Browse CVEs

HIGH 7.3 CVE-2025-22439 In onLastAccessedStackLoaded of ActionHandler.java , there is a possible way to bypass storage restrictions across apps due to a missing permission c… Android Mitigation only Fix from $1,9502025-09-02 HIGH 7.0 CVE-2025-22442 In multiple functions of DevicePolicyManagerService.java, there is a possible way to install unauthorized applications into a newly created work prof… Android Mitigation only Fix from $1,9502025-09-02 CRITICAL 9.8 CVE-2025-22429 In multiple locations, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalation of pri… Android Mitigation only Fix from $2,3002025-09-02 CRITICAL 9.8 CVE-2025-22435 In avdt_msg_ind of avdt_msg.cc, there is a possible memory corruption due to type confusion. This could lead to paired device escalation of privilege… Android Mitigation only Fix from $2,3002025-09-02 HIGH 7.8 CVE-2025-22428 In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible way to grant permissions to an app on the secondary user from the pr… Android Mitigation only Fix from $1,9502025-09-02 HIGH 7.8 CVE-2025-22433 In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commonly used in Work Profile scena… Android Mitigation only Fix from $1,9502025-09-02 HIGH 7.8 CVE-2025-22434 In handleKeyGestureEvent of PhoneWindowManager.java, there is a possible lock screen bypass due to a logic error in the code. This could lead to loca… Android Mitigation only Fix from $1,9502025-09-02 HIGH 7.8 CVE-2025-22437 In setMediaButtonReceiver of multiple files, there is a possible way to launch arbitrary activities from background due to a logic error in the code.… Android Mitigation only Fix from $1,9502025-09-02 MEDIUM 5.5 CVE-2025-22430 In isInSignificantPlace of multiple files, there is a possible way to access sensitive information due to a missing permission check. This could lead… Android Mitigation only Fix from $1,6002025-09-02 MEDIUM 5.5 CVE-2025-22431 In multiple locations, there is a possible method for a malicious app to prevent dialing emergency services under limited circumstances due to a logi… Android Mitigation only Fix from $1,6002025-09-02 HIGH 7.8 CVE-2025-22416 In onCreate of ChooserActivity.java , there is a possible way to view other users' images due to a confused deputy. This could lead to local escalati… Android Mitigation only Fix from $1,9502025-09-02 HIGH 7.8 CVE-2025-22418 In multiple locations, there is a possible confused deputy due to Intent Redirect. This could lead to local escalation of privilege with no additiona… Android Mitigation only Fix from $1,9502025-09-02 HIGH 7.8 CVE-2025-22422 In multiple locations, there is a possible way to mislead a user into approving an authentication prompt for one app when its result will be used in … Android Mitigation only Fix from $1,9502025-09-02 HIGH 7.5 CVE-2025-22423 In ParseTag of dng_ifd.cpp, there is a possible way to crash the image renderer due to a missing bounds check. This could lead to remote denial of se… Android Mitigation only Fix from $1,9502025-09-02 HIGH 7.3 CVE-2025-22417 In finishTransition of Transition.java, there is a possible way to bypass touch filtering restrictions due to a tapjacking/overlay attack. This could… Android Mitigation only Fix from $1,9502025-09-02 HIGH 7.3 CVE-2025-22419 In multiple locations, there is a possible way to mislead the user into enabling malicious phone calls forwarding due to a tapjacking/overlay attack.… Android Mitigation only Fix from $1,9502025-09-02 HIGH 7.3 CVE-2025-22427 In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to grant notification access above the lock screen due to a logic… Android Mitigation only Fix from $1,9502025-09-02 MEDIUM 5.5 CVE-2025-22421 In contentDescForNotification of NotificationContentDescription.kt, there is a possible notification content leak through the lockscreen due to a log… Android Mitigation only Fix from $1,6002025-09-02 HIGH 7.8 CVE-2024-49720 In multiple functions of Permissions.java, there is a possible way to override the state of the user's location permissions due to a logic error in t… Android Mitigation only Fix from $1,9502025-09-02 HIGH 7.8 CVE-2024-49730 In FuseDaemon.cpp, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no additio… Android Mitigation only Fix from $1,9502025-09-02 MEDIUM 5.5 CVE-2024-49722 In showAvatarPicker of EditUserPhotoController.java, there is a possible cross user image leak due to a confused deputy. This could lead to local inf… Android Mitigation only Fix from $1,6002025-09-02 MEDIUM 5.5 CVE-2024-49728 In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a confused deputy. This could lead to lo… Android Mitigation only Fix from $1,6002025-09-02 HIGH 7.3 CVE-2024-40653 In multiple functions of ConnectionServiceWrapper.java, there is a possible way to retain a permission forever in the background due to a logic error… Android Mitigation only Fix from $1,9502025-09-02 MEDIUM 6.7 CVE-2025-20707 In geniezone, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has … Android Mitigation only Fix from $1,6002025-09-01 HIGH 7.8 CVE-2025-20706 In mbrain, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has alr… Android Mitigation only Fix from $1,9502025-09-01 CRITICAL 9.8 CVE-2025-22408 In rfc_check_send_cmd of rfc_utils.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code exec… Android Mitigation only Fix from $2,3002025-08-26 HIGH 8.8 CVE-2025-22411 In process_service_attr_rsp of sdp_discovery.cc, there is a possible use after free due to a logic error in the code. This could lead to remote (prox… Android Mitigation only Fix from $1,9502025-08-26 HIGH 8.8 CVE-2025-22412 In multiple functions of sdp_server.cc, there is a possible use after free due to a logic error in the code. This could lead to remote (proximal/adja… Android Mitigation only Fix from $1,9502025-08-26 HIGH 8.4 CVE-2025-22409 In rfc_send_buf_uih of rfc_ts_frames.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalati… Android Mitigation only Fix from $1,9502025-08-26 HIGH 8.4 CVE-2025-22410 In multiple locations, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege wi… Android Mitigation only Fix from $1,9502025-08-26