9756 matches found
CVE-2025-22403
In sdpsndservicesearchreq of sdpdiscovery.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-0086
In onResult of AccountManagerService.java, there is a possible way to overwrite auth token due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-0086
A missing permission check in the onResult function of AccountManagerService.java in Google Android allows an attacker to overwrite an authentication token . This vulnerability can lead to local information disclosure without requiring additional execution privileges or user interaction. The issu...
CVE-2025-0084
Google Android is affected by a critical remote code execution (RCE) vulnerability (CVE-2025-0084) within the System component. The flaw is caused by an out-of-bounds write resulting from a use-after-free condition. If HFP (Hands-Free Profile) support is enabled, an attacker can exploit this to a...
CVE-2025-0084
In multiple locations, there is a possible out of bounds write due to a use after free. This could lead to remote code execution over Bluetooth, if HFP support is enabled, with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-0083
In multiple locations, there is a possible way to access content across user profiles due to URI double encoding. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-0080
Google Android is impacted by an elevation of privilege vulnerability (CVE-2025-0080 ) within the Framework component. The flaw allows a tapjacking/overlay attack to overlay the installation confirmation dialog , potentially leading to local privilege escalation without requiring additional execu...
CVE-2025-0080
In multiple locations, there is a possible way to overlay the installation confirmation dialog due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-0079
Google Android is affected by a logic error in multiple locations that could allow avdtp and avctp channels to be unencrypted. This vulnerability enables a local escalation of privilege (EoP) requiring User execution privileges, though no user interaction is necessary for exploitation. The issue ...
CVE-2025-0079
In multiple locations, there is a possible way that avdtp and avctp channels could be unencrypted due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-0078
A logic error in the main of main.cpp within the Framework component of Google Android allows for a SELinux bypass . This vulnerability can lead to a local elevation of privilege without requiring additional execution privileges or user interaction. This issue is addressed in security patch level...
CVE-2025-0078
In main of main.cpp, there is a possible way to bypass SELinux due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-0078
In main of main.cpp, there is a possible way to bypass SELinux due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-0075
In processservicesearchattrreq of sdpserver.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-49740
In multiple locations, there is a possible crash loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-49740
The Google Android operating system is vulnerable to a Denial of Service (DoS) issue caused by a potential crash loop due to resource exhaustion in multiple locations. An attacker can exploit this vulnerability to cause a local denial of service without requiring additional execution privileges o...
CVE-2023-21125
In btifhhhsdatarptcopycb of btahh.cc, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-21125
In btifhhhsdatarptcopycb of btahh.cc, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-21125
A use-after-free memory corruption vulnerability exists in the btif_hh_hsdata_rpt_copy_cb function of bta_hh.cc within the Android System component. This flaw could allow a local attacker to achieve elevation of privilege over Bluetooth without requiring additional execution privileges or user in...
