38 matches found
PT-2026-57475
Name of the Vulnerable Software and Affected Versions Android ActivityStarter affected versions not specified Description A logic error in the executeRequest function within ActivityStarter.java allows for a background activity launch. This issue enables local escalation of privilege without...
PT-2026-57477
In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-57462
In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code. This could lead to remote escalation of privilege without user consent with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-57448
In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in the background due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is...
PT-2026-57472
Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A logic error in the handleUssdRequest function within PhoneInterfaceManager.java allows the transmission of USSD requests without the required permissions. This flaw enables local escalation...
PT-2026-57452
In validate camera metadata structure of camera metadata.c, there is a possible out of bounds write due to a logical error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-57478
A heads up that there are a ton of CVEs being patched for July 2026 June was also high. So many that they released the "hot fix" patches in June and still have not updated the Android Patch notes. Could just be 4th of July holiday, but they are an international firm. No previous delays as long...
PT-2026-57460
In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-57468
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description In the onCreate function of ContactsPickerActivity.kt, a tapjacking or overlay attack can create a misleading user interface. This issue allows for local...
PT-2026-57461
In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible read/write access to private files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-57467
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A confused deputy issue allows unauthorized read and write access to files in multiple locations. This flaw enables local escalation of privilege without...
PT-2026-57464
In onCreate of SlicePermissionActivity.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-57473
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in multiple functions of XmpDataParser.java causes improper data sanitization. This issue allows for local information disclosure without requiring...
PT-2026-57450
Name of the Vulnerable Software and Affected Versions affected versions not specified Description A transient Denial of Service DoS occurs during the processing of a channel map when adaptive frequency hopping is fully enabled and there are insufficient used channels. This issue can be triggered ...
PT-2026-57454
A heads up that there are a ton of CVEs being patched for July 2026 June was also high. So many that they released the "hot fix" patches in June and still have not updated the Android Patch notes. Could just be 4th of July holiday, but they are an international firm. No previous delays as long...
CVE-2026-21046
The vulnerability CVE-2026-21046 concerns the fabricKeymaster trustlet. It describes a time-of-check time-of-use race condition that exists prior to the SMR Jul-2026 Release 1. Impact is local: a privileged attacker could execute arbitrary code. The provided sources specify the affected component...
EUVD-2026-29907
Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged activity...
PT-2026-5351
Name of the Vulnerable Software and Affected Versions Versions affected versions not specified Description A privilege escalation issue exists due to a confused deputy condition. Successful exploitation could lead to local privilege escalation without requiring additional execution privileges or...
PT-2026-5352
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A missing bounds check in the onTransact function of IDrmManagerService.cpp allows for a possible out-of-bounds write. This condition can be exploited to achieve...
