CVE-2024-49728

In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-49728

CVE-2024-49728 affects Android Bluetooth code via generateFileInfo in BluetoothOppSendFileInfo.java, enabling a confused deputy to cause cross-user media disclosure. The issue yields local information disclosure without additional privileges and does not require user interaction to exploit, per t...

CVE-2024-49722

CVE-2024-49722 affects the Android component EditUserPhotoController.java, specifically the showAvatarPicker function. The issue is a cross-user image leak (confused deputy) exposing local information without needing user interaction, and without extra execution privileges. The vulnerability is d...

CVE-2024-49720

In multiple functions of Permissions.java, there is a possible way to override the state of the user's location permissions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2024-49720

In multiple functions of Permissions.java, there is a possible way to override the state of the user's location permissions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2024-49720

CVE-2024-49720 affects Android permissions handling in Permissions.java, where a logic error could allow a local attacker to override the user’s location permission state. The issue enables local escalation of privilege without additional execution privileges and without user interaction. Connect...

PT-2025-35620

Name of the Vulnerable Software and Affected Versions: versions prior to 2.3 Description: The software contains a possible out-of-bounds write due to memory corruption in FuseDaemon.cpp. This issue could lead to local escalation of privilege without requiring additional execution privileges or us...

PT-2025-35629

Name of the Vulnerable Software and Affected Versions: AppInfoBase.java affected versions not specified Description: A logic error in the hasInteractAcrossUsersFullPermission function within the AppInfoBase.java file may allow granting permissions to an application on a secondary user from a...

PT-2025-35630

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: A missing permission check in the isInSignificantPlace function of multiple files may allow access to sensitive information, potentially leading to local...

PT-2025-35634

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: A logic error in the code within setMediaButtonReceiver of multiple files may allow launching arbitrary activities from the background. This could lead to loc...

PT-2025-35625

Name of the Vulnerable Software and Affected Versions: versions prior to 2025-22421 Description: A logic error in the code within contentDescForNotification of NotificationContentDescription.kt may lead to local information disclosure through the lockscreen. User interaction is not required for...

PT-2025-35618

Name of the Vulnerable Software and Affected Versions: Permissions.java affected versions not specified Description: A logic error in multiple functions within Permissions.java may allow overriding the state of a user’s location permissions. This could lead to local escalation of privilege withou...

PT-2025-35636

Name of the Vulnerable Software and Affected Versions: DevicePolicyManagerService.java affected versions not specified Description: Multiple functions within DevicePolicyManagerService.java may allow the installation of unauthorized applications into a newly created work profile due to a race...

PT-2025-35626

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: A logic error in the code may mislead a user into approving an authentication prompt for one application when the result is used in another. This could lead to local escalation of privilege without...

Android Security Bulletin—September 2025Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2025-09-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

PT-2025-35935

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is a critical zero-click Remote Code Execution RCE flaw that allows attackers to hijack Android devices via Wi-Fi or Bluetooth without any user interaction. Exploitation can occur...

PT-2025-35621

Name of the Vulnerable Software and Affected Versions: ChooserActivity.java affected versions not specified Description: The application contains a confused deputy issue in the onCreate method of the ChooserActivity.java file. This could allow an attacker to view images belonging to other users,...

PT-2025-35635

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A use-after-free issue exists in InputDispatcher.cpp within the afterKeyEventLockedInterruptable function. This could lead to local escalation of privilege without requiring additional...

CVE-2025-20707

In geniezone, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09924201; Issue ID: MSV-3820...

CVE-2025-20707

In geniezone, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09924201; Issue ID: MSV-3820...