CVE-2026-28575

In PackageInstaller.Sessiontransfer of frameworks/base/services/core/java/com/android/server/pm/PackageInstallerSession.java, there is a possible memory exhaustion attack due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed...

PT-2026-45496

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A missing permission check exists in the addInputMethodListener function of com.android.server.inputmethod.InputMethodManagerService. This flaw allows for local escalation of privilege withou...

CVE-2023-21213

In initiateTdlsTeardownInternal of staiface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the wifi server with System execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-0413

In gattprocessreadbytypersp of gattcl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...