":"2015-12-08T23:00:00.000Z","updated":"2024-08-06T07:29:23.371Z","title":"The kernel in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to gain privileges via a crafted application, aka internal bug 23520714.","severity":"HIGH","score":9.3,"vendor":null,"product":null,"kev":false,"epss":0.00733,"kevAdded":null},{"id":"CVE-2015-6618","published":"2015-12-08T23:00:00.000Z","updated":"2024-08-06T07:29:23.206Z","title":"Bluetooth in Android 4.4 and 5.x before 5.1.1 LMY48Z allows user-assisted remote attackers to execute arbitrary code by leveraging access to the local physical…","severity":"MEDIUM","score":4.3,"vendor":null,"product":null,"kev":false,"epss":0.0037,"kevAdded":null},{"id":"CVE-2015-6617","published":"2015-12-08T23:00:00.000Z","updated":"2024-08-06T07:29:23.155Z","title":"Skia, as used in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01, allows remote attackers to execute arbitrary code or cause a denial of service (memory…","severity":"HIGH","score":9.3,"vendor":null,"product":null,"kev":false,"epss":0.0227,"kevAdded":null},{"id":"CVE-2015-6616","published":"2015-12-08T23:00:00.000Z","updated":"2024-08-06T07:29:23.018Z","title":"mediaserver in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory…","severity":"HIGH","score":9.3,"vendor":null,"product":null,"kev":false,"epss":0.01858,"kevAdded":null},{"id":"CVE-2015-8074","published":"2015-11-03T11:00:00.000Z","updated":"2024-08-06T08:06:31.887Z","title":"mediaserver in Android before 5.1.1 LMY48X allows remote attackers to obtain sensitive information, and consequently bypass an unspecified protection…","severity":"MEDIUM","score":5,"vendor":null,"product":null,"kev":false,"epss":0.00945,"kevAdded":null},{"id":"CVE-2015-8073","published":"2015-11-03T11:00:00.000Z","updated":"2024-08-06T08:06:31.848Z","title":"mediaserver in Android 4.4 and 5.1 before 5.1.1 LMY48X allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…","severity":"HIGH","score":10,"vendor":null,"product":null,"kev":false,"epss":0.0222,"kevAdded":null},{"id":"CVE-2015-8072","published":"2015-11-03T11:00:00.000Z","updated":"2024-08-06T08:06:31.834Z","title":"mediaserver in Android 4.4 through 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of…","severity":"HIGH","score":10,"vendor":null,"product":null,"kev":false,"epss":0.0222,"kevAdded":null},{"id":"CVE-2015-6614","published":"2015-11-03T11:00:00.000Z","updated":"2024-08-06T07:29:23.134Z","title":"Telephony in Android 5.x before 5.1.1 LMY48X allows attackers to gain privileges, and consequently bypass intended network-interface restrictions, perform…","severity":"MEDIUM","score":5.8,"vendor":null,"product":null,"kev":false,"epss":0.00568,"kevAdded":null},{"id":"CVE-2015-6613","published":"2015-11-03T11:00:00.000Z","updated":"2024-08-06T07:29:22.562Z","title":"Bluetooth in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to send commands to a debugging port, and consequently gain privileges, via…","severity":"MEDIUM","score":5.1,"vendor":null,"product":null,"kev":false,"epss":0.00634,"kevAdded":null},{"id":"CVE-2015-6612","published":"2015-11-03T11:00:00.000Z","updated":"2024-08-06T07:29:22.568Z","title":"libmedia in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to gain privileges via a crafted application, aka internal bug 23540426.","severity":"HIGH","score":9.3,"vendor":null,"product":null,"kev":false,"epss":0.02871,"kevAdded":null},{"id":"CVE-2015-6611","published":"2015-11-03T11:00:00.000Z","updated":"2024-08-06T07:29:24.617Z","title":"mediaserver in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to obtain sensitive information, and consequently bypass an…","severity":"MEDIUM","score":5,"vendor":null,"product":null,"kev":false,"epss":0.01012,"kevAdded":null},{"id":"CVE-2015-6610","published":"2015-11-03T11:00:00.000Z","updated":"2024-08-06T07:29:23.767Z","title":"libstagefright in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to gain privileges or cause a denial of service (memory corruption)…","severity":"HIGH","score":10,"vendor":null,"product":null,"kev":false,"epss":0.00792,"kevAdded":null},{"id":"CVE-2015-6609","published":"2015-11-03T11:00:00.000Z","updated":"2024-08-06T07:29:22.536Z","title":"libutils