CVE-2025-22421

In contentDescForNotification of NotificationContentDescription.kt, there is a possible notification content leak through the lockscreen due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed...

CVE-2025-22421

CVE-2025-22421 affects Android; a logic error in ContentDescForNotification (NotificationContentDescription.kt) may leak notification content on the lockscreen. This enables local information disclosure with no user interaction. The issue is documented across multiple sources (NVD/Red Hat/CVE dat...

CVE-2024-49720

In multiple functions of Permissions.java, there is a possible way to override the state of the user's location permissions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2024-49720

In multiple functions of Permissions.java, there is a possible way to override the state of the user's location permissions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2024-49720

CVE-2024-49720 affects Android permissions handling in Permissions.java, where a logic error could allow a local attacker to override the user’s location permission state. The issue enables local escalation of privilege without additional execution privileges and without user interaction. Connect...

CVE-2024-49720

In multiple functions of Permissions.java, there is a possible way to override the state of the user's location permissions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2024-40653

CVE-2024-40653 involves a logic error in ConnectionServiceWrapper.java that can let a permission be retained indefinitely in the background, enabling local elevation of privilege. The issue is described across multiple sources (Android/Red Hat/NVD entries) as requiring user interaction for exploi...

CVE-2024-40653

In multiple functions of ConnectionServiceWrapper.java, there is a possible way to retain a permission forever in the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for...

CVE-2024-40653

In multiple functions of ConnectionServiceWrapper.java, there is a possible way to retain a permission forever in the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for...

Two-factor Authentication Bypass

github.com/komari-monitor/komari is vulnerable to two-factor authentication bypass. The vulnerability is due to a logic error in the 2FA verification condition, which allows an attacker to bypass the two-factor authentication mechanism...

PT-2025-35625

Name of the Vulnerable Software and Affected Versions: versions prior to 2025-22421 Description: A logic error in the code within contentDescForNotification of NotificationContentDescription.kt may lead to local information disclosure through the lockscreen. User interaction is not required for...

PT-2025-35618

Name of the Vulnerable Software and Affected Versions: Permissions.java affected versions not specified Description: A logic error in multiple functions within Permissions.java may allow overriding the state of a user’s location permissions. This could lead to local escalation of privilege withou...

PT-2025-35631

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A logic error in the code may allow a malicious app to prevent dialing emergency services under limited circumstances. This could result in a local denial of service until the phone reboots...

PT-2025-35626

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: A logic error in the code may mislead a user into approving an authentication prompt for one application when the result is used in another. This could lead to local escalation of privilege without...

PT-2025-35617

Name of the Vulnerable Software and Affected Versions: ConnectionServiceWrapper.java affected versions not specified Description: Multiple functions within ConnectionServiceWrapper.java contain a logic error that may allow for the indefinite retention of a permission in the background. Exploitati...

PT-2025-35629

Name of the Vulnerable Software and Affected Versions: AppInfoBase.java affected versions not specified Description: A logic error in the hasInteractAcrossUsersFullPermission function within the AppInfoBase.java file may allow granting permissions to an application on a secondary user from a...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. A security vulnerability exists in Google Android that stems from a logic error in the hasInteractAcrossUsersFullPermission function in AppInfoBase.java, which could lead to a local elevation of...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. A security vulnerability exists in Google Android that stems from a logic error in ConnectionServiceWrapper.java that could lead to local elevation of privilege...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by a logic error in the code at multiple locations. The vulnerability can be exploited by an attacker to gain elevated privileges on the...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. A security vulnerability exists in Google Android that stems from a logic error in the canForward function in IntentForwarderActivity.java, which could lead to a local elevation of privilege...