2023

In sms_GetTpPiIe of sms_PduCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lea

In EUTRAN_LCS_DecodeFacilityInformationElement of LPP_LcsManagement.c, there is a possible out of bounds read due to a m

In lcsm_SendRrAcquiAssist of lcsm_bcm_assist.c, there is a possible out of bounds write due to a missing bounds check. T

In ProfSixDecomTcpSACKoption of RohcPacketCommon, there is a possible out of bounds write due to a missing bounds check.

In lwis_slc_buffer_free of lwis_device_slc.c, there is a possible memory corruption due to type confusion. This could le

In dit_hal_ioctl of dit.c, there is a possible use after free due to a race condition. This could lead to local escalati

In EUTRAN_LCS_ConvertLCS_MOLRReq of LPP_CommonUtil.c, there is a possible out of bounds write due to a logic error in th

In sms_ExtractCbLanguage of sms_CellBroadcast.c, there is a possible out of bounds read due to a missing bounds check. T

In setToExternal of ril_external_client.cpp, there is a possible out of bounds write due to a missing bounds check. This

In dwc3_exynos_clk_get of dwc3-exynos.c, there is a possible out of bounds write due to an incorrect bounds check. This

In load_png_image of ExynosHWCHelper.cpp, there is a possible out of bounds write due to improper input validation. This

In append_camera_metadata of camera_metadata.c, there is a possible out of bounds read due to a missing bounds check. Th

In handleEvent of nan.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to loca

In ConvertToHalMetadata of aidl_utils.cc, there is a possible out of bounds read due to a missing bounds check. This cou

In ConvertToHalMetadata of aidl_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This

When cpif handles probe failures, there is a possible out of bounds read due to a use after free. This could lead to loc

In init of VendorGraphicBufferMeta, there is a possible out of bounds read due to a missing bounds check. This could lea

In (TBD) of (TBD), there is a possible way to corrupt memory due to a use after free. This could lead to local escalatio

In (TBD) of (TBD), there is a possible way to corrupt memory due to a use after free. This could lead to local escalatio

In append_to_params of param_util.c, there is a possible out of bounds write due to an incorrect bounds check. This coul

In buildCommand of bluetooth_ccc.cc, there is a possible out of bounds write due to a logic error in the code. This coul

In dumpstateBoard of Dumpstate.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could

In cs40l2x_cp_trigger_queue_show of cs40l2x.c, there is a possible out of bounds write due to a use after free. This cou

In BitmapExport.java, there is a possible failure to truncate images due to a logic error in the code.Product: AndroidVe

In multiple functions of BackupHelper.java, there is a possible way for an app to get permissions previously granted to

In multiple functions of SensorService.cpp, there is a possible access of accurate sensor data due to a permissions bypa

In addNetwork of WifiManager.java, there is a possible way to trigger a persistent DoS due to resource exhaustion. This

In _ufdt_output_node_to_fdt of ufdt_convert.c, there is a possible out of bounds read due to a heap buffer overflow. Thi

In setPowerMode of HWC2.cpp, there is a possible out of bounds read due to a race condition. This could lead to local in

In Confirmation of keystore_cli_v2.cpp, there is a possible way to corrupt memory due to a double free. This could lead

In register of UidObserverController.java, there is a missing permission check. This could lead to local information dis

In parse_printerAttributes of ipphelper.c, there is a possible out of bounds read due to a string without a null-termina

In multiple functions of PasspointXmlUtils.java, there is a possible authentication misconfiguration due to a logic erro

In updateInputChannel of WindowManagerService.java, there is a possible way to set a touchable region beyond its own Sur

In ufdt_local_fixup_prop of ufdt_overlay.c, there is a possible out of bounds read due to an incorrect bounds check. Thi

In maybeFinish of FallbackHome.java, there is a possible delay of lockdown screen due to logic error. This could lead to

In BufferBlock of Suballocation.cpp, there is a possible out of bounds write due to memory corruption. This could lead t

In isTargetSdkLessThanQOrPrivileged of WifiServiceImpl.java, there is a possible way for the guest user to change admin

In registerSignalHandlers of main.c, there is a possible local arbitrary code execution due to a use after free. This co

In ih264e_init_proc_ctxt of ih264e_process.c, there is a possible out of bounds read due to a heap buffer overflow. This

In UnwindingWorker of unwinding.cc, there is a possible out of bounds write due to a use after free. This could lead to

In InstallStart of InstallStart.java, there is a possible way to change the installer package name due to an improper in

In AccountTypePreference of AccountTypePreference.java, there is a possible way to mislead the user about accounts insta

In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a mis

In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could

In forceStaDisconnection of hostapd.cpp, there is a possible out of bounds read due to a missing bounds check. This coul

In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could

In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could

In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could

In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could