CVE-2025-26425

The CVE-2025-26425 entry describes a local privilege-escalation issue in Android related to RoleService.java, caused by a logic error that enables permission squatting when android.permission.MANAGE_DEFAULT_APPLICATIONS is not defined. Exploitation is stated to require no user interaction, and th...

CVE-2025-0087

In onCreate of UninstallerActivity.java, there is a possible way to uninstall a different user's app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-0087

CVE-2025-0087 describes a local elevation-of-privilege in Android: in UninstallerActivity.java onCreate, missing permission checks could allow uninstalling another user’s app without user interaction. Several sources (NVD, CNVD/CNNVD, OSV) confirm the issue and classify it as EoP with a CVSSv3.1 ...

CVE-2025-36905

In gxpmappingcreate of gxpmapping.c, there is a possible privilege escalation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36903

In lwisiobufferwrite, there is a possible OOB read/write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36903

In lwisiobufferwrite, there is a possible OOB read/write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36898

There is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36898

CVE-2025-36898 is a local elevation-of-privilege vulnerability affecting Google Pixel devices, tied to a logic error in the Pixel Sim Lock component. Exploitation requires local access; no user interaction is needed. The CVSS v3.1 score is 7.8 (High) with exploitation described as LOCAL, LOW comp...

Google Android elevation of privilege vulnerability (CNVD-2026-11739)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a logic error in the code in the setMediaButtonReceiver of multiple files. An attacker can exploit this vulnerability to cause a local elevation of...

PT-2025-36065

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: In multiple locations, there is a possible way to read files belonging to other apps due to SQL injection. This could lead to local escalation of privilege with no additional execution...

Google Android elevation of privilege vulnerability (CNVD-2026-10643)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a logic error vulnerability, which is caused by a code logic error in multiple functions. An attacker can exploit the vulnerability to cause a local elevation of privilege...

PT-2025-36022

Name of the Vulnerable Software and Affected Versions: ResourcesImpl.java affected versions not specified Description: The loadDrawableForCookie function in ResourcesImpl.java may allow access to task snapshots of other applications due to a confused deputy condition. This could lead to local...

PT-2025-36047

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: The software contains a possible privilege escalation issue stemming from a tapjacking/overlay attack. Exploitation can lead to local privilege escalation without requiring additional execution...

PT-2025-36057

Name of the Vulnerable Software and Affected Versions: MediaProvider.java affected versions not specified Description: A flaw exists in the markMediaAsFavorite function of MediaProvider.java that may allow bypassing the WRITE EXTERNAL STORAGE permission due to a confused deputy condition. This...

PT-2025-36044

Name of the Vulnerable Software and Affected Versions: ContentProtectionTogglePreferenceController.java affected versions not specified Description: A logic error in the updateState function within ContentProtectionTogglePreferenceController.java may allow a secondary user to disable the deceptiv...

PT-2025-36059

Name of the Vulnerable Software and Affected Versions: versions prior to 2025-48535 Description: A parcel mismatch in assertSafeToStartCustomActivity of AppRestrictionsFragment.java may lead to a launch anywhere vulnerability due to unsafe deserialization. This could result in local escalation of...

PT-2025-36043

Name of the Vulnerable Software and Affected Versions: SpaActivity.kt affected versions not specified Description: A logic error exists in startSpaActivityForApp of SpaActivity.kt that may allow a cross-user permission bypass. This could lead to local privilege escalation without requiring...

PT-2025-36068

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: A logic error in the code may allow a one-time permission bypass, potentially leading to local escalation of privilege. User interaction is required for exploitation. Recommendations: At the moment...

CVE-2025-22422

In multiple locations, there is a possible way to mislead a user into approving an authentication prompt for one app when its result will be used in another due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...

CVE-2024-49730

In FuseDaemon.cpp, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...