Skip to content
OpenAdvisories

Product · Google

Android

2,760 known vulnerabilities.

2,760 results · Feed

  • High 7.8

    In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to a missing bounds check. This could le…

  • Medium 5.5

    In AreFencesRegistered of gxp_fence_manager.cc, there is a possible information leak due to improper input validation. …

  • High 7.8

    In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to an incorrect bounds check. This could…

  • High 7.8

    In GetTachyonCommand of tachyon_server_common.h, there is a possible out of bounds write due to a missing bounds check.…

  • High 7.8

    In WAVES_send_data_to_dsp of libaoc_waves.c, there is a possible out of bounds write due to a missing bounds check. Thi…

  • High 8.0

    In ss_DecodeLcsAssistDataReqMsg(void) of ss_LcsManagement.c, there is a possible out of bounds write due to an incorrec…

  • High 8.0

    In NrmmDecoder::DecodeSORTransparentContext of cn_NrmmDecoder.cpp, there is a possible out of bounds write due to a hea…

  • Medium 6.7

    In bigo_map of bigo_iommu.c, there is a possible information disclosure due to a use after free. This could lead to loc…

  • Medium 5.5

    In ProtocolPsUnthrottleApn() of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bounds c…

  • High 7.8

    In aocc_read of aoc_channel_dev.c, there is a possible double free due to improper locking. This could lead to local es…

  • High 7.8

    In aoc_service_read_message of aoc_ipc_core.c, there is a possible out of bounds read due to improper input validation.…

  • Medium 6.5

    In SwDcpItg of up_L2commonPdcpSecurity.cpp, there is a possible denial of service due to an incorrect bounds check. Thi…

  • High 7.0

    In PrepareWorkloadBuffers of gxp_main_actor.cc, there is a possible double fetch due to a race condition. This could le…

  • Medium 6.5

    In cellular modem, there is a possible denial of service due to a logic error in the code. This could lead to remote de…

  • Medium 5.5

    In onCreateTasks of CameraActivity.java, there is a possible permission bypass due to a confused deputy. This could lea…

  • High 7.0

    In multiple locations of UsbDataAdvancedProtectionHook.java, there is a possible way to access USB data when the screen…

  • Medium 5.5

    In isValidMediaUri of SettingsProvider.java, there is a possible cross user media read due to a missing permission chec…

  • High 7.8

    In preparePackage of InstallPackageHelper.java, there is a possible way for an app to appear hidden upon installation w…

  • Medium 5.5

    In multiple locations, there is a possible permanent denial of service due to resource exhaustion. This could lead to l…

  • High 7.3

    In DefaultTransitionHandler.java, there is a possible way to unknowingly grant permissions to an app due to a tapjackin…

  • High 7.8

    In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to improper input validation. This could…

  • High 7.8

    In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could …

  • Medium 5.5
    CVE-2025-48633 Exploited

    In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisi…

    KEV Dec 2, 2025
  • High 7.8

    In setDisplayName of AssociationRequest.java, there is a possible way to cause CDM associations to persist after the us…

  • Medium 6.5

    In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaust…

  • High 7.8

    In findAvailRecognizer of VoiceInteractionManagerService.java, there is a possible way to become the default speech rec…

  • High 7.8

    In validateIconUserBoundary of PrintManagerService.java, there is a possible cross-user image leak due to a confused de…

  • High 7.8

    In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to launch an activity from the…

  • High 8.8

    In multiple locations, there is a possible way to launch an application from the background due to a precondition check…

  • High 7.8

    In multiple functions of arm-smmu-v3.c, there is a possible out-of-bounds write due to improper input validation. This …

  • High 7.8

    In init_pkvm_hyp_vcpu of pkvm.c, there is a possible out of bounds write due to improper input validation. This could l…

  • Medium 5.5

    In ProcessArea of dng_misc_opcodes.cpp, there is a possible out of bounds read due to a buffer overflow. This could lea…

  • High 7.3

    In DefaultTransitionHandler.java, there is a possible way to enable a tapjacking attack due to a insecure default. This…

  • High 7.8

    In onSomePackagesChanged of VoiceInteractionManagerService.java, there is a possible way for a third party application'…

  • Medium 6.6

    In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due t…

  • High 7.8

    In getComponentName of MediaButtonReceiverHolder.java, there is a possible desync in persistence due to resource exhaus…

  • Medium 4.3

    In rebootWipeUserData of RecoverySystem.java, there is a possible way to factory reset the device while in DSU mode due…

  • High 7.8

    In setDefaultKey of DefaultPaymentSettings.java, there is a possible way for an application to set the main user's defa…

  • Medium 5.5

    In __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possible configuration data leak due to a logic error i…

  • Medium 5.5

    In multiple locations, there is a possible way to create a large amount of app ops due to a logic error in the code. Th…