| CVE-2018-9370 |
In download.c there is a special mode allowing user to download data into memory and causing possible memory corruptions…
|
7.8
High
|
Nov 19, 2024 |
| CVE-2018-9369 |
In bootloader there is fastboot command allowing user specified kernel command line arguments
|
7.8
High
|
Nov 19, 2024 |
| CVE-2018-9368 |
In mtkscoaudio debugfs there is a possible arbitrary kernel memory write due to missing bounds check and weakened…
|
6.7
Medium
|
Nov 19, 2024 |
| CVE-2018-9367 |
In FT_ACDK_CCT_V2_OP_ISP_SET_TUNING_PARAS of Meta_CCAP_Para.cpp, there is a possible out of bounds write due to improper…
|
7.8
High
|
Nov 19, 2024 |
| CVE-2018-9366 |
In IMSA_Recv_Thread and VT_IMCB_Thread of ImsaClient.cpp and VideoTelephony.c, there is a possible out of bounds write…
|
7.8
High
|
Nov 19, 2024 |
| CVE-2018-9364 |
In the LG LAF component, there is a special command that allowed modification of certain partitions
|
7.5
High
|
Nov 19, 2024 |
| CVE-2018-9348 |
In SMF_ParseMetaEvent of eas_smf.c, there is a possible integer overflow
|
7.5
High
|
Nov 19, 2024 |
| CVE-2018-9346 |
In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to…
|
5.5
Medium
|
Nov 19, 2024 |
| CVE-2018-9345 |
In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to…
|
5.5
Medium
|
Nov 19, 2024 |
| CVE-2018-9344 |
In several functions of DescramblerImpl.cpp, there is a possible use after free due to improper locking
|
7.8
High
|
Nov 19, 2024 |
| CVE-2018-9341 |
In impeg2d_mc_fullx_fully of impeg2d_mc.c there is a possible out of bound write due to missing bounds check
|
9.8
Critical
|
Nov 19, 2024 |
| CVE-2018-9340 |
In ResStringPool::setTo of ResourceTypes.cpp, it's possible for an attacker to control the value of mStringPoolSize to…
|
7.5
High
|
Nov 19, 2024 |
| CVE-2018-9339 |
In writeTypedArrayList and readTypedArrayList of Parcel.java, there is a possible escalation of privilege due to type…
|
7.8
High
|
Nov 19, 2024 |
| CVE-2018-9338 |
In ResStringPool::setTo of ResourceTypes.cpp, there is a possible out of bounds write due to a missing bounds check
|
7.8
High
|
Nov 19, 2024 |
| CVE-2023-21270 |
In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way for an app to keep permissions…
|
7.8
High
|
Nov 19, 2024 |
| CVE-2017-13315 |
In writeToParcel and createFromParcel of DcParamObject.java, there is a permission bypass due to a write size mismatch
|
7.8
High
|
Nov 19, 2024 |
| CVE-2017-13313 |
In ElementaryStreamQueue::dequeueAccessUnitMPEG4Video of ESQueue.cpp, there is a possible infinite loop leading to…
|
7.5
High
|
Nov 15, 2024 |
| CVE-2017-13314 |
In setAllowOnlyVpnForUids of NetworkManagementService.java, there is a possible security settings bypass due to a…
|
7.8
High
|
Nov 15, 2024 |
| CVE-2017-13312 |
In createFromParcel of MediaCas.java, there is a possible parcel read/write mismatch due to improper input validation
|
7.8
High
|
Nov 15, 2024 |
| CVE-2017-13311 |
In the read() function of ProcessStats.java, there is a possible read/write serialization issue leading to a permissions…
|
7.8
High
|
Nov 15, 2024 |
| CVE-2017-13310 |
In createFromParcel of ViewPager.java, there is a possible read/write serialization issue leading to a permissions…
|
7.8
High
|
Nov 15, 2024 |
| CVE-2017-13309 |
In readEncryptedData of ConscryptEngine.java, there is a possible plaintext leak due to improperly used crypto
|
6.2
Medium
|
Nov 15, 2024 |
| CVE-2017-13227 |
In the autofill service, the package name that is provided by the app process is trusted inappropriately
|
5.5
Medium
|
Nov 14, 2024 |
| CVE-2024-43093 |
Exploited
Android Framework Privilege Escalation Vulnerability
|
7.3
High
|
Nov 13, 2024 |
| CVE-2024-43091 |
In filterMask of SkEmbossMaskFilter.cpp, there is a possible out of bounds write due to an integer overflow
|
9.8
Critical
|
Nov 13, 2024 |