2021

In convertToHidl of convert.cpp, there is a possible out of bounds read due to uninitialized data from ReturnFrameworkMe

In the NXP NFC firmware, there is a possible insecure firmware update due to a logic error. This could lead to local esc

In iaxxx_core_sensor_change_state of iaxxx-module.c, there is a possible out of bounds write due to a missing bounds che

In the FingerTipS touch screen driver, there is a possible out of bounds read due to an integer overflow. This could lea

In fts_driver_test_write of fts_proc.c, there is a possible out of bounds read due to a missing bounds check. This could

In the FingerTipS touch screen driver, there is a possible out of bounds read due to an integer overflow. This could lea

In the FingerTipS touch screen driver, there is a possible out of bounds write due to a heap buffer overflow. This could

In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to

In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to

In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to

In the Titan-M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead

In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead

In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead

In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead

In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead

In setNightModeActivated of UiModeManagerService.java, there is a missing permission check. This could lead to local esc

In onReceive of ImsPhoneCallTracker.java, there is a possible misattribution of data usage due to an incorrect broadcast

In FindQuotaDeviceForUuid of QuotaUtils.cpp, there is a possible use-after-free due to a race condition. This could lead

In onCreate of UsbConfirmActivity, there is a possible tapjacking vector due to an insecure default value. This could le

In createConnectToAvailableNetworkNotification of ConnectToNetworkNotificationBuilder.java, there is a possible connecti

In done of CaptivePortalLoginActivity.java, there is a confused deputy. This could lead to local escalation of privilege

In checkSlicePermission of SliceManagerService.java, there is a possible resource exposure due to an incorrect permissio

In updateNotifications of DeviceStorageMonitorService.java, there is a possible permission bypass due to an unsafe Pendi

In onReceive of DcTracker.java, there is a possible way to trigger a provisioning URL and modify other telephony setting

In getUpTo17bits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could

The fbgames protocol handler registered as part of Facebook Gameroom does not properly quote arguments passed to the exe

Due to incorrect string size calculations inside the preg_quote function, a large input string passed to the function ca

A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a s

In qtaguid_untag of xt_qtaguid.c, there is a possible memory corruption due to a use after free. This could lead to loca

In bindServiceLocked of ActiveServices.java, there is a possible foreground service launch due to a confused deputy. Thi

In sdp_copy_raw_data of sdp_discovery.cc, there is a possible system compromise due to a double free. This could lead to

In Builtins::Generate_ArgumentsAdaptorTrampoline of builtins-arm.cc and related files, there is a possible out of bounds

In StopServicesAndLogViolations of reboot.cpp, there is possible memory corruption due to a use after free. This could l

In android_os_Parcel_readString8 of android_os_Parcel.cpp, there is a possible out of bounds read due to a missing bound

In Scanner::LiteralBuffer::NewCapacity of scanner.cc, there is a possible out of bounds write due to an integer overflow

In main of main.cpp, there is a possible memory corruption due to a double free. This could lead to local escalation of

In onCreate() of ChooseTypeAndAccountActivity.java, there is a possible way to learn the existence of an account, withou

In various methods of WifiNetworkSuggestionsManager.java, there is a possible modification of suggested networks due to

In getNbits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead

In DeltaPerformer::Write of delta_performer.cc, there is a possible use of untrusted input due to improper input validat

In checkUriPermission and related functions of MediaProvider.java, there is a possible way to access external files due

In onPackageModified of VoiceInteractionManagerService.java, there is a possible change of default applications due to a

In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible out of bounds read due to a missing

In getMediaOutputSliceAction of RemoteMediaSlice.java, there is a possible permission bypass due to an unsafe PendingInt

In nci_proc_rf_management_ntf of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This

In Write of NxpMfcReader.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to l

In CrossProfileAppsServiceImpl.java, there is the possibility of an application's INTERACT_ACROSS_PROFILES grant state n

In oggpack_look of bitwise.c, there is a possible out of bounds read due to a missing bounds check. This could lead to r

In the crypt function, we attempt to null terminate a buffer using the size of the input salt without validating that th

Incorrect bounds calculations in substr_compare could lead to an out-of-bounds read when the second string argument pass