Browse CVEs

HIGH 7.8 CVE-2025-48599 In multiple functions of WifiScanModeActivity.java, there is a possible way to bypass a device config restriction due to a missing permission check. … Android Patch available Fix from $1,9502025-12-08 HIGH 7.8 CVE-2025-48612 In setDefaultKey of DefaultPaymentSettings.java, there is a possible way for an application to set the main user's default NFC payment setting due to… Android Mitigation only Fix from $1,9502025-12-08 MEDIUM 5.5 CVE-2025-48600 In multiple files, there is a possible way to reveal information across users due to a missing permission check. This could lead to local information… Android Mitigation only Fix from $1,6002025-12-08 MEDIUM 5.5 CVE-2025-48601 In multiple locations, there is a possible permanent denial of service due to improper input validation. This could lead to local escalation of privi… Android Mitigation only Fix from $1,6002025-12-08 MEDIUM 5.5 CVE-2025-48603 In InputMethodInfo of InputMethodInfo.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local deni… Android Patch available Fix from $1,6002025-12-08 MEDIUM 5.5 CVE-2025-48604 In multiple locations, there is a possible way to read files from another user due to a missing permission check. This could lead to local informatio… Android Patch available Fix from $1,6002025-12-08 MEDIUM 5.5 CVE-2025-48607 In multiple locations, there is a possible way to create a large amount of app ops due to a logic error in the code. This could lead to local denial … Android Patch available Fix from $1,6002025-12-08 MEDIUM 5.5 CVE-2025-48610 In __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possible configuration data leak due to a logic error in the code. This could lead to… Android Patch available Fix from $1,6002025-12-08 HIGH 7.8 CVE-2025-48589 In multiple functions of HeaderPrivacyIconsController.kt, there is a possible way to grand permissions across user due to a logic error in the code.… Android Patch available Fix from $1,9502025-12-08 HIGH 7.8 CVE-2025-48596 In appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege w… Android Patch available Fix from $1,9502025-12-08 HIGH 7.8 CVE-2025-48597 In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could lead to loc… Android Patch available Fix from $1,9502025-12-08 HIGH 7.5 CVE-2025-48592 In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information dis… Android Patch available Fix from $1,9502025-12-08 HIGH 7.3 CVE-2025-48594 In onUidImportance of DisassociationProcessor.java, there is a possible way to retain companion application privileges after disassociation due to im… Android Patch available Fix from $1,9502025-12-08 MEDIUM 6.6 CVE-2025-48598 In multiple locations, there is a possible way to alter the primary user's face unlock settings due to a confused deputy. This could lead to physical… Android Patch available Fix from $1,6002025-12-08 MEDIUM 5.5 CVE-2025-48590 In verifyAndGetBypass of AppOpsService.java, there is a possible method for a malicious app to prevent dialing emergency services under limited circu… Android Patch available Fix from $1,6002025-12-08 MEDIUM 5.5 CVE-2025-48591 In multiple locations, there is a possible way to read files from another user due to a missing permission check. This could lead to local informatio… Android Mitigation only Fix from $1,6002025-12-08 HIGH 7.8 CVE-2025-48572 KEV In multiple locations, there is a possible way to launch activities from the background due to a permissions bypass. This could lead to local escalat… Android Mitigation only Fix from $1,9502025-12-08 HIGH 7.8 CVE-2025-48573 In sendCommand of MediaSessionRecord.java, there is a possible way to launch the foreground service while the app is in the background due to FGS whi… Android Patch available Fix from $1,9502025-12-08 HIGH 7.8 CVE-2025-48575 In multiple functions of CertInstaller.java, there is a possible way to install certificates due to a permissions bypass. This could lead to local es… Android Patch available Fix from $1,9502025-12-08 HIGH 7.8 CVE-2025-48580 In connectInternal of MediaBrowser.java, there is a possible way to access while in use permission while the app is in background due to a logic erro… Android Patch available Fix from $1,9502025-12-08 HIGH 7.8 CVE-2025-48583 In multiple functions of BaseBundle.java, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to loca… Android Patch available Fix from $1,9502025-12-08 HIGH 7.8 CVE-2025-48586 In onActivityResult of EditFdnContactScreen.java, there is a possible way to leak contacts from the work profile due to a confused deputy. This could… Android Patch available Fix from $1,9502025-12-08 HIGH 7.8 CVE-2025-48588 In startAlwaysOnVpn of Vpn.java, there is a possible way to disable always-on VPN due to a logic error in the code. This could lead to local escalati… Android Patch available Fix from $1,9502025-12-08 MEDIUM 5.5 CVE-2025-48576 In updateNotificationChannelGroupFromPrivilegedListener of NotificationManagerService.java, there is a possible permanent denial of service due to re… Android Patch available Fix from $1,6002025-12-08 MEDIUM 5.5 CVE-2025-48584 In multiple functions of NotificationManagerService.java, there is a possible way to bypass the per-package channel limits causing resource exhaustio… Android Patch available Fix from $1,6002025-12-08 HIGH 7.8 CVE-2025-32328 In multiple functions of Session.java, there is a possible way to view images belonging to a different user of the device due to a logic error in the… Android Patch available Fix from $1,9502025-12-08 HIGH 7.8 CVE-2025-32329 In multiple functions of Session.java, there is a possible way to view images belonging to a different user of the device due to a logic error in the… Android Patch available Fix from $1,9502025-12-08 HIGH 7.8 CVE-2025-48525 In disassociate of DisassociationProcessor.java, there is a possible way for an app to continue reading notifications when not associated to a compan… Android Patch available Fix from $1,9502025-12-08 HIGH 7.8 CVE-2025-48536 In grantAllowlistedPackagePermissions of SettingsSliceProvider.java, there is a possible way for a third party app to modify secure settings due to a… Android Patch available Fix from $1,9502025-12-08 HIGH 7.8 CVE-2025-48555 In multiple functions of NotificationStation.java, there is a possible cross-profile information disclosure due to a confused deputy. This could lead… Android Patch available Fix from $1,9502025-12-08