| CVE-2025-22412 |
In multiple functions of sdp_server.cc, there is a possible use after free due to a logic error in the code
|
8.8
High
|
Aug 26, 2025 |
| CVE-2025-22411 |
In process_service_attr_rsp of sdp_discovery.cc, there is a possible use after free due to a logic error in the code
|
8.8
High
|
Aug 26, 2025 |
| CVE-2025-22410 |
In multiple locations, there is a possible way to execute arbitrary code due to a use after free
|
8.4
High
|
Aug 26, 2025 |
| CVE-2025-22409 |
In rfc_send_buf_uih of rfc_ts_frames.cc, there is a possible way to execute arbitrary code due to a use after free
|
8.4
High
|
Aug 26, 2025 |
| CVE-2025-22408 |
In rfc_check_send_cmd of rfc_utils.cc, there is a possible way to execute arbitrary code due to a use after free
|
9.8
Critical
|
Aug 26, 2025 |
| CVE-2025-22407 |
In hidd_check_config_done of hidd_conn.cc, there is a possible way to execute arbitrary code due to a use after free
|
5.5
Medium
|
Aug 26, 2025 |
| CVE-2025-22406 |
In bnepu_check_send_packet of bnep_utils.cc, there is a possible way to achieve code execution due to a use after free
|
8.4
High
|
Aug 26, 2025 |
| CVE-2025-22405 |
In multiple locations, there is a possible way to execute arbitrary code due to a use after free
|
8.4
High
|
Aug 26, 2025 |
| CVE-2025-22404 |
In avct_lcb_msg_ind of avct_lcb_act.cc, there is a possible way to execute arbitrary code due to a use after free
|
8.4
High
|
Aug 26, 2025 |
| CVE-2025-22403 |
In sdp_snd_service_search_req of sdp_discovery.cc, there is a possible way to execute arbitrary code due to a use…
|
9.8
Critical
|
Aug 26, 2025 |
| CVE-2025-0093 |
In handleBondStateChanged of AdapterService.java, there is a possible unapproved data access due to a missing permission…
|
7.5
High
|
Aug 26, 2025 |
| CVE-2025-0092 |
In handleBondStateChanged of AdapterService.java, there is a possible permission bypass due to misleading or…
|
6.5
Medium
|
Aug 26, 2025 |
| CVE-2025-0086 |
In onResult of AccountManagerService.java, there is a possible way to overwrite auth token due to a missing permission…
|
6.2
Medium
|
Aug 26, 2025 |
| CVE-2025-0084 |
In multiple locations, there is a possible out of bounds write due to a use after free
|
8.8
High
|
Aug 26, 2025 |
| CVE-2025-0083 |
In multiple locations, there is a possible way to access content across user profiles due to URI double encoding
|
4.0
Medium
|
Aug 26, 2025 |
| CVE-2025-0082 |
In multiple functions of StatusHint.java and TelecomServiceImpl.java, there is a possible way to reveal images across…
|
5.5
Medium
|
Aug 26, 2025 |
| CVE-2025-0081 |
In dng_lossless_decoder::HuffDecode of dng_lossless_jpeg.cpp, there is a possible way to cause a crash due to…
|
7.5
High
|
Aug 26, 2025 |
| CVE-2025-0080 |
In multiple locations, there is a possible way to overlay the installation confirmation dialog due to a…
|
7.8
High
|
Aug 26, 2025 |
| CVE-2025-0079 |
In multiple locations, there is a possible way that avdtp and avctp channels could be unencrypted due to a logic error…
|
7.8
High
|
Aug 26, 2025 |
| CVE-2025-0078 |
In main of main.cpp, there is a possible way to bypass SELinux due to a logic error in the code
|
8.8
High
|
Aug 26, 2025 |
| CVE-2025-0075 |
In process_service_search_attr_req of sdp_server.cc, there is a possible way to execute arbitrary code due to a use…
|
9.8
Critical
|
Aug 26, 2025 |
| CVE-2025-0074 |
In process_service_attr_rsp of sdp_discovery.cc, there is a possible way to execute arbitrary code due to a use after…
|
9.8
Critical
|
Aug 26, 2025 |
| CVE-2024-49740 |
In multiple locations, there is a possible crash loop due to resource exhaustion
|
5.5
Medium
|
Aug 26, 2025 |
| CVE-2023-21125 |
In btif_hh_hsdata_rpt_copy_cb of bta_hh.cc, there is a possible way to corrupt memory due to a use after free
|
8.0
High
|
Aug 26, 2025 |
| CVE-2025-27701 |
In the function process_crypto_cmd, the values of ptrs[i] can be potentially equal to NULL which is valid value after…
|
5.5
Medium
|
May 27, 2025 |