PT-2026-57449

In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-57468

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description In the onCreate function of ContactsPickerActivity.kt, a tapjacking or overlay attack can create a misleading user interface. This issue allows for local...

PT-2026-57469

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description In the buildMiniResolver function of IntentForwarderActivity.java, a consent bypass is possible through a tapjacking or overlay attack. Tapjacking occurs when a malicious application overlays...

GREE for Android vulnerable to directory traversal

Overview GREE for Android contains a directory traversal vulnerability. GREE for Android contains an issue in handling URL inputs, which may result in a directory traversal vulnerability. Takeshi Terada of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC...