CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- gotenna, gotenna mesh firmware +1 moreAn issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. A command...7.1 High
- gotenna, gotenna mesh firmware +1 moreAn issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. All packets...4.0 Medium
- gotenna, gotenna mesh firmware +1 moreAn issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The app there...6.5 Medium
- gotenna, gotenna mesh firmware +1 moreAn issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. By default, a...4.3 Medium
- gotenna, gotenna mesh firmware +1 moreAn issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The app uses a...5.3 Medium
- gotenna, gotenna mesh firmware +1 moreAn issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. By default, the...4.3 Medium
- google androidIn the function process_crypto_cmd, the values of ptrs[i] can be potentially equal to NULL which...5.5 Medium
- google androidThere is a possible bypass of carrier restrictions due to an unusual root cause. This could lead...8.4 High
- google androidIn onHandleForceStop of VoiceInteractionManagerService.java, there is a bug that could cause the...7.8 High
- google androidIn onCreate of NotificationAccessConfirmationActivity.java, there is a possible incorrect...5.5 Medium
- google androidIn multiple functions of CameraService.cpp, there is a possible way to use the camera from the...7.8 High
- google androidIn smp_process_secure_connection_oob_data of smp_act.cc, there is a possible way to bypass SMP...8.8 High
- google androidIn clearAllowBgActivityStarts of PendingIntentRecord.java, there is a possible way for an...7.8 High
- google androidIn updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a...7.8 High
- google androidIn getDestinationForApp of SpaAppBridgeActivity, there is a possible cross-user file reveal due...7.8 High
- google androidIn collectOps of AppOpsService.java, there is a possible way to cause permanent DoS due to...5.5 Medium
- google androidIn startLockTaskMode of LockTaskController.java, there is a possible lock screen bypass due to a...3.2 Low
- google androidIn multiple locations, there is a possible Android/data access due to a path traversal error....4.4 Medium
- google androidIn BroadcastController.java of registerReceiverWithFeatureTraced, there is a possible way to...5.1 Medium
- google androidIn multiple functions of RoleService.java, there is a possible permission squatting vulnerability...4.0 Medium
- google androidIn multiple functions of VpnManager.java, there is a possible cross-user data leak due to a logic...4.0 Medium
- google androidIn validateIpConfiguration of WifiConfigurationUtil.java, there is a possible way to trigger a...6.2 Medium
- google androidIn dump of WindowManagerService.java, there is a possible way of running dumpsys without the...4.0 Medium
- google androidIn multiple locations, there is a possible lock screen bypass due to a logic error in the code....4.0 Medium
- google androidIn multiple functions of GrantPermissionsActivity.java , there is a possible way to trick the...4.4 Medium
- google androidIn onCreate of InstallStart.java, there is a possible permissions bypass due to improper input...5.1 Medium
- qualcomm ar8035 firmware, csra6620 firmware, csra6640 firmware +149 more +151 moreOut-of-bounds Write in Computer Vision7.8 High
- qualcomm 215 mobile firmware, csra6620 firmware, csra6640 firmware +104 more +106 moreOut-of-bounds Write in Computer Vision7.8 High
- qualcomm ar8035 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +122 more +124 moreBuffer Over-read in WLAN Host Communication7.5 High
- qualcomm 205 mobile firmware, 215 mobile firmware, 315 5g iot modem firmware +264 more +266 moreUse After Free in GPS HLOS Driver7.8 High
- mediatek nr15, mediatek, inc. mt2735, mt6833, mt6833p, mt6853, mt6853t, mt6855, mt6855t, mt6873, mt6875, mt6875t, mt6877, mt6877t, mt6877tt, mt6880, mt6883, mt6885, mt6889, mt6890, mt6891, mt6893, mt8666, mt8667, mt8673, mt8675, mt8771, mt8791, mt8791t, mt8795t, mt8797, mt8798 +1 moreIn Modem, there is a possible system crash due to an uncaught exception. This could lead to...7.5 High
- google chromeInappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote...5.4 Medium
- arm 5th gen gpu architecture kernel driver, bifrost gpu kernel driver, valhall gpu kernel driver +2 moreMali GPU Kernel Driver allows access to already freed memory7.8 High
- google androidIn onCreate of UninstallerActivity.java, there is a possible way to uninstall a different user's...5.1 Medium
- google androidIn multiple functions of UserController.java, there is a possible lock screen bypass due to a...4.0 Medium
- arm 5th gen gpu architecture kernel driver, valhall gpu kernel driver +1 moreMali GPU Kernel Driver allows improper GPU memory processing operations7.8 High
- google androidThere is a possible disclosure of Bluetooth adapter details due to a permissions bypass. This...5.1 Medium
- google androidIn MMapVAccess of pmr_os.c, there is a possible out of bounds write due to improper input...4.0 Medium
- sematell replyoneSematell ReplyOne 7.4.3.0 allows SSRF via the application server API.7.5 High
- sematell replyoneSematell ReplyOne 7.4.3.0 allows XSS via a ReplyDesk e-mail attachment name.6.1 Medium
- sematell replyoneSematell ReplyOne 7.4.3.0 has Insecure Permissions for the /rest/sessions endpoint.9.1 Critical
- google androidIn bta_av_config_ind of bta_av_aact.cc, there is a possible out of bounds read due to type...4.0 Medium