Skip to content

Known vulnerabilities in Google Android

Is your version affected?

CVE Summary Score Published
CVE-2025-22414 In FrpBypassAlertActivity of FrpBypassAlertActivity.java, there is a possible way to bypass FRP due to a missing… 7.8 High Sep 4, 2025
CVE-2024-49731 In apk-versions.txt, there is a possible corruption of telemetry opt-in settings on other watches when setting up a… 4.0 Medium Sep 4, 2025
CVE-2025-48581 In VerifyNoOverlapInSessions of apexd.cpp, there is a possible way to block security updates due to a logic error in the… 8.4 High Sep 4, 2025
CVE-2025-48563 In onNullBinding of RemoteFillService.java, there is a possible background activity launch due to an insecure default… 7.8 High Sep 4, 2025
CVE-2025-48562 In writeContent of RemotePrintDocument.java, there is a possible information disclosure due to a logic error 5.0 Medium Sep 4, 2025
CVE-2025-48561 In multiple locations, there is a possible way to access data displayed on the screen due to side channel information… 5.5 Medium Sep 4, 2025
CVE-2025-48560 In AndroidManifest.xml, there is a possible way for an app to monitor motion events due to a confused deputy 5.5 Medium Sep 4, 2025
CVE-2025-48559 In multiple functions of AppOpsService.java, there is a possible add a large amount of app ops due to improper input… 5.5 Medium Sep 4, 2025
CVE-2025-48558 In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent intended for system… 7.8 High Sep 4, 2025
CVE-2025-48556 In multiple methods of NotificationChannel.java, there is a possible desynchronization from persistence due to… 7.3 High Sep 4, 2025
CVE-2025-48554 In handlePackagesChanged of DevicePolicyManagerService.java, there is a possible persistent denial of service due to a… 6.1 Medium Sep 4, 2025
CVE-2025-48553 In handlePackagesChanged of DevicePolicyManagerService.java, there is a possible DoS of a device admin due to a logic… 7.8 High Sep 4, 2025
CVE-2025-48552 In saveGlobalProxyLocked of DevicePolicyManagerService.java, there is a possible way to desync from persistence due to a… 7.8 High Sep 4, 2025
CVE-2025-48551 In multiple locations, there is a possible leak of an image across the Android User isolation boundary due to a confused… 5.0 Medium Sep 4, 2025
CVE-2025-48550 In testGrantSlicePermission of SliceManagerTest.java, there is a possible permanent denial of service due to a path… 5.5 Medium Sep 4, 2025
CVE-2025-48549 In multiple locations, there is a possible way to record audio via a background app due to a missing permission check 7.8 High Sep 4, 2025
CVE-2025-48548 In multiple functions of AppOpsControllerImpl.java, there is a possible way to record audio without displaying the… 7.3 High Sep 4, 2025
CVE-2025-48547 In multiple locations, there is a possible one-time permission bypass due to a logic error in the code 7.3 High Sep 4, 2025
CVE-2025-48546 In checkPermissions of SafeActivityOptions.java, there is a possible background activity launch due to a logic error… 7.8 High Sep 4, 2025
CVE-2025-48545 In isSystemUid of AccountManagerService.java, there is a possible way for an app to access privileged APIs due to a… 7.1 High Sep 4, 2025
CVE-2025-48544 In multiple locations, there is a possible way to read files belonging to other apps due to SQL injection 7.8 High Sep 4, 2025
CVE-2025-48543 Exploited Android Runtime Use-After-Free Vulnerability 8.8 High Sep 4, 2025
CVE-2025-48542 In multiple functions of AccountManagerService.java, there is a possible permanent denial of service due to resource… 5.5 Medium Sep 4, 2025
CVE-2025-48541 In onCreate of FaceSettings.java, there is a possible way to remove biometric unlock across user profiles due to… 7.8 High Sep 4, 2025
CVE-2025-48540 In processTransactInternal of RpcState.cpp, there is a possible local out of memory write due to a logic error in the… 7.8 High Sep 4, 2025

Other Google products