Google Android

• CVE-2025-22425 Medium 5.1 In onCreate of InstallStart.java, there is a possible permissions bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges need 0.1%
• CVE-2025-0087 Medium 5.1 In onCreate of UninstallerActivity.java, there is a possible way to uninstall a different user's app due to a missing permission check. This could lead to local escalation of privilege with no additio 0.2%
• CVE-2025-0077 Medium 4.0 In multiple functions of UserController.java, there is a possible lock screen bypass due to a race condition. This could lead to local escalation of privilege with no additional execution privileges n 0.1%
• CVE-2024-49739 Medium 4.0 In MMapVAccess of pmr_os.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. U 0.1%
• CVE-2023-35657 Medium 4.0 In bta_av_config_ind of bta_av_aact.cc, there is a possible out of bounds read due to type confusion. This could lead to local information disclosure with no additional execution privileges needed. Us <0.1%
• CVE-2025-36887 High 7.8 In wl_cfgscan_update_v3_schedscan_results() of wl_cfgscan.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additio <0.1%
• CVE-2024-56190 High 7.8 In wl_update_hidden_ap_ie() of wl_cfgscan.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution pri <0.1%
• CVE-2024-56189 Medium 6.5 In SAEMM_DiscloseMsId of SAEMM_RadioMessageCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure post authentication with no a 0.3%
• CVE-2025-36909 Medium 5.3 Information disclosure 0.1%
• CVE-2025-36908 Medium 6.7 In lwis_top_register_io of lwis_device_top.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privilege <0.1%
• CVE-2025-36907 High 7.3 In draw_surface_image() of abl/android/lib/draw/draw.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege via USB fastboot, after <0.1%
• CVE-2025-36906 High 7.8 In ConvertReductionOp of darwinn_mlir_converter_aidl.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional exec <0.1%
• CVE-2025-36905 High 7.8 In gxp_mapping_create of gxp_mapping.c, there is a possible privilege escalation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privile <0.1%
• CVE-2025-36904 Critical 9.8 WLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, aka A-396458384. 0.2%
• CVE-2025-36903 High 7.8 In lwis_io_buffer_write, there is a possible OOB read/write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User inte <0.1%
• CVE-2025-36902 Medium 6.7 In syna_cdev_ioctl_store_pid() of syna_tcm2_sysfs.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privi <0.1%
• CVE-2025-36901 High 8.8 WLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, aka A-396462223. 0.2%
• CVE-2025-36900 Medium 6.7 In lwis_test_register_io of lwis_device_test.c, there is a possible OOB Write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User <0.1%
• CVE-2025-36899 High 8.4 There is a possible escalation of privilege due to test/debugging code left in a production build. This could lead to physical escalation of privilege with no additional execution privileges needed. U <0.1%
• CVE-2025-36898 High 7.8 There is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not n <0.1%
• CVE-2025-36897 Critical 9.8 In unknown of cd_CnMsgCodecUserApi.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. 0.3%
• CVE-2025-36896 Critical 9.8 WLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, aka A-394765106. 0.2%
• CVE-2025-36895 High 7.5 Information disclosure 0.2%
• CVE-2025-36894 High 7.5 In TBD of TBD, there is a possible DoS due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for explo 0.3%
• CVE-2025-36893 Medium 5.5 In ReadTachyonCommands of gxp_main_actor.cc, there is a possible information leak due to uninitialized data. This could lead to local information disclosure with no additional execution privileges nee <0.1%
• CVE-2025-36892 High 7.5 Denial of service 0.2%
• CVE-2025-36891 High 8.8 Elevation of privilege 0.2%
• CVE-2025-36890 Critical 9.8 Elevation of Privilege 0.2%
• CVE-2025-26416 Critical 9.8 In initializeSwizzler of SkBmpStandardCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution p 0.5%
• CVE-2025-22442 High 7.0 In multiple functions of DevicePolicyManagerService.java, there is a possible way to install unauthorized applications into a newly created work profile due to a race condition. This could lead to loc <0.1%
• CVE-2025-22439 High 7.3 In onLastAccessedStackLoaded of ActionHandler.java , there is a possible way to bypass storage restrictions across apps due to a missing permission check. This could lead to local escalation of privil <0.1%
• CVE-2025-22438 High 7.8 In afterKeyEventLockedInterruptable of InputDispatcher.cpp, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User in 0.1%
• CVE-2025-22437 High 7.8 In setMediaButtonReceiver of multiple files, there is a possible way to launch arbitrary activities from background due to a logic error in the code. This could lead to local escalation of privilege w 0.1%
• CVE-2025-22435 Critical 9.8 In avdt_msg_ind of avdt_msg.cc, there is a possible memory corruption due to type confusion. This could lead to paired device escalation of privilege with no additional execution privileges needed. Us 0.2%
• CVE-2025-22434 High 7.8 In handleKeyGestureEvent of PhoneWindowManager.java, there is a possible lock screen bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execut <0.1%
• CVE-2025-22433 High 7.8 In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commonly used in Work Profile scenarios due to a logic error in the code. This could l <0.1%
• CVE-2025-22431 Medium 5.5 In multiple locations, there is a possible method for a malicious app to prevent dialing emergency services under limited circumstances due to a logic error in the code. This could lead to local denia <0.1%
• CVE-2025-22430 Medium 5.5 In isInSignificantPlace of multiple files, there is a possible way to access sensitive information due to a missing permission check. This could lead to local information disclosure with no additional <0.1%
• CVE-2025-22429 Critical 9.8 In multiple locations, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges need 0.3%
• CVE-2025-22428 High 7.8 In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible way to grant permissions to an app on the secondary user from the primary user due to a logic error in the code. This c <0.1%
• CVE-2025-22427 High 7.3 In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to grant notification access above the lock screen due to a logic error in the code. This could lead to local escala <0.1%
• CVE-2025-22423 High 7.5 In ParseTag of dng_ifd.cpp, there is a possible way to crash the image renderer due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges neede 0.3%
• CVE-2025-22422 High 7.8 In multiple locations, there is a possible way to mislead a user into approving an authentication prompt for one app when its result will be used in another due to a logic error in the code. This coul 0.1%
• CVE-2025-22421 Medium 5.5 In contentDescForNotification of NotificationContentDescription.kt, there is a possible notification content leak through the lockscreen due to a logic error in the code. This could lead to local info 0.1%
• CVE-2025-22419 High 7.3 In multiple locations, there is a possible way to mislead the user into enabling malicious phone calls forwarding due to a tapjacking/overlay attack. This could lead to local escalation of privilege w <0.1%
• CVE-2025-22418 High 7.8 In multiple locations, there is a possible confused deputy due to Intent Redirect. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is <0.1%
• CVE-2025-22417 High 7.3 In finishTransition of Transition.java, there is a possible way to bypass touch filtering restrictions due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no addi <0.1%
• CVE-2025-22416 High 7.8 In onCreate of ChooserActivity.java , there is a possible way to view other users' images due to a confused deputy. This could lead to local escalation of privilege with no additional execution privil <0.1%
• CVE-2024-49730 High 7.8 In FuseDaemon.cpp, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction i <0.1%
• CVE-2024-49728 Medium 5.5 In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a confused deputy. This could lead to local information disclosure with no additional execu <0.1%