2,760 results · Feed
-
Medium 5.5
In multiple locations, there is a possible way to read files from another user due to a missing permission check. This …
-
Medium 5.5
In InputMethodInfo of InputMethodInfo.java, there is a possible permanent denial of service due to resource exhaustion.…
-
Medium 5.5
In multiple locations, there is a possible permanent denial of service due to improper input validation. This could lea…
-
Medium 5.5
In multiple files, there is a possible way to reveal information across users due to a missing permission check. This c…
-
High 7.8
In multiple functions of WifiScanModeActivity.java, there is a possible way to bypass a device config restriction due t…
-
Medium 6.6
In multiple locations, there is a possible way to alter the primary user's face unlock settings due to a confused deput…
-
High 7.8
In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay …
-
High 7.8
In appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to l…
-
High 7.8
In onUidImportance of DisassociationProcessor.java, there is a possible way to retain companion application privileges …
-
Medium 6.5
In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could …
-
Medium 5.5
In multiple locations, there is a possible way to read files from another user due to a missing permission check. This …
-
Medium 5.5
In verifyAndGetBypass of AppOpsService.java, there is a possible method for a malicious app to prevent dialing emergenc…
-
High 7.8
In multiple functions of HeaderPrivacyIconsController.kt, there is a possible way to grand permissions across user due …
-
High 7.8
In startAlwaysOnVpn of Vpn.java, there is a possible way to disable always-on VPN due to a logic error in the code. Thi…
-
High 7.8
In onActivityResult of EditFdnContactScreen.java, there is a possible way to leak contacts from the work profile due to…
-
Medium 5.5
In multiple functions of NotificationManagerService.java, there is a possible way to bypass the per-package channel lim…
-
High 7.8CVE-2025-48583 Public exploit
In multiple functions of BaseBundle.java, there is a possible way to execute arbitrary code due to a logic error in the…
-
High 7.8
In connectInternal of MediaBrowser.java, there is a possible way to access while in use permission while the app is in …
-
Medium 5.5
In updateNotificationChannelGroupFromPrivilegedListener of NotificationManagerService.java, there is a possible permane…
-
High 7.8
In multiple functions of CertInstaller.java, there is a possible way to install certificates due to a permissions bypas…
-
High 7.8
In sendCommand of MediaSessionRecord.java, there is a possible way to launch the foreground service while the app is in…
-
High 7.8CVE-2025-48572 Exploited
In multiple locations, there is a possible way to launch activities from the background due to a permissions bypass. Th…
KEV Dec 2, 2025 -
High 7.8
In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalat…
-
High 7.8
In multiple locations, there is a possible way to bypass the cross profile intent filter due to a logic error in the co…
-
High 7.0
In multiple locations, there is a possible intent filter bypass due to a race condition. This could lead to local escal…
-
High 7.8
In multiple functions of NotificationStation.java, there is a possible cross-profile information disclosure due to a co…
-
High 7.8
In grantAllowlistedPackagePermissions of SettingsSliceProvider.java, there is a possible way for a third party app to m…
-
High 7.8
In disassociate of DisassociationProcessor.java, there is a possible way for an app to continue reading notifications w…
-
High 7.8
In multiple functions of Session.java, there is a possible way to view images belonging to a different user of the devi…
-
High 7.8
In multiple functions of Session.java, there is a possible way to view images belonging to a different user of the devi…
-
Medium 6.7
In ensureBound of RemotePrintService.java, there is a possible way for a background app to keep foreground permissions …
-
Medium 6.7
In notifyTimeout of CallRedirectionProcessor.java, there is a possible persistent connection due to improper input vali…
-
High 7.8
In multiple locations, there is a possible way to leak audio files across user profiles due to a confused deputy. This …
-
High 8.0CVE-2025-48593 Public exploit
In bta_hf_client_cb_init of bta_hf_client_main.cc, there is a possible remote code execution due to a use after free. T…
-
High 7.8
In System UI, there is a possible way to view other users' images due to a confused deputy. This could lead to local es…
-
High 8.8
In Skia, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of…
-
Medium 5.5
In App Widget, there is a possible Information Disclosure due to a confused deputy. This could lead to local informatio…
-
Medium 5.5
In gralloc4, there is a possible out of bounds write due to a missing bounds check. This could lead to local informatio…
-
Low 3.3
In Permission Manager, there is a possible way for the microphone privacy indicator to remain activated even after the …
-
Medium 5.5
In libxml2, there is a possible out of bounds read due to a buffer overflow. This could lead to local information discl…