Browse CVEs

HIGH 7.8 CVE-2025-20723 In gnss driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malic… Android Mitigation only Fix from $1,9502025-10-14 HIGH 7.5 CVE-2025-55559 An issue was discovered TensorFlow v2.18.0. A Denial of Service (DoS) occurs when padding is set to 'valid' in tf.keras.layers.Conv2D. Tensorflow No fix yet Fix from $1,9502025-09-25 MEDIUM 6.5 CVE-2025-55556 TensorFlow v2.18.0 was discovered to output random results when compiling Embedding, leading to unexpected behavior in the application. Tensorflow No fix yet Fix from $1,6002025-09-25 HIGH 8.8 CVE-2025-32318 In Skia, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional … Android Mitigation only Fix from $1,9502025-09-05 HIGH 7.8 CVE-2025-32320 In System UI, there is a possible way to view other users' images due to a confused deputy. This could lead to local escalation of privilege with no … Android Mitigation only Fix from $1,9502025-09-05 MEDIUM 5.5 CVE-2025-32316 In gralloc4, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additiona… Android Mitigation only Fix from $1,6002025-09-05 MEDIUM 5.5 CVE-2025-32317 In App Widget, there is a possible Information Disclosure due to a confused deputy. This could lead to local information disclosure with no additiona… Android Mitigation only Fix from $1,6002025-09-05 MEDIUM 5.5 CVE-2024-0028 In Audio Service, there is a possible way to obtain MAC addresses of nearby Bluetooth devices due to a missing permission check. This could lead to l… Android Mitigation only Fix from $1,6002025-09-05 MEDIUM 5.5 CVE-2025-26434 In libxml2, there is a possible out of bounds read due to a buffer overflow. This could lead to local information disclosure with no additional execu… Android Mitigation only Fix from $1,6002025-09-05 HIGH 7.8 CVE-2025-26431 In setupAccessibilityServices of AccessibilityFragment.java, there is a possible way to hide an enabled accessibility service due to a logic error in… Android Mitigation only Fix from $1,9502025-09-04 HIGH 7.8 CVE-2025-26439 In getComponentName of AccessibilitySettingsUtils.java, there is a possible way to for a malicious Talkback service to be enabled instead of the syst… Android Mitigation only Fix from $1,9502025-09-04 HIGH 7.8 CVE-2025-32322 In onCreate of MediaProjectionPermissionActivity.java , there is a possible way to grant a malicious app a token enabling unauthorized screen recordi… Android Mitigation only Fix from $1,9502025-09-04 HIGH 7.8 CVE-2025-22414 In FrpBypassAlertActivity of FrpBypassAlertActivity.java, there is a possible way to bypass FRP due to a missing permission check. This could lead to… Android Mitigation only Fix from $1,9502025-09-04 MEDIUM 6.2 CVE-2024-40664 In setupAccessibilityServices of AccessibilityFragment.java , there is a possible way to hide an enabled accessibility service due to a logic error i… Android Mitigation only Fix from $1,6002025-09-04 HIGH 8.4 CVE-2025-48581 In VerifyNoOverlapInSessions of apexd.cpp, there is a possible way to block security updates due to a logic error in the code. This could lead to loc… Android Mitigation only Fix from $1,9502025-09-04 HIGH 7.8 CVE-2025-48563 In onNullBinding of RemoteFillService.java, there is a possible background activity launch due to an insecure default value. This could lead to local… Android Mitigation only Fix from $1,9502025-09-04 MEDIUM 5.5 CVE-2025-48560 In AndroidManifest.xml, there is a possible way for an app to monitor motion events due to a confused deputy. This could lead to local information di… Android Mitigation only Fix from $1,6002025-09-04 HIGH 7.8 CVE-2025-48552 In saveGlobalProxyLocked of DevicePolicyManagerService.java, there is a possible way to desync from persistence due to a logic error in the code. Thi… Android Mitigation only Fix from $1,9502025-09-04 HIGH 7.8 CVE-2025-48553 In handlePackagesChanged of DevicePolicyManagerService.java, there is a possible DoS of a device admin due to a logic error in the code. This could l… Android Mitigation only Fix from $1,9502025-09-04 MEDIUM 6.1 CVE-2025-48554 In handlePackagesChanged of DevicePolicyManagerService.java, there is a possible persistent denial of service due to a logic error in the code. This … Android Mitigation only Fix from $1,6002025-09-04 HIGH 7.8 CVE-2025-48544 In multiple locations, there is a possible way to read files belonging to other apps due to SQL injection. This could lead to local escalation of pri… Android Mitigation only Fix from $1,9502025-09-04 HIGH 7.8 CVE-2025-48546 In checkPermissions of SafeActivityOptions.java, there is a possible background activity launch due to a logic error in the code. This could lead to … Android Mitigation only Fix from $1,9502025-09-04 HIGH 7.3 CVE-2025-48547 In multiple locations, there is a possible one-time permission bypass due to a logic error in the code. This could lead to local escalation of privil… Android No fix yet Fix from $1,9502025-09-04 HIGH 7.3 CVE-2025-48532 In markMediaAsFavorite of MediaProvider.java, there is a possible way to bypass the WRITE_EXTERNAL_STORAGE permission due to a confused deputy. This … Android Mitigation only Fix from $1,9502025-09-04 HIGH 7.0 CVE-2025-48533 In multiple locations, there is a possible way to use apps linked from a context menu of a lockscreen app due to a race condition. This could lead to… Android Mitigation only Fix from $1,9502025-09-04 HIGH 8.1 CVE-2025-48530 In multiple locations, there is a possible condition that results in OOB accesses due to an incorrect bounds check. This could lead to remote code ex… Android Mitigation only Fix from $1,9502025-09-04 MEDIUM 5.5 CVE-2025-48524 In isSystem of WifiPermissionsUtil.java, there is a possible permission bypass due to a missing permission check. This could lead to local denial of … Android Mitigation only Fix from $1,6002025-09-04 HIGH 7.8 CVE-2025-32345 In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a secondary user to disable the primary user's decept… Android Mitigation only Fix from $1,9502025-09-04 HIGH 7.8 CVE-2025-32346 In onActivityResult of VoicemailSettingsActivity.java, there is a possible work profile contact number leak due to a confused deputy. This could lead… Android Mitigation only Fix from $1,9502025-09-04 HIGH 7.8 CVE-2025-32350 In maybeShowDialog of ControlsSettingsDialogManager.kt, there is a possible overlay of the ControlsSettingsDialog due to a tapjacking/overlay attack.… Android Mitigation only Fix from $1,9502025-09-04