Skip to contentGoogle Android vulnerabilities
- google android, linuxfoundation yocto, mediatek, inc. mt6739, mt6761, mt6765, mt6768, mt6781, mt6789, mt6813, mt6833, mt6835, mt6853, mt6855, mt6877, mt6878, mt6879, mt6883, mt6885, mt6886, mt6889, mt6893, mt6895, mt6897, mt6899, mt6983, mt6985, mt6989, mt6990, mt6991, mt8188, mt8196, mt8370, mt8390, mt8676 +3 more +5 moreIn DA, there is a possible out of bounds write due to a missing bounds check. This could lead to...CVE-2025-20696Fix available6.8 Medium
- google androidIn multiple locations, there is a possible way to use apps linked from a context menu of a...CVE-2025-48533Fix available7.0 High
- google androidIn multiple locations, there is a possible condition that results in OOB accesses due to an...CVE-2025-48530Fix available8.1 High
- google androidIn getContextForResourcesEnsuringCorrectCachedApkPaths of RemoteViews.java, there is a possible...CVE-2025-22441Public exploitFix available7.3 High
- google android, mediatek software development kit, mediatek, inc. mt6639, mt6653, mt6985, mt6989, mt6990, mt6991, mt7925, mt7927, mt8196, mt8678, mt8796 +1 more +3 moreIn Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead...CVE-2025-206956.5 Medium
- google android, mediatek software development kit, mediatek, inc. mt2718, mt6639, mt6653, mt6985, mt6989, mt6990, mt6991, mt7925, mt7927, mt8113, mt8115, mt8127, mt8163, mt8168, mt8169, mt8173, mt8183, mt8186, mt8188, mt8195, mt8196, mt8370, mt8390, mt8391, mt8395, mt8512, mt8516, mt8519, mt8676, mt8678, mt8695, mt8696, mt8698, mt8786, mt8792, mt8796, mt8893 +1 more +3 moreIn Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead...CVE-2025-206946.5 Medium
- google android, linuxfoundation yocto, mediatek software development kit +2 more +4 moreIn wlan STA driver, there is a possible out of bounds read due to an incorrect bounds check. This...CVE-2025-206936.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t750/t765/t760/t770/t820/s8000/t8300/t9300 +1 moreIn cplog service, there is a possible out of bounds write due to a missing bounds check. This...CVE-2025-317125.1 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t750/t765/t760/t770/t820/s8000/t8300/t9300 +1 moreIn cplog service, there is a possible system crash due to null pointer dereference. This could...CVE-2025-317115.1 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/t606/t612/t616/t750/t765/t760/t770/t820/s8000/t8300/t9300 +1 moreIn engineermode service, there is a possible command injection due to improper input validation....CVE-2025-31710Public exploit5.9 Medium
- google androidIn wl_cfgscan_update_v3_schedscan_results() of wl_cfgscan.c, there is a possible out of bounds...CVE-2025-36887Fix available7.8 High
- google androidIn createIntentsList of PackageParser.java , there is a possible way to bypass lazy bundle...CVE-2025-32312Fix available7.8 High
- google androidIn allowPackageAccess of multiple files, resource exhaustion is possible when repeatedly adding...CVE-2025-26463Fix available5.5 Medium
- google androidIn AccessibilityServiceConnection.java, there is a possible background activity launch due to a...CVE-2025-26462Fix available7.8 High
- google androidIn multiple functions of LocationProviderManager.java, there is a possible background activity...CVE-2025-26458Fix available7.8 High
- google androidIn multiple functions of DexUseManagerLocal.java, there is a possible way to crash system server...CVE-2025-26456Fix available5.5 Medium
- google androidIn multiple functions of NdkMediaCodec.cpp, there is a possible out of bounds write due to a heap...CVE-2025-26455Fix available7.8 High
- google androidIn isContentUriForOtherUser of BluetoothOppSendFileInfo.java, there is a possible cross user data...CVE-2025-26453Fix available5.5 Medium
- google androidIn loadDrawableForCookie of ResourcesImpl.java, there is a possible way to access task snapshots...CVE-2025-26452Fix available7.8 High
- google androidIn onInputEvent of IInputMethodSessionWrapper.java, there is a possible way for an untrusted app...CVE-2025-26450Fix available7.8 High
- google androidIn multiple locations, there is a possible permanent denial of service due to resource exhaustion...CVE-2025-26449Fix available5.5 Medium
- google androidIn writeToParcel of CursorWindow.cpp, there is a possible out of bounds read due to uninitialized...CVE-2025-26448Fix available5.5 Medium
- google androidIn offerNetwork of ConnectivityService.java, there is a possible leak of sensitive data due to a...CVE-2025-26445Fix available5.5 Medium
