Apkx-Hunter

APKX-Hunter v2.7.2 — Debian Package APKX-Hunter — это фреймворк с открытым исходным кодом для статического анализа Android , полностью написанный на C , предназначенный для оценки безопасности Android, реверс-инжиниринга, анализа вредоносных программ, проверки соответствия OWASP MASVS , охоты за...

QuadraInspect

QuadraInspect / /\ \ / / / / / / / / / / / / / / / / // // / / / / / / / // / // / // / // / / / // // // / / // / / // / \\,/,/,// ,/// /// .//// // Безопасность мобильных устройств стала критически важной проблемой из-за растущего объёма конфиденциальных данных, которые на них...

CVE-2017-13286

CVE-2017-13286 CVE-2017-13286 PoC нельзя использовать Все ресурсы взяты из этой статьи https://bbs.kanxue.com/thread-268506.htm Основной причиной этой уязвимости является несоответствие чтения и записи объекта Parcel, что можно проследить до следующего кода: public void writeToParcelParcel dest,...

CVE-2024-0044

CVE-2024-0044/A-307532206 — это уязвимость высокой степени серьезности в Android Framework, которая позволяет злоумышленникам с доступом adb выполнять произвольный код под UID произвольного приложения. Изначально она была обнаружена Томом Хеббом из Meta Red Team X. В интернете можно найти множест...

CVE-2023-35674

Описание CVE-2023-35674 — это высококритичная уязвимость класса zero-day в Android Framework. Эта уязвимость позволяет злоумышленнику повысить свои привилегии без взаимодействия с пользователем или дополнительных разрешений на выполнение. Уязвимость возникает в том, как Android Framework...

CVE-2025-48595-Android-Framework-Integer-Overflow-

CVE-2025-48595 - Уязвимость целочисленного переполнения в Android Framework Описание CVE-2025-48595 – это уязвимость целочисленного переполнения integer overflow в нескольких местах платформы Android. Данная ошибка позволяет выполнить код , что приводит к локальному повышению привилегий без...

EUVD-2026-73992

In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73986

In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28642

A logic error in the executeRequest method of ActivityStarter.java within the Android Framework can lead to an unauthorized background activity launch. This vulnerability allows for a local escalation of privilege without requiring additional execution privileges or user interaction. Affected dev...

Exploit for Integer Overflow or Wraparound in Google Android

CVE-2025-48595 — Android Framework Integer Overflow Vulnerabil...

Lost in Migration: Exposing Android Framework Vulnerabilities in Parallel Java-Kotlin Implementations

Android has adopted Kotlin alongside Java across apps and core system components. During this shift, we observe parallel implementations in the Android Open Source Project AOSP where the same component is implemented in both Java and Kotlin. In principle, their functional purposes are identical. ...

The vulnerability of the Framework component in Android operating systems, which allows a hacker to increase their privileges

The vulnerability of the Framework component in Android operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability in the ComputerEngine.java class of the Android operating system’s Framework component allows a perpetrator to increase their privileges.

The vulnerability in the ComputerEngine.java class of the Android operating system’s Framework component is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the performPreInstallChecks() function in the InstallRepository.kt script of the Android operating system’s Framework component allows a malicious actor to escalate their privileges.

The vulnerability of the performPreInstallChecks function in the InstallRepository.kt scenario of the Android operating system’s framework component is related to a data protection mechanism breach. Exploiting this vulnerability could allow an attacker to enhance their privileges...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2022-0492link is external Linux Kernel Improper Authentication Vulnerability CVE-2025-48595link is external Android Framework Integer Overflow Vulnerability The...

The vulnerability of the verifySignature method in the ApkChecksums.java class of the Framework operating system component in Android allows a hacker to trigger a service failure.

The vulnerability of the verifySignature method in the ApkChecksums.java class of the Framework operating system component in Android involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

The vulnerability of the Framework component in Android operating systems allows a hacker to trigger a service failure.

The vulnerability of the Framework component in Android operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Framework component in Android operating systems, which allows a hacker to increase their privileges

The vulnerability of the Framework component in Android operating systems relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the approvalLevelForDomainInternal method in the DomainVerificationService.java class of the Android operating system framework allows a hacker to increase their privileges.

The vulnerability of the approvalLevelForDomainInternal method in the DomainVerificationService.java class of the Android operating system framework component is related to incorrect code generation management. Exploiting this vulnerability could allow an attacker to enhance their privileges...

The vulnerability of the setGlobalProxy method in the DevicePolicyManagerService.java class of the Android operating system’s Framework component allows a hacker to increase their privileges.

The vulnerability of the setGlobalProxy method in the DevicePolicyManagerService.java class of the Android operating system’s framework is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to increase their privileges...