Skip to content
OpenAdvisories

Vendor

Google

9,109 known vulnerabilities.

2,324 results · Clear filters · Feed

  • Medium 5.5

    In multiple functions of AccountManagerService.java, there is a possible permanent denial of service due to resource ex…

  • Medium 5.5

    In setApplicationHiddenSettingAsUser of PackageManagerService.java, there is a possible way to hide a system critical p…

  • Medium 5.5

    In setRingtoneUri of VoicemailNotificationSettingsUtil.java , there is a possible cross user data leak due to a confuse…

  • Medium 4.0

    In multiple locations, there is a possible way to overlay biometrics due to a tapjacking/overlay attack. This could lea…

  • Medium 6.2

    In multiple locations, there is a possible way to leak hidden work profile notifications due to a logic error in the co…

  • Medium 4.0

    In createMultiProfilePagerAdapter of ChooserActivity.java , there is a possible way for an app to launch the ChooserAct…

  • Medium 5.5

    In isSystem of WifiPermissionsUtil.java, there is a possible permission bypass due to a missing permission check. This …

  • Medium 5.7

    In generateRandomPassword of LocalBluetoothLeBroadcast.java, there is a possible way to intercept the Auracast audio st…

  • Medium 5.5

    In allowPackageAccess of multiple files, resource exhaustion is possible when repeatedly adding allowed packages. This …

  • Medium 5.5

    In multiple functions of DexUseManagerLocal.java, there is a possible way to crash system server due to a logic error i…

  • Medium 5.5

    In isContentUriForOtherUser of BluetoothOppSendFileInfo.java, there is a possible cross user data leak due to a logic e…

  • Medium 5.5

    In multiple locations, there is a possible permanent denial of service due to resource exhaustion. This could lead to l…

  • Medium 5.5

    In writeToParcel of CursorWindow.cpp, there is a possible out of bounds read due to uninitialized data. This could lead…

  • Medium 5.5

    In offerNetwork of ConnectivityService.java, there is a possible leak of sensitive data due to a missing permission che…

  • Medium 6.5

    In add_attr of sdp_discovery.cc, there is a possible out of bounds read due to a missing bounds check. This could lead …

  • Medium 5.5

    In CredentialManagerServiceStub of CredentialManagerService.java, there is a possible way to retrieve candidate credent…

  • Medium 5.5

    In multiple locations, there is a possible way to persistently DoS the device due to a missing length check. This could…

  • Medium 5.5

    In onCreate of NotificationAccessConfirmationActivity.java, there is a possible incorrect verification of proper intent…

  • Medium 5.5

    In collectOps of AppOpsService.java, there is a possible way to cause permanent DoS due to improper input validation. T…

  • Medium 4.4

    In multiple locations, there is a possible Android/data access due to a path traversal error. This could lead to local …

  • Medium 5.1

    In BroadcastController.java of registerReceiverWithFeatureTraced, there is a possible way to receive broadcasts meant f…

  • Medium 4.0

    In multiple functions of RoleService.java, there is a possible permission squatting vulnerability due to a logic error …

  • Medium 4.0

    In multiple functions of VpnManager.java, there is a possible cross-user data leak due to a logic error in the code. Th…

  • Medium 6.2

    In validateIpConfiguration of WifiConfigurationUtil.java, there is a possible way to trigger a permanent DoS due to a m…

  • Medium 4.0

    In dump of WindowManagerService.java, there is a possible way of running dumpsys without the required permission due to…

  • Medium 4.0

    In multiple locations, there is a possible lock screen bypass due to a logic error in the code. This could lead to loca…

  • Medium 4.4

    In multiple functions of GrantPermissionsActivity.java , there is a possible way to trick the user into granting the in…

  • Medium 5.1

    In onCreate of InstallStart.java, there is a possible permissions bypass due to improper input validation. This could l…

  • Medium 5.1
    CVE-2025-0087 Public exploit

    In onCreate of UninstallerActivity.java, there is a possible way to uninstall a different user's app due to a missing p…

  • Medium 4.0

    In multiple functions of UserController.java, there is a possible lock screen bypass due to a race condition. This coul…

  • Medium 4.0

    In MMapVAccess of pmr_os.c, there is a possible out of bounds write due to improper input validation. This could lead t…

  • Medium 4.0

    In bta_av_config_ind of bta_av_aact.cc, there is a possible out of bounds read due to type confusion. This could lead t…

  • Medium 6.5

    In SAEMM_DiscloseMsId of SAEMM_RadioMessageCodec.c, there is a possible out of bounds read due to a missing bounds chec…

  • Medium 5.3

    Information disclosure

  • Medium 6.7

    In lwis_top_register_io of lwis_device_top.c, there is a possible out of bounds write due to an incorrect bounds check.…

  • Medium 6.7

    In syna_cdev_ioctl_store_pid() of syna_tcm2_sysfs.c, there is a possible out of bounds write due to a heap buffer overf…

  • Medium 6.7

    In lwis_test_register_io of lwis_device_test.c, there is a possible OOB Write due to an integer overflow. This could le…

  • Medium 5.5

    In ReadTachyonCommands of gxp_main_actor.cc, there is a possible information leak due to uninitialized data. This could…

  • Medium 5.4

    Inappropriate implementation in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker …

  • Medium 5.4

    Inappropriate implementation in Toolbar in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker wh…