In AlwaysOnHotwordDetector of AlwaysOnHotwordDetector.java, there is a possible way to access the microphone from the background due to a missing permission check. This could lead…

In process_service_search_rsp of sdp_discovery.cc, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with…

In navigateUpTo of Task.java, there is a possible way to launch an unexported intent handler due to a logic error in the code. This could…

In multiple functions of many files, there is a possible obstruction of the user’s ability to select a phone account due to resource exhaustion. This…

In setImpl of AlarmManagerService.java, there is a possible way to put a device into a boot loop due to an uncaught exception. This could lead…

In _PMRLogicalOffsetToPhysicalOffset of the PowerVR kernel driver, there is a possible out of bounds write due to a missing bounds check. This could lead to…

In MMU_UnmapPages of the PowerVR kernel driver, there is a possible out of bounds write due to a missing bounds check. This could lead to…

In typec, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to local escalation of…

In typec, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to local escalation of…

In isp, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with System execution…