in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory…","severity":"HIGH","score":10,"vendor":null,"product":null,"kev":false,"epss":0.02188,"kevAdded":null},{"id":"CVE-2015-6608","published":"2015-11-03T11:00:00.000Z","updated":"2024-08-06T07:29:22.630Z","title":"mediaserver in Android 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory…","severity":"HIGH","score":10,"vendor":null,"product":null,"kev":false,"epss":0.02378,"kevAdded":null},{"id":"CVE-2015-6607","published":"2015-10-06T17:00:00.000Z","updated":"2024-08-06T07:29:22.603Z","title":"SQLite before 3.8.9, as used in Android before 5.1.1 LMY48T, allows attackers to gain privileges via a crafted application, aka internal bug 20099586.","severity":"MEDIUM","score":6.8,"vendor":null,"product":null,"kev":false,"epss":0.01548,"kevAdded":null},{"id":"CVE-2015-6606","published":"2015-10-06T17:00:00.000Z","updated":"2024-08-06T07:29:24.690Z","title":"The Secure Element Evaluation Kit (aka SEEK or SmartCard API) plugin in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted…","severity":"HIGH","score":9.3,"vendor":null,"product":null,"kev":false,"epss":0.00773,"kevAdded":null},{"id":"CVE-2015-6605","published":"2015-10-06T17:00:00.000Z","updated":"2024-08-06T07:29:23.409Z","title":"mediaserver in Android before 5.1.1 LMY48T allows attackers to cause a denial of service (process crash) via unspecified vectors, aka internal bugs 20915134…","severity":"MEDIUM","score":5,"vendor":null,"product":null,"kev":false,"epss":0.00529,"kevAdded":null},{"id":"CVE-2015-6604","published":"2015-10-06T17:00:00.000Z","updated":"2024-08-06T07:29:23.066Z","title":"libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…","severity":"HIGH","score":10,"vendor":null,"product":null,"kev":false,"epss":0.022,"kevAdded":null},{"id":"CVE-2015-6603","published":"2015-10-06T17:00:00.000Z","updated":"2024-08-06T07:29:23.166Z","title":"libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…","severity":"HIGH","score":10,"vendor":null,"product":null,"kev":false,"epss":0.01858,"kevAdded":null},{"id":"CVE-2015-6601","published":"2015-10-06T17:00:00.000Z","updated":"2024-08-06T07:29:23.944Z","title":"libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…","severity":"HIGH","score":10,"vendor":null,"product":null,"kev":false,"epss":0.01858,"kevAdded":null},{"id":"CVE-2015-6600","published":"2015-10-06T17:00:00.000Z","updated":"2024-08-06T07:29:22.558Z","title":"libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…","severity":"HIGH","score":10,"vendor":null,"product":null,"kev":false,"epss":0.0182,"kevAdded":null},{"id":"CVE-2015-6599","published":"2015-10-06T17:00:00.000Z","updated":"2024-08-06T07:29:23.033Z","title":"libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…","severity":"HIGH","score":10,"vendor":null,"product":null,"kev":false,"epss":0.01858,"kevAdded":null},{"id":"CVE-2015-6598","published":"2015-10-06T17:00:00.000Z","updated":"2024-08-06T07:29:22.555Z","title":"libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…","severity":"HIGH","score":10,"vendor":null,"product":null,"kev":false,"epss":0.01858,"kevAdded":null},{"id":"CVE-2015-6596","published":"2015-10-06T17:00:00.000Z","updated":"2024-08-06T07:29:22.551Z","title":"mediaserver in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, aka internal bugs 20731946 and 20719651, a different…","severity":"HIGH","score":9.3,"vendor":null,"product":null,"kev":false,"epss":0.00618,"kevAdded":null},{"id":"CVE-2015-3879","published":"2015-10-06T17:00:00.000Z","updated":"2024-08-06T05:56:16.024Z","title":"Media Player Framework in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, aka internal bug 23223325.","severity":"HIGH","score":9.3,"vendor":null,"product":null,"kev":false,"epss":0.00618,"kevAdded":null},{"id":"CVE-2015-3878","published":"2015-10-06T17:00:00.000Z","updated":"2024-08-06T05:56:16.068Z","title":"Media Projection in Android 5.x before 5.1.1 LMY48T and 6.0 before 2015-10-01 allows attackers to bypass an intended screen-recording warning feature