| CVE-2025-48539 |
In SendPacketToPeer of acl_arbiter.cc, there is a possible out of bounds read due to a use after free
|
8.0
High
|
Sep 4, 2025 |
| CVE-2025-48538 |
In setApplicationHiddenSettingAsUser of PackageManagerService.java, there is a possible way to hide a system critical…
|
5.5
Medium
|
Sep 4, 2025 |
| CVE-2025-48537 |
In multiple locations, there is a possible way to persistently DoS the device due to improper input validation
|
7.1
High
|
Sep 4, 2025 |
| CVE-2025-48535 |
In assertSafeToStartCustomActivity of AppRestrictionsFragment.java , there is a possible way to exploit a parcel…
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-48534 |
In getDefaultCBRPackageName of CellBroadcastHandler.java, there is a possible escalation of privilege due to a logic…
|
8.8
High
|
Sep 4, 2025 |
| CVE-2025-48532 |
In markMediaAsFavorite of MediaProvider.java, there is a possible way to bypass the WRITE_EXTERNAL_STORAGE permission…
|
7.3
High
|
Sep 4, 2025 |
| CVE-2025-48531 |
In getCallingPackageName of CredentialStorage, there is a possible permission bypass due to a logic error in the code
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-48529 |
In setRingtoneUri of VoicemailNotificationSettingsUtil.java , there is a possible cross user data leak due to a confused…
|
5.5
Medium
|
Sep 4, 2025 |
| CVE-2025-48528 |
In multiple locations, there is a possible way to overlay biometrics due to a tapjacking/overlay attack
|
4.0
Medium
|
Sep 4, 2025 |
| CVE-2025-48527 |
In multiple locations, there is a possible way to leak hidden work profile notifications due to a logic error in the…
|
6.2
Medium
|
Sep 4, 2025 |
| CVE-2025-48526 |
In createMultiProfilePagerAdapter of ChooserActivity.java , there is a possible way for an app to launch the…
|
4.0
Medium
|
Sep 4, 2025 |
| CVE-2025-48524 |
In isSystem of WifiPermissionsUtil.java, there is a possible permission bypass due to a missing permission check
|
5.5
Medium
|
Sep 4, 2025 |
| CVE-2025-48523 |
In onCreate of SelectAccountActivity.java, there is a possible way to add contacts without permission due to a logic…
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-48522 |
In setDisplayName of AssociationRequest.java, there is a possible way for an app to retain CDM association due to a…
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-32350 |
In maybeShowDialog of ControlsSettingsDialogManager.kt, there is a possible overlay of the ControlsSettingsDialog due to…
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-32349 |
In multiple locations, there is a possible privilege escalation due to a tapjacking/overlay attack
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-32347 |
In onStart of BiometricEnrollIntroduction.java, there is a possible way to determine the device's location due to an…
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-32346 |
In onActivityResult of VoicemailSettingsActivity.java, there is a possible work profile contact number leak due to a…
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-32345 |
In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a secondary user to…
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-32333 |
In startSpaActivityForApp of SpaActivity.kt, there is a possible cross-user permission bypass due to a logic error in…
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-32332 |
In multiple locations, there is a possible memory corruption due to a use after free
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-32331 |
In showDismissibleKeyguard of KeyguardService.java, there is a possible way to bypass app pinning due to a logic error…
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-32330 |
In generateRandomPassword of LocalBluetoothLeBroadcast.java, there is a possible way to intercept the Auracast audio…
|
5.7
Medium
|
Sep 4, 2025 |
| CVE-2025-32327 |
In multiple functions of PickerDbFacade.java, there is a possible unauthorized data access due to SQL injection
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-32326 |
In multiple functions of AppRestrictionsFragment.java, there is a possible way to bypass intent security check due to a…
|
7.8
High
|
Sep 4, 2025 |