CVE-2025-26445

In offerNetwork of ConnectivityService.java, there is a possible leak of sensitive data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-26445

In offerNetwork of ConnectivityService.java, there is a possible leak of sensitive data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-26424

In multiple functions of VpnManager.java, there is a possible cross-user data leak due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-26437

The CVE-2025-26437 issue is described across multiple sources as a missing privilege check in CredentialManagerServiceStub (CredentialManagerService.java), enabling local information disclosure by retrieving candidate credentials without requiring extra privileges. Exploitation is possible withou...

CVE-2025-26424

In multiple functions of VpnManager.java, there is a possible cross-user data leak due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-26424

The CVE CVE-2025-26424 concerns VpnManager.java in the Android framework, where a logic error enables cross-user data leakage. The impact is local information disclosure without extra privileges or user interaction. Exploitation details are not provided in the connected documents, and there is no...

CVE-2023-35657

In btaavconfigind of btaavaact.cc, there is a possible out of bounds read due to type confusion. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36893

In ReadTachyonCommands of gxpmainactor.cc, there is a possible information leak due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36893

CVE-2025-36893 describes a local information-disclosure vulnerability due to uninitialized data in ReadTachyonCommands within gxp_main_actor.cc. The issue can leak information with no additional execution privileges and no user interaction required. Affected component: the gxp main actor’s ReadTa...

CVE-2025-36893

In ReadTachyonCommands of gxpmainactor.cc, there is a possible information leak due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36893

In ReadTachyonCommands of gxpmainactor.cc, there is a possible information leak due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Android 安全漏洞

Google Android is a free and open source mobile operating system based on the Linux kernel, developed by Google Inc. and the Open Handset Alliance, and is mainly used for smartphones, tablets and other devices. Google Android suffers from a missing privilege check vulnerability, which can be...

PT-2025-36072

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A potential information disclosure issue exists due to a confused deputy condition, which may allow an image to leak across the Android User isolation boundary. Exploitation requires user...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that can be exploited by an attacker to cause local information disclosure...

PT-2025-36053

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: A logic error in the code may allow for the leakage of hidden work profile notifications, potentially leading to local information disclosure. Exploitation does not require additional execution...

PT-2025-36055

Name of the Vulnerable Software and Affected Versions: VoicemailNotificationSettingsUtil.java affected versions not specified Description: A cross-user data leak exists due to a confused deputy condition within the setRingtoneUri function of the VoicemailNotificationSettingsUtil.java file. This...

PT-2025-36019

Name of the Vulnerable Software and Affected Versions: CursorWindow affected versions not specified Description: An out-of-bounds read issue exists in the writeToParcel function within CursorWindow.cpp due to uninitialized data. This could lead to local information disclosure and does not require...

CVE-2025-22421

In contentDescForNotification of NotificationContentDescription.kt, there is a possible notification content leak through the lockscreen due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed...

CVE-2024-49728

In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-49722

In showAvatarPicker of EditUserPhotoController.java, there is a possible cross user image leak due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...