CVE Vulnerability Catalog

In applySimpleFieldMaxSize in DataRowHandler.java, improper input validation could allow inserting a very long contact name, leading to local denial of service without additional privileges.

In multiple functions of ubsan_throwing_runtime.cpp, an integer overflow can cause a crash. This leads to remote denial of service without requiring additional privileges or user interaction.

In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

In getPreferredSize in LauncherProcessImageListener.kt, a denial of service can occur due to resource exhaustion, leading to local denial of service without additional privileges.

In functions of DevicePolicyManagerService.java, a way to hide a system critical package was found due to improper input validation. This could lead to local denial of service without additional privileges.

In verifySignature of ApkChecksums.java, a crash can be caused due to resource exhaustion. This leads to local denial of service without additional privileges.

In functions of ubsan_throwing_runtime.cpp, a logic error can lead to permanent denial of service. No additional privileges or user interaction are needed.

In functions of WindowState.java, a user can be tricked into accepting a permission via a tapjacking/overlay attack. This could lead to local privilege escalation without additional privileges.

In updateState of GraphicsDriverEnableAngleAsSystemDriverController.java, a potential persistent denial of service issue exists due to an unusual root cause. This leads to local denial of service without additional privileges.

In createSessionInternal of PackageInstallerService.java, there is a possible to update a Device Policy Controller (DPC) into an invalid directory due to a path traversal error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

In multiple functions of ubsan_throwing_runtime.cpp, an integer overflow can cause a crash, leading to remote denial of service without user interaction.

In multiple functions of ubsan_throwing_runtime.cpp, improper input validation can cause a system crash, leading to remote denial of service without user interaction.

In hide of WindowState.java, there is a possible way to trick the user into approving permissions due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

In InputInterceptor of Letterbox.java, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

In multiple functions of ubsan_throwing_runtime.cpp, an integer overflow can cause the system to crash, leading to remote denial of service without user interaction.

In functions of ubsan_throwing_runtime.cpp, an integer overflow can lead to persistent denial of service and local privilege escalation. No additional privileges or user interaction are needed.

In functions of ubsan_throwing_runtime.cpp, resource exhaustion can lead to persistent denial of service. No additional privileges or user interaction are needed.

In multiple functions of ubsan_throwing_runtime.cpp, an integer overflow can cause a UBSan failure, leading to remote denial of service without user interaction.

In multiple functions of ubsan_throwing_runtime.cpp, an integer overflow can cause a crash, leading to remote denial of service without user interaction.

In multiple functions of ubsan_throwing_runtime.cpp, an integer overflow can cause a persistent denial of service, leading to remote denial of service without user interaction.