Skip to content
OpenAdvisories

Vendor

Google

9,109 known vulnerabilities.

3,200 results · Clear filters · Feed

  • High 7.8

    In onCreate of SelectAccountActivity.java, there is a possible way to add contacts without permission due to a logic er…

  • High 7.8

    In setDisplayName of AssociationRequest.java, there is a possible way for an app to retain CDM association due to a log…

  • High 7.8

    In maybeShowDialog of ControlsSettingsDialogManager.kt, there is a possible overlay of the ControlsSettingsDialog due t…

  • High 7.8

    In multiple locations, there is a possible privilege escalation due to a tapjacking/overlay attack. This could lead to …

  • High 7.8

    In onStart of BiometricEnrollIntroduction.java, there is a possible way to determine the device's location due to an un…

  • High 7.8

    In onActivityResult of VoicemailSettingsActivity.java, there is a possible work profile contact number leak due to a co…

  • High 7.8

    In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a secondary user to dis…

  • High 7.8

    In startSpaActivityForApp of SpaActivity.kt, there is a possible cross-user permission bypass due to a logic error in t…

  • High 7.8

    In multiple locations, there is a possible memory corruption due to a use after free. This could lead to local escalati…

  • High 7.8

    In showDismissibleKeyguard of KeyguardService.java, there is a possible way to bypass app pinning due to a logic error …

  • High 7.8

    In multiple functions of PickerDbFacade.java, there is a possible unauthorized data access due to SQL injection. This c…

  • High 7.8

    In multiple functions of AppRestrictionsFragment.java, there is a possible way to bypass intent security check due to a…

  • High 7.8

    In appendFrom of Parcel.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to …

  • High 7.8
    CVE-2025-32324 Public exploit

    In onCommand of ActivityManagerShellCommand.java, there is a possible arbitrary activity launch due to a confused deput…

  • High 7.8

    In getCallingAppName of Shared.java, there is a possible way to trick users into granting file access via deceptive tex…

  • High 7.8

    In isSafeIntent of AccountTypePreferenceLoader.java, there is a possible way to bypass an intent type check due to a co…

  • High 7.8

    In executeAppFunction of AppSearchManagerService.java, there is a possible background activity launch due to a logic er…

  • High 7.8

    In validateUriSchemeAndPermission of DisclaimersParserImpl.java , there is a possible way to access data from another u…

  • High 7.8

    In multiple locations, there is a possible way to hijack the Launcher app due to a logic error in the code. This could …

  • High 7.8

    In avrc_vendor_msg of avrc_opt.cc, there is a possible out of bounds write due to a heap buffer overflow. This could le…

  • High 7.0

    In multiple locations, there is a possible way to use apps linked from a context menu of a lockscreen app due to a race…

  • High 8.1

    In multiple locations, there is a possible condition that results in OOB accesses due to an incorrect bounds check. Thi…

  • High 7.3
    CVE-2025-22441 Public exploit

    In getContextForResourcesEnsuringCorrectCachedApkPaths of RemoteViews.java, there is a possible way to load arbitrary j…

  • High 7.8

    In createIntentsList of PackageParser.java , there is a possible way to bypass lazy bundle hardening, allowing modified…

  • High 7.8

    In AccessibilityServiceConnection.java, there is a possible background activity launch due to a logic error in the code…

  • High 7.8

    In multiple functions of LocationProviderManager.java, there is a possible background activity launch due to a logic er…

  • High 7.8

    In multiple functions of NdkMediaCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This…

  • High 7.8

    In loadDrawableForCookie of ResourcesImpl.java, there is a possible way to access task snapshots of other apps due to a…

  • High 7.8

    In onInputEvent of IInputMethodSessionWrapper.java, there is a possible way for an untrusted app to inject key and moti…

  • High 7.3
    CVE-2025-26443 Public exploit

    In parseHtml of HtmlToSpannedParser.java, there is a possible way to install apps without allowing installation from un…

  • High 7.8

    In onHandleForceStop of VoiceInteractionManagerService.java, there is a bug that could cause the system to incorrectly …

  • High 7.8

    In multiple functions of CameraService.cpp, there is a possible way to use the camera from the background due to a perm…

  • High 8.8

    In smp_process_secure_connection_oob_data of smp_act.cc, there is a possible way to bypass SMP authentication due to In…

  • High 7.8

    In clearAllowBgActivityStarts of PendingIntentRecord.java, there is a possible way for an application to launch an acti…

  • High 7.8

    In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a secondary user to dis…

  • High 7.8

    In getDestinationForApp of SpaAppBridgeActivity, there is a possible cross-user file reveal due to a logic error in the…

  • High 7.8

    In wl_cfgscan_update_v3_schedscan_results() of wl_cfgscan.c, there is a possible out of bounds write due to an incorrec…

  • High 7.8

    In wl_update_hidden_ap_ie() of wl_cfgscan.c, there is a possible out of bounds write due to improper input validation. …

  • High 7.3

    In draw_surface_image() of abl/android/lib/draw/draw.c, there is a possible out of bounds write due to a heap buffer ov…

  • High 7.8

    In ConvertReductionOp of darwinn_mlir_converter_aidl.cc, there is a possible out of bounds write due to a heap buffer o…