Motorola

Products

Exploited and recent CVEs

• CVE-2026-93832 Medium 4.4 A component of one of the Motorola system applications was exported without permission, allowing for the revocation of runtime permissions from other apps. <0.1%
• CVE-2026-18058 High 7.5 The mobile Smart Connect dashboard UI was subject to manipulation by 3rd party apps. When paired with a phishing attack, this manipulation could result in escalated privileges of an attacker within th 0.1%
• CVE-2026-5804 High 8.4 An improper authentication vulnerability was discovered in the Motorola Factory Test component (com.motorola.motocit). The application contained a reference to a writable file descriptor in external s 0.3%
• CVE-2025-2818 Low 3.5 A vulnerability was reported in version 1.0 of the Bluetooth Transmission Alliance protocol adopted by Motorola Smart Connect Android Application that could allow a nearby attacker within the Bluetoot 0.1%
• CVE-2025-1700 High 7.0 A DLL hijacking vulnerability was reported in the Motorola Software Fix (Rescue and Smart Assistant) installer that could allow a local attacker to escalate privileges during installation of the softw 0.2%
• CVE-2025-1699 Low 2.8 An incorrect default permissions vulnerability was reported in the MotoSignature application that could result in unauthorized access. 0.1%
• CVE-2025-1699 Low 2.8 An incorrect default permissions vulnerability was reported in the MotoSignature application that could result in unauthorized access. 0.1%
• CVE-2025-1699 Low 2.8 An incorrect default permissions vulnerability was reported in the MotoSignature application that could result in unauthorized access. 0.1%
• CVE-2025-1698 Low 2.8 Null pointer exception vulnerabilities were reported in the fingerprint sensor service that could allow a local attacker to cause a denial of service. 0.1%
• CVE-2025-1698 Low 2.8 Null pointer exception vulnerabilities were reported in the fingerprint sensor service that could allow a local attacker to cause a denial of service. 0.1%
• CVE-2025-1698 Low 2.8 Null pointer exception vulnerabilities were reported in the fingerprint sensor service that could allow a local attacker to cause a denial of service. 0.1%
• CVE-2025-1698 Low 2.8 Null pointer exception vulnerabilities were reported in the fingerprint sensor service that could allow a local attacker to cause a denial of service. 0.1%
• CVE-2025-1698 Low 2.8 Null pointer exception vulnerabilities were reported in the fingerprint sensor service that could allow a local attacker to cause a denial of service. 0.1%
• CVE-2022-4001 High 7.3 An authentication bypass vulnerability could allow an attacker to access API functions without authentication. 0.3%
• CVE-2022-4002 High 7.2 A command injection vulnerability could allow an authenticated user to execute operating system commands as root via a specially crafted API request. 1.0%
• CVE-2022-4003 Low 2.7 A denial-of-service vulnerability could allow an authenticated user to trigger an internal service restart via a specially crafted API request. 0.4%
• CVE-2024-3480 Low 2.8 An Implicit intent vulnerability was reported in the Motorola framework that could allow an attacker to read telephony-related data. 0.1%
• CVE-2024-3479 Low 2.8 An improper export vulnerability was reported in the Motorola Enterprise MotoDpms Provider (com.motorola.server.enterprise.MotoDpmsProvider) that could allow a local attacker to read local data. 0.1%
• CVE-2024-3109 Medium 6.3 A hard-coded AES key vulnerability was reported in the Motorola GuideMe application, along with a lack of URI sanitation, could allow for a local attacker to read arbitrary files. 0.3%
• CVE-2024-3108 Medium 5.5 An implicit intent vulnerability was reported for Motorola’s Time Weather Widget application that could allow a local application to acquire the location of the device without authorization.  0.2%
• CVE-2023-41830 Medium 6.5 An improper absolute path traversal vulnerability was reported for the Ready For application allowing a local application access to files without authorization.  0.2%
• CVE-2023-41828 Medium 4.4 An implicit intent export vulnerability was reported in the Motorola Phone application, that could allow unauthorized access to a non-exported content provider.   0.2%
• CVE-2023-41826 Medium 5.1 A PendingIntent hijacking vulnerability in Motorola Device Help (Genie) application that could allow local attackers to access files or interact with non-exported software components without permissio 0.2%
• CVE-2023-41825 Low 2.8 A path traversal vulnerability was reported in the Motorola Ready For application that could allow a local attacker to access local files.  0.2%
• CVE-2023-41824 Low 2.8 An implicit intent vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read the calling phone number and calling data. 0.1%
• CVE-2023-41823 Medium 4.4 An improper export vulnerability was reported in the Motorola Phone Extension application, that could allow a local attacker to execute unauthorized Activities.  0.2%
• CVE-2023-41822 Medium 4.8 An improper export vulnerability was reported in the Motorola Interface Test Tool application that could allow a malicious local application to execute OS commands.  0.1%
• CVE-2023-41821 Medium 5.0 A an improper export vulnerability was reported in the Motorola Setup application that could allow a local attacker to read sensitive user information.  0.1%
• CVE-2023-41820 Medium 5.0 An implicit intent vulnerability was reported in the Motorola Ready For application that could allow a local attacker to read information about connected Bluetooth audio devices.  0.1%
• CVE-2023-41819 Medium 6.1 A PendingIntent hijacking vulnerability was reported in the Motorola Face Unlock application that could allow a local attacker to access unauthorized content providers.  0.1%