CVE-2024-43770

In gattsprocessfindinfo of gattsr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-49735

Google Android is affected by a local elevation of privilege vulnerability (CVE-2024-49735). The root cause is a failure to persist permissions settings due to resource exhaustion , which may lead to the program incorrectly retaining setup privileges. An attacker can exploit this to elevate privi...

CVE-2024-43770

In gattsprocessfindinfo of gattsr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-49737

In applyTaskFragmentOperation of WindowOrganizerController.java, there is a possible way to launch arbitrary activities as the system UID due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need...

CVE-2024-49738

Google Android is affected by an out-of-bounds write vulnerability within the writeInplace function of Parcel.cpp . This flaw arises from a failure to properly check boundaries, which could allow for local escalation of privilege without requiring additional execution privileges or user interacti...

CVE-2024-43771

Google Android contains a buffer overflow vulnerability within the System component. Specifically, a missing bounds check in the gatt_sr.cc file's gatts_process_read_req function allows for an out of bounds write . This flaw could enable an attacker to achieve remote (proximal/adjacent) code exec...

CVE-2024-49732

In multiple functions of CompanionDeviceManagerService.java, there is a possible way to grant permissions without user consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2024-49738

In writeInplace of Parcel.cpp, there is a possible out of bounds write. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-34730

In multiple locations, there is a possible bypass of user consent to enabling new Bluetooth HIDs due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-43096

In buildreadmultirsp of gattsr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-43096

In buildreadmultirsp of gattsr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2025-2850 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a failure to persist permissions settings due to resource exhaustion, which could lead to local escalation of privilege without...

PT-2025-2851 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software name or version is mentioned in the provided descriptions. Description: A logic error in the code of MainClear.java allows for a possible factory reset without explicit user consent. This could lead to a local denial of...

PT-2025-2852 · Google · Android Windoworganizer

Name of the Vulnerable Software and Affected Versions: Android WindowOrganizer affected versions not specified Description: A logic error in the code of WindowOrganizerController.java allows for the launch of arbitrary activities as the system UID. This could lead to local escalation of privilege...

CVE-2018-9461

In onAttachFragment of ShareIntentActivity.java, there is a possible way for an app to read files in the messages app due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9461

In onAttachFragment of ShareIntentActivity.java, there is a possible way for an app to read files in the messages app due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9464

In multiple locations, there is a possible way to read protected files due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2025-1342 · Unknown · Nlpservice

Name of the Vulnerable Software and Affected Versions: NlpService affected versions not specified Description: The issue concerns a missing permission check in NlpService, allowing potential access to location information. This could lead to a local escalation of privilege without requiring...

CVE-2018-9383

In asn1berdecoder of asn1decoder.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9434

In multiple functions of Parcel.cpp, there is a possible way to bypass address space layout randomization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...