| CVE-2025-36916 |
In PrepareWorkloadBuffers of gxp_main_actor.cc, there is a possible double fetch due to a race condition
|
7.0
Élevée
|
11 déc. 2025 |
| CVE-2025-36912 |
In cellular modem, there is a possible denial of service due to a logic error in the code
|
6.5
Moyenne
|
11 déc. 2025 |
| CVE-2025-36889 |
In onCreateTasks of CameraActivity.java, there is a possible permission bypass due to a confused deputy
|
5.5
Moyenne
|
11 déc. 2025 |
| CVE-2025-48625 |
In multiple locations of UsbDataAdvancedProtectionHook.java, there is a possible way to access USB data when the…
|
7.0
Élevée
|
8 déc. 2025 |
| CVE-2025-48608 |
In isValidMediaUri of SettingsProvider.java, there is a possible cross user media read due to a missing permission check
|
5.5
Moyenne
|
8 déc. 2025 |
| CVE-2025-48606 |
In preparePackage of InstallPackageHelper.java, there is a possible way for an app to appear hidden upon installation…
|
7.8
Élevée
|
8 déc. 2025 |
| CVE-2025-48569 |
In multiple locations, there is a possible permanent denial of service due to resource exhaustion
|
5.5
Moyenne
|
8 déc. 2025 |
| CVE-2025-48639 |
In DefaultTransitionHandler.java, there is a possible way to unknowingly grant permissions to an app due to a…
|
7.3
Élevée
|
8 déc. 2025 |
| CVE-2025-48638 |
In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to improper input validation
|
7.8
Élevée
|
8 déc. 2025 |
| CVE-2025-48637 |
In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow
|
7.8
Élevée
|
8 déc. 2025 |
| CVE-2025-48633 |
Exploitée
Android Framework Information Disclosure Vulnerability
|
5.5
Moyenne
|
8 déc. 2025 |
| CVE-2025-48632 |
In setDisplayName of AssociationRequest.java, there is a possible way to cause CDM associations to persist after the…
|
7.8
Élevée
|
8 déc. 2025 |
| CVE-2025-48631 |
In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource…
|
6.5
Moyenne
|
8 déc. 2025 |
| CVE-2025-48629 |
In findAvailRecognizer of VoiceInteractionManagerService.java, there is a possible way to become the default speech…
|
7.8
Élevée
|
8 déc. 2025 |
| CVE-2025-48628 |
In validateIconUserBoundary of PrintManagerService.java, there is a possible cross-user image leak due to a confused…
|
7.8
Élevée
|
8 déc. 2025 |
| CVE-2025-48627 |
In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to launch an activity from…
|
7.8
Élevée
|
8 déc. 2025 |
| CVE-2025-48626 |
In multiple locations, there is a possible way to launch an application from the background due to a precondition…
|
8.8
Élevée
|
8 déc. 2025 |
| CVE-2025-48624 |
In multiple functions of arm-smmu-v3.c, there is a possible out-of-bounds write due to improper input validation
|
7.8
Élevée
|
8 déc. 2025 |
| CVE-2025-48623 |
In init_pkvm_hyp_vcpu of pkvm.c, there is a possible out of bounds write due to improper input validation
|
7.8
Élevée
|
8 déc. 2025 |
| CVE-2025-48622 |
In ProcessArea of dng_misc_opcodes.cpp, there is a possible out of bounds read due to a buffer overflow
|
5.5
Moyenne
|
8 déc. 2025 |
| CVE-2025-48621 |
In DefaultTransitionHandler.java, there is a possible way to enable a tapjacking attack due to a insecure default
|
7.3
Élevée
|
8 déc. 2025 |
| CVE-2025-48620 |
In onSomePackagesChanged of VoiceInteractionManagerService.java, there is a possible way for a third party application's…
|
7.8
Élevée
|
8 déc. 2025 |
| CVE-2025-48618 |
In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due to…
|
6.6
Moyenne
|
8 déc. 2025 |
| CVE-2025-48615 |
In getComponentName of MediaButtonReceiverHolder.java, there is a possible desync in persistence due to resource…
|
7.8
Élevée
|
8 déc. 2025 |
| CVE-2025-48614 |
In rebootWipeUserData of RecoverySystem.java, there is a possible way to factory reset the device while in DSU mode…
|
4.3
Moyenne
|
8 déc. 2025 |