Vulnerability Library

ASB-A-251514170

• Android/platform/packages/modules/Bluetooth

1.1 Bypassing passkey entry in legacy pairing - Pixel 4a, Pixel 3 XL 01 Jul

• Fix available

ASB-A-292160348

• Android/platform/packages/modules/StatsD

[statsd_test] MultiConditionTrigger#TestTriggerHasSleep crash 01 Jul

• Fix available

ASB-A-294406604

• Android/platform/packages/providers/MediaProvider

Reveal files across users via MediaProvider 01 Jul

• Fix available

ASB-A-297517712

• Android/platform/frameworks/base

ACTION_PACKAGE_CHANGED not sent when mimeGroups are changed 01 Jul

• Fix available

ASB-A-299931076

• Android/platform/packages/apps/Settings

Connect to an untrusted Wi-Fi network through WifiDppConfiguratorActivity (no_add_wifi_config) 01 Jul

• Fix available

ASB-A-317048338

• Android/platform/frameworks/base

A bug in Notification class which can bypass of the restriction of starting activity from background due to token leak to uer process 01 Jul

• Fix available

ASB-A-319081336

• Android/platform/frameworks/base

Code execution in Chrome isolated service processes 01 Jul

• Fix available

ASB-A-329230490

• Android/platform/frameworks/base

In CompanionDeviceManagerService there is a lack of Parcelable value check which could lead to bypass of BAL restriction 01 Jul

• Fix available

ASB-A-336268889

• Android/:linux_kernel:

Vulnerability: Local privilege escalation in LTS 6.6.27, COS 105 17412.294.62 (kernelCTF) 01 Jul

• Fix available

ASB-A-223376078

• Android/platform/frameworks/base

[There are two problems with killBackgroundProcesses in ActivityManager] 01 Jun

• Fix available

ASB-A-267231571

• Android/platform/frameworks/base

[Platform Fix] AttributionSource may incorrectly validate the calling uid and pid depending on usage 01 Jun

• Fix available

ASB-A-272106880

• Android/platform/packages/modules/Wifi

[Mainline Fix] AttributionSource may incorrectly validate the calling uid and pid depending on usage 01 Jun

• Fix available

ASB-A-302431573

• Android/platform/frameworks/base

Bypass of overlay protection in landscape mode 01 Jun

• Fix available

ASB-A-304290201

• Android/platform/frameworks/base

Potential DoS attack through shortcut reporting. 01 Jun

• Fix available

ASB-A-313425281

• Android/platform/packages/modules/HealthFitness

Overlay HealthFitness#PermissionsActivity to trick user into allowing unexpected health permissions 01 Jun

• Fix available

ASB-A-313428840

• Android/platform/frameworks/base

Missing permission checks in CompanionDeviceShellCommand.java 01 Jun

• Fix available