4394 matches found
CVE-2024-43769: Incorrect Default Permissions
In isPackageDeviceAdmin of PackageManagerService.java, there is a possible edge case which could prevent the uninstallation of CloudDpc due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed...
CVE-2024-43762: Undefined Security Weakness
In multiple locations, there is a possible way to avoid unbinding of a service from the system due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-43769
In isPackageDeviceAdmin of PackageManagerService.java, there is a possible edge case which could prevent the uninstallation of CloudDpc due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed...
CVE-2024-43769
A logic error in the isPackageDeviceAdmin function of PackageManagerService.java within Google Android creates a possible edge case that could prevent the uninstallation of CloudDpc . This vulnerability allows for local escalation of privilege without requiring additional execution privileges or ...
CVE-2024-43762
In multiple locations, there is a possible way to avoid unbinding of a service from the system due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-43762
In multiple locations, there is a possible way to avoid unbinding of a service from the system due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-43762
In multiple locations, there is a possible way to avoid unbinding of a service from the system due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-43762
Google Android contains a security vulnerability where a logic error in the code allows a service to avoid unbinding from the system in multiple locations. This flaw can be exploited by local attackers to submit special requests, resulting in a local escalation of privilege without requiring addi...
PT-2025-2668 · Google · Android
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a logic error in the code that allows a service to remain bound to the system, potentially leading to a local escalation of...
ASB-A-356886209
In buildreadmultirsp of gattsr.cc, there is a possible denial of service due to a logic error in the code. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2025-2848
Name of the Vulnerable Software and Affected Versions No specific software name or versions are mentioned in the provided descriptions. Description A logic error in the code of ServiceListing.java allows a malicious app to potentially hide an NLS from Settings, leading to local information...
ASB-A-340480881
In multiple locations, there is a possible way to obtain any system permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...
ASB-A-308429049
In multiple locations, there is a possible bypass of user consent to enabling new Bluetooth HIDs due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2025-2669
Name of the Vulnerable Software and Affected Versions Bluetooth affected versions not specified Description The issue is related to a logic error in the code of build read multi rsp in gatt sr.cc, which could lead to a remote denial of service. This denial of service can be achieved remotely...
PT-2025-2642
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is caused by a logic error in the code, allowing for a possible way to obtain any system permission. This could lead to local escalation of...
ASB-A-364027038
In gattsprocessreadbytypereq of gattsr.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-316578327
In onClick of MainClear.java, there is a possible way to trigger factory reset without explicit user consent due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-365738306
In reload of ServiceListing.java , there is a possible way to allow a malicious app to hide an NLS from Settings due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-369103643
In applyTaskFragmentOperation of WindowOrganizerController.java, there is a possible way to launch arbitrary activities as the system UID due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need...
CVE-2020-9082
There is an information disclosure vulnerability in several smartphones. The system has a logic judging error under certain scenario, the attacker should gain the permit to execute commands in ADB mode and then do a series of operation on the phone. Successful exploit could allow the attacker to...