Platform
Android
6,319 known vulnerabilities.
1,170 results · Clear filters · Feed
-
High 7.3
In multiple functions of AppOpsControllerImpl.java, there is a possible way to record audio without displaying the priv…
-
High 7.3
In multiple locations, there is a possible one-time permission bypass due to a logic error in the code. This could lead…
-
High 7.8
In checkPermissions of SafeActivityOptions.java, there is a possible background activity launch due to a logic error in…
-
High 7.1
In isSystemUid of AccountManagerService.java, there is a possible way for an app to access privileged APIs due to a con…
-
High 7.8
In multiple locations, there is a possible way to read files belonging to other apps due to SQL injection. This could l…
-
High 8.8
In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use af…
KEV Sep 4, 2025 -
High 7.8
In onCreate of FaceSettings.java, there is a possible way to remove biometric unlock across user profiles due to improp…
-
High 7.8
In processTransactInternal of RpcState.cpp, there is a possible local out of memory write due to a logic error in the c…
-
High 8.0
In SendPacketToPeer of acl_arbiter.cc, there is a possible out of bounds read due to a use after free. This could lead …
-
High 7.1
In multiple locations, there is a possible way to persistently DoS the device due to improper input validation. This co…
-
High 7.8
In assertSafeToStartCustomActivity of AppRestrictionsFragment.java , there is a possible way to exploit a parcel mismat…
-
High 8.8
In getDefaultCBRPackageName of CellBroadcastHandler.java, there is a possible escalation of privilege due to a logic er…
-
High 7.3
In markMediaAsFavorite of MediaProvider.java, there is a possible way to bypass the WRITE_EXTERNAL_STORAGE permission d…
-
High 7.8
In getCallingPackageName of CredentialStorage, there is a possible permission bypass due to a logic error in the code. …
-
High 7.8
In onCreate of SelectAccountActivity.java, there is a possible way to add contacts without permission due to a logic er…
-
High 7.8
In setDisplayName of AssociationRequest.java, there is a possible way for an app to retain CDM association due to a log…
-
High 7.8
In maybeShowDialog of ControlsSettingsDialogManager.kt, there is a possible overlay of the ControlsSettingsDialog due t…
-
High 7.8
In multiple locations, there is a possible privilege escalation due to a tapjacking/overlay attack. This could lead to …
-
High 7.8
In onStart of BiometricEnrollIntroduction.java, there is a possible way to determine the device's location due to an un…
-
High 7.8
In onActivityResult of VoicemailSettingsActivity.java, there is a possible work profile contact number leak due to a co…
-
High 7.8
In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a secondary user to dis…
-
High 7.8
In startSpaActivityForApp of SpaActivity.kt, there is a possible cross-user permission bypass due to a logic error in t…
-
High 7.8
In multiple locations, there is a possible memory corruption due to a use after free. This could lead to local escalati…
-
High 7.8
In showDismissibleKeyguard of KeyguardService.java, there is a possible way to bypass app pinning due to a logic error …
-
High 7.8
In multiple functions of PickerDbFacade.java, there is a possible unauthorized data access due to SQL injection. This c…
-
High 7.8
In multiple functions of AppRestrictionsFragment.java, there is a possible way to bypass intent security check due to a…
-
High 7.8
In appendFrom of Parcel.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to …
-
High 7.8CVE-2025-32324 Public exploit
In onCommand of ActivityManagerShellCommand.java, there is a possible arbitrary activity launch due to a confused deput…
-
High 7.8
In getCallingAppName of Shared.java, there is a possible way to trick users into granting file access via deceptive tex…
-
High 7.8
In isSafeIntent of AccountTypePreferenceLoader.java, there is a possible way to bypass an intent type check due to a co…
-
High 7.8
In executeAppFunction of AppSearchManagerService.java, there is a possible background activity launch due to a logic er…
-
High 7.8
In validateUriSchemeAndPermission of DisclaimersParserImpl.java , there is a possible way to access data from another u…
-
High 7.8
In multiple locations, there is a possible way to hijack the Launcher app due to a logic error in the code. This could …
-
High 7.8
In avrc_vendor_msg of avrc_opt.cc, there is a possible out of bounds write due to a heap buffer overflow. This could le…
-
High 7.0
In multiple locations, there is a possible way to use apps linked from a context menu of a lockscreen app due to a race…
-
High 8.1
In multiple locations, there is a possible condition that results in OOB accesses due to an incorrect bounds check. Thi…
-
High 7.3CVE-2025-22441 Public exploit
In getContextForResourcesEnsuringCorrectCachedApkPaths of RemoteViews.java, there is a possible way to load arbitrary j…
-
High 7.8
In createIntentsList of PackageParser.java , there is a possible way to bypass lazy bundle hardening, allowing modified…
-
High 7.8
In AccessibilityServiceConnection.java, there is a possible background activity launch due to a logic error in the code…
-
High 7.8
In multiple functions of LocationProviderManager.java, there is a possible background activity launch due to a logic er…