packages_apps_settings_AOSP10_r33_CVE-2021-0481

В этом репозитории нет README...

CVE-2020-0001

CVE-2020-0001 POC для запуска системного компонента в процессе недоверенного приложения Блог https://zachinio.com/blogs/cve-2020-0001 Как использовать Запустите приложение, убедитесь, что процесс "com.android.settings" не существует, и нажмите кнопку "start service". Запустите приложение настроек...

packages_apps_Settings_AOSP10_r33_CVE-2020-0188_CVE-0219

В этом репозитории нет README...

packages_apps_Settings_AOSP10_r33_CVE-2020-0219_CVE-2020-0188_old-one

В этом репозитории нет README...

packages_apps_settings_AOSP10_r33_CVE-2020-0394

В этом репозитории нет README...

packages_apps_Settings_CVE-2020-0201

В этом репозитории нет README...

CVE-2026-28593

In getItemList of SettingsFragment.java, there is a possible user interaction bypass due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73956

In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible read/write access to private files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

The vulnerability of the Settings component in Android operating systems allows attackers to increase their privileges.

The vulnerability of the Android operating system’s Settings component is related to incorrect external manipulation of the file name or path during data loading. Exploiting this vulnerability can allow an attacker to gain increased privileges...

EUVD-2016-5038

Malware in sbrugna...

EUVD-2018-21119

Malware in sbrugna...

EUVD-2020-1805

Malware in sbrugna...

EUVD-2020-1810

Malware in sbrugna...

EUVD-2020-1813

Malware in sbrugna...

CVE-2022-20297

In Settings, there is a possible way to bypass factory reset protections due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android I...

CVE-2022-20234

In Car Settings app, the NotificationAccessConfirmationActivity is exported. In NotificationAccessConfirmationActivity, it gets both 'mComponentName' and 'pkgTitle' from user.An unprivileged app can use a malicous mComponentName with a benign pkgTitle e.g. Settings app to make users enable...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Feb-2025 Release 1, which stems from an improperly exported Android application componen...

PT-2023-18111 · Google · Android

Name of the Vulnerable Software and Affected Versions: Settings affected versions not specified Description: The issue allows an attacker to determine whether an app is installed without query permissions, due to side channel information disclosure. This could lead to local information disclosure...

CVE-2022-20321

In Settings, there is a possible way for an application without permissions to read content of WiFi QR codes due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in the Google Android Settings component that stems from a privilege bypass, and there is a possible way to bypass the factory reset privilege...