Browse CVEs

MEDIUM 5.5 CVE-2026-28575 In PackageInstaller.Session#transfer of frameworks/base/services/core/java/com/android/server/pm/PackageInstallerSession.java, there is a possible me… Android Mitigation only Fix from $1,6002026-06-17 MEDIUM 5.5 CVE-2026-0064 In multiple places, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no a… Android Mitigation only Fix from $1,6002026-06-17 MEDIUM 5.5 CVE-2026-0069 In verifySignature of ApkChecksums.java, there is a possible way to cause a crash due to resource exhaustion. This could lead to local denial of serv… Android Mitigation only Fix from $1,6002026-06-01 MEDIUM 5.5 CVE-2026-0074 In getPreferredSize of LauncherProcessImageListener.kt, there is a possible denial of service due to resource exhaustion. This could lead to local d… Android Mitigation only Fix from $1,6002026-06-01 MEDIUM 5.5 CVE-2026-0042 In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to resource exhaustion. This could lead to … Android Mitigation only Fix from $1,6002026-06-01 MEDIUM 5.5 CVE-2025-48648 In isSameApp of NotificationManagerService.java, there is a possible persistent dos due to resource exhaustion. This could lead to local denial of se… Android Mitigation only Fix from $1,6002026-06-01 MEDIUM 6.2 CVE-2026-0049 In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local … Android Mitigation only Fix from $1,6002026-04-06 CRITICAL 9.1 CVE-2025-48609 In multiple functions of MmsProvider.java, there is a possible way to arbitrarily delete files which affect telephony, SMS, and MMS functionalities d… Android Mitigation only Fix from $2,3002026-03-02 MEDIUM 5.5 CVE-2025-48569 In multiple locations, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no… Android No fix yet Fix from $1,6002025-12-08 MEDIUM 6.5 CVE-2025-48631 In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to remote… Android Mitigation only Fix from $1,6002025-12-08 HIGH 7.8 CVE-2025-48615 In getComponentName of MediaButtonReceiverHolder.java, there is a possible desync in persistence due to resource exhaustion. This could lead to local… Android Mitigation only Fix from $1,9502025-12-08 MEDIUM 5.5 CVE-2025-48603 In InputMethodInfo of InputMethodInfo.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local deni… Android Patch available Fix from $1,6002025-12-08 MEDIUM 5.5 CVE-2025-48590 In verifyAndGetBypass of AppOpsService.java, there is a possible method for a malicious app to prevent dialing emergency services under limited circu… Android Patch available Fix from $1,6002025-12-08 MEDIUM 5.5 CVE-2025-48576 In updateNotificationChannelGroupFromPrivilegedListener of NotificationManagerService.java, there is a possible permanent denial of service due to re… Android Patch available Fix from $1,6002025-12-08 MEDIUM 5.5 CVE-2025-48584 In multiple functions of NotificationManagerService.java, there is a possible way to bypass the per-package channel limits causing resource exhaustio… Android Patch available Fix from $1,6002025-12-08 HIGH 7.5 CVE-2025-55559 An issue was discovered TensorFlow v2.18.0. A Denial of Service (DoS) occurs when padding is set to 'valid' in tf.keras.layers.Conv2D. Tensorflow No fix yet Fix from $1,9502025-09-25 MEDIUM 6.2 CVE-2024-40664 In setupAccessibilityServices of AccessibilityFragment.java , there is a possible way to hide an enabled accessibility service due to a logic error i… Android Mitigation only Fix from $1,6002025-09-04 MEDIUM 5.5 CVE-2025-48542 In multiple functions of AccountManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to l… Android Patch available Fix from $1,6002025-09-04 MEDIUM 5.5 CVE-2025-26463 In allowPackageAccess of multiple files, resource exhaustion is possible when repeatedly adding allowed packages. This could lead to a local persiste… Android Patch available Fix from $1,6002025-09-04 MEDIUM 5.5 CVE-2025-26449 In multiple locations, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no… Android Patch available Fix from $1,6002025-09-04 MEDIUM 6.2 CVE-2025-26423 In validateIpConfiguration of WifiConfigurationUtil.java, there is a possible way to trigger a permanent DoS due to a missing bounds check. This coul… Android Patch available Fix from $1,6002025-09-04 HIGH 7.5 CVE-2025-36892 Denial of service Android No fix yet Fix from $1,9502025-09-04 MEDIUM 5.5 CVE-2024-49740 In multiple locations, there is a possible crash loop due to resource exhaustion. This could lead to local denial of service with no additional execu… Android No fix yet Fix from $1,6002025-08-26 MEDIUM 6.5 CVE-2024-43763 In build_read_multi_rsp of gatt_sr.cc, there is a possible denial of service due to a logic error in the code. This could lead to remote (proximal/ad… Android Mitigation only Fix from $1,6002025-01-21 MEDIUM 5.5 CVE-2018-9447 In onCreate of EmergencyCallbackModeExitDialog.java, there is a possible way to crash the emergency callback mode due to a missing null check. This c… Android Patch available Fix from $1,6002025-01-17 MEDIUM 5.5 CVE-2018-9412 In removeUnsynchronization of ID3.cpp there is a possible resource exhaustion due to improper input validation. This could lead to denial of service … Android Patch available Fix from $1,6002024-11-19 HIGH 7.5 CVE-2024-7254 Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exce… Protobuf 3.25.5 / 4.27.5+ Fix from $1,9502024-09-19 MEDIUM 5.5 CVE-2024-32912 there is a possible persistent Denial of Service due to test/debugging code left in a production build. This could lead to local denial of service of… Android Mitigation only Fix from $1,6002024-06-13 HIGH 7.5 CVE-2024-32902 Remote prevention of access to cellular service with no user interaction (for example, crashing the cellular radio service with a malformed packet) Android No fix yet Fix from $1,9502024-06-13 MEDIUM 6.5 CVE-2023-7258 A denial of service exists in Gvisor Sandbox where a bug in reference counting code in mount point tracking could lead to a panic, making it possible… Gvisor 20231204.0+ Fix from $1,6002024-05-15