- google androidIn parseHtml of HtmlToSpannedParser.java, there is a possible way to install apps without...CVE-2025-26443Public exploitFix available7.3 High
- google androidIn add_attr of sdp_discovery.cc, there is a possible out of bounds read due to a missing bounds...CVE-2025-26441Fix available6.5 Medium
- google androidIn CredentialManagerServiceStub of CredentialManagerService.java, there is a possible way to...CVE-2025-26437Fix available5.5 Medium
- google androidIn multiple locations, there is a possible way to persistently DoS the device due to a missing...CVE-2025-26432Fix available5.5 Medium
- google android, samsung mobile libsavscmn +1 moreOut-of-bounds write in libsavscmn prior to Android 15 allows local attackers to cause memory...CVE-2025-209804.0 Medium
- google android, samsung mobile libsavscmn +1 moreOut-of-bounds write in libsavscmn prior to Android 15 allows local attackers to execute arbitrary...CVE-2025-209798.4 High
- google android, mediatek, inc. mt6580, mt6761, mt6765, mt6768, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6893, mt6895, mt6983, mt6985, mt8175, mt8195, mt8196, mt8321, mt8365, mt8370, mt8385, mt8390, mt8395, mt8666, mt8667, mt8673, mt8678, mt8765, mt8766, mt8768, mt8771, mt8775, mt8781, mt8786, mt8788, mt8788e, mt8789, mt8791t, mt8795t, mt8796, mt8797, mt8798, mt8893 +1 moreIn devinfo, there is a possible information disclosure due to a missing SELinux policy. This...CVE-2025-206655.5 Medium
- google android, mediatek, inc. mt6878, mt6897, mt6899, mt6989, mt6991, mt8775, mt8796 +1 moreIn scp, there is a possible out of bounds write due to a missing bounds check. This could lead to...CVE-2025-206687.8 High
- google android, mediatek, inc. mt2718, mt6878, mt6897, mt6899, mt6989, mt6991, mt8196, mt8391, mt8676, mt8678 +1 moreIn thermal, there is a possible out of bounds write due to a race condition. This could lead to...CVE-2025-206717.0 High
- google androidIn the function process_crypto_cmd, the values of ptrs[i] can be potentially equal to NULL which...CVE-2025-27701Fix available5.5 Medium
- google androidThere is a possible bypass of carrier restrictions due to an unusual root cause. This could lead...CVE-2025-27700Fix available8.4 High
- google androidIn onHandleForceStop of VoiceInteractionManagerService.java, there is a bug that could cause the...CVE-2025-26444Fix available7.8 High
- google androidIn onCreate of NotificationAccessConfirmationActivity.java, there is a possible incorrect...CVE-2025-26442Fix available5.5 Medium
- google androidIn multiple functions of CameraService.cpp, there is a possible way to use the camera from the...CVE-2025-26440Fix available7.8 High
- google androidIn smp_process_secure_connection_oob_data of smp_act.cc, there is a possible way to bypass SMP...CVE-2025-26438Fix available8.8 High
- google androidIn clearAllowBgActivityStarts of PendingIntentRecord.java, there is a possible way for an...CVE-2025-26436Fix available7.8 High
- google androidIn updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a...CVE-2025-26435Fix available7.8 High
- google androidIn getDestinationForApp of SpaAppBridgeActivity, there is a possible cross-user file reveal due...CVE-2025-26430Fix available7.8 High
- google androidIn collectOps of AppOpsService.java, there is a possible way to cause permanent DoS due to...CVE-2025-26429Fix available5.5 Medium
- google androidIn startLockTaskMode of LockTaskController.java, there is a possible lock screen bypass due to a...CVE-2025-26428Fix available3.2 Low
- google androidIn multiple locations, there is a possible Android/data access due to a path traversal error....CVE-2025-26427Fix available4.4 Medium
- google androidIn BroadcastController.java of registerReceiverWithFeatureTraced, there is a possible way to...CVE-2025-26426Fix available5.1 Medium
- google androidIn multiple functions of RoleService.java, there is a possible permission squatting vulnerability...CVE-2025-26425Fix available4.0 Medium
- google androidIn multiple functions of VpnManager.java, there is a possible cross-user data leak due to a logic...CVE-2025-26424Fix available4.0 Medium
- google androidIn validateIpConfiguration of WifiConfigurationUtil.java, there is a possible way to trigger a...CVE-2025-26423Fix available6.2 Medium
- google androidIn dump of WindowManagerService.java, there is a possible way of running dumpsys without the...CVE-2025-26422Fix available4.0 Medium
- google androidIn multiple locations, there is a possible lock screen bypass due to a logic error in the code....CVE-2025-26421Fix available4.0 Medium
- Show moreLoading…