Browse CVEs

MEDIUM 5.5 CVE-2025-36921 In ProtocolPsUnthrottleApn() of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local… Android Mitigation only Fix from $1,6002025-12-11 MEDIUM 5.5 CVE-2025-36889 In onCreateTasks of CameraActivity.java, there is a possible permission bypass due to a confused deputy. This could lead to local information disclos… Android Mitigation only Fix from $1,6002025-12-11 HIGH 7.2 CVE-2025-13428 A vulnerability exists in the SecOps SOAR server. The custom integrations feature allowed an authenticated user with an "IDE role" to achieve Remote … Security Operations Soar 6.3.64+ Fix from $1,9502025-12-09 HIGH 7.8 CVE-2025-48606 In preparePackage of InstallPackageHelper.java, there is a possible way for an app to appear hidden upon installation without a mechanism to uninstal… Android Mitigation only Fix from $1,9502025-12-08 HIGH 7.0 CVE-2025-48625 In multiple locations of UsbDataAdvancedProtectionHook.java, there is a possible way to access USB data when the screen is off due to a race conditio… Android Mitigation only Fix from $1,9502025-12-08 MEDIUM 5.5 CVE-2025-48569 In multiple locations, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no… Android No fix yet Fix from $1,6002025-12-08 MEDIUM 5.5 CVE-2025-48608 In isValidMediaUri of SettingsProvider.java, there is a possible cross user media read due to a missing permission check. This could lead to local in… Android Mitigation only Fix from $1,6002025-12-08 HIGH 7.8 CVE-2025-48627 In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to launch an activity from the background due to a logic err… Android Patch available Fix from $1,9502025-12-08 HIGH 7.8 CVE-2025-48628 In validateIconUserBoundary of PrintManagerService.java, there is a possible cross-user image leak due to a confused deputy. This could lead to local… Android Patch available Fix from $1,9502025-12-08 HIGH 7.8 CVE-2025-48629 In findAvailRecognizer of VoiceInteractionManagerService.java, there is a possible way to become the default speech recognizer app due to an insecure… Android Mitigation only Fix from $1,9502025-12-08 HIGH 7.8 CVE-2025-48632 In setDisplayName of AssociationRequest.java, there is a possible way to cause CDM associations to persist after the user has disassociated them due … Android Patch available Fix from $1,9502025-12-08 HIGH 7.8 CVE-2025-48637 In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of pr… Android Mitigation only Fix from $1,9502025-12-08 HIGH 7.8 CVE-2025-48638 In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of p… Android Mitigation only Fix from $1,9502025-12-08 HIGH 7.3 CVE-2025-48639 In DefaultTransitionHandler.java, there is a possible way to unknowingly grant permissions to an app due to a tapjacking/overlay attack. This could l… Android Mitigation only Fix from $1,9502025-12-08 MEDIUM 6.5 CVE-2025-48631 In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to remote… Android Mitigation only Fix from $1,6002025-12-08 MEDIUM 5.5 CVE-2025-48633 KEV In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisioning due to a logic error in … Android Patch available Fix from $1,6002025-12-08 CRITICAL 9.8 CVE-2025-48626 In multiple locations, there is a possible way to launch an application from the background due to a precondition check failure. This could lead to r… Android Patch available Fix from $2,3002025-12-08 HIGH 7.8 CVE-2025-48615 In getComponentName of MediaButtonReceiverHolder.java, there is a possible desync in persistence due to resource exhaustion. This could lead to local… Android Mitigation only Fix from $1,9502025-12-08 HIGH 7.8 CVE-2025-48620 In onSomePackagesChanged of VoiceInteractionManagerService.java, there is a possible way for a third party application's component name to persist ev… Android Patch available Fix from $1,9502025-12-08 HIGH 7.8 CVE-2025-48623 In init_pkvm_hyp_vcpu of pkvm.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of pri… Android Patch available Fix from $1,9502025-12-08 HIGH 7.8 CVE-2025-48624 In multiple functions of arm-smmu-v3.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation… Android Mitigation only Fix from $1,9502025-12-08 HIGH 7.3 CVE-2025-48621 In DefaultTransitionHandler.java, there is a possible way to enable a tapjacking attack due to a insecure default. This could lead to local escalatio… Android Patch available Fix from $1,9502025-12-08 MEDIUM 6.8 CVE-2025-48618 In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due to improper locking. This could… Android Patch available Fix from $1,6002025-12-08 MEDIUM 5.5 CVE-2025-48622 In ProcessArea of dng_misc_opcodes.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local information disclos… Android Patch available Fix from $1,6002025-12-08 HIGH 7.8 CVE-2025-48599 In multiple functions of WifiScanModeActivity.java, there is a possible way to bypass a device config restriction due to a missing permission check. … Android Patch available Fix from $1,9502025-12-08 HIGH 7.8 CVE-2025-48612 In setDefaultKey of DefaultPaymentSettings.java, there is a possible way for an application to set the main user's default NFC payment setting due to… Android Mitigation only Fix from $1,9502025-12-08 MEDIUM 5.5 CVE-2025-48600 In multiple files, there is a possible way to reveal information across users due to a missing permission check. This could lead to local information… Android Mitigation only Fix from $1,6002025-12-08 MEDIUM 5.5 CVE-2025-48601 In multiple locations, there is a possible permanent denial of service due to improper input validation. This could lead to local escalation of privi… Android Mitigation only Fix from $1,6002025-12-08 MEDIUM 5.5 CVE-2025-48603 In InputMethodInfo of InputMethodInfo.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local deni… Android Patch available Fix from $1,6002025-12-08 MEDIUM 5.5 CVE-2025-48604 In multiple locations, there is a possible way to read files from another user due to a missing permission check. This could lead to local informatio… Android Patch available Fix from $1,6002025-12-08