packages_apps_Settings_AOSP10_r33_CVE-2020-0188_CVE-0219

This repository does not have a README...

CVE-2020-0001

CVE-2020-0001 POC to run system component in an untrusted-app process Blog https://zachinio.com/blogs/cve-2020-0001 How to use Run the app, make sure the process "com.android.settings" does not exist, and click the "start service" button. Launch the settings app or wait for a system component to...

packages_apps_Settings_AOSP10_r33_CVE-2020-0219_CVE-2020-0188_old-one

This repository does not have a README...

packages_apps_settings_AOSP10_r33_CVE-2020-0394

This repository does not have a README...

packages_apps_Settings_CVE-2020-0201

This repository does not have a README...

packages_apps_settings_AOSP10_r33_CVE-2021-0481

This repository does not have a README...

CVE-2026-28593

In getItemList of SettingsFragment.java, there is a possible user interaction bypass due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73956

In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible read/write access to private files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Settings Component Privilege Escalation

The vulnerability of the Android operating system’s Settings component is related to incorrect external manipulation of the file name or path during data loading. Exploiting this vulnerability can allow an attacker to gain increased privileges...

EUVD-2016-5038

Malware in sbrugna...

EUVD-2020-1813

Malware in sbrugna...

EUVD-2020-1810

Malware in sbrugna...

EUVD-2020-1805

Malware in sbrugna...

EUVD-2018-21119

Malware in sbrugna...

CVE-2022-20297

In Settings, there is a possible way to bypass factory reset protections due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android I...

CVE-2022-20234

In Car Settings app, the NotificationAccessConfirmationActivity is exported. In NotificationAccessConfirmationActivity, it gets both 'mComponentName' and 'pkgTitle' from user.An unprivileged app can use a malicous mComponentName with a benign pkgTitle e.g. Settings app to make users enable...

Samsung Mobile Devices security vulnerabilities

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Feb-2025 Release 1, which stems from an improperly exported Android application componen...

PT-2023-18111 · Google · Android

Name of the Vulnerable Software and Affected Versions: Settings affected versions not specified Description: The issue allows an attacker to determine whether an app is installed without query permissions, due to side channel information disclosure. This could lead to local information disclosure...

CVE-2022-20321

In Settings, there is a possible way for an application without permissions to read content of WiFi QR codes due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

Google Android security vulnerabilities

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in the Google Android Settings component that stems from a privilege bypass, and there is a possible way to bypass the factory reset privilege...