| CVE-2025-48612 |
In setDefaultKey of DefaultPaymentSettings.java, there is a possible way for an application to set the main user's…
|
7.8
High
|
Dec 8, 2025 |
| CVE-2025-48610 |
In __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possible configuration data leak due to a logic error in…
|
5.5
Medium
|
Dec 8, 2025 |
| CVE-2025-48607 |
In multiple locations, there is a possible way to create a large amount of app ops due to a logic error in the code
|
5.5
Medium
|
Dec 8, 2025 |
| CVE-2025-48604 |
In multiple locations, there is a possible way to read files from another user due to a missing permission check
|
5.5
Medium
|
Dec 8, 2025 |
| CVE-2025-48603 |
In InputMethodInfo of InputMethodInfo.java, there is a possible permanent denial of service due to resource exhaustion
|
5.5
Medium
|
Dec 8, 2025 |
| CVE-2025-48601 |
In multiple locations, there is a possible permanent denial of service due to improper input validation
|
5.5
Medium
|
Dec 8, 2025 |
| CVE-2025-48600 |
In multiple files, there is a possible way to reveal information across users due to a missing permission check
|
5.5
Medium
|
Dec 8, 2025 |
| CVE-2025-48599 |
In multiple functions of WifiScanModeActivity.java, there is a possible way to bypass a device config restriction due to…
|
7.8
High
|
Dec 8, 2025 |
| CVE-2025-48598 |
In multiple locations, there is a possible way to alter the primary user's face unlock settings due to a confused deputy
|
6.6
Medium
|
Dec 8, 2025 |
| CVE-2025-48597 |
In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay…
|
7.8
High
|
Dec 8, 2025 |
| CVE-2025-48596 |
In appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check
|
7.8
High
|
Dec 8, 2025 |
| CVE-2025-48594 |
In onUidImportance of DisassociationProcessor.java, there is a possible way to retain companion application privileges…
|
7.8
High
|
Dec 8, 2025 |
| CVE-2025-48592 |
In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow
|
6.5
Medium
|
Dec 8, 2025 |
| CVE-2025-48591 |
In multiple locations, there is a possible way to read files from another user due to a missing permission check
|
5.5
Medium
|
Dec 8, 2025 |
| CVE-2025-48590 |
In verifyAndGetBypass of AppOpsService.java, there is a possible method for a malicious app to prevent dialing emergency…
|
5.5
Medium
|
Dec 8, 2025 |
| CVE-2025-48589 |
In multiple functions of HeaderPrivacyIconsController.kt, there is a possible way to grand permissions across user …
|
7.8
High
|
Dec 8, 2025 |
| CVE-2025-48588 |
In startAlwaysOnVpn of Vpn.java, there is a possible way to disable always-on VPN due to a logic error in the code
|
7.8
High
|
Dec 8, 2025 |
| CVE-2025-48586 |
In onActivityResult of EditFdnContactScreen.java, there is a possible way to leak contacts from the work profile due…
|
7.8
High
|
Dec 8, 2025 |
| CVE-2025-48584 |
In multiple functions of NotificationManagerService.java, there is a possible way to bypass the per-package channel…
|
5.5
Medium
|
Dec 8, 2025 |
| CVE-2025-48583 |
In multiple functions of BaseBundle.java, there is a possible way to execute arbitrary code due to a logic error in…
|
7.8
High
|
Dec 8, 2025 |
| CVE-2025-48580 |
In connectInternal of MediaBrowser.java, there is a possible way to access while in use permission while the app is in…
|
7.8
High
|
Dec 8, 2025 |
| CVE-2025-48576 |
In updateNotificationChannelGroupFromPrivilegedListener of NotificationManagerService.java, there is a possible…
|
5.5
Medium
|
Dec 8, 2025 |
| CVE-2025-48575 |
In multiple functions of CertInstaller.java, there is a possible way to install certificates due to a permissions bypass
|
7.8
High
|
Dec 8, 2025 |
| CVE-2025-48573 |
In sendCommand of MediaSessionRecord.java, there is a possible way to launch the foreground service while the app is…
|
7.8
High
|
Dec 8, 2025 |
| CVE-2025-48572 |
Exploited
Android Framework Privilege Escalation Vulnerability
|
7.8
High
|
Dec 8, 2025 |