| CVE-2023-21295 |
In SliceManagerService, there is a possible way to check if a content provider is installed due to a missing null check
|
Not rated
|
Oct 30, 2023 |
| CVE-2023-21294 |
In Slice, there is a possible disclosure of installed packages due to a missing permission check
|
Not rated
|
Oct 30, 2023 |
| CVE-2023-21293 |
In PackageManagerNative, there is a possible way to determine whether an app is installed, without query permissions,…
|
Not rated
|
Oct 30, 2023 |
| CVE-2022-20531 |
In Telecom, there is a possible way to determine whether an app is installed, without query permissions, due to side…
|
Not rated
|
Oct 30, 2023 |
| CVE-2022-20264 |
In Usage Stats Service, there is a possible way to determine whether an app is installed, without query permissions…
|
5.5
Medium
|
Oct 30, 2023 |
| CVE-2021-39810 |
In verifyDefaults of CardEmulationManager.java, there is a possible way to set a third party app as the default…
|
7.8
High
|
Oct 30, 2023 |
| CVE-2023-40140 |
In android_view_InputDevice_create of android_view_InputDevice.cpp, there is a possible way to execute arbitrary code…
|
7.8
High
|
Oct 27, 2023 |
| CVE-2023-40139 |
In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy
|
Not rated
|
Oct 27, 2023 |
| CVE-2023-40138 |
In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy
|
Not rated
|
Oct 27, 2023 |
| CVE-2023-40137 |
In multiple functions of DialogFillUi.java, there is a possible way to view another user's images due to a confused…
|
Not rated
|
Oct 27, 2023 |
| CVE-2023-40136 |
In setHeader of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy
|
Not rated
|
Oct 27, 2023 |
| CVE-2023-40135 |
In applyCustomDescription of SaveUi.java, there is a possible way to view another user's images due to a confused deputy
|
Not rated
|
Oct 27, 2023 |
| CVE-2023-40134 |
In isFullScreen of FillUi.java, there is a possible way to view another user's images due to a confused deputy
|
Not rated
|
Oct 27, 2023 |
| CVE-2023-40133 |
In multiple locations of DialogFillUi.java, there is a possible way to view another user's images due to a confused…
|
Not rated
|
Oct 27, 2023 |
| CVE-2023-40131 |
In GpuService of GpuService.cpp, there is a possible use after free due to a race condition
|
7.0
High
|
Oct 27, 2023 |
| CVE-2023-40130 |
In notifyTimeout of CallRedirectionProcessor, there is a possible permission bypass due to a logic error in the code
|
7.8
High
|
Oct 27, 2023 |
| CVE-2023-40129 |
In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a heap buffer overflow
|
Not rated
|
Oct 27, 2023 |
| CVE-2023-40128 |
In several functions of xmlregexp.c, there is a possible out of bounds write due to a heap buffer overflow
|
Not rated
|
Oct 27, 2023 |
| CVE-2023-40127 |
In multiple locations, there is a possible way to access screenshots due to a confused deputy
|
Not rated
|
Oct 27, 2023 |
| CVE-2023-40125 |
In onCreate of ApnEditor.java, there is a possible way for a Guest user to change the APN due to a permission bypass
|
7.8
High
|
Oct 27, 2023 |
| CVE-2023-40117 |
In resetSettingsLocked of SettingsProvider.java, there is a possible lockscreen bypass due to a permissions bypass
|
7.8
High
|
Oct 27, 2023 |
| CVE-2023-40116 |
In onTaskAppeared of PipTaskOrganizer.java, there is a possible way to bypass background activity launch restrictions…
|
7.8
High
|
Oct 27, 2023 |
| CVE-2023-40123 |
In updateActionViews of PipMenuView.java, there is a possible bypass of a multi user security boundary due to a confused…
|
Not rated
|
Oct 27, 2023 |
| CVE-2023-40121 |
In appendEscapedSQLString of DatabaseUtils.java, there is a possible SQL injection due to unsafe deserialization
|
Not rated
|
Oct 27, 2023 |
| CVE-2023-40120 |
In multiple locations, there is a possible way to bypass user notification of foreground services due to improper…
|
7.8
High
|
Oct 27, 2023 |