PT-2025-28385 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to 15 Description: The issue concerns an out-of-bounds write in the handling of macro blocks for the MPEG4 codec in the libsavsvc.so library. This allows local attackers to write out-of-bounds memory. Recommendations: F...

PT-2025-28387 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to 15 Description: The issue is related to an out-of-bounds read in the decoding frame header in libsavsvc.so. This allows local attackers to cause memory corruption. Recommendations: For Android versions prior to 15,...

PT-2024-24980 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a missing bounds check in the dhd prot txstatus process function of dhd msgbuf.c, which could lead to a possible out of bounds...

Spoofing

Microsoft Edge for Android Spoofing Vulnerability...

CVE-2023-6540

A vulnerability was reported in the Lenovo Browser Mobile and Lenovo Browser HD Apps for Android that could allow an attacker to craft a payload that could result in the disclosure of sensitive information...

CVE-2023-28203

The issue was addressed with improved checks. This issue is fixed in Apple Music 4.2.0 for Android. An app may be able to access contacts...

CVE-2023-21199

In btubleprocltkreq of btuhcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

CVE-2021-0877

Product: AndroidVersions: Android SoCAndroid ID: A-273754094...

PT-2023-17815 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In the ufdt local fixup prop function of ufdt overlay.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution...

CVE-2022-20553

In onCreate of LogAccessDialogActivity.java, there is a possible way to bypass a permission check due to a tapjacking/overlay attack. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...

CVE-2022-20487

In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

PT-2022-14681 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to a missing bounds check in the phNxpNciHal write unlocked function of phNxpNciHal.cc, which could lead to a possible out of bounds write. This could result in...

PT-2022-14616 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue affects Android. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

CVE-2022-20378

CVE-2022-20378 affects Android kernel and Pixel modem. The Pixel security bulletin lists it under the Kernel/Modem category as an Elevation of Privilege (EoP) issue with “Modem” as the component and indicates a high-severity impact, corroborated by NVD’s CVSS v3.1 base score of 9.8 (CRITICAL) wit...

GHSA-X534-J49X-MQVJ android-gif-drawable Double Free vulnerability

A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications, allows remote attackers to execute arbitrary code or cause a denial of servi...

CVE-2021-1004

In getConfiguredNetworks of WifiServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is no...

Google Android Denial of Service Vulnerability (CNVD-2021-78778)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA. a denial-of-service vulnerability exists in the Framework component of Google Android. A remote attacker can exploit this vulnerability to cause a denial of service...

Inkpad Notepad & To do list 4.3.61 - Denial of Service Exploit

Exploit Title: Inkpad Notepad & To do list 4.3.61 - Denial of Service PoC Author: Brian Rodríguez Download Link: https://play.google.com/store/apps/details?id=com.workpail.inkpad.notepad.notes&hl=esMX Version: 4.3.61 Category: DoS Android Vulnerability InkPad Bloc de notas - Tareas is vulnerable ...

CVE-2020-35554

An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. There is a WebView SSL error-handler vulnerability. The LG ID is LVE-SMP-200026 December 2020...

Information disclosure

In libhevc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112552517...