Platform
Android
6,319 known vulnerabilities.
6,319 results · Feed
-
High 7.8
In startSpaActivityForApp of SpaActivity.kt, there is a possible cross-user permission bypass due to a logic error in t…
-
High 7.8
In multiple locations, there is a possible memory corruption due to a use after free. This could lead to local escalati…
-
High 7.8
In showDismissibleKeyguard of KeyguardService.java, there is a possible way to bypass app pinning due to a logic error …
-
Medium 5.7
In generateRandomPassword of LocalBluetoothLeBroadcast.java, there is a possible way to intercept the Auracast audio st…
-
High 7.8
In multiple functions of PickerDbFacade.java, there is a possible unauthorized data access due to SQL injection. This c…
-
High 7.8
In multiple functions of AppRestrictionsFragment.java, there is a possible way to bypass intent security check due to a…
-
High 7.8
In appendFrom of Parcel.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to …
-
High 7.8CVE-2025-32324 Public exploit
In onCommand of ActivityManagerShellCommand.java, there is a possible arbitrary activity launch due to a confused deput…
-
High 7.8
In getCallingAppName of Shared.java, there is a possible way to trick users into granting file access via deceptive tex…
-
High 7.8
In isSafeIntent of AccountTypePreferenceLoader.java, there is a possible way to bypass an intent type check due to a co…
-
High 7.8
In executeAppFunction of AppSearchManagerService.java, there is a possible background activity launch due to a logic er…
-
High 7.8
In validateUriSchemeAndPermission of DisclaimersParserImpl.java , there is a possible way to access data from another u…
-
High 7.8
In multiple locations, there is a possible way to hijack the Launcher app due to a logic error in the code. This could …
-
Low 3.3
In multiple locations, there is a possible way to view icons belonging to another user due to a missing permission chec…
-
High 7.8
In avrc_vendor_msg of avrc_opt.cc, there is a possible out of bounds write due to a heap buffer overflow. This could le…
-
High 7.0
In multiple locations, there is a possible way to use apps linked from a context menu of a lockscreen app due to a race…
-
High 8.1
In multiple locations, there is a possible condition that results in OOB accesses due to an incorrect bounds check. Thi…
-
High 7.3CVE-2025-22441 Public exploit
In getContextForResourcesEnsuringCorrectCachedApkPaths of RemoteViews.java, there is a possible way to load arbitrary j…
-
High 7.8
In createIntentsList of PackageParser.java , there is a possible way to bypass lazy bundle hardening, allowing modified…
-
Medium 5.5
In allowPackageAccess of multiple files, resource exhaustion is possible when repeatedly adding allowed packages. This …
-
High 7.8
In AccessibilityServiceConnection.java, there is a possible background activity launch due to a logic error in the code…
-
High 7.8
In multiple functions of LocationProviderManager.java, there is a possible background activity launch due to a logic er…
-
Medium 5.5
In multiple functions of DexUseManagerLocal.java, there is a possible way to crash system server due to a logic error i…
-
High 7.8
In multiple functions of NdkMediaCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This…
-
Medium 5.5
In isContentUriForOtherUser of BluetoothOppSendFileInfo.java, there is a possible cross user data leak due to a logic e…
-
High 7.8
In loadDrawableForCookie of ResourcesImpl.java, there is a possible way to access task snapshots of other apps due to a…
-
High 7.8
In onInputEvent of IInputMethodSessionWrapper.java, there is a possible way for an untrusted app to inject key and moti…
-
Medium 5.5
In multiple locations, there is a possible permanent denial of service due to resource exhaustion. This could lead to l…
-
Medium 5.5
In writeToParcel of CursorWindow.cpp, there is a possible out of bounds read due to uninitialized data. This could lead…
-
Medium 5.5
In offerNetwork of ConnectivityService.java, there is a possible leak of sensitive data due to a missing permission che…
-
High 7.3CVE-2025-26443 Public exploit
In parseHtml of HtmlToSpannedParser.java, there is a possible way to install apps without allowing installation from un…
-
Medium 6.5
In add_attr of sdp_discovery.cc, there is a possible out of bounds read due to a missing bounds check. This could lead …
-
Medium 5.5
In CredentialManagerServiceStub of CredentialManagerService.java, there is a possible way to retrieve candidate credent…
-
Medium 5.5
In multiple locations, there is a possible way to persistently DoS the device due to a missing length check. This could…
-
High 7.8
In onHandleForceStop of VoiceInteractionManagerService.java, there is a bug that could cause the system to incorrectly …
-
Medium 5.5
In onCreate of NotificationAccessConfirmationActivity.java, there is a possible incorrect verification of proper intent…
-
High 7.8
In multiple functions of CameraService.cpp, there is a possible way to use the camera from the background due to a perm…
-
High 8.8
In smp_process_secure_connection_oob_data of smp_act.cc, there is a possible way to bypass SMP authentication due to In…
-
High 7.8
In clearAllowBgActivityStarts of PendingIntentRecord.java, there is a possible way for an application to launch an acti…
-
High 7.8
In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a secondary user to dis…