ASB-A-460779368

In createSessionInternal of PackageInstallerService.java, there is a possible to update a Device Policy Controller DPC into an invalid directory due to a path traversal error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

ASB-A-376048041

In multiple functions of PipTaskOrganizer.java, there is a possible way to launch an activity from the background due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-438973280

In multiple functions of KeyguardViewMediator.java , there is a possible way to bypass lockdown mode with screen pinning due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitatio...

ASB-A-479515555

Bulletin has no description...

ASB-A-414389102

In applySimpleFieldMaxSize of DataRowHandler.java, there is a possible way to insert a large contact name due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-446114623

In multiple locations, there is a possible way to bypass user interaction when pairing an LE device due to a logic error. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-435188844

In multiple files, there is a possible way to reveal information across users due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-465133716

In multiple functions, there is a possible way to access the contacts database due to a SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-491016892

In several functions of the RTCP packet decoder, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

ASB-A-477935679

Bulletin has no description...

PT-2026-45591

In applySimpleFieldMaxSize of DataRowHandler.java, there is a possible way to insert a large contact name due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-45567

Name of the Vulnerable Software and Affected Versions Android versions 14 through 16 QPR2 Description An integer overflow exists in multiple locations within the Android Framework, which is the core layer of APIs and system services that applications interact with. This issue allows for local...

PT-2026-45596

Name of the Vulnerable Software and Affected Versions Android Framework affected versions not specified Description An issue exists in the Android Framework component due to improper access control and an over-privileged shell user. This allows for the execution of code within the launcher proces...

PT-2026-45612

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An incorrect bounds check in multiple functions may cause a desync in persistence. This issue allows for local escalation of privilege without requiring addition...

PT-2026-45603

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A logic error in the onNullBinding function of HostEmulationManager.java allows for the launch of an activity from the background. This flaw could enable a local escalation of privilege witho...

PT-2026-45585

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description An issue exists in multiple functions where a SQL injection allows unauthorized access to the contacts database. This can lead to local escalation of privilege without requiring additional...

PT-2026-45569

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A logic error in the Framework component of the Android operating system leads to incorrect code generation and potential tapjacking. Tapjacking is a technique where an attacker overlays a...

PT-2026-45586

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description An out-of-bounds read exists in the validateNode function within the ResourceTypes.cpp script of the Framework component. This issue is caused by an incorrect bounds check, which may allow a...

PT-2026-45597

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description Obfuscation in multiple locations may result in a misleading user interface. This issue allows for local escalation of privilege without requiring additional execution privileges or...

PT-2026-45600

In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into forgetting a device due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...