CVE-2025-48538

In setApplicationHiddenSettingAsUser of PackageManagerService.java, there is a possible way to hide a system critical package due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitatio...

CVE-2025-48534

In getDefaultCBRPackageName of CellBroadcastHandler.java, there is a possible escalation of privilege due to a logic error in the code. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48524

In isSystem of WifiPermissionsUtil.java, there is a possible permission bypass due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48559

CVE-2025-48559 affects Google Android’s AppOpsService.java. The vulnerability arises from improper input validation in multiple internal functions, enabling an attacker to add a large number of app ops. This can cause a local denial of service with no extra privileges and without user interaction...

CVE-2025-48559

In multiple functions of AppOpsService.java, there is a possible add a large amount of app ops due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48550

CVE-2025-48550 is a path traversal vulnerability in testGrantSlicePermission of SliceManagerTest.java that could cause a permanent Denial of Service locally, without user interaction. Exploitation is local and requires no additional privileges. The connected documents confirm the issue but do not...

CVE-2025-48542

In multiple functions of AccountManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48542

CVE-2025-48542 is an Android vulnerability affecting AccountManagerService.java, causing a possible permanent denial of service due to resource exhaustion. Exploitation is local, requires no additional privileges, and does not require user interaction. Multiple connected sources corroborate the i...

CVE-2025-48538

CVE-2025-48538 affects the Android Framework, specifically the PackageManagerService.setApplicationHiddenSettingAsUser function. The root cause is improper input validation when hiding system-critical packages, which can allow local denial of service without requiring exploits or user interaction...

CVE-2025-26463

In allowPackageAccess of multiple files, resource exhaustion is possible when repeatedly adding allowed packages. This could lead to a local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-26463

In allowPackageAccess of multiple files, resource exhaustion is possible when repeatedly adding allowed packages. This could lead to a local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-26456

In multiple functions of DexUseManagerLocal.java, there is a possible way to crash system server due to a logic error in the code. This could lead to local permanent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-26463

In allowPackageAccess of multiple files, resource exhaustion is possible when repeatedly adding allowed packages. This could lead to a local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-26463

In allowPackageAccess of multiple files, resource exhaustion is possible when repeatedly adding allowed packages. This could lead to a local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-26456

CVE-2025-26456 affects DexUseManagerLocal.java in Android; a logic error can crash the system server, leading to local, permanent denial of service without extra privileges or user interaction. Exploitation / patch details are not provided in the supplied documents; no explicit remediation versio...

CVE-2025-26456

In multiple functions of DexUseManagerLocal.java, there is a possible way to crash system server due to a logic error in the code. This could lead to local permanent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-26449

CVE-2025-26449 is a Google Android DoS vulnerability due to resource exhaustion causing local denial of service with no user interaction. Public documents corroborate a local impact and DoS classification across Android components; the Android bulletin notes patch levels 2025-06-01 and 2025-06-05...

PT-2025-36020

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: The software is susceptible to a permanent denial of service due to resource exhaustion. Exploitation of this issue could lead to a local denial of service without requiring additional execution...

PT-2025-36011

Name of the Vulnerable Software and Affected Versions: AppOpsService.java affected versions not specified Description: The collectOps function in AppOpsService.java is susceptible to a denial-of-service condition due to inadequate input validation. This can result in a local denial of service...

PT-2025-36061

Name of the Vulnerable Software and Affected Versions: PackageManagerService affected versions not specified Description: An issue exists in the setApplicationHiddenSettingAsUser function within PackageManagerService.java due to improper input validation. This could allow an attacker to hide a...