In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer ov

google android

In __host_check_page_state_range of mem_protect.c, there is a possible out of bounds write due to an

google android

In __pkvm_init_vm of pkvm.c, there is a possible memory corruption due to a logic error in the code.

google android

In __pkvm_host_share_guest of mem_protect.c, there is a possible out of bounds write due to an integ

google android

In smmu_detach_dev of arm-smmu-v3.c, there is a possible out of bounds write due to a use after free

google android

In removePermission of PermissionManagerServiceImpl.java, there is a possible way to override any sy

google android

In hasImage of Notification.java, there is a possible way to reveal information across users due to

google android google android +1个

In isRedactionNeededForOpenViaContentResolver of MediaProvider.java, there is a possible way to reve

google android google android +1个

In createSessionInternal of PackageInstallerService.java, there is a possible way for an app to upda

google android google android +1个

In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible cross-user permissi

google android google android +1个

In parsePermissionGroup of ParsedPermissionUtils.java, there is a possible way to bypass a consent d

google android google android +1个

In onChange of BiometricService.java, there is a possible way to enable fingerprint unlock due to a

google android

In multiple locations of AppOpsService.java, there is a possible persistent denial of service due to

google android google android +1个

In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due

google android google android +1个

In setupLayout of PickActivity.java, there is a possible way to start any activity as a DocumentsUI

google android google android +1个

In setHideSensitive of ExpandableNotificationRow.java, there is a possible contact name leak due due

google android google android +1个

In enableSystemPackageLPw of Settings.java, there is a possible way to prevent location access from

google android google android +1个

In onTransact of IDrmManagerService.cpp, there is a possible out of bounds write due to a missing bo

google android google android +1个

In multiple locations, there is a possible privilege escalation due to a confused deputy. This coul

google android

In writeToParcel of WindowInfo.cpp, there is a possible way to trick a user into accepting a permiss

google android google android +1个