99173 matches found
CVE-2026-58955: Google Android: In updateNotificationChannel of PreferencesHelper.java, there is a possible ui obfuscation issue due to a logic errorβ¦
In updateNotificationChannel of PreferencesHelper.java, there is a possible ui obfuscation issue due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-59043: Google Android: In arm_lpae_split_blk_unmap of io-pgtable-arm-common.c, there is a possible memory corruption due to a race condition
In armlpaesplitblkunmap of io-pgtable-arm-common.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-45514: Google Android: In multiple functions of SaveUi.java, there is a possible bypass of package installation requirements due to a logicβ¦
In multiple functions of SaveUi.java, there is a possible bypass of package installation requirements due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-58997: Google Android: In validateImageInfo of Bitmap.cpp, there is a possible out-of-bounds read due to a precondition check failure
In validateImageInfo of Bitmap.cpp, there is a possible out-of-bounds read due to a precondition check failure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-58978: Google Android: In multiple locations, there is a possible permission bypass due to a logic error in the code
In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-135661
In multiple locations, there is a possible method for a primary user to disable secure nfc on other full users due to insufficient isolation between Android users. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2026-58870: Google Android: In onPersistentGroupsChanged of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missingβ¦
In onPersistentGroupsChanged of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-135664
The pppoe wrapper vendor daemon from the Amlogic Android SDK, as shipped on Nexbox A95X Amlogic S905/S905X TV boxes, contains a command injection vulnerability that allows local attackers to execute arbitrary commands as root by sending crafted messages to a world-writable AF UNIX datagram socket...
Google Android security vulnerabilities
Google Android versions 15 and 14 contain a security vulnerability stemming from clickjacking/cross-site request forgery. This vulnerability may trick users into granting privileges, leading to local privilege escalation; exploitation requires user interaction...
CVE-2026-58845: Google Android: In multiple locations, there is a possible out of bounds write due to an integer overflow
In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-59000: Google Android: In multiple locations, there is a possible permission bypass due to a confused deputy
In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
frameworks_av_AOSP10_r33_CVE-2021-0520
This repository does not have a README...
qu1ckr00t
qu1ckr00t A PoC application demonstrating the power of an Android kernel arbitrary R/W CVE-2019-2215. Writeup: https://hernan.de/blog/2019/10/15/tailoring-cve-2019-2215-to-achieve-root/ Qu1ckR00t is a PROOF OF CONCEPT. It should NOT be used on your personal device with valuable userdata. It has...
BUGS_OOM_NULL_PTR_DEREF
BUGSOOMNULLPTRDEREF BUGS ON ANDROID NULL PTR DEREF, OOM JUST FOR LULZ...
CVE-2026-0073
π€ CVE-2026-0073 - Wireless ADB Authentication Bypass π Overview CVE-2026-0073 is a critical authentication bypass vulnerability in Androidβs Wireless ADB adbd daemon. An attacker on the same network can bypass the mutual TLS authentication and connect to the device without user approval or previo...
frameworks_opt_net_wifi_CVE-2021-0390
This repository does not have a README...
Presentations
Presentations 2026 HITCON 2026 - 21st - 22nd August 2026 Pwn2OwNothing: When a KVM Full-Chain Escapes to Emptiness by PAN Zhenpeng, Billy JHENG Bing Jhong, Bruce CHEN & SHI Weiming 2025 CodeBlue 2025 - 18th to 19th November 2025 AI Accelerated Exploiting: Compromising MTE Enabled Pixel from DSP...
AndroidWebviewInjectDemo
AndroidWebviewInjectDemo An app demo for test android webview security issue: CVE-2012-6636...
external_libcap-Android10_r33_CVE-2023-2603
This is a library for getting and setting POSIX.1e formerly POSIX 6 draft 15 capabilities. This library would not have been possible without the help of Aleph1, Roland Buresund and Andrew Main, Alexander Kjeldaas. More information on capabilities in the Linux kernel can be found at...
CVE-2020-0014-Toast
CVE-2020-0014 Toast Reproduction This vulnerability allows a malicious app to intercept user operations on the screen by constructing a clickable Toast view, thereby achieving the purpose of collecting sensitive information such as user passwords. Affected versions: Android 8.0, 8.1, 9, 10 Only...