| CVE-2025-22439 |
In onLastAccessedStackLoaded of ActionHandler.java , there is a possible way to bypass storage restrictions across…
|
7.3
High
|
Sep 2, 2025 |
| CVE-2025-22438 |
In afterKeyEventLockedInterruptable of InputDispatcher.cpp, there is a possible use after free
|
7.8
High
|
Sep 2, 2025 |
| CVE-2025-22437 |
In setMediaButtonReceiver of multiple files, there is a possible way to launch arbitrary activities from background…
|
7.8
High
|
Sep 2, 2025 |
| CVE-2025-22435 |
In avdt_msg_ind of avdt_msg.cc, there is a possible memory corruption due to type confusion
|
9.8
Critical
|
Sep 2, 2025 |
| CVE-2025-22434 |
In handleKeyGestureEvent of PhoneWindowManager.java, there is a possible lock screen bypass due to a logic error in…
|
7.8
High
|
Sep 2, 2025 |
| CVE-2025-22433 |
In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most…
|
7.8
High
|
Sep 2, 2025 |
| CVE-2025-22431 |
In multiple locations, there is a possible method for a malicious app to prevent dialing emergency services under…
|
5.5
Medium
|
Sep 2, 2025 |
| CVE-2025-22430 |
In isInSignificantPlace of multiple files, there is a possible way to access sensitive information due to a missing…
|
5.5
Medium
|
Sep 2, 2025 |
| CVE-2025-22429 |
In multiple locations, there is a possible way to execute arbitrary code due to a logic error in the code
|
9.8
Critical
|
Sep 2, 2025 |
| CVE-2025-22428 |
In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible way to grant permissions to an app on…
|
7.8
High
|
Sep 2, 2025 |
| CVE-2025-22427 |
In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to grant notification access above…
|
7.3
High
|
Sep 2, 2025 |
| CVE-2025-22423 |
In ParseTag of dng_ifd.cpp, there is a possible way to crash the image renderer due to a missing bounds check
|
7.5
High
|
Sep 2, 2025 |
| CVE-2025-22422 |
In multiple locations, there is a possible way to mislead a user into approving an authentication prompt for one app…
|
7.8
High
|
Sep 2, 2025 |
| CVE-2025-22421 |
In contentDescForNotification of NotificationContentDescription.kt, there is a possible notification content leak…
|
5.5
Medium
|
Sep 2, 2025 |
| CVE-2025-22419 |
In multiple locations, there is a possible way to mislead the user into enabling malicious phone calls forwarding due to…
|
7.3
High
|
Sep 2, 2025 |
| CVE-2025-22418 |
In multiple locations, there is a possible confused deputy due to Intent Redirect
|
7.8
High
|
Sep 2, 2025 |
| CVE-2025-22417 |
In finishTransition of Transition.java, there is a possible way to bypass touch filtering restrictions due to a…
|
7.3
High
|
Sep 2, 2025 |
| CVE-2025-22416 |
In onCreate of ChooserActivity.java , there is a possible way to view other users' images due to a confused deputy
|
7.8
High
|
Sep 2, 2025 |
| CVE-2024-49730 |
In FuseDaemon.cpp, there is a possible out of bounds write due to memory corruption
|
7.8
High
|
Sep 2, 2025 |
| CVE-2024-49728 |
In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a…
|
5.5
Medium
|
Sep 2, 2025 |
| CVE-2024-49722 |
In showAvatarPicker of EditUserPhotoController.java, there is a possible cross user image leak due to a confused deputy
|
5.5
Medium
|
Sep 2, 2025 |
| CVE-2024-49720 |
In multiple functions of Permissions.java, there is a possible way to override the state of the user's location…
|
7.8
High
|
Sep 2, 2025 |
| CVE-2024-40653 |
In multiple functions of ConnectionServiceWrapper.java, there is a possible way to retain a permission forever in the…
|
7.3
High
|
Sep 2, 2025 |
| CVE-2025-26417 |
In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening…
|
4.0
Medium
|
Aug 26, 2025 |
| CVE-2025-22413 |
In multiple functions of hyp-main.c, there is a possible privilege escalation due to a logic error in the code
|
4.0
Medium
|
Aug 26, 2025 |