CVE-2025-32325

In appendFrom of Parcel.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48535

In assertSafeToStartCustomActivity of AppRestrictionsFragment.java , there is a possible way to exploit a parcel mismatch resulting in a launch anywhere vulnerability due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. Us...

Malicious code in sirius-warp-quantum-parcel (npm)

The package sirius-warp-quantum-parcel was found to contain malicious code...

MAL-2025-45282 Malicious code in nebula-browserify-parcel-rocket (npm)

The package nebula-browserify-parcel-rocket was found to contain malicious code...

MAL-2025-43825 Malicious code in cladistics-decoherence-perseus-parcel (npm)

The package cladistics-decoherence-perseus-parcel was found to contain malicious code...

Malicious code in parcel-stop-paleontology-hydrogeology (npm)

The package parcel-stop-paleontology-hydrogeology was found to contain malicious code...

Malicious code in nebula-browserify-parcel-rocket (npm)

The package nebula-browserify-parcel-rocket was found to contain malicious code...

MAL-2025-46072 Malicious code in sirius-warp-quantum-parcel (npm)

The package sirius-warp-quantum-parcel was found to contain malicious code...

Malicious code in cladistics-decoherence-perseus-parcel (npm)

The package cladistics-decoherence-perseus-parcel was found to contain malicious code...

MAL-2025-45505 Malicious code in parcel-stop-paleontology-hydrogeology (npm)

The package parcel-stop-paleontology-hydrogeology was found to contain malicious code...

CVE-2025-48535

In assertSafeToStartCustomActivity of AppRestrictionsFragment.java , there is a possible way to exploit a parcel mismatch resulting in a launch anywhere vulnerability due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. Us...

CVE-2025-32325

In appendFrom of Parcel.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48535

In assertSafeToStartCustomActivity of AppRestrictionsFragment.java , there is a possible way to exploit a parcel mismatch resulting in a launch anywhere vulnerability due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. Us...

CVE-2025-48535

Summary of CVE-2025-48535 (Android): A flaw in assertSafeToStartCustomActivity within AppRestrictionsFragment.java allows a parcel mismatch to trigger a launch-anywhere vulnerability via unsafe deserialization, enabling local elevation of privilege without additional execution privileges or user ...

CVE-2025-48535

In assertSafeToStartCustomActivity of AppRestrictionsFragment.java , there is a possible way to exploit a parcel mismatch resulting in a launch anywhere vulnerability due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. Us...

CVE-2025-26448

In writeToParcel of CursorWindow.cpp, there is a possible out of bounds read due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-26448

In writeToParcel of CursorWindow.cpp, there is a possible out of bounds read due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-26448

In writeToParcel of CursorWindow.cpp, there is a possible out of bounds read due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-26448

The CVE-2025-26448 vulnerability is an information disclosure flaw: in CursorWindow.cpp, writeToParcel can trigger an out-of-bounds read due to uninitialized data. The impact is local information exposure without extra execution privileges, and exploitation does not require user interaction. Affe...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability caused by an out-of-bounds write due to a heap-based buffer overflow in the appendFrom function in Parcel.cpp. An attacker can exploit the vulnerability to...