29 matches found
CVE-2026-58744
In multiple locations, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-49882
In rwmfchandlereadop of rwmfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2026-74022
In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege with no additional execution privileges required...
CVE-2026-58820
A memory safety issue caused by an integer overflow exists in multiple locations within the affected software. This vulnerability could allow for local escalation of privilege without requiring additional execution privileges. While the root cause is identified as an integer overflow, the specifi...
EUVD-2026-74013
In multiple locations, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-45525
CVE-2026-45525 is an information disclosure vulnerability (CWE-200) within the Media Provider component of Project Mainline on Android. The flaw is caused by a logic error leading to improper data sanitization, which allows for the leaking of internal database state records . This vulnerability a...
CVE-2026-45519
The Media Provider component in Android is vulnerable to an incorrect permission assignment (CWE-275 ) due to a confused deputy flaw in the screenArgsForPermissionCheckIfAny function at multiple locations. This vulnerability allows for local database boundary bypasses , potentially leading to loc...
CVE-2026-28604
CVE-2026-28604 identifies a use-after-free vulnerability caused by a race condition within the Android Debug Bridge Daemon (adbd) . This flaw allows a local attacker to elevate their context to the shell user. The vulnerability impacts Android 13, 14, 15, and 16 . Exploitation does not require ad...
Android Security Bulletin—September 2026Stay organized with collectionsSave and categorize content based on your preferences.
This Android Security Bulletin contains details of security vulnerabilities that affect Android devices. Security patch levels of 2026-09-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Source code patches...
CVE-2025-48650
In multiple locations, there is a possible information disclosure due to SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2022-38695
In BootRom, there's a possible unchecked command index. This could lead to local escalation of privilege with no additional execution privileges needed...
CVE-2022-39114
In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed...
CVE-2021-39631
In cleardatadlgtext of strings.xml, there is a possible situation when "Clear storage" functionality sets up the wrong security/privacy expectations due to a misleading message. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not...
CVE-2023-42635
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
PT-2023-18165 · Sim · Sim
Name of the Vulnerable Software and Affected Versions: Sim affected versions not specified Description: The issue is related to a permission bypass that allows evading mobile preference restrictions. This could lead to local escalation of privilege with no additional execution privileges needed...
CVE-2023-38438
In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges...
CVE-2023-33916
In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges...
Out-of-bounds
In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...