2025

In setDisplayName of AssociationRequest.java, there is a possible way for an app to retain CDM association due to a logi

In maybeShowDialog of ControlsSettingsDialogManager.kt, there is a possible overlay of the ControlsSettingsDialog due to

In multiple locations, there is a possible privilege escalation due to a tapjacking/overlay attack. This could lead to l

In onStart of BiometricEnrollIntroduction.java, there is a possible way to determine the device's location due to an uns

In onActivityResult of VoicemailSettingsActivity.java, there is a possible work profile contact number leak due to a con

In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a secondary user to disa

In startSpaActivityForApp of SpaActivity.kt, there is a possible cross-user permission bypass due to a logic error in th

In multiple locations, there is a possible memory corruption due to a use after free. This could lead to local escalatio

In showDismissibleKeyguard of KeyguardService.java, there is a possible way to bypass app pinning due to a logic error i

In multiple functions of PickerDbFacade.java, there is a possible unauthorized data access due to SQL injection. This co

In multiple functions of AppRestrictionsFragment.java, there is a possible way to bypass intent security check due to a

In appendFrom of Parcel.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to l

In onCommand of ActivityManagerShellCommand.java, there is a possible arbitrary activity launch due to a confused deputy

In getCallingAppName of Shared.java, there is a possible way to trick users into granting file access via deceptive text

In isSafeIntent of AccountTypePreferenceLoader.java, there is a possible way to bypass an intent type check due to a con

In executeAppFunction of AppSearchManagerService.java, there is a possible background activity launch due to a logic err

In validateUriSchemeAndPermission of DisclaimersParserImpl.java , there is a possible way to access data from another us

In getContextForResourcesEnsuringCorrectCachedApkPaths of RemoteViews.java, there is a possible way to load arbitrary ja

In multiple locations, there is a possible way to hijack the Launcher app due to a logic error in the code. This could l

In avrc_vendor_msg of avrc_opt.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lea

In createIntentsList of PackageParser.java , there is a possible way to bypass lazy bundle hardening, allowing modified

In AccessibilityServiceConnection.java, there is a possible background activity launch due to a logic error in the code.

In multiple functions of LocationProviderManager.java, there is a possible background activity launch due to a logic err

In multiple functions of NdkMediaCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This

In loadDrawableForCookie of ResourcesImpl.java, there is a possible way to access task snapshots of other apps due to a

In onInputEvent of IInputMethodSessionWrapper.java, there is a possible way for an untrusted app to inject key and motio

In onHandleForceStop of VoiceInteractionManagerService.java, there is a bug that could cause the system to incorrectly r

In parseHtml of HtmlToSpannedParser.java, there is a possible way to install apps without allowing installation from unk

In multiple functions of CameraService.cpp, there is a possible way to use the camera from the background due to a permi

In smp_process_secure_connection_oob_data of smp_act.cc, there is a possible way to bypass SMP authentication due to Inc

In clearAllowBgActivityStarts of PendingIntentRecord.java, there is a possible way for an application to launch an activ

In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a secondary user to disa

In getDestinationForApp of SpaAppBridgeActivity, there is a possible cross-user file reveal due to a logic error in the

pgAdmin <= 9.7 is affected by a Cross-Origin Opener Policy (COOP) vulnerability. This vulnerability allows an attacker

In the Linux kernel, the following vulnerability has been resolved: io_uring/net: commit partial buffers on retry Ring

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 power domain descrip

In the Linux kernel, the following vulnerability has been resolved: habanalabs: fix UAF in export_dmabuf() As soon as

In the Linux kernel, the following vulnerability has been resolved: sctp: linearize cloned gso packets in sctp_rcv A c

In the Linux kernel, the following vulnerability has been resolved: net: kcm: Fix race condition in kcm_unattach() syz

In the Linux kernel, the following vulnerability has been resolved: hfs: fix slab-out-of-bounds in hfs_bnode_read() Th

In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds in hfsplus_bnode_re

In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds read in hfsplus_uni

In the Linux kernel, the following vulnerability has been resolved: gfs2: Validate i_depth for exhash directories A fu

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add sanity check for file name The lengt

In the Linux kernel, the following vulnerability has been resolved: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthre

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Make dma-fences compliant with the safe acc

In the Linux kernel, the following vulnerability has been resolved: fbdev: fix potential buffer overflow in do_register

In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Double-free fix When the bfad_im_probe(

In the Linux kernel, the following vulnerability has been resolved: jfs: upper bound check of tree index in dbAllocAG

In the Linux kernel, the following vulnerability has been resolved: iommufd: Prevent ALIGN() overflow When allocating