PT-2025-44977

Name of the Vulnerable Software and Affected Versions Aruba WLAN AP Driver affected versions not specified Description An out-of-bounds write issue exists in the wlan AP driver due to an incorrect bounds check. Successful exploitation could allow a malicious actor with System privileges to escala...

PT-2025-44975

Name of the Vulnerable Software and Affected Versions Aruba WLAN AP Driver affected versions not specified Description An out-of-bounds write issue exists in the wlan AP driver due to an incorrect bounds check. Successful exploitation could allow a malicious actor with System privileges to escala...

PT-2025-44965

Name of the Vulnerable Software and Affected Versions Huawei Modem affected versions not specified Description The Huawei Modem contains a flaw where an incorrect bounds check can lead to an out-of-bounds write. This condition could allow for remote escalation of privilege if a User Equipment UE...

PT-2025-44306

Name of the Vulnerable Software and Affected Versions NCR Atleos Terminal Manager ConfigApp version 3.4.0 Description An issue in NCR Atleos Terminal Manager ConfigApp version 3.4.0 allows attackers to escalate privileges via a crafted request. Exploiting this vulnerability allows a crafted reque...

PT-2025-43471

Name of the Vulnerable Software and Affected Versions affected versions not specified Description There is a potential for media deletion without the necessary MANAGE EXTERNAL STORAGE permission due to an intent redirect. This could result in local escalation of privilege and does not require use...

PT-2025-43463

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Framework component of Android operating systems related to insufficient protection of service data. This issue may allow a remote attacker to elevate privileges. The iss...

PT-2025-43470

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Framework component of Android operating systems due to insufficient protection of system data. Remote attackers may be able to escalate privileges by exploiting this...

PT-2025-43488

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists that may allow unauthorized access to files belonging to other users due to an insufficient permission check. This could result in local information disclosure without requiring...

PT-2025-43502

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the VoiceInteractionManagerService.java component, specifically within the findAvailRecognizer function. This issue stems from an insecure default value, potentially allowing...

PT-2025-43469

Name of the Vulnerable Software and Affected Versions MediaProvider.java affected versions not specified Description A flaw exists in multiple functions of MediaProvider.java that may allow a bypass of external storage write permissions due to a confused deputy condition. Successful exploitation...

PT-2025-43453

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Framework component of Android operating systems related to insufficient protection of service data. Exploitation may allow a remote attacker to elevate privileges...

PT-2025-43507

Name of the Vulnerable Software and Affected Versions WindowManagerService.java affected versions not specified Description A potential tapjack attack exists in the relayoutWindow function of WindowManagerService.java due to a missing permission check. Successful exploitation could lead to local...

PT-2025-43474

In multiple functions of ProfilingService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2025-43465

Name of the Vulnerable Software and Affected Versions CertInstaller.java affected versions not specified Description The software contains a flaw in multiple functions that may allow for the installation of certificates due to a permissions bypass. This could result in local escalation of privile...

PT-2025-43451

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Framework component of Android operating systems related to insufficient protection of service data. Successful exploitation may allow a remote attacker to elevate...

PT-2025-43482

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Android Framework component where insufficient input validation can be exploited to trick a user into accepting a permission through a tapjacking or overlay attack. This...

PT-2025-43467

Name of the Vulnerable Software and Affected Versions KeyguardViewMediator.java affected versions not specified Description A race condition exists in multiple functions within KeyguardViewMediator.java, potentially allowing a lockscreen bypass. Successful exploitation could lead to local privile...

PT-2025-43499

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description An issue exists in Android related to insufficient protection of service data. Exploitation may allow an attacker to disclose protected information. A potential out-of-bounds read due to a...

PT-2025-43459

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Android Framework component related to insufficient protection of system data. Successful exploitation may allow a remote attacker to elevate privileges. The issue involv...

PT-2025-43460

Name of the Vulnerable Software and Affected Versions versions prior to 2025 Description There is a potential bypass of user profile boundaries through improperly validated forwarded intents. This could allow for local privilege escalation without requiring additional execution privileges or user...