113 matches found
CVE-2022-20494
CVE-2022-20494 APK 다운로드 이 앱은 제가 발견한 Android의 NotificationManagerService에 대한 심각한 영구적 서비스 거부 취약점을 시연합니다. 익스플로잇을 실행하면 기기에 검은 화면이 표시되거나 계속 충돌 및 재부팅이 반복됩니다. 이 취약점은 많은 메모리를 차지하는 악성 zen 규칙일명 방해 금지 규칙을 제작하여 장치 메모리를 소진시키는 addAutomaticZenRule API를 악용합니다. 앱에서 추가되는 규칙의 크기와 개수를 제어할 수 있으며, 미리 정의된 양은 거의 모든 기기에서...
Google Android DDoS Vulnerability (CNVD-2026-29384)
Google Android is an open-source operating system based on Linux, developed by Google Inc. Google Android has a denial-of-service vulnerability, which is caused by resource exhaustion in the isSameApp method of the NotificationManagerService.java file. Attackers can exploit this vulnerability to...
Google Android 安全漏洞
Google Android is an open-source operating system based on Linux, developed by Google Inc. Google Android has a denial-of-service vulnerability, which is caused by resource exhaustion in the isSameApp method of the NotificationManagerService.java file. Attackers can exploit this vulnerability to...
CVE-2021-0513
In deleteNotificationChannel and related functions of NotificationManagerService.java, there is a possible permission bypass due to improper state validation. This could lead to local escalation of privilege via hidden services with no additional execution privileges needed. User interaction is n...
EUVD-2025-201773
In updateNotificationChannelGroupFromPrivilegedListener of NotificationManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for...
CVE-2025-48584
In multiple functions of NotificationManagerService.java, there is a possible way to bypass the per-package channel limits causing resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48584
A vulnerability exists in the Android Framework within multiple functions of NotificationManagerService.java . Due to insufficient validation of input data , it is possible to bypass per-package channel limits, leading to resource exhaustion . This can result in a local denial of service where a ...
CVE-2025-48576: Uncontrolled Resource Consumption
In updateNotificationChannelGroupFromPrivilegedListener of NotificationManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for...
CVE-2025-48584: Uncontrolled Resource Consumption
In multiple functions of NotificationManagerService.java, there is a possible way to bypass the per-package channel limits causing resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google, Inc. in the United States. A security vulnerability exists in Google Android that stems from a method that may bypass per-package channel restrictions in multiple functions of NotificationManagerService.java, resulting in...
EUVD-2020-1591
Malware in sbrugna...
EUVD-2022-25466
Malicious code in bioql PyPI...
EUVD-2021-6498
Malicious code in bioql PyPI...
EUVD-2021-3132
Malicious code in bioql PyPI...
EUVD-2022-25271
Malicious code in bioql PyPI...
EUVD-2021-3324
Malicious code in bioql PyPI...
EUVD-2021-6497
Malicious code in bioql PyPI...
CVE-2024-23708
In multiple functions of NotificationManagerService.java, there is a possible way to not show a toast message when a clipboard message has been accessed. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitatio...
CVE-2024-31319
In updateNotificationChannelFromPrivilegedListener of NotificationManagerService.java, there is a possible cross-user data leak due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitatio...
CVE-2022-20206
In setPackageOrComponentEnabled of NotificationManagerService.java, there is a missing permission check. This could lead to local information disclosure about enabled notification listeners with User execution privileges needed. User interaction is not needed for exploitation.Product:...