Android Security Bulletin-February 2025Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2025-02-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

Android Automotive OS Update Bulletin—February 2025Stay organized with collectionsSave and categorize content based on your preferences.

The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2025-02-05 or later from the February 2025 Android Security Bulletin in addition to all issues in th...

CVE-2024-57498

creationtimestamp| type| source ---|---|--- 2025-02-02 10:14:37+00:00| seen| https://gist.github.com/Catherines77/ac0b554f3d755879eb12bfd69ef585b1 2025-02-03 20:16:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcecwsc7b2e 2025-02-03 20:23:10+00:00| seen|...

CVE-2025-0950

creationtimestamp| type| source ---|---|--- 2025-02-01 20:15:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh5dddf2e52w 2025-02-01 21:26:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3779 2025-02-01 22:17:09+00:00|...

CVE-2024-13612

creationtimestamp| type| source ---|---|--- 2025-02-01 13:15:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh4lu5sblk2c 2025-02-01 15:25:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3767 2025-02-01 15:37:39+00:00| seen|...

CVE-2024-13429

creationtimestamp| type| source ---|---|--- 2025-02-01 08:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh433zvyow2e 2025-02-01 09:26:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3743 2025-02-01 09:47:51+00:00| seen|...

CVE-2025-0939

creationtimestamp| type| source ---|---|--- 2025-02-01 07:15:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3xqa72pz2c 2025-02-01 07:40:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lh3z4bdpmc2k 2025-02-01 09:26:09+00:00|...

CVE-2024-13097

creationtimestamp| type| source ---|---|--- 2025-02-01 06:15:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3ufvgjue2r 2025-02-01 07:16:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3725 2025-02-01 07:40:09+00:00| seen|...

CVE-2024-53357

creationtimestamp| type| source ---|---|--- 2025-01-31 22:15:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh2zkotmw32c 2025-01-31 23:25:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3697 2025-02-01 01:25:43+00:00| seen|...

CVE-2025-0938

The Python standard library functions urllib.parse.urlsplit and urlparse accepted domain names that included square brackets which isn't valid according to RFC 3986. Square brackets are only meant to be used as delimiters for specifying IPv6 and IPvFuture hosts in URLs. This could result in...

CVE-2025-21679

In the Linux kernel, the following vulnerability has been resolved: btrfs: add the missing error handling inside getcanonicaldevpath Inside function getcanonicaldevpath, we call dpath to get the final device path. But dpath can return error, and in that case the next strscpy call will trigger an...

CVE-2025-21681

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix lockup on tx to unregistering netdev with carrier Commit in a fixes tag attempted to fix the issue in the following sequence of calls: dooutput - ovsvportsend - devqueuexmit - devqueuexmit - netdevcorepicktx -...

CVE-2025-21678

In the Linux kernel, the following vulnerability has been resolved: gtp: Destroy device along with udp socket's netns dismantle. gtpnewlink links the device to a list in devnetdev instead of srcnet, where a udp tunnel socket is created. Even when srcnet is removed, the device stays alive on...

CVE-2025-21674

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel Attempt to enable IPsec packet offload in tunnel mode in debug kernel generates the following kernel panic, which is happening due to two issues: 1. In SA ad...

CVE-2025-21677

In the Linux kernel, the following vulnerability has been resolved: pfcp: Destroy device along with udp socket's netns dismantle. pfcpnewlink links the device to a list in devnetdev instead of net, where a udp tunnel socket is created. Even when net is removed, the device stays alive on devnetdev...

CVE-2025-21671

In the Linux kernel, the following vulnerability has been resolved: zram: fix potential UAF of zram table If zrammetaalloc failed early, it frees allocated zram-table without setting it NULL. Which will potentially cause zrammetafree to access the table if user reset an failed and uninitialized...

CVE-2025-21669

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: discard packets if the transport changes If the socket has been de-assigned or assigned to another transport, we must discard any packets received because they are not expected and would cause issues when we access...

CVE-2023-43795

creationtimestamp| type| source ---|---|--- 2025-01-31 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-01-31 2025-02-22 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-02-22 2025-03-08 00:00:00+00:00| exploited| The...

CVE-2025-0477

creationtimestamp| type| source ---|---|--- 2025-01-30 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-030-05 2025-01-30 17:44:30+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113918546387079493 2025-01-30 17:50:33+00:00| seen|...

CVE-2025-21415

creationtimestamp| type| source ---|---|--- 2025-01-29 22:43:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113914060022431121 2025-01-29 23:16:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgw3zbfubj2r 2025-01-30 00:48:50+00:00| seen|...