Skip to content
OpenAdvisories

Vendor

Google

9,109 known vulnerabilities.

3,200 results · Clear filters · Feed

  • High 7.4

    In bigo_worker_thread of private/google-modules/video/gchips/bigo.c, there is a possible use after free due to a race c…

  • High 7.8

    In tracepoint_msg_handler of cpm/google/lib/tracepoint/tracepoint_ipc.c, there is a possible memory overwrite due to im…

  • High 7.8

    In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to a missing bounds check. This could le…

  • High 7.8

    In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to a missing bounds check. This could le…

  • High 7.8

    In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to an incorrect bounds check. This could…

  • High 7.8

    In GetTachyonCommand of tachyon_server_common.h, there is a possible out of bounds write due to a missing bounds check.…

  • High 7.8

    In WAVES_send_data_to_dsp of libaoc_waves.c, there is a possible out of bounds write due to a missing bounds check. Thi…

  • High 8.0

    In ss_DecodeLcsAssistDataReqMsg(void) of ss_LcsManagement.c, there is a possible out of bounds write due to an incorrec…

  • High 8.0

    In NrmmDecoder::DecodeSORTransparentContext of cn_NrmmDecoder.cpp, there is a possible out of bounds write due to a hea…

  • High 7.8

    In aocc_read of aoc_channel_dev.c, there is a possible double free due to improper locking. This could lead to local es…

  • High 7.8

    In aoc_service_read_message of aoc_ipc_core.c, there is a possible out of bounds read due to improper input validation.…

  • High 7.0

    In PrepareWorkloadBuffers of gxp_main_actor.cc, there is a possible double fetch due to a race condition. This could le…

  • High 7.0

    In multiple locations of UsbDataAdvancedProtectionHook.java, there is a possible way to access USB data when the screen…

  • High 7.8

    In preparePackage of InstallPackageHelper.java, there is a possible way for an app to appear hidden upon installation w…

  • High 7.3

    In DefaultTransitionHandler.java, there is a possible way to unknowingly grant permissions to an app due to a tapjackin…

  • High 7.8

    In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to improper input validation. This could…

  • High 7.8

    In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could …

  • High 7.8

    In setDisplayName of AssociationRequest.java, there is a possible way to cause CDM associations to persist after the us…

  • High 7.8

    In findAvailRecognizer of VoiceInteractionManagerService.java, there is a possible way to become the default speech rec…

  • High 7.8

    In validateIconUserBoundary of PrintManagerService.java, there is a possible cross-user image leak due to a confused de…

  • High 7.8

    In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to launch an activity from the…

  • High 8.8

    In multiple locations, there is a possible way to launch an application from the background due to a precondition check…

  • High 7.8

    In multiple functions of arm-smmu-v3.c, there is a possible out-of-bounds write due to improper input validation. This …

  • High 7.8

    In init_pkvm_hyp_vcpu of pkvm.c, there is a possible out of bounds write due to improper input validation. This could l…

  • High 7.3

    In DefaultTransitionHandler.java, there is a possible way to enable a tapjacking attack due to a insecure default. This…

  • High 7.8

    In onSomePackagesChanged of VoiceInteractionManagerService.java, there is a possible way for a third party application'…

  • High 7.8

    In getComponentName of MediaButtonReceiverHolder.java, there is a possible desync in persistence due to resource exhaus…

  • High 7.8

    In setDefaultKey of DefaultPaymentSettings.java, there is a possible way for an application to set the main user's defa…

  • High 7.8

    In multiple functions of WifiScanModeActivity.java, there is a possible way to bypass a device config restriction due t…

  • High 7.8

    In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay …

  • High 7.8

    In appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to l…

  • High 7.8

    In onUidImportance of DisassociationProcessor.java, there is a possible way to retain companion application privileges …

  • High 7.8

    In multiple functions of HeaderPrivacyIconsController.kt, there is a possible way to grand permissions across user due …

  • High 7.8

    In startAlwaysOnVpn of Vpn.java, there is a possible way to disable always-on VPN due to a logic error in the code. Thi…

  • High 7.8

    In onActivityResult of EditFdnContactScreen.java, there is a possible way to leak contacts from the work profile due to…

  • High 7.8
    CVE-2025-48583 Public exploit

    In multiple functions of BaseBundle.java, there is a possible way to execute arbitrary code due to a logic error in the…

  • High 7.8

    In connectInternal of MediaBrowser.java, there is a possible way to access while in use permission while the app is in …

  • High 7.8

    In multiple functions of CertInstaller.java, there is a possible way to install certificates due to a permissions bypas…

  • High 7.8

    In sendCommand of MediaSessionRecord.java, there is a possible way to launch the foreground service while the app is in…

  • High 7.8
    CVE-2025-48572 Exploited

    In multiple locations, there is a possible way to launch activities from the background due to a permissions bypass. Th…

    KEV Dec 2, 2025