687 matches found
CVE-2025-26448
In writeToParcel of CursorWindow.cpp, there is a possible out of bounds read due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-26448
In writeToParcel of CursorWindow.cpp, there is a possible out of bounds read due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-26448
In writeToParcel of CursorWindow.cpp, there is a possible out of bounds read due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-26448
The Android Framework component contains an information disclosure vulnerability (CVE-2025-26448) caused by a possible out-of-bounds read due to uninitialized data in the writeToParcel function of CursorWindow.cpp. This flaw allows for local information disclosure without requiring additional exe...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability caused by an out-of-bounds write due to a heap-based buffer overflow in the appendFrom function in Parcel.cpp. An attacker can exploit the vulnerability to...
PT-2025-36019
Name of the Vulnerable Software and Affected Versions: CursorWindow affected versions not specified Description: An out-of-bounds read issue exists in the writeToParcel function within CursorWindow.cpp due to uninitialized data. This could lead to local information disclosure and does not require...
PT-2025-36059
Name of the Vulnerable Software and Affected Versions: versions prior to 2025-48535 Description: A parcel mismatch in assertSafeToStartCustomActivity of AppRestrictionsFragment.java may lead to a launch anywhere vulnerability due to unsafe deserialization. This could result in local escalation of...
MAL-2025-42052 Malicious code in parcel-plugin-envvar-allowlist (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in parcel-plugin-envvar-allowlist (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in parcel-stratosphere-epigenetics-achernar (npm)
The package parcel-stratosphere-epigenetics-achernar was found to contain malicious code...
Malicious code in jest-mocha-parcel-hyperion (npm)
The package jest-mocha-parcel-hyperion was found to contain malicious code...
Malicious code in parcel-solarnebula-deneb-test (npm)
The package parcel-solarnebula-deneb-test was found to contain malicious code...
Malicious code in kaus-auth-hermes-parcel (npm)
The package kaus-auth-hermes-parcel was found to contain malicious code...
Malicious code in parcel-higgs-axios-charon (npm)
The package parcel-higgs-axios-charon was found to contain malicious code...
Malicious code in procyon-parcel-ursa-cosmiconfig (npm)
The package procyon-parcel-ursa-cosmiconfig was found to contain malicious code...
Malicious code in wolf-arcturus-parcel-juno (npm)
The package wolf-arcturus-parcel-juno was found to contain malicious code...
Malicious code in protoplanetarydisk-decoherence-aquarius-parcel (npm)
The package protoplanetarydisk-decoherence-aquarius-parcel was found to contain malicious code...
MAL-2025-29704 Malicious code in procyon-parcel-ursa-cosmiconfig (npm)
The package procyon-parcel-ursa-cosmiconfig was found to contain malicious code...