In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflo

google android

In onServiceDisconnected of KeyguardServiceDelegate.java, there is a possible partial bypass of app

google android google android +1个

In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic

google android

In loadDataAndPostValue of multiple files, there is a possible way to obscure permission usage due t

google android google android +1个

In multiple locations, there is a possible information disclosure due to SQL injection. This could l

google android google android +1个

In executeRequest of ActivityStarter.java, there is a possible launch anywhere due to a confused dep

google android google android +1个

In loadDescription of DeviceAdminInfo.java, there is a possible persistent package due to improper i

google android google android +1个

In multiple locations, there is a possible persistent denial of service due to improper input valida

google android google android +1个

In jump_to_payload of payload.rs, there is a possible information disclosure due to a logic error in

google android google android +1个

In multiple functions of Nfc.h, there is a possible use after free due to a race condition. This cou

google android google android +1个

In openFile of BugreportContentProvider.java, there is a possible way to read and write unauthorized

google android

In multiple functions of TaskFragmentOrganizerController.java, there is a possible activity token le

google android google android

In relayoutWindow of WindowManagerService.java, there is a possible tapjack attack due to a missing

google android google android +1个

In drawLayersInternal of SkiaRenderEngine.cpp, there is a possible way to access the GPU cache due t

google android google android +1个

In multiple functions of ContentProvider.java, there is a possible way for an app with read-only acc

google android google android +1个

In VBMeta, there is a possible way to modify and resign VBMeta using a test key, assuming the origin

google android

In multiple functions of MmsProvider.java, there is a possible way to arbitrarily delete files which

google android google android +1个

In multiple functions of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a l

google android google android +1个

In exitKeyguardAndFinishSurfaceBehindRemoteAnimation of KeyguardViewMediator.java, there is a possib

google android google android +1个

In multiple functions of ProfilingService.java, there is a possible persistent denial of service due

google android