The vulnerability of the WRITE_SECURE_SETTINGS function in the ZygoteProcess.java file of the Android operating system allows a hacker to gain increased privileges.

The vulnerability of the WRITESECURESETTINGS function in the ZygoteProcess.java file of the Android operating system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2025-20980

Out-of-bounds write in libsavscmn prior to Android 15 allows local attackers to cause memory corruption...

PT-2025-20040 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to SMR May-2025 Release 1 Description: The issue concerns the improper export of Android application components in NotificationHistoryImageProvider, allowing local attackers to access notification images. This could...

PT-2025-20065 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to 15 Description: The issue is an out-of-bounds write in libsavscmn, which allows local attackers to cause memory corruption. Recommendations: For versions prior to Android 15, update to Android 15 or later to resolve...

PT-2025-20044 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to SMR May-2025 Release 1 Description: The issue concerns the use of implicit intent for sensitive communication in the Wi-Fi P2P service, allowing local attackers to access sensitive information. Recommendations: For...

PT-2025-24454

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The Android Framework component contains a buffer copy flaw due to insufficient input validation. Exploitation of this flaw may allow an attacker to escalate privileges. Specifically, in th...

PT-2025-20288

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A flaw exists in the Framework component of the Android operating system related to a buffer copy without proper input validation. This issue may allow an attacker to escalate privileges...

PT-2025-24446

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A flaw exists in the Android operating system's Framework component related to a buffer copy operation lacking input size validation. Exploitation of this issue may allow an attacker to...

PT-2025-24451

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A flaw exists in the LockTaskController.java component within the Android operating system. A logic error in the startLockTaskMode function may allow a bypass of the lock screen, potentiall...

PT-2025-24448

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A flaw exists in the VoiceInteractionManagerService.java component within the Android operating system. Specifically, a logic error in the onHandleForceStop function can cause the system to...

PT-2025-19329 · Mediatek +1 · Mt6580 +1

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: In devinfo, there is a possible information disclosure due to a missing SELinux policy. This could lead to local information disclosure of device identifier with no additional execution...

PT-2025-24450

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A flaw exists in the Android operating system's Framework component related to a buffer copy operation without proper input validation. Exploitation of this issue may allow an attacker to...

PT-2025-24452

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue resides within the System component of the Android operating system and is related to improper code generation management. Remote attackers may be able to execute arbitrary code b...

ASB-A-379362792

In multiple functions of RoleService.java, there is a possible permission squatting vulnerability due to a logic error in the code. This could lead to local escalation of privilege on versions of Android where android.permission.MANAGEDEFAULTAPPLICATIONS was not defined with no additional executi...

CVE-2025-4090

A vulnerability existed in Thunderbird for Android where potentially sensitive library locations were logged via Logcat. This vulnerability was fixed in Firefox 138 and Thunderbird 138...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in versions of Mozilla Firefox prior to 138, which stems from the possibility that Firefox for Android may log the location of sensitive libraries via Logcat...

Google Android Information Disclosure Vulnerability

Google Android is a Linux-based operating system from the American company Google. Google Android suffers from an information disclosure vulnerability that stems from a lack of permission checking to access media content belonging to other users, which can be exploited by an attacker to obtain...

Outlook for Android Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Outlook for Android allows an unauthorized attacker to disclose information over a network...

Google Android elevation of privilege vulnerability (CNVD-2025-11433)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that originates from multiple locations containing an eavesdropping hijacking/overwriting attack that can be exploited by an attacker to gain access to a...

Google Android Denial of Service Vulnerability

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a denial of service vulnerability that originates in the buildreadmultirsp function of the gattsr.cc file, which contains a logic error that can be exploited by an attacker to cause a denial of...