In multiple functions of SmsController.java, there is a possible escalation of privilege due to a missing permission check

In multiple functions of VirtualAudioControllerTest.java, there is a possible permission bypass due to a logic error in the code

In Bootloader, there is a possible permission bypass due to a missing permission check

In multiple locations, there is a possible intent filter bypass due to a race condition

In multiple locations, there is a possible way to bypass the cross profile intent filter due to a logic error in the code

In onTransact of IDrmManagerService.cpp, there is a possible out of bounds write due to a missing bounds check

In multiple locations, there is a possible way to execute code in the launcher process due to an over-privileged shell user