2023

In dhd_prot_ioctcmplt_process of dhd_msgbuf.c, there is a possible out of bounds write due to improper input validation.

In add_roam_cache_list of wl_roam.c, there is a possible out of bounds write due to a missing bounds check. This could l

In wl_update_hidden_ap_ie of wl_cfgscan.c, there is a possible out of bounds write due to a missing bounds check. This c

In fdt_next_tag of fdt.c, there is a possible out of bounds write due to an integer overflow. This could lead to local e

In DoSetPinControl of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could

In ParseWithAuthType of simdata.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could

In DoSetTempEcc of imsservice.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could l

In lwis_slc_buffer_free of lwis_device_slc.c, there is a possible memory corruption due to type confusion. This could le

In dit_hal_ioctl of dit.c, there is a possible use after free due to a race condition. This could lead to local escalati

In setToExternal of ril_external_client.cpp, there is a possible out of bounds write due to a missing bounds check. This

In dwc3_exynos_clk_get of dwc3-exynos.c, there is a possible out of bounds write due to an incorrect bounds check. This

In load_png_image of ExynosHWCHelper.cpp, there is a possible out of bounds write due to improper input validation. This

In append_camera_metadata of camera_metadata.c, there is a possible out of bounds read due to a missing bounds check. Th

In handleEvent of nan.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to loca

In ConvertToHalMetadata of aidl_utils.cc, there is a possible out of bounds read due to a missing bounds check. This cou

In ConvertToHalMetadata of aidl_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This

When cpif handles probe failures, there is a possible out of bounds read due to a use after free. This could lead to loc

In init of VendorGraphicBufferMeta, there is a possible out of bounds read due to a missing bounds check. This could lea

In (TBD) of (TBD), there is a possible way to corrupt memory due to a use after free. This could lead to local escalatio

In (TBD) of (TBD), there is a possible way to corrupt memory due to a use after free. This could lead to local escalatio

In dumpstateBoard of Dumpstate.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could

In cs40l2x_cp_trigger_queue_show of cs40l2x.c, there is a possible out of bounds write due to a use after free. This cou

In BitmapExport.java, there is a possible failure to truncate images due to a logic error in the code.Product: AndroidVe

In addNetwork of WifiManager.java, there is a possible way to trigger a persistent DoS due to resource exhaustion. This

In _ufdt_output_node_to_fdt of ufdt_convert.c, there is a possible out of bounds read due to a heap buffer overflow. Thi

In setPowerMode of HWC2.cpp, there is a possible out of bounds read due to a race condition. This could lead to local in

In register of UidObserverController.java, there is a missing permission check. This could lead to local information dis

In updateInputChannel of WindowManagerService.java, there is a possible way to set a touchable region beyond its own Sur

In ufdt_local_fixup_prop of ufdt_overlay.c, there is a possible out of bounds read due to an incorrect bounds check. Thi

In registerSignalHandlers of main.c, there is a possible local arbitrary code execution due to a use after free. This co

In ih264e_init_proc_ctxt of ih264e_process.c, there is a possible out of bounds read due to a heap buffer overflow. This

In UnwindingWorker of unwinding.cc, there is a possible out of bounds write due to a use after free. This could lead to

In AccountTypePreference of AccountTypePreference.java, there is a possible way to mislead the user about accounts insta

In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could

In forceStaDisconnection of hostapd.cpp, there is a possible out of bounds read due to a missing bounds check. This coul

In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could

In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could

In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could

In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could

In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could

In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could

In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could

In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. Thi

In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. Thi

In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. Thi

In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. Thi

In _ufdt_output_property_to_fdt of ufdt_convert.c, there is a possible out of bounds write due to an incorrect bounds ch

In on_iso_link_quality_read of btm_iso_impl.h, there is a possible out of bounds read due to a missing bounds check. Thi

In btm_ble_process_periodic_adv_sync_lost_evt of ble_scanner_hci_interface.cc , there is a possible out of bounds read d

In btm_ble_rand_enc_complete of btm_ble.cc, there is a possible out of bounds read due to a missing bounds check. This c