Where
AND
-Infinity
0
Severity
9.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.

1 / 2
Source: NVD
First published (updated )
Severity
9.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code.

1 / 2
Source: NVD
First published (updated )
Severity
7.1
EPSS
0.04%
Input Validation
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Improper input validation in bootloader prior to SMR Feb-2024 Release 1 allows local privileged attackers to cause an Out-Of-Bounds read.

First published (updated )
Severity
7.8
EPSS
0.06%
Buffer Overflow
AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L

Out-of-bounds Write vulnerabilities in svc1tdvldelh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow.

First published (updated )
Severity
7.8
EPSS
0.06%
Buffer Overflow
AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L

Out-of-bounds Write vulnerabilities in svc1tdvldplhap of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow.

First published (updated )
Severity
5.5
EPSS
0.04%
AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Out-of-bounds Read in padmdvldacprogrefine of libpadm.so prior to SMR Feb-2024 Release 1 allows local attackers access unauthorized information.

First published (updated )
Severity
8
EPSS
0.04%
AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:H

Improper authentication vulnerability in onCharacteristicReadRequest in Auto Hotspot prior to SMR Feb-2024 Release 1 allows adjacent attackers connect to victim's mobile hotspot without user awareness.

First published (updated )
Severity
8.4
EPSS
0.04%
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Out-of-bounds Write in padmdvldqtbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local attacker to execute arbitrary code.

First published (updated )
Severity
8.4
EPSS
0.04%
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Out-of-bounds Write in padmdvldhtbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local attacker to execute arbitrary code.

First published (updated )
Severity
5.1
EPSS
0.04%
AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Improper caller verification in GameOptimizer prior to SMR Feb-2024 Release 1 allows local attackers to configure GameOptimizer.

First published (updated )
Severity
7.8
EPSS
0.06%
Buffer Overflow
AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L

Out-of-bounds Write vulnerabilities in svc1tdvldslh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow.

First published (updated )
Severity
8
EPSS
0.04%
AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:H

Improper authentication vulnerability in onCharacteristicWriteRequest in Auto Hotspot prior to SMR Feb-2024 Release 1 allows adjacent attackers connect to victim's mobile hotspot without user awareness.

First published (updated )
Severity
5.5
EPSS
0.04%
Path Traversal
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Path traversal vulnerability in ZipCompressor of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in Android 13 allows local attackers to write arbitrary file.

First published (updated )
Severity
6.8
EPSS
0.07%
AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

Improper authentication vulnerability in Bluetooth pairing process prior to SMR Jan-2024 Release 1 allows remote attackers to establish pairing process without user interaction.

First published (updated )
Severity
6.2
EPSS
0.04%
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Improper access control in Notification service prior to SMR Jan-2024 Release 1 allows local attacker to access notification data.

First published (updated )
Severity
5.5
EPSS
0.04%
Path Traversal
AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Path traversal vulnerability in FileUriConverter of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in Android 13 allows local attackers to write arbitrary file.

First published (updated )
Severity
3.3
EPSS
0.04%
AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Implicit intent hijacking vulnerability in Smart Suggestions prior to SMR Feb-2024 Release 1 allows local attackers to get sensitive information.

First published (updated )
Severity
4.4
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.

1 / 2
First published (updated )
Severity
4.8
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Improper authorization in Settings prior to SMR Mar-2026 Release 1 allows local attacker to disable configuring the background data usage of application.

First published (updated )
Severity
7.3
AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Improper access control in SecSettingsIntelligence prior to SMR Mar-2025 Release 1 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability.

First published (updated )
Severity
6.7
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Out-of-bounds write in Keymaster trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.

First published (updated )
Severity
8
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Out-of-bounds Write vulnerability in libaudiosaplussec.so library prior to SMR Apr-2023 Release 1 allows local attacker to execute arbitrary code.

First published (updated )
Severity
8
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Out-of-bounds Write vulnerability in libaudiosaplussec.so library prior to SMR Apr-2023 Release 1 allows local attacker to execute arbitrary code.

First published (updated )
Severity
7.1
AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Intent redirection vulnerability in SecSettings prior to SMR Apr-2022 Release 1 allows attackers to access arbitrary file with system privilege.

First published (updated )
Severity
5.7
AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N

Out-of-bounds write in fingerprint trustlet prior to SMR Oct-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.

First published (updated )
Severity
7.8
Path Traversal
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Relative path traversal in Knox Enterprise prior to SMR Oct-2025 Release 1 allows local attackers to execute arbitrary code.

First published (updated )
Severity
5.7
AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N

Out-of-bounds write in handling opcode in fingerprint trustlet prior to SMR Nov-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.

First published (updated )
Severity
5.7
AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N

Out-of-bounds write in decoding metadata in fingerprint trustlet prior to SMR Dec-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.

First published (updated )
Severity
6.1
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Improper authorization in KnoxGuardManager prior to SMR Feb-2026 Release 1 allows local attackers to bypass the persistence configuration of the application.

First published (updated )
Severity
6.2
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Improper access control in InputManager to SMR Apr-2025 Release 1 allows local attackers to access the scancode of specific input device.

First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203