and…","severity":"MEDIUM","score":4.3,"vendor":null,"product":null,"kev":false,"epss":0.01074,"kevAdded":null},{"id":"CVE-2015-3877","published":"2015-10-06T17:00:00.000Z","updated":"2024-08-06T05:56:16.031Z","title":"Skia, as used in Android before 5.1.1 LMY48T, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…","severity":"HIGH","score":10,"vendor":null,"product":null,"kev":false,"epss":0.0182,"kevAdded":null},{"id":"CVE-2015-3875","published":"2015-10-06T17:00:00.000Z","updated":"2024-08-06T05:56:16.087Z","title":"libutils in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted audio…","severity":"HIGH","score":10,"vendor":null,"product":null,"kev":false,"epss":0.0202,"kevAdded":null},{"id":"CVE-2015-3874","published":"2015-10-06T17:00:00.000Z","updated":"2024-08-06T05:56:16.326Z","title":"The Sonivox components in Android before 5.1.1 LMY48T allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…","severity":"HIGH","score":10,"vendor":null,"product":null,"kev":false,"epss":0.01838,"kevAdded":null},{"id":"CVE-2015-3873","published":"2015-10-06T17:00:00.000Z","updated":"2024-08-06T05:56:15.987Z","title":"libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…","severity":"HIGH","score":10,"vendor":null,"product":null,"kev":false,"epss":0.022,"kevAdded":null},{"id":"CVE-2015-3872","published":"2015-10-06T17:00:00.000Z","updated":"2024-08-06T05:56:16.113Z","title":"libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…","severity":"HIGH","score":10,"vendor":null,"product":null,"kev":false,"epss":0.01858,"kevAdded":null},{"id":"CVE-2015-3871","published":"2015-10-06T17:00:00.000Z","updated":"2024-08-06T05:56:16.039Z","title":"libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…","severity":"HIGH","score":10,"vendor":null,"product":null,"kev":false,"epss":0.01858,"kevAdded":null},{"id":"CVE-2015-3870","published":"2015-10-06T17:00:00.000Z","updated":"2024-08-06T05:56:16.046Z","title":"libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…","severity":"HIGH","score":10,"vendor":null,"product":null,"kev":false,"epss":0.022,"kevAdded":null},{"id":"CVE-2015-3869","published":"2015-10-06T17:00:00.000Z","updated":"2024-08-06T05:56:16.301Z","title":"libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…","severity":"HIGH","score":10,"vendor":null,"product":null,"kev":false,"epss":0.022,"kevAdded":null},{"id":"CVE-2015-3868","published":"2015-10-06T17:00:00.000Z","updated":"2024-08-06T05:56:16.288Z","title":"libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…","severity":"HIGH","score":10,"vendor":null,"product":null,"kev":false,"epss":0.02577,"kevAdded":null},{"id":"CVE-2015-3867","published":"2015-10-06T17:00:00.000Z","updated":"2024-08-06T05:56:15.979Z","title":"libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…","severity":"HIGH","score":10,"vendor":null,"product":null,"kev":false,"epss":0.01858,"kevAdded":null},{"id":"CVE-2015-3865","published":"2015-10-06T17:00:00.000Z","updated":"2024-08-06T05:56:16.114Z","title":"The Runtime subsystem in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or…","severity":"HIGH","score":9.3,"vendor":null,"product":null,"kev":false,"epss":0.00618,"kevAdded":null},{"id":"CVE-2015-3862","published":"2015-10-06T17:00:00.000Z","updated":"2024-08-06T05:56:16.312Z","title":"mediaserver in Android before 5.1.1 LMY48T allows attackers to cause a denial of service (process crash) via unspecified vectors, aka internal bug 22954006.","severity":"MEDIUM","score":5,"vendor":null,"product":null,"kev":false,"epss":0.00463,"kevAdded":null},{"id":"CVE-2015-3847","published":"2015-10-06T17:00:00.000Z","updated":"2024-08-06T05:56:16.036Z","title":"Bluetooth in Android before 5.1.1 LMY48T allows attackers to remove stored SMS messages via a crafted application, aka internal bug 22343270.","severity":"MEDIUM","score":6.4,"vendor":null,"product":null,"kev":false,"epss":0.00451,"kevAdded":null},{"id":"CVE-2015-3823","published":"2015-10-06T17:00:00.000Z","updated":"2024-08-06T05:56:15.620Z","title":"libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…","severity":"HIGH","score":10,"vendor":null,"product":null,"kev":false,"epss":0.022,"kevAdded":null},{"id":"CVE-2015-6602","published":"2015-10-02T01:00:00.000Z","updated":"2024-08-06T07:29:22.569Z","title":"libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a (1) MP3 or (2) MP4 file, as demonstrated…","severity":"HIGH","score":9.3,"vendor":null,"product":null,"kev":false,"epss":0.03362,"kevAdded":null},{"id":"CVE-2015-3876","published":"2015-10-02T01:00:00.000Z","updated":"2024-08-06T05:56:16.317Z","title":"libstagefright in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a (1) MP3 or (2) MP4 file.","severity":"HIGH","score":9.3,"vendor":null,"product":null,"kev":false,"epss":0.03137,"kevAdded":null},{"id":"CVE-2015-3864","published":"2015-10-01T00:00:00.000Z","updated":"2024-08-06T05:56:15.946Z","title":"Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allows…","severity":"HIGH","score":10,"vendor":null,"product":null,"kev":false,"epss":0.87125,"kevAdded":null},{"id":"CVE-2015-3863","published":"2015-10-01T00:00:00.000Z","updated":"2024-08-06T05:56:15.826Z","title":"Multiple integer overflows in the Blob class in keystore/keystore.cpp in Keystore in Android before 5.1.1 LMY48M allow attackers to execute arbitrary code and…","severity":"HIGH","score":9.3,"vendor":null,"product":null,"kev":false,"epss":0.01283,"kevAdded":null},{"id":"CVE-2015-3861","published":"2015-10-01T00:00:00.000Z","updated":"2024-08-06T05:56:16.307Z","title":"Multiple integer overflows in the addVorbisCodecInfo function in matroska/MatroskaExtractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M…","severity":"MEDIUM","score":5,"vendor":null,"product":null,"kev":false,"epss":0.00818,"kevAdded":null},{"id":"CVE-2015-3860","published":"2015-10-01T00:00:00.000Z","updated":"2024-08-06T05:56:15.700Z","title":"packages/Keyguard/res/layout/keyguard_password_view.xml in Lockscreen in Android 5.x before 5.1.1 LMY48M does not restrict the number of characters in the…","severity":"HIGH","score":7.2,"vendor":null,"product":null,"kev":false,"epss":0.00374,"kevAdded":null},{"id":"CVE-2015-3858","published":"2015-10-01T00:00:00.000Z","updated":"2024-08-06T05:56:16.309Z","title":"The checkDestination function in internal/telephony/SMSDispatcher.java in Android before 5.1.1 LMY48M relies on an obsolete permission name for an…","severity":"HIGH","score":9.3,"vendor":null,"product":null,"kev":false,"epss":0.00691,"kevAdded":null},{"id":"CVE-2015-3849","published":"2015-10-01T00:00:00.000Z","updated":"2024-08-06T05:56:15.907Z","title":"The Region_createFromParcel function in core/jni/android/graphics/Region.cpp in Region in Android before 5.1.1 LMY48M does not check the return values of…","severity":"HIGH","score":9.3,"vendor":null,"product":null,"kev":false,"epss":0.01495,"kevAdded":null},{"id":"CVE-2015-3845","published":"2015-10-01T00:00:00.000Z","updated":"2024-08-06T05:56:15.700Z","title":"The Parcel::appendFrom function in libs/binder/Parcel.cpp in Binder in Android before 5.1.1 LMY48M does not consider parcel boundaries during identification of…","severity":"MEDIUM","score":6.8,"vendor":null,"product":null,"kev":false,"epss":0.00593,"kevAdded":null},{"id":"CVE-2015-3844","published":"2015-10-01T00:00:00.000Z","updated":"2024-08-06T05:56:15.769Z","title":"The getProcessRecordLocked method in services/core/java/com/android/server/am/ActivityManagerService.java in ActivityManager in Android before 5.1.1 LMY48I…","severity":"MEDIUM","score":6.8,"vendor":null,"product":null,"kev":false,"epss":0.0055,"kevAdded":null},{"id":"CVE-2015-3843","published":"2015-10-01T00:00:00.000Z","updated":"2024-08-06T05:56:15.877Z","title":"The SIM Toolkit (STK) framework in Android before 5.1.1 LMY48I allows attackers to (1) intercept or (2) emulate unspecified Telephony STK SIM commands via an…","severity":"HIGH","score":9.3,"vendor":null,"product":null,"kev":false,"epss":0.0184,"kevAdded":null},{"id":"CVE-2015-3842","published":"2015-10-01T00:00:00.000Z","updated":"2024-08-06T05:56:16.289Z","title":"Multiple heap-based buffer overflows in libeffects in the Audio Policy Service in mediaserver in Android before 5.1.1 LMY48I allow attackers to execute…","severity":"HIGH","score":9.3,"vendor":null,"product":null,"kev":false,"epss":0.01439,"kevAdded":null},{"id":"CVE-2015-3837","published":"2015-10-01T00:00:00.000Z","updated":"2024-08-06T05:56:16.302Z","title":"The