Skip to content
OpenAdvisories

Platform

Android

6,319 known vulnerabilities.

6,319 results · Feed

  • Medium 5.0

    In writeContent of RemotePrintDocument.java, there is a possible information disclosure due to a logic error. This coul…

  • Medium 5.5
    CVE-2025-48561 Public exploit

    In multiple locations, there is a possible way to access data displayed on the screen due to side channel information d…

  • Medium 5.5

    In AndroidManifest.xml, there is a possible way for an app to monitor motion events due to a confused deputy. This coul…

  • Medium 5.5

    In multiple functions of AppOpsService.java, there is a possible add a large amount of app ops due to improper input va…

  • High 7.8

    In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent intended for system app…

  • High 7.3

    In multiple methods of NotificationChannel.java, there is a possible desynchronization from persistence due to improper…

  • Medium 6.1

    In handlePackagesChanged of DevicePolicyManagerService.java, there is a possible persistent denial of service due to a …

  • High 7.8

    In handlePackagesChanged of DevicePolicyManagerService.java, there is a possible DoS of a device admin due to a logic e…

  • High 7.8

    In saveGlobalProxyLocked of DevicePolicyManagerService.java, there is a possible way to desync from persistence due to …

  • Medium 5.0

    In multiple locations, there is a possible leak of an image across the Android User isolation boundary due to a confuse…

  • Medium 5.5

    In testGrantSlicePermission of SliceManagerTest.java, there is a possible permanent denial of service due to a path tra…

  • High 7.8

    In multiple locations, there is a possible way to record audio via a background app due to a missing permission check. …

  • High 7.3

    In multiple functions of AppOpsControllerImpl.java, there is a possible way to record audio without displaying the priv…

  • High 7.3

    In multiple locations, there is a possible one-time permission bypass due to a logic error in the code. This could lead…

  • High 7.8

    In checkPermissions of SafeActivityOptions.java, there is a possible background activity launch due to a logic error in…

  • High 7.1

    In isSystemUid of AccountManagerService.java, there is a possible way for an app to access privileged APIs due to a con…

  • High 7.8

    In multiple locations, there is a possible way to read files belonging to other apps due to SQL injection. This could l…

  • High 8.8
    CVE-2025-48543 Exploited Public exploit

    In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use af…

    KEV Sep 4, 2025
  • Medium 5.5

    In multiple functions of AccountManagerService.java, there is a possible permanent denial of service due to resource ex…

  • High 7.8

    In onCreate of FaceSettings.java, there is a possible way to remove biometric unlock across user profiles due to improp…

  • High 7.8

    In processTransactInternal of RpcState.cpp, there is a possible local out of memory write due to a logic error in the c…

  • High 8.0

    In SendPacketToPeer of acl_arbiter.cc, there is a possible out of bounds read due to a use after free. This could lead …

  • Medium 5.5

    In setApplicationHiddenSettingAsUser of PackageManagerService.java, there is a possible way to hide a system critical p…

  • High 7.1

    In multiple locations, there is a possible way to persistently DoS the device due to improper input validation. This co…

  • High 7.8

    In assertSafeToStartCustomActivity of AppRestrictionsFragment.java , there is a possible way to exploit a parcel mismat…

  • High 8.8

    In getDefaultCBRPackageName of CellBroadcastHandler.java, there is a possible escalation of privilege due to a logic er…

  • High 7.3

    In markMediaAsFavorite of MediaProvider.java, there is a possible way to bypass the WRITE_EXTERNAL_STORAGE permission d…

  • High 7.8

    In getCallingPackageName of CredentialStorage, there is a possible permission bypass due to a logic error in the code. …

  • Medium 5.5

    In setRingtoneUri of VoicemailNotificationSettingsUtil.java , there is a possible cross user data leak due to a confuse…

  • Medium 4.0

    In multiple locations, there is a possible way to overlay biometrics due to a tapjacking/overlay attack. This could lea…

  • Medium 6.2

    In multiple locations, there is a possible way to leak hidden work profile notifications due to a logic error in the co…

  • Medium 4.0

    In createMultiProfilePagerAdapter of ChooserActivity.java , there is a possible way for an app to launch the ChooserAct…

  • Medium 5.5

    In isSystem of WifiPermissionsUtil.java, there is a possible permission bypass due to a missing permission check. This …

  • High 7.8

    In onCreate of SelectAccountActivity.java, there is a possible way to add contacts without permission due to a logic er…

  • High 7.8

    In setDisplayName of AssociationRequest.java, there is a possible way for an app to retain CDM association due to a log…

  • High 7.8

    In maybeShowDialog of ControlsSettingsDialogManager.kt, there is a possible overlay of the ControlsSettingsDialog due t…

  • High 7.8

    In multiple locations, there is a possible privilege escalation due to a tapjacking/overlay attack. This could lead to …

  • High 7.8

    In onStart of BiometricEnrollIntroduction.java, there is a possible way to determine the device's location due to an un…

  • High 7.8

    In onActivityResult of VoicemailSettingsActivity.java, there is a possible work profile contact number leak due to a co…

  • High 7.8

    In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a secondary user to dis…