27 matches found
EUVD-2026-74022
In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege with no additional execution privileges required...
CVE-2026-58820
CVE-2026-58820 is an Android vulnerability (tracked as ASB-A-522366268 in the Android Security Bulletin) involving a memory safety issue due to integer overflow in multiple locations. The flaw can lead to local escalation of privilege with no additional execution privileges required. The CVSS 3.1...
EUVD-2026-74013
In multiple locations, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-45525
CVE-2026-45525 affects Android , where a logic error in multiple locations causes improper data sanitization . This can lead to local information disclosure without requiring additional execution privileges, and no user interaction is needed for exploitation. The vulnerability is tracked in the A...
CVE-2026-45519
CVE-2026-45519 affects Android , specifically the function screenArgsForPermissionCheckIfAny in multiple locations. The root cause is a confused deputy flaw, which could lead to local information disclosure . No additional execution privileges are required, and no user interaction is needed for e...
CVE-2026-28604
CVE-2026-28604 is a use-after-free vulnerability caused by a race condition in multiple locations within Android , as referenced in the 2026-09-01 Android security bulletin. The flaw can lead to remote code execution with no additional privileges required and no user interaction needed for exploi...
Android Security Bulletin—September 2026Stay organized with collectionsSave and categorize content based on your preferences.
This Android Security Bulletin contains details of security vulnerabilities that affect Android devices. Security patch levels of 2026-09-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Within 48 hours afte...
CVE-2025-48650
In multiple locations, there is a possible information disclosure due to SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2022-38695
In BootRom, there's a possible unchecked command index. This could lead to local escalation of privilege with no additional execution privileges needed...
CVE-2022-39114
In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed...
CVE-2021-39631
In cleardatadlgtext of strings.xml, there is a possible situation when "Clear storage" functionality sets up the wrong security/privacy expectations due to a misleading message. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not...
CVE-2023-42635
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
PT-2023-18165 · Sim · Sim
Name of the Vulnerable Software and Affected Versions: Sim affected versions not specified Description: The issue is related to a permission bypass that allows evading mobile preference restrictions. This could lead to local escalation of privilege with no additional execution privileges needed...
CVE-2023-38438
In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges...
CVE-2023-33916
In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges...
Out-of-bounds
In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-33901
In bluetooth service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
CVE-2023-33902
In bluetooth service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...