OpenSSLX509Certificate class in org/conscrypt/OpenSSLX509Certificate.java in Android before 5.1.1 LMY48I improperly includes certain context data during…","severity":"HIGH","score":9.3,"vendor":null,"product":null,"kev":false,"epss":0.01623,"kevAdded":null},{"id":"CVE-2015-3836","published":"2015-10-01T00:00:00.000Z","updated":"2024-08-06T05:56:15.879Z","title":"The Parse_wave function in arm-wt-22k/lib_src/eas_mdls.c in the Sonivox DLS-to-EAS converter in Android before 5.1.1 LMY48I does not reject a negative value…","severity":"HIGH","score":10,"vendor":null,"product":null,"kev":false,"epss":0.02804,"kevAdded":null},{"id":"CVE-2015-3835","published":"2015-10-01T00:00:00.000Z","updated":"2024-08-06T05:56:15.943Z","title":"Buffer overflow in the OMXNodeInstance::emptyBuffer function in omx/OMXNodeInstance.cpp in libstagefright in Android before 5.1.1 LMY48I allows attackers to…","severity":"HIGH","score":9.3,"vendor":null,"product":null,"kev":false,"epss":0.01771,"kevAdded":null},{"id":"CVE-2015-3834","published":"2015-10-01T00:00:00.000Z","updated":"2024-08-06T05:56:15.871Z","title":"Multiple integer overflows in the BnHDCP::onTransact function in media/libmedia/IHDCP.cpp in libstagefright in Android before 5.1.1 LMY48I allow attackers to…","severity":"HIGH","score":10,"vendor":null,"product":null,"kev":false,"epss":0.01223,"kevAdded":null},{"id":"CVE-2015-3833","published":"2015-10-01T00:00:00.000Z","updated":"2024-08-06T05:56:15.967Z","title":"The getRunningAppProcesses function in services/core/java/com/android/server/am/ActivityManagerService.java in Android before 5.1.1 LMY48I allows attackers to…","severity":"MEDIUM","score":4.3,"vendor":null,"product":null,"kev":false,"epss":0.00699,"kevAdded":null},{"id":"CVE-2015-3832","published":"2015-10-01T00:00:00.000Z","updated":"2024-08-06T05:56:15.803Z","title":"Multiple buffer overflows in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I allow remote attackers to execute arbitrary code via invalid…","severity":"HIGH","score":10,"vendor":null,"product":null,"kev":false,"epss":0.02883,"kevAdded":null},{"id":"CVE-2015-3831","published":"2015-10-01T00:00:00.000Z","updated":"2024-08-06T05:56:15.686Z","title":"Buffer overflow in the readAt function in BpMediaHTTPConnection in media/libmedia/IMediaHTTPConnection.cpp in the mediaserver service in Android before 5.1.1…","severity":"HIGH","score":9.3,"vendor":null,"product":null,"kev":false,"epss":0.01458,"kevAdded":null},{"id":"CVE-2015-3829","published":"2015-10-01T00:00:00.000Z","updated":"2024-08-06T05:56:15.459Z","title":"Off-by-one error in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to…","severity":"HIGH","score":10,"vendor":null,"product":null,"kev":false,"epss":0.89888,"kevAdded":null},{"id":"CVE-2015-3828","published":"2015-10-01T00:00:00.000Z","updated":"2024-08-06T05:56:15.704Z","title":"The MPEG4Extractor::parse3GPPMetaData function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not enforce a minimum size for…","severity":"HIGH","score":10,"vendor":null,"product":null,"kev":false,"epss":0.85378,"kevAdded":null},{"id":"CVE-2015-3827","published":"2015-10-01T00:00:00.000Z","updated":"2024-08-06T05:56:15.490Z","title":"The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not validate the relationship between chunk…","severity":"HIGH","score":9.3,"vendor":null,"product":null,"kev":false,"epss":0.81143,"kevAdded":null},{"id":"CVE-2015-3826","published":"2015-10-01T00:00:00.000Z","updated":"2024-08-06T05:56:15.796Z","title":"The MPEG4Extractor::parse3GPPMetaData function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not enforce a minimum size for…","severity":"MEDIUM","score":5,"vendor":null,"product":null,"kev":false,"epss":0.73566,"kevAdded":null},{"id":"CVE-2015-3824","published":"2015-10-01T00:00:00.000Z","updated":"2024-08-06T05:56:15.553Z","title":"The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly restrict size addition, which…","severity":"HIGH","score":10,"vendor":null,"product":null,"kev":false,"epss":0.90483,"kevAdded":null}]}