CVE-2026-28639

In rwmfchandlereadop of rwmfc.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28639

A logic error in the rw_mfc_handle_read_op function within rw_mfc.cc causes a possible out of bounds write in the Android System framework . This vulnerability could allow for local escalation of privilege without requiring additional execution privileges or user interaction. Exploitation details...

EUVD-2026-73980

In rwmfchandlereadop of rwmfc.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28638

In multiple functions of XmpDataParser.java, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73979

In multiple functions of XmpDataParser.java, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28638

CVE-2026-28638 identifies an improper data sanitization vulnerability in multiple functions of XmpDataParser.java within the Media Provider component of Android. The flaw is caused by a logic error in the code, which could lead to local information disclosure without requiring additional executio...

CVE-2026-28638

In multiple functions of XmpDataParser.java, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28634

In handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to send a USSD request without permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73977

In handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to send a USSD request without permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28634

A logic error in the handleUssdRequest function of PhoneInterfaceManager.java allows an attacker to send USSD requests without the necessary permissions. This vulnerability could lead to a local escalation of privilege without requiring additional execution privileges or user interaction. Remedia...

CVE-2026-28634

In handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to send a USSD request without permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28627

In btmsecencryptchange of btmsec.cc, there is a possible downgrade attack due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28627

In btmsecencryptchange of btmsec.cc, there is a possible downgrade attack due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73973

In btmsecencryptchange of btmsec.cc, there is a possible downgrade attack due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28627

A logic error in the btm_sec_encrypt_change function within btm_sec.cc enables a potential downgrade attack . This vulnerability could lead to remote information disclosure without requiring additional execution privileges or user interaction. While the specific affected product or version is not...

CVE-2026-28612

CVE-2026-28612 identifies a logic error in the resolveActivity function of ActivityStarter.java within the Android Framework . This vulnerability enables Intent Redirection attacks, which can result in a local escalation of privilege without requiring additional execution privileges or user inter...

EUVD-2026-73962

In resolveActivity of ActivityStarter.java, there is a possible way to perform Intent Redirection attacks due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28612

In resolveActivity of ActivityStarter.java, there is a possible way to perform Intent Redirection attacks due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28606

A logic error in AdapterService.java within the handleBondStateChanged function allows an attacker to skip pairing. This vulnerability could lead to a remote escalation of privilege without user consent and requires no additional execution privileges or user interaction. Remediation is available ...

EUVD-2026-73958

In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code. This could lead to remote escalation of privilege without user consent with no additional execution privileges needed. User interaction is not needed for exploitation...