All CVEs — page 318 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw is a missing bounds check in PduParser.java that can lead to persistent denial of service when processing SMS PDUs. This affects Google's Android platform and allows remote attackers to cause system unresponsiveness without needing any privileges or user interaction.
A denial of service vulnerability in Google's Android platform allows local attackers to escalate privileges without needing additional execution privileges. The flaw occurs when uncaught exceptions lead to system instability, potentially enabling privilege escalation.
A type confusion vulnerability in Google's Android platform leads to memory corruption that can result in local privilege escalation without requiring user interaction or additional execution privileges.
A logic error in VirtualAudioControllerTest.java allows local users to bypass permission checks and escalate privileges without needing additional execution privileges. This affects Google's Android platform and could enable attackers to gain elevated access to system resources.
The flaw is a heap buffer overflow in the cfg2prop function of btif_storage.cc, which could lead to remote code execution. This matters because it allows an attacker to execute arbitrary code without additional privileges, posing a significant security risk.
A memory safety flaw in Google's Android platform allows attackers to write beyond allocated buffer boundaries, potentially enabling local privilege escalation without requiring additional execution privileges or user interaction.
A buffer overflow vulnerability in Google's Android system allows local attackers to escalate privileges without needing additional execution privileges. The flaw occurs in stpropnci_process due to incorrect bounds checking.
The flaw involves an out-of-bounds write due to uninitialized data, allowing remote escalation of privilege. This vulnerability is significant as it can be exploited to gain full control over the system without additional user interaction.
A confused deputy vulnerability in Google's Android dialInternal function allows local attackers to bypass permissions and escalate privileges without needing user interaction. This affects multiple locations in the Android system.
A memory safety issue in Google's Android snoop_logger component allows attackers to escalate privileges locally without needing additional execution rights. The vulnerability occurs during packet filtering operations and could enable arbitrary code execution with elevated privileges.
The flaw is an out-of-bounds write vulnerability in Google's Android libufdt library during qsort operations, which can be triggered by resource exhaustion. This allows local attackers to escalate privileges without needing additional execution privileges or user interaction, making it particularly dangerous for system integrity.
A buffer overflow vulnerability exists in Google's Android MessageQueueBase.h implementation due to incorrect bounds checking, allowing local attackers to read beyond allocated memory boundaries and potentially escalate privileges without requiring additional execution privileges.
A control-flow hijack vulnerability in Google's Android Bluetooth service allows local attackers to escalate privileges without needing additional execution rights. The flaw stems from an uninitialized pointer dereference that can be exploited to gain elevated system access.
A buffer overflow vulnerability in Google's Android NFC implementation allows local attackers to escalate privileges without needing additional execution rights. The flaw occurs when updating files through the NFC reader/writer component.
A buffer overflow vulnerability in Google's Android NFC implementation allows local attackers to write beyond allocated memory bounds, potentially enabling privilege escalation without requiring additional execution privileges or user interaction.
The flaw in WifiPermissionsUtil.java allows for a local privilege escalation due to a missing permission check, potentially enabling an attacker to gain higher privileges without additional execution rights.
A confused deputy vulnerability in Android Settings allows local attackers to bypass permissions and achieve privilege escalation without needing additional execution privileges or user interaction.
The flaw allows local users to bypass permission checks in Android's device admin settings, potentially enabling privilege escalation without requiring additional execution privileges or user interaction.
The flaw allows local privilege escalation by bypassing permission checks in Android's application management UI, potentially enabling attackers to uninstall system applications without proper authorization.
The flaw is a permission bypass in Android's credential storage system that allows local attackers to escalate privileges without needing additional execution privileges. This occurs due to improper input validation in the CredentialStorageActivity.java file.