PT-2025-36018

Name of the Vulnerable Software and Affected Versions: ConnectivityService affected versions not specified Description: A missing permission check in the offerNetwork function of ConnectivityService.java may lead to local information disclosure. Exploitation does not require user interaction or...

PT-2025-36071

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: A path traversal error exists in testGrantSlicePermission of SliceManagerTest.java, potentially leading to a permanent denial of service. Exploitation require...

PT-2025-36045

Name of the Vulnerable Software and Affected Versions: VoicemailSettingsActivity.java affected versions not specified Description: A potential work profile contact number leak exists due to a confused deputy condition within the onActivityResult function of the VoicemailSettingsActivity.java file...

PT-2025-36026

Name of the Vulnerable Software and Affected Versions: AccessibilityServiceConnection.java affected versions not specified Description: A logic error in the code within AccessibilityServiceConnection.java may allow for the launch of background activities, potentially leading to local escalation o...

PT-2025-36066

Name of the Vulnerable Software and Affected Versions: AccountManagerService affected versions not specified Description: An application may access privileged APIs due to a confused deputy condition within the isSystemUid function of AccountManagerService.java. This could result in local privileg...

PT-2025-36056

Name of the Vulnerable Software and Affected Versions: CredentialStorage affected versions not specified Description: A logic error exists in the getCallingPackageName function of CredentialStorage that may allow for a permission bypass. This could lead to local escalation of privilege without...

PT-2025-36085

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A missing permission check in FrpBypassAlertActivity of FrpBypassAlertActivity.java may allow bypass of Factory Reset Protection FRP. This could lead to local privilege escalation without...

PT-2025-36014

Name of the Vulnerable Software and Affected Versions: ContentProtectionTogglePreferenceController.java affected versions not specified Description: A logic error in the updateState function within ContentProtectionTogglePreferenceController.java may allow a secondary user to disable the deceptiv...

PT-2025-36064

Name of the Vulnerable Software and Affected Versions: AccountManagerService.java affected versions not specified Description: Multiple functions within AccountManagerService.java are susceptible to a permanent denial of service due to resource exhaustion. Exploitation of this issue can lead to a...

PT-2025-36047

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: The software contains a possible privilege escalation issue stemming from a tapjacking/overlay attack. Exploitation can lead to local privilege escalation without requiring additional execution...

PT-2025-36074

Name of the Vulnerable Software and Affected Versions: DevicePolicyManagerService.java affected versions not specified Description: A logic error in the handlePackagesChanged function within DevicePolicyManagerService.java may lead to a denial-of-service DoS condition affecting a device admin...

PT-2025-36086

Name of the Vulnerable Software and Affected Versions: android app affected versions not specified Description: A flaw exists in android app of Android.bp that may allow launching any activity as a system user. Successful exploitation could lead to local privilege escalation without requiring...

PT-2025-35881

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A logic error in the code may lead to local escalation of privilege without requiring additional execution privileges or user interaction. Recommendations At th...

PT-2025-35877

Name of the Vulnerable Software and Affected Versions: TBD affected versions not specified Description: A denial-of-service DoS issue exists due to a missing null check. This could lead to remote denial of service without requiring additional execution privileges or user interaction...

PT-2025-36073

Name of the Vulnerable Software and Affected Versions: DevicePolicyManagerService.java affected versions not specified Description: A logic error in the saveGlobalProxyLocked function within DevicePolicyManagerService.java may allow for desynchronization from persistence. This could lead to local...

PT-2025-36061

Name of the Vulnerable Software and Affected Versions: PackageManagerService affected versions not specified Description: An issue exists in the setApplicationHiddenSettingAsUser function within PackageManagerService.java due to improper input validation. This could allow an attacker to hide a...

PT-2025-36050

Name of the Vulnerable Software and Affected Versions: SelectAccountActivity.java affected versions not specified Description: A logic error in the onCreate function of SelectAccountActivity.java may allow adding contacts without the necessary permissions. This could lead to local privilege...

PT-2025-36077

Name of the Vulnerable Software and Affected Versions: BatteryService.java affected versions not specified Description: Multiple functions within BatteryService.java are susceptible to implicit intent hijacking, potentially allowing an attacker to redirect intents intended for a system applicatio...

PT-2025-36063

Name of the Vulnerable Software and Affected Versions: FaceSettings.java affected versions not specified Description: Improper input validation in the onCreate function of FaceSettings.java may allow an attacker to remove biometric unlock across user profiles. This could lead to local escalation ...

PT-2025-35886

Name of the Vulnerable Software and Affected Versions: lwis affected versions not specified Description: The lwis io buffer write function contains a potential out-of-bounds OOB read/write issue resulting from insufficient input validation. Successful exploitation of this issue could lead to loca...