2021

In iaxxx_calc_i2s_div of iaxxx-codec.c, there is a possible hardware port write with user controlled data due to a missi

In onBindViewHolder of AppSwitchPreference.java, there is a possible bypass of device admin setttings due to unclear UI.

In onLoadFailed of AnnotateActivity.java, there is a possible way to gain WRITE_EXTERNAL_STORAGE permissions without use

In rw_i93_send_to_lower of rw_i93.cc, there is a possible out of bounds write due to a missing bounds check. This could

In onReceive of NetInitiatedActivity.java, there is a possible way to supply an attacker-controlled value to a GPS HAL h

In archiveStoredConversation of MmsService.java, there is a possible way to archive message conversation without user co

In onCreate of EmergencyCallbackModeExitDialog.java, there is a possible exit of emergency callback mode due to a tapjac

In onCreate of WiFiInstaller.java, there is a possible way to install a malicious Hotspot 2.0 configuration due to a tap

In dropFile of WiFiInstaller, there is a way to delete files accessible to CertInstaller due to a confused deputy. This

A flaw was discovered in gfs2 file system’s handling of acls (access control lists). An unprivileged local attacker coul

In ActivityTaskManagerService.startActivity() and AppTaskImpl.startActivity() of ActivityTaskManagerService.java and App

In sendBugreportNotification of BugreportProgressService.java, there is a possible permission bypass due to an unsafe Pe

In onReceive of DevicePolicyManagerService.java, there is a possible enabling of disabled profiles due to a missing perm

In isRestricted of RemoteViews.java, there is a possible way to inject font files due to a permissions bypass. This coul

In wrapUserThread of AudioStream.cpp, there is a possible use after free due to a race condition. This could lead to loc

In setRange of ABuffer.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remot

In RenderStruct of protostream_objectsource.cc, there is a possible crash due to a missing null check. This could lead t

In permission declarations of DeviceAdminReceiver.java, there is a possible lack of broadcast protection due to an insec

Manuskript through 0.12.0 allows remote attackers to execute arbitrary code via a crafted settings.pickle file in a proj

Joomla! Core is prone to a session fixation vulnerability. An attacker may leverage this issue to hijack an arbitrary se

Joomla! Core is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive i

A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Mpmath v1.0.0 through v1.2.1 when the mpm

A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Vfsjfilechooser2 version 0.2.9 and below

The Autoptimize WordPress plugin before 2.7.8 attempts to remove potential malicious files from the extracted archive up

An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Re

mongo-express is a web-based MongoDB admin interface, written with Node.js and express. 1: As mentioned in this issue: h

In memory management driver, there is a possible memory corruption due to a race condition. This could lead to local esc

In memory management driver, there is a possible memory corruption due to a race condition. This could lead to local esc

In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local esc

In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to local

In memory management driver, there is a possible memory corruption due to improper locking. This could lead to local esc

In memory management driver, there is a possible memory corruption due to a double free. This could lead to local escala

In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local esc

In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to local

In memory management driver, there is a possible out of bounds write due to a use after free. This could lead to local e

In onCreate of WifiScanModeActivity.java, there is a possible way to enable Wi-Fi scanning without user consent due to a

In ConnectionHandler::SdpCb of connection_handler.cc, there is a possible out of bounds read due to a use after free. Th

In several functions of MemoryFileSystem.cpp and related files, there is a possible use after free due to a race conditi

In updateCapabilities of ConnectivityService.java, there is a possible incorrect network state determination due to a lo

In deleteNotificationChannel and related functions of NotificationManagerService.java, there is a possible permission by

In __hidinput_change_resolution_multipliers of hid-input.c, there is a possible out of bounds write due to a heap buffer

In Dex2oat of dex2oat.cc, there is a possible way to inject bytecode into an app due to improper input validation. This

In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds write due to an integer overflow. This could lead

In various functions of CryptoPlugin.cpp, there is a possible use after free due to a race condition. This could lead to

In various functions of DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to lo

In handle_rc_metamsg_cmd of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This coul

In ActivityPicker.java, there is a possible bypass of user interaction in intent resolution due to a tapjacking/overlay

In the Settings app, there is a possible way to disable an always-on VPN due to a missing permission check. This could l

In updateDrawable of StatusBarIconView.java, there is a possible permission bypass due to an uncaught exception. This co

A vulnerability was discovered in IS-SVG version 2.1.0 to 4.2.2 and below where a Regular Expression Denial of Service (