CVE-2024-53934

The com.windymob.callscreen.ringtone.callcolor.colorphone aka Color Phone Call Screen Themes application through 1.1.2 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.frovis.androidbase.call.DialerActivi...

CVE-2024-53933

The com.callerscreen.colorphone.themes.callflash aka Color Call Theme & Call Screen application through 1.0.7 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the...

CVE-2024-53935

The com.callos14.callscreen.colorphone aka iCall OS17 - Color Phone Flash application through 4.3 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.callos14.callscreen.colorphone.DialerActivity component...

CVE-2024-53936

The com.asianmobile.callcolor aka Color Phone Call Screen App application through 24 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.asianmobile.callcolor.ui.component.call.CallActivity component...

CVE-2024-53936

The com.asianmobile.callcolor aka Color Phone Call Screen App application through 24 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.asianmobile.callcolor.ui.component.call.CallActivity component...

CVE-2024-53933

The com.callerscreen.colorphone.themes.callflash aka Color Call Theme & Call Screen application through 1.0.7 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the...

CVE-2024-53932

The com.remi.colorphone.callscreen.calltheme.callerscreen aka Color Phone: Call Screen Theme application through 21.1.9 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the...

CVE-2024-53934

The com.windymob.callscreen.ringtone.callcolor.colorphone aka Color Phone Call Screen Themes application through 1.1.2 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.frovis.androidbase.call.DialerActivi...

CVE-2024-53935

The iCall OS17 - Color Phone Flash (com.callos14.callscreen.colorphone) application for Android, versions 4.3 and earlier , contains a vulnerability that allows unauthorized phone calls. An attacker can send a crafted intent to the com.callos14.callscreen.colorphone.DialerActivity component, enab...

CVE-2024-53932

The Color Phone: Call Screen Theme application (com.remi.colorphone.callscreen.calltheme.callerscreen) for Android versions through 21.1.9 contains a vulnerability that allows unauthorized phone calls. An attacker can place calls without user interaction by sending a crafted intent to the com.rem...

CVE-2024-53933

The com.callerscreen.colorphone.themes.callflash aka Color Call Theme & Call Screen application through 1.0.7 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the...

CVE-2024-53936

The com.asianmobile.callcolor aka Color Phone Call Screen App application through 24 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.asianmobile.callcolor.ui.component.call.CallActivity component...

CVE-2024-53934

The com.windymob.callscreen.ringtone.callcolor.colorphone aka Color Phone Call Screen Themes application through 1.1.2 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.frovis.androidbase.call.DialerActivi...

CVE-2024-53932

The com.remi.colorphone.callscreen.calltheme.callerscreen aka Color Phone: Call Screen Theme application through 21.1.9 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the...

PT-2025-1035 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a logic error in the code of gatt sr.cc, specifically in the gatts process read by type req function, which could lead to an out-of-bounds write. This might result i...

Google Android Out-of-Bounds Read Vulnerability (CNVD-2025-15178)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an out-of-bounds read vulnerability due to a lack of bounds checking in the ih264efmtconv420pto420sp function in the ih264efmtconv.c file, which can be exploited by an attacker to cause a denial ...

Google Android Denial of Service Vulnerability (CNVD-2025-03019)

Google Android is a Linux-based open source operating system from Google. A denial of service vulnerability exists in Google Android, which stems from a lack of bounds checking in the ihevcdparseslicedata function in the ihevcdparseslice.c file, which can be exploited by an attacker to cause a...

Google Android Denial of Service Vulnerability (CNVD-2025-03654)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a denial of service vulnerability caused by an out-of-bounds read in mverrcost in mcomp.c. The vulnerability is caused by an out-of-bounds read in mverrcost. An attacker can exploit this...

PT-2025-2992 · Google · Android

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to a possible biometric bypass due to an unusual root cause, which could lead to local escalation of privilege with no additional execution privileges needed. User...

Google Android 安全漏洞

Google Android is an open source cell phone operating system developed by Google. Google Android suffers from an elevation of privilege vulnerability that stems from an undeclared permission to add an application to bypass a VPN.An attacker can exploit this vulnerability to achieve a local...