| CVE-2025-26441 |
In add_attr of sdp_discovery.cc, there is a possible out of bounds read due to a missing bounds check
|
6.5
Medium
|
Sep 4, 2025 |
| CVE-2025-26437 |
In CredentialManagerServiceStub of CredentialManagerService.java, there is a possible way to retrieve candidate…
|
5.5
Medium
|
Sep 4, 2025 |
| CVE-2025-26432 |
In multiple locations, there is a possible way to persistently DoS the device due to a missing length check
|
5.5
Medium
|
Sep 4, 2025 |
| CVE-2025-26444 |
In onHandleForceStop of VoiceInteractionManagerService.java, there is a bug that could cause the system to incorrectly…
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-26442 |
In onCreate of NotificationAccessConfirmationActivity.java, there is a possible incorrect verification of proper…
|
5.5
Medium
|
Sep 4, 2025 |
| CVE-2025-26440 |
In multiple functions of CameraService.cpp, there is a possible way to use the camera from the background due to a…
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-26438 |
In smp_process_secure_connection_oob_data of smp_act.cc, there is a possible way to bypass SMP authentication due to…
|
8.8
High
|
Sep 4, 2025 |
| CVE-2025-26436 |
In clearAllowBgActivityStarts of PendingIntentRecord.java, there is a possible way for an application to launch an…
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-26435 |
In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a secondary user to…
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-26430 |
In getDestinationForApp of SpaAppBridgeActivity, there is a possible cross-user file reveal due to a logic error in…
|
7.8
High
|
Sep 4, 2025 |
| CVE-2025-26429 |
In collectOps of AppOpsService.java, there is a possible way to cause permanent DoS due to improper input validation
|
5.5
Medium
|
Sep 4, 2025 |
| CVE-2025-26428 |
In startLockTaskMode of LockTaskController.java, there is a possible lock screen bypass due to a logic error in the code
|
3.2
Low
|
Sep 4, 2025 |
| CVE-2025-26427 |
In multiple locations, there is a possible Android/data access due to a path traversal error
|
4.4
Medium
|
Sep 4, 2025 |
| CVE-2025-26426 |
In BroadcastController.java of registerReceiverWithFeatureTraced, there is a possible way to receive broadcasts meant…
|
5.1
Medium
|
Sep 4, 2025 |
| CVE-2025-26425 |
In multiple functions of RoleService.java, there is a possible permission squatting vulnerability due to a logic error…
|
4.0
Medium
|
Sep 4, 2025 |
| CVE-2025-26424 |
In multiple functions of VpnManager.java, there is a possible cross-user data leak due to a logic error in the code
|
4.0
Medium
|
Sep 4, 2025 |
| CVE-2025-26423 |
In validateIpConfiguration of WifiConfigurationUtil.java, there is a possible way to trigger a permanent DoS due to a…
|
6.2
Medium
|
Sep 4, 2025 |
| CVE-2025-26422 |
In dump of WindowManagerService.java, there is a possible way of running dumpsys without the required permission due…
|
4.0
Medium
|
Sep 4, 2025 |
| CVE-2025-26421 |
In multiple locations, there is a possible lock screen bypass due to a logic error in the code
|
4.0
Medium
|
Sep 4, 2025 |
| CVE-2025-26420 |
In multiple functions of GrantPermissionsActivity.java , there is a possible way to trick the user into granting the…
|
4.4
Medium
|
Sep 4, 2025 |
| CVE-2025-22425 |
In onCreate of InstallStart.java, there is a possible permissions bypass due to improper input validation
|
5.1
Medium
|
Sep 4, 2025 |
| CVE-2025-0087 |
In onCreate of UninstallerActivity.java, there is a possible way to uninstall a different user's app due to a missing…
|
5.1
Medium
|
Sep 4, 2025 |
| CVE-2025-0077 |
In multiple functions of UserController.java, there is a possible lock screen bypass due to a race condition
|
4.0
Medium
|
Sep 4, 2025 |
| CVE-2024-49739 |
In MMapVAccess of pmr_os.c, there is a possible out of bounds write due to improper input validation
|
4.0
Medium
|
Sep 4, 2025 |
| CVE-2023-35657 |
In bta_av_config_ind of bta_av_aact.cc, there is a possible out of bounds read due to type confusion
|
4.0
Medium
|
Sep 4, 2025 |