| CVE-2025-32325 |
In appendFrom of Parcel.cpp, there is a possible out of bounds write due to a heap buffer overflow
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-32324 |
In onCommand of ActivityManagerShellCommand.java, there is a possible arbitrary activity launch due to a confused deputy
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-32323 |
In getCallingAppName of Shared.java, there is a possible way to trick users into granting file access via deceptive text…
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-32321 |
In isSafeIntent of AccountTypePreferenceLoader.java, there is a possible way to bypass an intent type check due to a…
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-26464 |
In executeAppFunction of AppSearchManagerService.java, there is a possible background activity launch due to a logic…
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-26454 |
In validateUriSchemeAndPermission of DisclaimersParserImpl.java , there is a possible way to access data from another…
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-0089 |
In multiple locations, there is a possible way to hijack the Launcher app due to a logic error in the code
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-0076 |
In multiple locations, there is a possible way to view icons belonging to another user due to a missing permission check
|
3.3
Low
|
Sep 4, 2025 |
| CVE-2024-49714 |
In avrc_vendor_msg of avrc_opt.cc, there is a possible out of bounds write due to a heap buffer overflow
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-48533 |
In multiple locations, there is a possible way to use apps linked from a context menu of a lockscreen app due to a…
|
7.0
High
|
Sep 4, 2025 |
| CVE-2025-48530 |
In multiple locations, there is a possible condition that results in OOB accesses due to an incorrect bounds check
|
8.1
High
|
Sep 4, 2025 |
| CVE-2025-22441 |
In getContextForResourcesEnsuringCorrectCachedApkPaths of RemoteViews.java, there is a possible way to load arbitrary…
|
7.3
High
|
Sep 4, 2025 |
| CVE-2025-32312 |
In createIntentsList of PackageParser.java , there is a possible way to bypass lazy bundle hardening, allowing…
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-26463 |
In allowPackageAccess of multiple files, resource exhaustion is possible when repeatedly adding allowed packages
|
5.5
Medium
|
Sep 4, 2025 |
| CVE-2025-26462 |
In AccessibilityServiceConnection.java, there is a possible background activity launch due to a logic error in the code
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-26458 |
In multiple functions of LocationProviderManager.java, there is a possible background activity launch due to a logic…
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-26456 |
In multiple functions of DexUseManagerLocal.java, there is a possible way to crash system server due to a logic error in…
|
5.5
Medium
|
Sep 4, 2025 |
| CVE-2025-26455 |
In multiple functions of NdkMediaCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-26453 |
In isContentUriForOtherUser of BluetoothOppSendFileInfo.java, there is a possible cross user data leak due to a logic…
|
5.5
Medium
|
Sep 4, 2025 |
| CVE-2025-26452 |
In loadDrawableForCookie of ResourcesImpl.java, there is a possible way to access task snapshots of other apps due to…
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-26450 |
In onInputEvent of IInputMethodSessionWrapper.java, there is a possible way for an untrusted app to inject key and…
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-26449 |
In multiple locations, there is a possible permanent denial of service due to resource exhaustion
|
5.5
Medium
|
Sep 4, 2025 |
| CVE-2025-26448 |
In writeToParcel of CursorWindow.cpp, there is a possible out of bounds read due to uninitialized data
|
5.5
Medium
|
Sep 4, 2025 |
| CVE-2025-26445 |
In offerNetwork of ConnectivityService.java, there is a possible leak of sensitive data due to a missing permission…
|
5.5
Medium
|
Sep 4, 2025 |
| CVE-2025-26443 |
In parseHtml of HtmlToSpannedParser.java, there is a possible way to install apps without allowing installation from…
|
7.3
High
|
Sep 4, 2025 |