3145 matches found
PT-2025-36058
Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A logic error exists in getDefaultCBRPackageName within CellBroadcastHandler.java that may lead to a privilege escalation. This could result in a local denial of service, requiring system...
Google Pixel 安全漏洞
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a logic error in the Pixel Sim Lock component. An attacker can exploit the vulnerability to elevate privileges...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. A denial of service vulnerability exists in Google Android, which is caused by a logic error in the handlePackagesChanged function in DevicePolicyManagerService.java. An attacker can exploit this vulnerability to cause a...
PT-2025-36031
Name of the Vulnerable Software and Affected Versions: Launcher app affected versions not specified Description: A logic error in the code of the Launcher app may allow an attacker to hijack the application, potentially leading to local escalation of privilege. Exploitation does not require user...
Google Android Denial of Service Vulnerability (CNVD-2026-00035)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from a denial of service vulnerability, which is caused due to a logic error in the code at multiple locations. An attacker can exploit the vulnerability to cause a denial of service...
PT-2025-36017
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: A logic error in the code within onCreate of NotificationAccessConfirmationActivity.java may lead to local information disclosure. Exploitation does not requi...
Google Wear OS 安全漏洞
Google Wear OS is a Google-developed operating system from Google, Inc. in the United States, specifically designed for use in smartwatches, smart bands, and other wearable devices. Google Wear OS suffers from a security vulnerability that stems from a logic error that could lead to the hiding of...
CVE-2024-13065 Business Logic Error in Akinsoft's MyRezzta
Improper Enforcement of Behavioral Workflow, Uncontrolled Resource Consumption vulnerability in Akinsoft MyRezzta allows Input Data Manipulation, CAPEC - 125 - Flooding. This issue affects MyRezzta: from s2.02.02 before v2.05.01...
CVE-2024-13065
CVE-2024-13065 concerns Akinsoft MyRezzta, where improper enforcement of behavioral workflow leads to uncontrolled resource consumption and input data manipulation. Affected software: MyRezzta versions s2.02.02 through before v2.05.01. Documented impact is described as CAPEC-125 Flooding. Remedia...
CVE-2024-13065 Business Logic Error in Akinsoft's MyRezzta
Improper Enforcement of Behavioral Workflow, Uncontrolled Resource Consumption vulnerability in Akinsoft MyRezzta allows Input Data Manipulation, CAPEC - 125 - Flooding. This issue affects MyRezzta: from s2.02.02 before v2.05.01...
CVE-2025-22437
In setMediaButtonReceiver of multiple files, there is a possible way to launch arbitrary activities from background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-22434
In handleKeyGestureEvent of PhoneWindowManager.java, there is a possible lock screen bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-22428
In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible way to grant permissions to an app on the secondary user from the primary user due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...
CVE-2025-22429
In multiple locations, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-22431
In multiple locations, there is a possible method for a malicious app to prevent dialing emergency services under limited circumstances due to a logic error in the code. This could lead to local denial of service until the phone reboots with no additional execution privileges needed. User...
CVE-2025-22429
In multiple locations, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-22422
In multiple locations, there is a possible way to mislead a user into approving an authentication prompt for one app when its result will be used in another due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...
CVE-2025-22422
In multiple locations, there is a possible way to mislead a user into approving an authentication prompt for one app when its result will be used in another due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...
CVE-2025-22421
In contentDescForNotification of NotificationContentDescription.kt, there is a possible notification content leak through the lockscreen due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed...
CVE-2024-49720
In multiple functions of Permissions.java, there is a possible way to override the state of the user's location permissions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...