Browse CVEs

HIGH 7.3 CVE-2025-22427 In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to grant notification access above the lock screen due to a logic… Android Mitigation only Fix from $1,9502025-09-02 MEDIUM 5.5 CVE-2025-22421 In contentDescForNotification of NotificationContentDescription.kt, there is a possible notification content leak through the lockscreen due to a log… Android Mitigation only Fix from $1,6002025-09-02 HIGH 7.8 CVE-2024-49720 In multiple functions of Permissions.java, there is a possible way to override the state of the user's location permissions due to a logic error in t… Android Mitigation only Fix from $1,9502025-09-02 HIGH 7.8 CVE-2024-49730 In FuseDaemon.cpp, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no additio… Android Mitigation only Fix from $1,9502025-09-02 MEDIUM 5.5 CVE-2024-49722 In showAvatarPicker of EditUserPhotoController.java, there is a possible cross user image leak due to a confused deputy. This could lead to local inf… Android Mitigation only Fix from $1,6002025-09-02 MEDIUM 5.5 CVE-2024-49728 In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a confused deputy. This could lead to lo… Android Mitigation only Fix from $1,6002025-09-02 HIGH 7.3 CVE-2024-40653 In multiple functions of ConnectionServiceWrapper.java, there is a possible way to retain a permission forever in the background due to a logic error… Android Mitigation only Fix from $1,9502025-09-02 MEDIUM 6.7 CVE-2025-20707 In geniezone, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has … Android Mitigation only Fix from $1,6002025-09-01 HIGH 7.8 CVE-2025-20706 In mbrain, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has alr… Android Mitigation only Fix from $1,9502025-09-01 CRITICAL 9.8 CVE-2025-22408 In rfc_check_send_cmd of rfc_utils.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code exec… Android Mitigation only Fix from $2,3002025-08-26 HIGH 8.8 CVE-2025-22411 In process_service_attr_rsp of sdp_discovery.cc, there is a possible use after free due to a logic error in the code. This could lead to remote (prox… Android Mitigation only Fix from $1,9502025-08-26 HIGH 8.8 CVE-2025-22412 In multiple functions of sdp_server.cc, there is a possible use after free due to a logic error in the code. This could lead to remote (proximal/adja… Android Mitigation only Fix from $1,9502025-08-26 HIGH 8.4 CVE-2025-22409 In rfc_send_buf_uih of rfc_ts_frames.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalati… Android Mitigation only Fix from $1,9502025-08-26 HIGH 8.4 CVE-2025-22410 In multiple locations, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege wi… Android Mitigation only Fix from $1,9502025-08-26 MEDIUM 5.5 CVE-2025-22407 In hidd_check_config_done of hidd_conn.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to local inform… Android Mitigation only Fix from $1,6002025-08-26 CRITICAL 9.8 CVE-2025-22403 In sdp_snd_service_search_req of sdp_discovery.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remo… Android Mitigation only Fix from $2,3002025-08-26 HIGH 8.8 CVE-2025-0084 In multiple locations, there is a possible out of bounds write due to a use after free. This could lead to remote code execution over Bluetooth, if H… Android Mitigation only Fix from $1,9502025-08-26 HIGH 8.4 CVE-2025-22404 In avct_lcb_msg_ind of avct_lcb_act.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalatio… Android Mitigation only Fix from $1,9502025-08-26 HIGH 8.4 CVE-2025-22405 In multiple locations, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege wi… Android Mitigation only Fix from $1,9502025-08-26 HIGH 8.4 CVE-2025-22406 In bnepu_check_send_packet of bnep_utils.cc, there is a possible way to achieve code execution due to a use after free. This could lead to local esca… Android Mitigation only Fix from $1,9502025-08-26 HIGH 7.5 CVE-2025-0093 In handleBondStateChanged of AdapterService.java, there is a possible unapproved data access due to a missing permission check. This could lead to re… Android Mitigation only Fix from $1,9502025-08-26 MEDIUM 6.5 CVE-2025-0092 In handleBondStateChanged of AdapterService.java, there is a possible permission bypass due to misleading or insufficient UI. This could lead to remo… Android Mitigation only Fix from $1,6002025-08-26 MEDIUM 6.2 CVE-2025-0086 In onResult of AccountManagerService.java, there is a possible way to overwrite auth token due to a missing permission check. This could lead to loca… Android Mitigation only Fix from $1,6002025-08-26 CRITICAL 9.8 CVE-2025-0074 In process_service_attr_rsp of sdp_discovery.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote… Android Mitigation only Fix from $2,3002025-08-26 CRITICAL 9.8 CVE-2025-0075 In process_service_search_attr_req of sdp_server.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to re… Android Mitigation only Fix from $2,3002025-08-26 HIGH 8.8 CVE-2025-0078 In main of main.cpp, there is a possible way to bypass SELinux due to a logic error in the code. This could lead to local escalation of privilege wit… Android Mitigation only Fix from $1,9502025-08-26 HIGH 7.8 CVE-2025-0079 In multiple locations, there is a possible way that avdtp and avctp channels could be unencrypted due to a logic error in the code. This could lead t… Android Mitigation only Fix from $1,9502025-08-26 HIGH 7.8 CVE-2025-0080 In multiple locations, there is a possible way to overlay the installation confirmation dialog due to a tapjacking/overlay attack. This could lead to… Android Mitigation only Fix from $1,9502025-08-26 HIGH 7.5 CVE-2025-0081 In dng_lossless_decoder::HuffDecode of dng_lossless_jpeg.cpp, there is a possible way to cause a crash due to uninitialized data. This could lead to … Android Mitigation only Fix from $1,9502025-08-26 MEDIUM 5.5 CVE-2025-0082 In multiple functions of StatusHint.java and TelecomServiceImpl.java, there is a possible way to reveal images across users due to a confused deputy.… Android Mitigation only Fix from $1,6002025-08-26