2023

In User Backup Manager, there is a possible way to leak a token to bypass user confirmation for backup due to log inform

In Whitechapel, there is a possible out of bounds read due to memory corruption. This could lead to local information di

In Package Manager, there is a possible possible permissions bypass due to an unsafe PendingIntent. This could lead to l

In Settings, there is a possible way for the user to unintentionally send extra data due to an unclear prompt. This coul

In Content Resolver, there is a possible method to access metadata about existing content providers on the device due to

In Media Resource Manager, there is a possible local arbitrary code execution due to use after free. This could lead to

In Bluetooth, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information

In Telecomm, there is a possible way to silence the ring for calls of secondary users due to a missing permission check.

In SELinux Policy, there is a possible restriction bypass due to a permissions bypass. This could lead to local informat

In Telephony, there is a possible way to retrieve the ICCID due to a logic error in the code. This could lead to local i

In Sysproxy, there is a possible out of bounds write due to an integer underflow. This could lead to local escalation of

In System UI, there is a possible factory reset protection bypass due to a logic error in the code. This could lead to l

In Telephony, there is a possible way for a guest user to change the preferred SIM due to a missing permission check. Th

In libdexfile, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation

NATS nats-server before 2.9.23 and 2.10.x before 2.10.2 has an authentication bypass. An implicit $G user in an authoriz

In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the X

In Secure Element, there is a possible out of bounds write due to an integer overflow. This could lead to local escalati

In the Security Element API, there is a possible out of bounds write due to an integer overflow. This could lead to loca

In Usage Access, there is a possible way to display a Settings usage access restriction toggle screen due to a permissio

In Audio, there is a possible out of bounds read due to missing bounds check. This could lead to local information discl

In Scudo, there is a possible way to exploit certain heap OOB read/write issues due to an insecure implementation/design

In Scudo, there is a possible way for an attacker to predict heap allocation patterns due to insecure implementation/des

In Contacts, there is a possible crash loop due to resource exhaustion. This could lead to local denial of service in th

In ContactsProvider, there is a possible crash loop due to resource exhaustion. This could lead to local persistent deni

In Usage, there is a possible permanent DoS due to resource exhaustion. This could lead to local denial of service with

In Bluetooth, there is a possibility of code-execution due to a use after free. This could lead to paired device escalat

In Bluetooth, there is a possible out of bounds write due to improper input validation. This could lead to local escalat

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information

In UWB Google, there is a possible way for a malicious app to masquerade as system app com.android.uwb.resources due to

In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl

In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal

In libaudioclient, there is a possible out of bounds write due to a use after free. This could lead to local escalation

In Package Manager Service, there is a possible way to determine whether an app is installed, without query permissions,

In NFA, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disc

In NFA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl

In multiple locations, there is a possible background activity launch due to a logic error in the code. This could lead

In Media Projection, there is a possible way to determine whether an app is installed, without query permissions, due to

In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to

In Window Manager, there is a possible way to determine whether an app is installed, without query permissions, due to s

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informatio

In the Device Idle Controller, there is a possible way to determine whether an app is installed, without query permissio

In Game Manager Service, there is a possible way to determine whether an app is installed, without query permissions, du

In Job Scheduler, there is a possible way to determine whether an app is installed, without query permissions, due to si

In ActivityStarter, there is a possible background activity launch due to an unsafe PendingIntent. This could lead to lo

In RemoteSpeechRecognitionService of RemoteSpeechRecognitionService.java, there is a possible way to launch an activity

In Permission Manager, there is a possible way to bypass required permissions due to a missing permission check. This co

In Telecomm, there is a possible way to get the call state due to a missing permission check. This could lead to local i

In Minikin, there is a possible way to trigger ANR by showing a malicious message due to resource exhaustion. This could

In Input Method, there is a possible way to determine whether an app is installed, without query permissions, due to sid