2025

In getCallingAppName of Shared.java, there is a possible way to trick users into granting file access via deceptive text

In isSafeIntent of AccountTypePreferenceLoader.java, there is a possible way to bypass an intent type check due to a con

In executeAppFunction of AppSearchManagerService.java, there is a possible background activity launch due to a logic err

In validateUriSchemeAndPermission of DisclaimersParserImpl.java , there is a possible way to access data from another us

In getContextForResourcesEnsuringCorrectCachedApkPaths of RemoteViews.java, there is a possible way to load arbitrary ja

In multiple locations, there is a possible way to hijack the Launcher app due to a logic error in the code. This could l

In multiple locations, there is a possible way to view icons belonging to another user due to a missing permission check

In avrc_vendor_msg of avrc_opt.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lea

In createIntentsList of PackageParser.java , there is a possible way to bypass lazy bundle hardening, allowing modified

In allowPackageAccess of multiple files, resource exhaustion is possible when repeatedly adding allowed packages. This c

In AccessibilityServiceConnection.java, there is a possible background activity launch due to a logic error in the code.

In multiple functions of LocationProviderManager.java, there is a possible background activity launch due to a logic err

In multiple functions of DexUseManagerLocal.java, there is a possible way to crash system server due to a logic error in

In multiple functions of NdkMediaCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This

In isContentUriForOtherUser of BluetoothOppSendFileInfo.java, there is a possible cross user data leak due to a logic er

In loadDrawableForCookie of ResourcesImpl.java, there is a possible way to access task snapshots of other apps due to a

In onInputEvent of IInputMethodSessionWrapper.java, there is a possible way for an untrusted app to inject key and motio

In multiple locations, there is a possible permanent denial of service due to resource exhaustion. This could lead to lo

In writeToParcel of CursorWindow.cpp, there is a possible out of bounds read due to uninitialized data. This could lead

In offerNetwork of ConnectivityService.java, there is a possible leak of sensitive data due to a missing permission chec

In onHandleForceStop of VoiceInteractionManagerService.java, there is a bug that could cause the system to incorrectly r

In parseHtml of HtmlToSpannedParser.java, there is a possible way to install apps without allowing installation from unk

In onCreate of NotificationAccessConfirmationActivity.java, there is a possible incorrect verification of proper intent

In add_attr of sdp_discovery.cc, there is a possible out of bounds read due to a missing bounds check. This could lead t

In multiple functions of CameraService.cpp, there is a possible way to use the camera from the background due to a permi

In smp_process_secure_connection_oob_data of smp_act.cc, there is a possible way to bypass SMP authentication due to Inc

In CredentialManagerServiceStub of CredentialManagerService.java, there is a possible way to retrieve candidate credenti

In clearAllowBgActivityStarts of PendingIntentRecord.java, there is a possible way for an application to launch an activ

In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a secondary user to disa

In multiple locations, there is a possible way to persistently DoS the device due to a missing length check. This could

In getDestinationForApp of SpaAppBridgeActivity, there is a possible cross-user file reveal due to a logic error in the

In collectOps of AppOpsService.java, there is a possible way to cause permanent DoS due to improper input validation. Th

In startLockTaskMode of LockTaskController.java, there is a possible lock screen bypass due to a logic error in the code

In multiple locations, there is a possible Android/data access due to a path traversal error. This could lead to local e

In BroadcastController.java of registerReceiverWithFeatureTraced, there is a possible way to receive broadcasts meant fo

In multiple functions of RoleService.java, there is a possible permission squatting vulnerability due to a logic error i

In multiple functions of VpnManager.java, there is a possible cross-user data leak due to a logic error in the code. Thi

In validateIpConfiguration of WifiConfigurationUtil.java, there is a possible way to trigger a permanent DoS due to a mi

In dump of WindowManagerService.java, there is a possible way of running dumpsys without the required permission due to

In multiple locations, there is a possible lock screen bypass due to a logic error in the code. This could lead to local

In multiple functions of GrantPermissionsActivity.java , there is a possible way to trick the user into granting the inc

In onCreate of InstallStart.java, there is a possible permissions bypass due to improper input validation. This could le

In onCreate of UninstallerActivity.java, there is a possible way to uninstall a different user's app due to a missing pe

In multiple functions of UserController.java, there is a possible lock screen bypass due to a race condition. This could

In MMapVAccess of pmr_os.c, there is a possible out of bounds write due to improper input validation. This could lead to

In bta_av_config_ind of bta_av_aact.cc, there is a possible out of bounds read due to type confusion. This could lead to

pgAdmin <= 9.7 is affected by a Cross-Origin Opener Policy (COOP) vulnerability. This vulnerability allows an attacker

PHPGurukul Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) in /admin/updateorder.php.

In the Linux kernel, the following vulnerability has been resolved: io_uring/net: commit partial buffers on retry Ring

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 power domain descrip