Platform
Android
6,319 known vulnerabilities.
6,319 results · Feed
-
High 7.0CVE-2025-22442 Public exploit
In multiple functions of DevicePolicyManagerService.java, there is a possible way to install unauthorized applications …
-
High 7.3
In onLastAccessedStackLoaded of ActionHandler.java , there is a possible way to bypass storage restrictions across apps…
-
High 7.8
In afterKeyEventLockedInterruptable of InputDispatcher.cpp, there is a possible use after free. This could lead to loca…
-
High 7.8
In setMediaButtonReceiver of multiple files, there is a possible way to launch arbitrary activities from background due…
-
Critical 9.8
In avdt_msg_ind of avdt_msg.cc, there is a possible memory corruption due to type confusion. This could lead to paired …
-
High 7.8
In handleKeyGestureEvent of PhoneWindowManager.java, there is a possible lock screen bypass due to a logic error in the…
-
High 7.8
In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commo…
-
Medium 5.5
In multiple locations, there is a possible method for a malicious app to prevent dialing emergency services under limit…
-
Medium 5.5
In isInSignificantPlace of multiple files, there is a possible way to access sensitive information due to a missing per…
-
Critical 9.8
In multiple locations, there is a possible way to execute arbitrary code due to a logic error in the code. This could l…
-
High 7.8
In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible way to grant permissions to an app on …
-
High 7.3
In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to grant notification access above …
-
High 7.5
In ParseTag of dng_ifd.cpp, there is a possible way to crash the image renderer due to a missing bounds check. This cou…
-
High 7.8
In multiple locations, there is a possible way to mislead a user into approving an authentication prompt for one app wh…
-
Medium 5.5
In contentDescForNotification of NotificationContentDescription.kt, there is a possible notification content leak throu…
-
High 7.3
In multiple locations, there is a possible way to mislead the user into enabling malicious phone calls forwarding due t…
-
High 7.8
In multiple locations, there is a possible confused deputy due to Intent Redirect. This could lead to local escalation …
-
High 7.3
In finishTransition of Transition.java, there is a possible way to bypass touch filtering restrictions due to a tapjack…
-
High 7.8
In onCreate of ChooserActivity.java , there is a possible way to view other users' images due to a confused deputy. Thi…
-
High 7.8
In FuseDaemon.cpp, there is a possible out of bounds write due to memory corruption. This could lead to local escalatio…
-
Medium 5.5
In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a confused…
-
Medium 5.5
In showAvatarPicker of EditUserPhotoController.java, there is a possible cross user image leak due to a confused deputy…
-
High 7.8
In multiple functions of Permissions.java, there is a possible way to override the state of the user's location permiss…
-
High 7.3
In multiple functions of ConnectionServiceWrapper.java, there is a possible way to retain a permission forever in the b…
-
Medium 4.3
"Gunosy" App contains a vulnerability where sensitive information may be included in the application's outbound communi…
-
Medium 4.0CVE-2025-26417 Public exploit
In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening fi…
-
Medium 4.0
In multiple functions of hyp-main.c, there is a possible privilege escalation due to a logic error in the code. This co…
-
High 8.8
In multiple functions of sdp_server.cc, there is a possible use after free due to a logic error in the code. This could…
-
High 8.8
In process_service_attr_rsp of sdp_discovery.cc, there is a possible use after free due to a logic error in the code. T…
-
High 8.4
In multiple locations, there is a possible way to execute arbitrary code due to a use after free. This could lead to lo…
-
High 8.4
In rfc_send_buf_uih of rfc_ts_frames.cc, there is a possible way to execute arbitrary code due to a use after free. Thi…
-
Critical 9.8
In rfc_check_send_cmd of rfc_utils.cc, there is a possible way to execute arbitrary code due to a use after free. This …
-
Medium 5.5
In hidd_check_config_done of hidd_conn.cc, there is a possible way to execute arbitrary code due to a use after free. T…
-
High 8.4
In bnepu_check_send_packet of bnep_utils.cc, there is a possible way to achieve code execution due to a use after free.…
-
High 8.4
In multiple locations, there is a possible way to execute arbitrary code due to a use after free. This could lead to lo…
-
High 8.4
In avct_lcb_msg_ind of avct_lcb_act.cc, there is a possible way to execute arbitrary code due to a use after free. This…
-
Critical 9.8
In sdp_snd_service_search_req of sdp_discovery.cc, there is a possible way to execute arbitrary code due to a use after…
-
High 7.5
In handleBondStateChanged of AdapterService.java, there is a possible unapproved data access due to a missing permissio…
-
Medium 6.5
In handleBondStateChanged of AdapterService.java, there is a possible permission bypass due to misleading or insufficie…
-
Medium 6.2
In onResult of AccountManagerService.java, there is a possible way to overwrite auth token due to a missing permission …