Platform
Android
6,158 known vulnerabilities.
855 results · Clear filters · Feed
-
Medium 5.5
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an authorized attacker to perform spoofing over a network.
-
Medium 5.4
LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the fu…
-
Medium 6.8
In U-Boot of append_uint32_le(), there is a possible fault injection due to a logic error in the code. This could lead …
-
Medium 5.5
In AreFencesRegistered of gxp_fence_manager.cc, there is a possible information leak due to improper input validation. …
-
Medium 6.7
In bigo_map of bigo_iommu.c, there is a possible information disclosure due to a use after free. This could lead to loc…
-
Medium 5.5
In ProtocolPsUnthrottleApn() of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bounds c…
-
Medium 6.5
In SwDcpItg of up_L2commonPdcpSecurity.cpp, there is a possible denial of service due to an incorrect bounds check. Thi…
-
Medium 6.5
In cellular modem, there is a possible denial of service due to a logic error in the code. This could lead to remote de…
-
Medium 5.5
In onCreateTasks of CameraActivity.java, there is a possible permission bypass due to a confused deputy. This could lea…
-
Medium 5.5
In isValidMediaUri of SettingsProvider.java, there is a possible cross user media read due to a missing permission chec…
-
Medium 5.5
In multiple locations, there is a possible permanent denial of service due to resource exhaustion. This could lead to l…
-
Medium 5.5CVE-2025-48633 Exploited
In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisi…
KEV Dec 2, 2025 -
Medium 6.5
In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaust…
-
Medium 5.5
In ProcessArea of dng_misc_opcodes.cpp, there is a possible out of bounds read due to a buffer overflow. This could lea…
-
Medium 6.6
In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due t…
-
Medium 4.3
In rebootWipeUserData of RecoverySystem.java, there is a possible way to factory reset the device while in DSU mode due…
-
Medium 5.5
In __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possible configuration data leak due to a logic error i…
-
Medium 5.5
In multiple locations, there is a possible way to create a large amount of app ops due to a logic error in the code. Th…
-
Medium 5.5
In multiple locations, there is a possible way to read files from another user due to a missing permission check. This …
-
Medium 5.5
In InputMethodInfo of InputMethodInfo.java, there is a possible permanent denial of service due to resource exhaustion.…
-
Medium 5.5
In multiple locations, there is a possible permanent denial of service due to improper input validation. This could lea…
-
Medium 5.5
In multiple files, there is a possible way to reveal information across users due to a missing permission check. This c…
-
Medium 6.6
In multiple locations, there is a possible way to alter the primary user's face unlock settings due to a confused deput…
-
Medium 6.5
In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could …
-
Medium 5.5
In multiple locations, there is a possible way to read files from another user due to a missing permission check. This …
-
Medium 5.5
In verifyAndGetBypass of AppOpsService.java, there is a possible method for a malicious app to prevent dialing emergenc…
-
Medium 5.5
In multiple functions of NotificationManagerService.java, there is a possible way to bypass the per-package channel lim…
-
Medium 5.5
In updateNotificationChannelGroupFromPrivilegedListener of NotificationManagerService.java, there is a possible permane…
-
Medium 6.7
In ensureBound of RemotePrintService.java, there is a possible way for a background app to keep foreground permissions …
-
Medium 6.7
In notifyTimeout of CallRedirectionProcessor.java, there is a possible persistent connection due to improper input vali…
-
Medium 4.0
"FOD" App uses hard-coded cryptographic keys, which may allow a local unauthenticated attacker to retrieve the cryptogr…
-
Medium 6.5
Microsoft OneDrive for Android Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in OneDrive for Android allows an authorized attacker to elevate privileges over a network.
-
Medium 6.5
Ubia Ubox
The Ubia camera ecosystem fails to adequately secure API credentials, potentially enabling an attacker to connect to backend services. The attacker would then be able to gain unauthorized access to available cameras, enabling the viewing of live feeds or modi…
-
Medium 4.8
WTW-EAGLE App does not properly validate server certificates, which may allow a man-in-the-middle attacker to monitor e…
-
Medium 5.5
Windows Imaging Component Information Disclosure Vulnerability
Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally.
-
Medium 5.5
In App Widget, there is a possible Information Disclosure due to a confused deputy. This could lead to local informatio…
-
Medium 5.5
In gralloc4, there is a possible out of bounds write due to a missing bounds check. This could lead to local informatio…
-
Medium 5.5
In libxml2, there is a possible out of bounds read due to a buffer overflow. This could lead to local information discl…
-
Medium 5.5
In Audio Service, there is a possible way to obtain MAC addresses of nearby Bluetooth devices due to a missing permissi…
-
Medium 4.3
Improper authorization in handler for custom URL scheme issue in "Yahoo! Shopping" App for Android versions prior to 14…