2021

In btif_in_hf_client_generic_evt of btif_hf_client.cc, there is a possible Bluetooth service crash due to a missing null

In snoozeNotificationInt of NotificationManagerService.java, there is a possible way to disable notification for an arbi

In snoozeNotification of NotificationListenerService.java, there is a possible way to disable notification for an arbitr

In snoozeNotification of NotificationListenerService.java, there is a possible permission confusion due to a misleading

In adjustStreamVolume of AudioService.java, there is a possible way to determine whether an app is installed, without qu

In AdapterService and GattService definition of AndroidManifest.xml, there is a possible way to disable bluetooth connec

In onCreate of UsbPermissionActivity.java, there is a possible way to grant an app access to USB without informed user c

In getMeidForSlot of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, witho

In getNetworkTypeForSubscriber of PhoneInterfaceManager.java, there is a possible way to determine whether an app is ins

In checkExistsAndEnforceCannotModifyImmutablyRestrictedPermission of PermissionManagerService.java, there is a possible

In onResume of NotificationAccessDetails.java, there is a possible way to determine whether an app is installed, without

In setPackageStoppedState of PackageManagerService.java, there is a missing permission check. This could lead to local i

In getSigningKeySet of PackageManagerService.java, there is a missing permission check. This could lead to local informa

In setApplicationCategoryHint of PackageManagerService.java, there is a possible way to determine whether an app is inst

In addSubInfo of SubscriptionController.java, there is a possible way to force the user to make a factory reset due to a

In btu_hcif_process_event of btu_hcif.cc, there is a possible out of bounds read due to an incorrect bounds check. This

In several functions of DatabaseManager.java, there is a possible leak of Bluetooth MAC addresses due to log information

In getDeviceIdWithFeature of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installe

In getConfiguredNetworks of WifiServiceImpl.java, there is a possible way to determine whether an app is installed, with

In adjustStreamVolume of AudioService.java, there is a possible way for unprivileged app to change audio stream volume d

In WT_Interpolate of eas_wtengine.c, there is a possible out of bounds read due to a missing bounds check. This could le

In PVInitVideoEncoder of mp4enc_api.cpp, there is a possible out of bounds read due to a heap buffer overflow. This coul

In the broadcast definition in AndroidManifest.xml, there is a possible way to set the A2DP bluetooth device connection

In 'ih264e_find_bskip_params()' of ih264e_me.c, there is a possible out of bounds read due to a heap buffer overflow. Th

In handleUpdateNetworkState of GnssNetworkConnectivityHandler.java , there is a possible APN disclosure due to log infor

In nfaHciCallback of HciEventManager.cpp, there is a possible out of bounds read due to a missing bounds check. This cou

In registerSuggestionConnectionStatusListener of WifiServiceImpl.java, there is a possible way to determine whether an a

In requestRouteToHostAddress of ConnectivityService.java, there is a possible way to determine whether an app is install

In getOffsetBeforeAfter of TextLine.java, there is a possible denial of service due to resource exhaustion. This could l

In onCreate of PaymentDefaultDialog.java, there is a possible way to change a default payment app without user consent d

In OnMetadataChangedListener of AdvancedBluetoothDetailsHeaderController.java, there is a possible leak of Bluetooth MAC

In getDeviceId of PhoneSubInfoController.java, there is a possible way to determine whether an app is installed, without

In hasManageOngoingCallsPermission of TelecomServiceImpl.java, there is a possible way to determine whether an app is in

In getLaunchedFromUid and getLaunchedFromPackage of ActivityClientController.java, there is a possible way to determine

In getNeighboringCellInfo of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installe

In hasGrantedPolicy of DevicePolicyManagerService.java, there is a possible information disclosure about the device owne

In onReceive of AlertReceiver.java, there is a possible way to dismiss system dialog due to a missing permission check.

In onNullBinding of ManagedServices.java, there is a possible permission bypass due to an incorrectly unbound service. T

In createAdminSupportIntent of DevicePolicyManagerService.java, there is a possible disclosure of information about inst

In getOrganizationNameForUser of DevicePolicyManagerService.java, there is a possible organization name disclosure due t

In enqueueNotificationInternal of NotificationManagerService.java, there is a possible way to run a foreground service w

In isRequestPinItemSupported of ShortcutService.java, there is a possible cross-user leak of packages in which the defau

In getSerialForPackage of DeviceIdentifiersPolicyService.java, there is a possible way to determine whether an app is in

In phNxpNHal_DtaUpdate of phNxpNciHal_dta.cc, there is a possible out of bounds write due to an incorrect bounds check.

In toBARK of floor0.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote i

In isFileUri of UriUtil.java, there is a possible way to bypass ignoring file://URI attachment due to improper handling

In MPEG4Source::read of MPEG4Extractor.cpp, there is a possible out of bounds write due to a missing bounds check. This

In createFromParcel of GpsNavigationMessage.java, there is a possible Parcel serialization/deserialization mismatch. Thi

In getTitle of AccessPoint.java, there is a possible unhandled exception due to a missing null check. This could lead to

In osi_malloc and osi_calloc of allocator.cc, there is a possible out of bounds write due to an integer overflow. This c