PT-2026-57451

In onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to and modification of device credentials due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed...

PT-2026-57452

In validate camera metadata structure of camera metadata.c, there is a possible out of bounds write due to a logical error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-57460

In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-57455

In multiple locations, there is a possible improper encryption key validation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-57474

Name of the Vulnerable Software and Affected Versions Android NFC component affected versions not specified Description A logic error in the rw mfc handle read op function within rw mfc.cc allows for an out-of-bounds write. This condition can be exploited to achieve local escalation of privilege...

PT-2026-57467

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A confused deputy issue allows unauthorized read and write access to files in multiple locations. This flaw enables local escalation of privilege without...

PT-2026-57465

In dec frm prepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-57458

In addCreatorToken of ActivityManagerService.java, there is a possible Intent Redirection Bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-57472

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A logic error in the handleUssdRequest function within PhoneInterfaceManager.java allows the transmission of USSD requests without the required permissions. This flaw enables local escalation...

PT-2026-57450

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A transient Denial of Service DoS occurs during the processing of a channel map when adaptive frequency hopping is fully enabled and there are insufficient used channels. This issue can be triggered ...

PT-2026-57471

Name of the Vulnerable Software and Affected Versions VoiceInteractionManagerService affected versions not specified Description A resource exhaustion issue exists in the initForUserNoTracing function within VoiceInteractionManagerService.java. This flaw allows for a persistent local denial of...

PT-2026-57456

In multiple locations, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-57463

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A logic error in the resolveActivity function within ActivityStarter.java allows for Intent Redirection attacks. This issue enables local escalation of privileg...

PT-2026-57475

Name of the Vulnerable Software and Affected Versions Android ActivityStarter affected versions not specified Description A logic error in the executeRequest function within ActivityStarter.java allows for a background activity launch. This issue enables local escalation of privilege without...

PT-2026-57459

In onCreate of PaymentDefaultDialog.java, there is a possible way to change default payment app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-57466

Name of the Vulnerable Software and Affected Versions BleRssiRangingCapabilities.java affected versions not specified Description A missing permission check in the writeToParcel function of BleRssiRangingCapabilities.java allows for the retrieval of the Bluetooth MAC address. This issue enables...

PT-2026-57473

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in multiple functions of XmpDataParser.java causes improper data sanitization. This issue allows for local information disclosure without requiring...

PT-2026-57454

A heads up that there are a ton of CVEs being patched for July 2026 June was also high. So many that they released the "hot fix" patches in June and still have not updated the Android Patch notes. Could just be 4th of July holiday, but they are an international firm. No previous delays as long...

PT-2026-57469

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description In the buildMiniResolver function of IntentForwarderActivity.java, a consent bypass is possible through a tapjacking or overlay attack. Tapjacking occurs when a malicious application overlays...

PT-2026-57449

In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...