86 matches found
CVE-2026-49882
In rwmfchandlereadop of rwmfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2026-74022
In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege with no additional execution privileges required...
CVE-2026-58820
CVE-2026-58820 is an Android vulnerability (tracked as ASB-A-522366268 in the Android Security Bulletin) involving a memory safety issue due to integer overflow in multiple locations. The flaw can lead to local escalation of privilege with no additional execution privileges required. The CVSS 3.1...
EUVD-2026-74013
In multiple locations, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-45525
CVE-2026-45525 is an improper data sanitization flaw (CWE-200) in the Android Media Provider component (Project Mainline), caused by a logic error in the code. It allows local information disclosure of internal database state records with low privileges and no user interaction required. The vulne...
CVE-2026-45519
CVE-2026-45519 is a local information disclosure vulnerability in Android's Media Provider (a Project Mainline component), affecting Android 14, 15, and 16 . The root cause is a confused deputy flaw in screenArgsForPermissionCheckIfAny, where incorrect permission checks allow a local app to bypas...
CVE-2026-28604
CVE-2026-28604 is a use-after-free vulnerability in the adbd (Android Debug Bridge Daemon) component of Android, caused by a race condition in multiple locations. It permits remote code execution with no additional privileges and no user interaction. Affected versions include Android 13, 14, 15, ...
Android Security Bulletin—September 2026Stay organized with collectionsSave and categorize content based on your preferences.
This Android Security Bulletin contains details of security vulnerabilities that affect Android devices. Security patch levels of 2026-09-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Source code patches...
CVE-2025-48650
In multiple locations, there is a possible information disclosure due to SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2004-1391
Malware in sbrugna...
EUVD-1999-0339
Malware in sbrugna...
EUVD-2000-0850
Malware in sbrugna...
EUVD-2003-0452
Malware in sbrugna...
EUVD-2001-0552
Malware in sbrugna...
EUVD-2001-0570
Malware in sbrugna...
CVE-2022-38695
In BootRom, there's a possible unchecked command index. This could lead to local escalation of privilege with no additional execution privileges needed...
CVE-2022-39114
In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed...
CVE-2021-39631
In cleardatadlgtext of strings.xml, there is a possible situation when "Clear storage" functionality sets up the wrong security/privacy expectations due to a misleading message. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not...
