2021

In TBD of fvp.c, there is a possible way to glitch CPU behavior due to a missing permission check. This could lead to lo

In periodic_io_work_func of lwis_periodic_io.c, there is a possible out of bounds write due to a use after free. This co

In CreateDeviceInfo of trusty_remote_provisioning_context.cpp, there is a possible out of bounds read due to a missing b

In do_ipt_get_ctl and do_ipt_set_ctl of ip_tables.c, there is a possible way to leak kernel information due to uninitial

In valid_ipc_dram_addr of cm_access_control.c, there is a possible out of bounds read due to an integer overflow. This c

In lwis_dpm_update_clock of lwis_device_dpm.c, there is a possible out of bounds read due to an incorrect bounds check.

In TBD of TBD, there is a possible downgrade attack due to under utilized anti-rollback protections. This could lead to

In dsi_panel_debugfs_read_cmdset of dsi_panel.c, there is a possible disclosure of freed kernel heap memory due to a use

In (TBD) of (TBD), there is a possible out of bounds read due to memory corruption. This could lead to local information

In UserDetailsActivity of AndroidManifest.xml, there is a possible DoS due to a tapjacking/overlay attack. This could le

In setNotificationsShownFromListener of NotificationManagerService.java, there is a possible way to determine whether an

In startRanging of RttServiceImpl.java, there is a possible way to determine whether an app is installed, without query

In hasNamedWallpaper of WallpaperManagerService.java, there is a possible way to determine whether an app is installed,

In onEventReceived of EventResultPersister.java, there is a possible intent redirection due to a confused deputy. This c

In onCreate of RequestIgnoreBatteryOptimizations.java, there is a possible way to determine whether an app is installed,

In getNetworkTypeForSubscriber of PhoneInterfaceManager.java, there is a possible way to determine whether an app is ins

In checkExistsAndEnforceCannotModifyImmutablyRestrictedPermission of PermissionManagerService.java, there is a possible

In onResume of NotificationAccessDetails.java, there is a possible way to determine whether an app is installed, without

In setPackageStoppedState of PackageManagerService.java, there is a missing permission check. This could lead to local i

In getSigningKeySet of PackageManagerService.java, there is a missing permission check. This could lead to local informa

In setApplicationCategoryHint of PackageManagerService.java, there is a possible way to determine whether an app is inst

In addSubInfo of SubscriptionController.java, there is a possible way to force the user to make a factory reset due to a

In btu_hcif_process_event of btu_hcif.cc, there is a possible out of bounds read due to an incorrect bounds check. This

In several functions of DatabaseManager.java, there is a possible leak of Bluetooth MAC addresses due to log information

In getDeviceIdWithFeature of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installe

In PVInitVideoEncoder of mp4enc_api.cpp, there is a possible out of bounds read due to a heap buffer overflow. This coul

In 'ih264e_find_bskip_params()' of ih264e_me.c, there is a possible out of bounds read due to a heap buffer overflow. Th

In handleUpdateNetworkState of GnssNetworkConnectivityHandler.java , there is a possible APN disclosure due to log infor

In nfaHciCallback of HciEventManager.cpp, there is a possible out of bounds read due to a missing bounds check. This cou

In getOffsetBeforeAfter of TextLine.java, there is a possible denial of service due to resource exhaustion. This could l

In hasGrantedPolicy of DevicePolicyManagerService.java, there is a possible information disclosure about the device owne

In isRequestPinItemSupported of ShortcutService.java, there is a possible cross-user leak of packages in which the defau

In phNxpNHal_DtaUpdate of phNxpNciHal_dta.cc, there is a possible out of bounds write due to an incorrect bounds check.

In toBARK of floor0.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote i

In isFileUri of UriUtil.java, there is a possible way to bypass ignoring file://URI attachment due to improper handling

In MPEG4Source::read of MPEG4Extractor.cpp, there is a possible out of bounds write due to a missing bounds check. This

In getTitle of AccessPoint.java, there is a possible unhandled exception due to a missing null check. This could lead to

In code generated by BuildParcelFields of generate_cpp.cpp, there is a possible way for a crafted parcelable to reveal u

In C2SoftMP3::process() of C2SoftMp3Dec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This

In quota_proc_write of xt_quota2.c, there is a possible way to read kernel memory due to uninitialized data. This could

In update of km_compat.cpp, there is a possible loss of potentially sensitive data due to a logic error in the code. Thi

In doCropPhoto of PhotoSelectionHandler.java, there is a possible permission bypass due to a confused deputy. This could

In getAlias of BluetoothDevice.java, there is a possible way to create misleading permission dialogs due to missing data

In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to loca

In getService of IServiceManager.cpp, there is a possible unhandled exception due to an integer overflow. This could lea

In SRAMROM, there is a possible permission bypass due to an insecure permission setting. This could lead to local escala

In createNoCredentialsPermissionNotification and related functions of AccountManagerService.java, there is a possible wa

In enqueueNotification of NetworkPolicyManagerService.java, there is a possible way to retrieve a trackable identifier d

In WT_InterpolateNoLoop of eas_wtengine.c, there is a possible out of bounds read due to an incorrect bounds check. This

Lychee-v3 3.2.16 is affected by a Cross Site Scripting (XSS) vulnerability in php/Access/Guest.php. The function exit wi