Google Android 安全漏洞

Google Android is an open-source operating system based on Linux, developed by Google Inc. There is a vulnerability in Google Android, which arises from insufficient permission checks in the setUserDisclaimerAcknowledged method of CarDevicePolicyService.java. Attackers can exploit this...

ASB-A-473812391

In multiple locations, there is a possible misleading UI due to obfuscation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-496735702

In onServiceConnected of HostEmulationManager.java, there is a possible way to perform BAL due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-471127462

In getCallingAppLabel of CertInstaller.java, there is a possible way to hide a sensitive security dialogue due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-380091558

In btajvrfcommconnect of btajvact.cc, there is a possible bypass of bonding for a secure connection due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-483697751

In multiple functions of dngjxl.cpp, there is a possible integer overflow due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-351830787

In setUserDisclaimerAcknowledged of CarDevicePolicyService.java, there is a possible way to bypass the user dialog when adding an account to a managed device due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

PT-2026-45571

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description An issue exists in the InputInterceptor of Letterbox.java within the Framework component. The flaw involves incorrect restriction of visualized user interface layers, which allows a tapjackin...

PT-2026-45613

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the fixInitiatingUserIfNecessary function of CallIntentProcessor.java allows for the possibility of making an emergency call. This issue can be...

Google Android 安全漏洞

Google Android is an open-source operating system based on Linux, developed by Google Inc. There is a security vulnerability in Google Android, which stems from a click hijacking issue in the addWindow function, potentially leading to local privilege escalation...

Google Android 安全漏洞

Google Android is an open-source operating system based on Linux, developed by Google Inc. There is a security vulnerability in Google Android, which stems from the getCallingPackageName function in Shared.java code. This function contains obfuscation, potentially allowing bypass of activity laun...

Google Android 安全漏洞

Google Android is an open-source operating system based on Linux, developed by Google Inc. There are security vulnerabilities in Google Android. These vulnerabilities stem from the misleading or insufficient UI provided by the getCallingAppLabel function in CertInstaller.java, which may lead to t...

Google Android 安全漏洞

Google Android is an open-source operating system based on Linux, developed by Google Inc. There are security vulnerabilities in Google Android, which stem from integer overflows in multiple functions within ubsanthrowingruntime.cpp. These vulnerabilities may lead to local privilege escalation...

ASB-A-365086157

In resolveContentProvider of ComputerEngine.java, there is a possible way to access URIs across users due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-45572

Name of the Vulnerable Software and Affected Versions Android Framework affected versions not specified Description A flaw in WindowState.java allows a tapjacking or overlay attack, where a user can be tricked into approving permissions. This issue results from improper access control and can lea...

PT-2026-45570

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A logic error in the bta jv rfcomm connect function within the bta jv act.cc script allows for a bypass of bonding required for secure connections. This flaw enables a local attacker to achie...

PT-2026-45595

In multiple functions of PackageInstallerService.java, there is a possible way to install unverified apps due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-45565

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A missing permission check in the setUserDisclaimerAcknowledged function of CarDevicePolicyService.java allows a bypass of the user dialog when adding an account to a managed device. This iss...

ASB-A-406880479

In multiple locations, there is a possible background activity launch due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-428945391

In VerifyNoOverlapInSessions of apexd.cpp, there is a possible way to block security updates due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...