CVE-2025-36893

In ReadTachyonCommands of gxpmainactor.cc, there is a possible information leak due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36893

In ReadTachyonCommands of gxpmainactor.cc, there is a possible information leak due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2025-36082

Name of the Vulnerable Software and Affected Versions: RemoteFillService.java affected versions not specified Description: The RemoteFillService.java component contains a flaw in the onNullBinding function related to an insecure default value. This can result in unauthorized background activity...

PT-2025-35891

Name of the Vulnerable Software and Affected Versions: lwis device top affected versions not specified Description: An out-of-bounds write issue exists in the lwis top register io function within the lwis device top.c file. This could allow for local privilege escalation requiring System executio...

PT-2025-36017

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: A logic error in the code within onCreate of NotificationAccessConfirmationActivity.java may lead to local information disclosure. Exploitation does not requi...

PT-2025-36067

Name of the Vulnerable Software and Affected Versions: SafeActivityOptions.java affected versions not specified Description: A logic error in the checkPermissions function of SafeActivityOptions.java may allow for the launch of background activities. This could lead to local escalation of privile...

PT-2025-36060

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: Improper input validation may lead to a persistent denial-of-service DoS condition on the device. Exploitation of this issue could also result in local information disclosure without requiring...

PT-2025-36036

Name of the Vulnerable Software and Affected Versions ActivityManagerShellCommand affected versions not specified Description The ActivityManagerShellCommand component in onCommand of ActivityManagerShellCommand.java may allow for arbitrary activity launch due to a confused deputy condition. This...

PT-2025-36033

Name of the Vulnerable Software and Affected Versions: AppSearchManagerService.java affected versions not specified Description: A logic error in the executeAppFunction function within AppSearchManagerService.java may allow for a background activity launch. This could lead to local escalation of...

PT-2025-36020

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: The software is susceptible to a permanent denial of service due to resource exhaustion. Exploitation of this issue could lead to a local denial of service without requiring additional execution...

PT-2025-35889

Name of the Vulnerable Software and Affected Versions: darwin-mlir-converter affected versions not specified Description: The ConvertReductionOp function within darwinn mlir converter aidl.cc contains a heap buffer overflow, potentially leading to a local escalation of privilege. Exploitation doe...

PT-2025-36028

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A flaw exists in createIntentsList of PackageParser.java that may allow bypassing lazy bundle hardening. This can permit modified data to be passed to the next process due to unsafe...

PT-2025-36054

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: A tapjacking/overlay attack may allow an attacker to overlay biometrics, potentially leading to local escalation of privilege without requiring additional execution privileges or user interaction...

PT-2025-36031

Name of the Vulnerable Software and Affected Versions: Launcher app affected versions not specified Description: A logic error in the code of the Launcher app may allow an attacker to hijack the application, potentially leading to local escalation of privilege. Exploitation does not require user...

PT-2025-36030

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: A missing permission check may allow a user to view icons belonging to another user, potentially leading to local information disclosure. User interaction is not required for exploitation...

PT-2025-36091

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A flaw exists in MediaProjectionPermissionActivity.java that may allow a malicious application to obtain a token enabling unauthorized screen recording. This could lead to local escalation ...

PT-2025-36040

Name of the Vulnerable Software and Affected Versions: LocalBluetoothLeBroadcast.java affected versions not specified Description: An issue exists in the generateRandomPassword function of LocalBluetoothLeBroadcast.java that may allow interception of the Auracast audio stream due to an insecure...

PT-2025-36065

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: In multiple locations, there is a possible way to read files belonging to other apps due to SQL injection. This could lead to local escalation of privilege with no additional execution...

PT-2025-36042

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software contains a memory corruption issue due to a use after free condition. This could allow for local privilege escalation without requiring additiona...

PT-2025-36025

Name of the Vulnerable Software and Affected Versions: LocationProviderManager affected versions not specified Description: A logic error in multiple functions within LocationProviderManager.java may allow for a background activity launch, potentially leading to local privilege escalation without...