Browse CVEs

HIGH 7.8 CVE-2025-36927 In GetTachyonCommand of tachyon_server_common.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local esca… Android Mitigation only Fix from $1,9502025-12-11 HIGH 7.8 CVE-2025-36928 In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of p… Android Mitigation only Fix from $1,9502025-12-11 HIGH 7.8 CVE-2025-36930 In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of priv… Android Mitigation only Fix from $1,9502025-12-11 HIGH 7.8 CVE-2025-36931 In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of priv… Android Mitigation only Fix from $1,9502025-12-11 HIGH 7.8 CVE-2025-36932 In tracepoint_msg_handler of cpm/google/lib/tracepoint/tracepoint_ipc.c, there is a possible memory overwrite due to improper input validation. This … Android Mitigation only Fix from $1,9502025-12-11 HIGH 7.4 CVE-2025-36934 In bigo_worker_thread of private/google-modules/video/gchips/bigo.c, there is a possible use after free due to a race condition. This could lead to l… Android Mitigation only Fix from $1,9502025-12-11 MEDIUM 5.5 CVE-2025-36929 In AreFencesRegistered of gxp_fence_manager.cc, there is a possible information leak due to improper input validation. This could lead to local infor… Android Mitigation only Fix from $1,6002025-12-11 HIGH 8.0 CVE-2025-36923 In NrmmDecoder::DecodeSORTransparentContext of cn_NrmmDecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could … Android Mitigation only Fix from $1,9502025-12-11 HIGH 8.0 CVE-2025-36924 In ss_DecodeLcsAssistDataReqMsg(void) of ss_LcsManagement.c, there is a possible out of bounds write due to an incorrect bounds check. This could lea… Android Mitigation only Fix from $1,9502025-12-11 HIGH 7.8 CVE-2025-36918 In aoc_service_read_message of aoc_ipc_core.c, there is a possible out of bounds read due to improper input validation. This could lead to local esca… Android Mitigation only Fix from $1,9502025-12-11 HIGH 7.8 CVE-2025-36919 In aocc_read of aoc_channel_dev.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with no … Android Mitigation only Fix from $1,9502025-12-11 HIGH 7.0 CVE-2025-36916 In PrepareWorkloadBuffers of gxp_main_actor.cc, there is a possible double fetch due to a race condition. This could lead to local escalation of priv… Android Mitigation only Fix from $1,9502025-12-11 MEDIUM 6.7 CVE-2025-36922 In bigo_map of bigo_iommu.c, there is a possible information disclosure due to a use after free. This could lead to local escalation of privilege in… Android Mitigation only Fix from $1,6002025-12-11 MEDIUM 6.5 CVE-2025-36912 In cellular modem, there is a possible denial of service due to a logic error in the code. This could lead to remote denial of service with no additi… Android Mitigation only Fix from $1,6002025-12-11 MEDIUM 6.5 CVE-2025-36917 In SwDcpItg of up_L2commonPdcpSecurity.cpp, there is a possible denial of service due to an incorrect bounds check. This could lead to remote denial … Android No fix yet Fix from $1,6002025-12-11 MEDIUM 5.5 CVE-2025-36921 In ProtocolPsUnthrottleApn() of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local… Android Mitigation only Fix from $1,6002025-12-11 MEDIUM 5.5 CVE-2025-36889 In onCreateTasks of CameraActivity.java, there is a possible permission bypass due to a confused deputy. This could lead to local information disclos… Android Mitigation only Fix from $1,6002025-12-11 HIGH 7.8 CVE-2025-48606 In preparePackage of InstallPackageHelper.java, there is a possible way for an app to appear hidden upon installation without a mechanism to uninstal… Android Mitigation only Fix from $1,9502025-12-08 HIGH 7.0 CVE-2025-48625 In multiple locations of UsbDataAdvancedProtectionHook.java, there is a possible way to access USB data when the screen is off due to a race conditio… Android Mitigation only Fix from $1,9502025-12-08 MEDIUM 5.5 CVE-2025-48569 In multiple locations, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no… Android No fix yet Fix from $1,6002025-12-08 MEDIUM 5.5 CVE-2025-48608 In isValidMediaUri of SettingsProvider.java, there is a possible cross user media read due to a missing permission check. This could lead to local in… Android Mitigation only Fix from $1,6002025-12-08 HIGH 7.8 CVE-2025-48629 In findAvailRecognizer of VoiceInteractionManagerService.java, there is a possible way to become the default speech recognizer app due to an insecure… Android Mitigation only Fix from $1,9502025-12-08 HIGH 7.8 CVE-2025-48637 In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of pr… Android Mitigation only Fix from $1,9502025-12-08 HIGH 7.8 CVE-2025-48638 In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of p… Android Mitigation only Fix from $1,9502025-12-08 HIGH 7.3 CVE-2025-48639 In DefaultTransitionHandler.java, there is a possible way to unknowingly grant permissions to an app due to a tapjacking/overlay attack. This could l… Android Mitigation only Fix from $1,9502025-12-08 MEDIUM 6.5 CVE-2025-48631 In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to remote… Android Mitigation only Fix from $1,6002025-12-08 HIGH 7.8 CVE-2025-48615 In getComponentName of MediaButtonReceiverHolder.java, there is a possible desync in persistence due to resource exhaustion. This could lead to local… Android Mitigation only Fix from $1,9502025-12-08 HIGH 7.8 CVE-2025-48624 In multiple functions of arm-smmu-v3.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation… Android Mitigation only Fix from $1,9502025-12-08 HIGH 7.8 CVE-2025-48612 In setDefaultKey of DefaultPaymentSettings.java, there is a possible way for an application to set the main user's default NFC payment setting due to… Android Mitigation only Fix from $1,9502025-12-08 MEDIUM 5.5 CVE-2025-48600 In multiple files, there is a possible way to reveal information across users due to a missing permission check. This could lead to local information… Android Mitigation only Fix from $1,6002025-12-08