2020

In the DaalaBitReader constructor of entropy_decoder.cc, there is a possible out of bounds read due to a missing bounds

In InstallPackage of package.cpp, there is a possible bypass of a signature check due to a Time of Check/Time of Use con

In freeIsolatedUidLocked of ProcessList.java, there is a possible UID reuse due to improper cleanup. This could lead to

In onHandleIntent of TraceService.java, there is a possible bypass of developer settings requirements for capturing syst

In showSecurityFields of WifiConfigController.java there is a possible credential leak due to a confused deputy. This co

In ReadLittleEndian of raw_bit_reader.cc, there is a possible out of bounds read due to a missing bounds check. This cou

In TimeCheck::TimeCheckThread::threadLoop of TimeCheck.cpp, there is a possible use-after-free due to a race condition.

In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could le

In InitDataParser::parsePssh of InitDataParser.cpp, there is a possible out of bounds read due to a missing bounds check

In RegisterNotificationResponse::GetEvent of register_notification_packet.cc, there is a possible abort due to improper

In ihevcd_iquant_itrans_recon_ctb of ihevcd_iquant_itrans_recon_ctb.c and related functions, there is a possible informa

In ihevcd_parse_slice_header of ihevcd_parse_slice_header.c, there is a possible out of bounds write due to an integer o

In ihevc_intra_pred_chroma_mode_3_to_9_av8 of ihevc_intra_pred_chroma_mode_3_to_9.s, there is a possible out of bounds r

In ih264d_decode_slice_thread of ih264d_thread_parse_decode.c, there is a possible out of bounds read due to improper in

In ih264d_update_default_index_list() of ih264d_dpb_mgr.c, there is a possible out of bounds read due to a logic error.

In ideint_weave_blk of ideint_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could

In ihevcd_decode() of ihevcd_decode.c, there is possible resource exhaustion due to an infinite loop. This could lead to

In onCreatePermissionRequest of SettingsSliceProvider.java, there is a possible permissions bypass due to a PendingInten

In engineSetMode of BaseBlockCipher.java, there is a possible incorrect cryptographic algorithm chosen due to an incompl

In hal_fd_init of hal_fd.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead t

In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible out of bounds read due to a missing bounds check. This

In ihevcd_ref_list() of ihevcd_ref_list.c, there is a possible infinite loop due to a missing bounds check. This could l

In handleMessage of BluetoothManagerService, there is an incomplete reset. This could lead to local escalation of privil

In exif_entry_get_value of exif-entry.c, there is a possible out of bounds read due to a missing bounds check. This coul

In exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an integer overflow. This

In GetOpusHeaderBuffers() of OpusHeader.cpp, there is a possible out of bounds read due to a missing bounds check. This

In doSendObjectInfo of MtpServer.cpp, there is a possible path traversal attack due to insufficient input validation. Th

In getAllConfigFlags of SettingsProvider.cpp, there is a possible illegal read due to a missing permission check. This c

In connect() of PanService.java, there is a possible permissions bypass. This could lead to local escalation of privileg

In avdt_msg_prs_rej of avdt_msg.cc, there is a possible out-of-bounds read due to improper input validation. This could

In XMF_ReadNode of eas_xmf.c, there is possible resource exhaustion due to improper input validation. This could lead to

In Parse_ptbl of eas_mdls.c, there is possible resource exhaustion due to a missing bounds check. This could lead to rem

In Parse_lins of eas_mdls.c, there is possible resource exhaustion due to improper input validation. This could lead to

In Parse_art of eas_mdls.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remo

In Parse_lart of eas_mdls.c, there is possible resource exhaustion due to a missing bounds check. This could lead to rem

In IMY_Event of eas_imelody.c, there is possible resource exhaustion due to a missing bounds check. This could lead to r

In RTTTL_Event of eas_rtttl.c, there is possible resource exhaustion due to a missing bounds check. This could lead to r

In impeg2_fmt_conv_yuv420p_to_yuv420sp_uv of impeg2_format_conv.c, there is a possible out of bounds write due to a miss

In load of ResourceTypes.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to loca

In multiple functions of URI.java, there is a possible escalation of privilege due to missing validation in the parcelin

In phNxpNciHal_NfcDep_cmd_ext of phNxpNciHal_NfcDepSWPrio.cc, there is a possible out of bounds write due to a missing b

In phNxpNciHal_NfcDep_cmd_ext of phNxpNciHal_NfcDepSWPrio.cc, there is a possible out of bounds read due to a missing bo

In parseSampleAuxiliaryInformationSizes of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper inp

In parseSampleAuxiliaryInformationOffsets of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper i

In parseChunk of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could

In setSyncSampleParams of SampleTable.cpp, there is possible resource exhaustion due to a missing bounds check. This cou

In rw_mfc_writeBlock of rw_mfc.cc, there is a possible out of bounds read due to an incorrect bounds check. This could l

In nfc_ncif_proc_t3t_polling_ntf of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. T

In nfa_hci_conn_cback of nfa_hci_main.cc, there is a possible out of bounds read due to a missing bounds check. This cou

In NxpNfc::ioctl of NxpNfc.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to