2,760 results · Feed
-
High 8.4
There is a possible escalation of privilege due to test/debugging code left in a production build. This could lead to p…
-
High 7.8
There is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of pr…
-
Critical 9.8
In unknown of cd_CnMsgCodecUserApi.cpp, there is a possible out of bounds write due to a missing bounds check. This cou…
-
Critical 9.8
WLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, aka A-394765106.
-
High 7.5
-
High 7.5
In TBD of TBD, there is a possible DoS due to a missing null check. This could lead to remote denial of service with no…
-
Medium 5.5
In ReadTachyonCommands of gxp_main_actor.cc, there is a possible information leak due to uninitialized data. This could…
-
High 7.5
-
High 8.8
-
Critical 9.8
-
Critical 9.8
In initializeSwizzler of SkBmpStandardCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow.…
-
High 7.0CVE-2025-22442 Public exploit
In multiple functions of DevicePolicyManagerService.java, there is a possible way to install unauthorized applications …
-
High 7.3
In onLastAccessedStackLoaded of ActionHandler.java , there is a possible way to bypass storage restrictions across apps…
-
High 7.8
In afterKeyEventLockedInterruptable of InputDispatcher.cpp, there is a possible use after free. This could lead to loca…
-
High 7.8
In setMediaButtonReceiver of multiple files, there is a possible way to launch arbitrary activities from background due…
-
Critical 9.8
In avdt_msg_ind of avdt_msg.cc, there is a possible memory corruption due to type confusion. This could lead to paired …
-
High 7.8
In handleKeyGestureEvent of PhoneWindowManager.java, there is a possible lock screen bypass due to a logic error in the…
-
High 7.8
In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commo…
-
Medium 5.5
In multiple locations, there is a possible method for a malicious app to prevent dialing emergency services under limit…
-
Medium 5.5
In isInSignificantPlace of multiple files, there is a possible way to access sensitive information due to a missing per…
-
Critical 9.8
In multiple locations, there is a possible way to execute arbitrary code due to a logic error in the code. This could l…
-
High 7.8
In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible way to grant permissions to an app on …
-
High 7.3
In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to grant notification access above …
-
High 7.5
In ParseTag of dng_ifd.cpp, there is a possible way to crash the image renderer due to a missing bounds check. This cou…
-
High 7.8
In multiple locations, there is a possible way to mislead a user into approving an authentication prompt for one app wh…
-
Medium 5.5
In contentDescForNotification of NotificationContentDescription.kt, there is a possible notification content leak throu…
-
High 7.3
In multiple locations, there is a possible way to mislead the user into enabling malicious phone calls forwarding due t…
-
High 7.8
In multiple locations, there is a possible confused deputy due to Intent Redirect. This could lead to local escalation …
-
High 7.3
In finishTransition of Transition.java, there is a possible way to bypass touch filtering restrictions due to a tapjack…
-
High 7.8
In onCreate of ChooserActivity.java , there is a possible way to view other users' images due to a confused deputy. Thi…
-
High 7.8
In FuseDaemon.cpp, there is a possible out of bounds write due to memory corruption. This could lead to local escalatio…
-
Medium 5.5
In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a confused…
-
Medium 5.5
In showAvatarPicker of EditUserPhotoController.java, there is a possible cross user image leak due to a confused deputy…
-
High 7.8
In multiple functions of Permissions.java, there is a possible way to override the state of the user's location permiss…
-
High 7.3
In multiple functions of ConnectionServiceWrapper.java, there is a possible way to retain a permission forever in the b…
-
Medium 4.0CVE-2025-26417 Public exploit
In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening fi…
-
Medium 4.0
In multiple functions of hyp-main.c, there is a possible privilege escalation due to a logic error in the code. This co…
-
High 8.8
In multiple functions of sdp_server.cc, there is a possible use after free due to a logic error in the code. This could…
-
High 8.8
In process_service_attr_rsp of sdp_discovery.cc, there is a possible use after free due to a logic error in the code. T…
-
High 8.4
In multiple locations, there is a possible way to execute arbitrary code due to a use after free. This could lead to lo…