2022

Denial of service in Modem due to reachable assertion while processing the common config procedure in Snapdragon Auto, S

Denial of service in Modem due to reachable assertion while processing SIB1 with invalid SCS and bandwidth settings in S

Denial of service in Modem due to reachable assertion in Snapdragon Mobile

Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Comp

Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdrago

Possible memory corruption in kernel while performing memory access due to hypervisor not correctly invalidated the proc

Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snap

Denial of service due to reachable assertion in modem while processing filter rule from application client in Snapdragon

Denial of service in MODEM due to reachable assertion while processing configuration from network in Snapdragon Mobile

Denial of service in MODEM due to reachable assertion while processing SIB1 with invalid Bandwidth in Snapdragon Mobile

In deletePackageVersionedInternal of DeletePackageHelper.java, there is a possible way to bypass carrier restrictions du

In GetResolvedMethod of entrypoint_utils-inl.h, there is a possible use after free due to a stale cache. This could lead

In onCreate of EnableAccountPreferenceActivity.java, there is a possible way to mislead the user into enabling a malicio

In loadFromXml of ShortcutPackage.java, there is a possible crash on boot due to an uncaught exception. This could lead

In fdt_path_offset_namelen of fdt_ro.c, there is a possible out of bounds read due to an incorrect bounds check. This co

In updatePublicMode of NotificationLockscreenUserManagerImpl.java, there is a possible way to reveal sensitive notificat

In setDataSource of initMediaExtractor.cpp, there is a possibility of arbitrary code execution due to a use after free.

In getEnabledAccessibilityServiceList of AccessibilityManager.java, there is a possible way to hide an accessibility ser

In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to r

In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to r

In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to r

In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to r

In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to r

In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to r

In several functions that parse avrc response in avrc_pars_ct.cc and related files, there are possible out of bounds rea

In createNotificationChannel of NotificationManager.java, there is a possible way to make the device unusable and requir

In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to r

In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to r

In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to r

In shouldHideNotification of KeyguardNotificationVisibilityProvider.kt, there is a possible way to show hidden notificat

In setEnabledSetting of PackageManager.java, there is a possible way to get the device into an infinite reboot loop due

In test of ResetTargetTaskHelper.java, there is a possible hijacking of any app which sets allowTaskReparenting="true" d

In readLazyValue of Parcel.java, there is a possible loading of arbitrary code into the System Settings app due to a con

In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This c

In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This c

In SendIncDecRestoreCmdPart2 of NxpMfcReader.cc, there is a possible out of bounds read due to a missing bounds check. T

In bindRemoteViewsService of AppWidgetServiceImpl.java, there is a possible way to bypass background activity launch due

In avct_lcb_msg_asmbl of avct_lcb_act.cc, there is a possible out of bounds write due to a missing bounds check. This co

In BNEP_ConnectResp of bnep_api.cc, there is a possible out of bounds read due to an incorrect bounds check. This could

In applyKeyguardFlags of NotificationShadeWindowControllerImpl.java, there is a possible way to observe the user's passw

In writeApplicationRestrictionsLAr of UserManagerService.java, there is a possible overwrite of system files due to a pa

In onCreate of ReviewPermissionsActivity.java, there is a possible way to grant permissions for a separate app with API

In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to a missing bounds check. This could lead

In sOpAllowSystemRestrictionBypass of AppOpsManager.java, there is a possible leak of location information due to a miss

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an atta

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an atta

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an atta

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an atta

In TBD of TBD, there is a possible way to archive arbitrary code execution in kernel due to a race condition. This could

In findAllDeAccounts of AccountsDb.java, there is a possible denial of service due to resource exhaustion. This could le