Skip to content
OpenAdvisories

Platform

Android

6,319 known vulnerabilities.

6,319 results · Feed

  • High 7.8

    In setDisplayName of AssociationRequest.java, there is a possible way to cause CDM associations to persist after the us…

  • Medium 6.5

    In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaust…

  • High 7.8

    In findAvailRecognizer of VoiceInteractionManagerService.java, there is a possible way to become the default speech rec…

  • High 7.8

    In validateIconUserBoundary of PrintManagerService.java, there is a possible cross-user image leak due to a confused de…

  • High 7.8

    In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to launch an activity from the…

  • High 8.8

    In multiple locations, there is a possible way to launch an application from the background due to a precondition check…

  • High 7.8

    In multiple functions of arm-smmu-v3.c, there is a possible out-of-bounds write due to improper input validation. This …

  • High 7.8

    In init_pkvm_hyp_vcpu of pkvm.c, there is a possible out of bounds write due to improper input validation. This could l…

  • Medium 5.5

    In ProcessArea of dng_misc_opcodes.cpp, there is a possible out of bounds read due to a buffer overflow. This could lea…

  • High 7.3

    In DefaultTransitionHandler.java, there is a possible way to enable a tapjacking attack due to a insecure default. This…

  • High 7.8

    In onSomePackagesChanged of VoiceInteractionManagerService.java, there is a possible way for a third party application'…

  • Medium 6.6

    In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due t…

  • High 7.8

    In getComponentName of MediaButtonReceiverHolder.java, there is a possible desync in persistence due to resource exhaus…

  • Medium 4.3

    In rebootWipeUserData of RecoverySystem.java, there is a possible way to factory reset the device while in DSU mode due…

  • High 7.8

    In setDefaultKey of DefaultPaymentSettings.java, there is a possible way for an application to set the main user's defa…

  • Medium 5.5

    In __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possible configuration data leak due to a logic error i…

  • Medium 5.5

    In multiple locations, there is a possible way to create a large amount of app ops due to a logic error in the code. Th…

  • Medium 5.5

    In multiple locations, there is a possible way to read files from another user due to a missing permission check. This …

  • Medium 5.5

    In InputMethodInfo of InputMethodInfo.java, there is a possible permanent denial of service due to resource exhaustion.…

  • Medium 5.5

    In multiple locations, there is a possible permanent denial of service due to improper input validation. This could lea…

  • Medium 5.5

    In multiple files, there is a possible way to reveal information across users due to a missing permission check. This c…

  • High 7.8

    In multiple functions of WifiScanModeActivity.java, there is a possible way to bypass a device config restriction due t…

  • Medium 6.6

    In multiple locations, there is a possible way to alter the primary user's face unlock settings due to a confused deput…

  • High 7.8

    In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay …

  • High 7.8

    In appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to l…

  • High 7.8

    In onUidImportance of DisassociationProcessor.java, there is a possible way to retain companion application privileges …

  • Medium 6.5

    In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could …

  • Medium 5.5

    In multiple locations, there is a possible way to read files from another user due to a missing permission check. This …

  • Medium 5.5

    In verifyAndGetBypass of AppOpsService.java, there is a possible method for a malicious app to prevent dialing emergenc…

  • High 7.8

    In multiple functions of HeaderPrivacyIconsController.kt, there is a possible way to grand permissions across user due …

  • High 7.8

    In startAlwaysOnVpn of Vpn.java, there is a possible way to disable always-on VPN due to a logic error in the code. Thi…

  • High 7.8

    In onActivityResult of EditFdnContactScreen.java, there is a possible way to leak contacts from the work profile due to…

  • Medium 5.5

    In multiple functions of NotificationManagerService.java, there is a possible way to bypass the per-package channel lim…

  • High 7.8
    CVE-2025-48583 Public exploit

    In multiple functions of BaseBundle.java, there is a possible way to execute arbitrary code due to a logic error in the…

  • High 7.8

    In connectInternal of MediaBrowser.java, there is a possible way to access while in use permission while the app is in …

  • Medium 5.5

    In updateNotificationChannelGroupFromPrivilegedListener of NotificationManagerService.java, there is a possible permane…

  • High 7.8

    In multiple functions of CertInstaller.java, there is a possible way to install certificates due to a permissions bypas…

  • High 7.8

    In sendCommand of MediaSessionRecord.java, there is a possible way to launch the foreground service while the app is in…

  • High 7.8
    CVE-2025-48572 Exploited

    In multiple locations, there is a possible way to launch activities from the background due to a permissions bypass. Th…

    KEV Dec 2, 2025
  • High 7.8

    In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalat…