CVE Vulnerability Catalog

In decode_packed_entry_number of codebook.c, there is a possible out-of-bounds read due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed.

In getTouchOcclusionMode of WindowState.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.

In insertInternal of MmsProvider.java, there is a possible multiuser isolation issue due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed.

In multiple locations, there is a possible permission bypass due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed.

In getSubscriptionProperty of SubscriptionManagerService.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

In handleMessage of UsbDeviceManager.java, there is a possible lock-screen bypass due to a logic error in the code. This could lead to physical information disclosure with no additional execution privileges needed.

In checkQueryPermission of TelephonyProvider.java, there is a possible permission bypass due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed.

In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed.

In validateImageInfo of Bitmap.cpp, there is a possible out-of-bounds read due to a precondition check failure. This could lead to local information disclosure with no additional execution privileges needed.

In getEntryFileName of ZipFileRO.cpp, there is a heap buffer overflow that may lead to a memory safety issue. This could allow local privilege escalation without additional execution privileges and without user interaction.

In multiple functions of NfcService.java, there is a permission bypass due to a missing permission check. This could lead to local privilege escalation without additional execution privileges and without user interaction.

In l2c_fcr_process_peer_cfg_req of l2c_fcr.cc, there is an integer overflow that may lead to a memory safety issue. This could allow remote information disclosure without additional execution privileges and without user interaction.

In setOemUnlockAllowedByUser of OemLockService.java, there is a possible way to bypass FRP due to a missing permission check. This could lead to local privilege escalation without additional execution privileges and without user interaction.

In isValid of ShimConverter.cpp, there is an out-of-bounds read due to a missing bounds check. This could lead to local information disclosure without additional execution privileges and without user interaction.

In notifyPictureProfileHandleSelection of MediaQualityService.java, there is a permission bypass due to a missing permission check. This could lead to local privilege escalation without additional execution privileges and without user interaction.

In handleConnectInternal of RpcServerTrusty.cpp, there is a denial of service due to a logic error in the code. This could lead to local denial of service without additional execution privileges and without user interaction.

In multiple locations, there is memory corruption due to a use-after-free. This could lead to local privilege escalation without additional execution privileges and without user interaction.

In canPresent of PresentationController.java, there is a permission bypass due to a logic error in the code. This could lead to local privilege escalation without additional execution privileges and without user interaction.

In multiple locations, there is a permission bypass due to a logic error in the code. This could lead to physical privilege escalation without additional execution privileges and without user interaction.

In getSelectionBySubIds of ProviderUtil.java, there is a logic error that may cause a cross-user data leak. This could lead to local information disclosure with no additional execution privileges needed.