Google Chrome for Android UI Heap Buffer Overflow Vulnerability

Google Pixel Improper Authorization Vulnerability

Android Runtime Use-After-Free Vulnerability

Android Framework Integer Overflow Vulnerability

Android Framework Privilege Escalation Vulnerability

Android Pixel Privilege Escalation Vulnerability

Android Pixel Privilege Escalation Vulnerability

Android Framework Privilege Escalation Vulnerability

Android Framework Privilege Escalation Vulnerability

Google Pixel Out-of-Bounds Write Vulnerability

Samsung Mobile Devices Use-After-Free Vulnerability

Android Kernel Use-After-Free Vulnerability

Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability

Android Kernel Out-of-Bounds Write Vulnerability

Android Kernel Use-After-Free Vulnerability

Android OS Privilege Escalation Vulnerability

Android Framework Privilege Escalation Vulnerability

Android Kernel Race Condition Vulnerability

Google Chromium Intents Improper Input Validation Vulnerability

Android Framework Information Disclosure Vulnerability

HID: core: zero-initialize the report buffer

Android Pixel Information Disclosure Vulnerability

Android Pixel Information Disclosure Vulnerability

In Package Manager, there is a possible device lock controller bypass due to a missing permission check

An improper input validation vulnerability in sflacfd_get_frm() in libsflacextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on…

In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the code

In multiple locations, there is a possible use-after-free due to a logic error in the code

In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code

In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting

In multiple locations, there is a possible memory safety issue due to a heap buffer overflow

In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code

In multiple functions of vpu_ioctl.c, there is a possible use after free due to a use after free

In WC-Radio, there is a possible out of bounds write due to a missing bounds check

In modem, there is a possible out of bounds write due to an incorrect bounds check

In __mfc_handle_released_buf of mfc_core_isr.c, there is a possible out of bounds write due to a missing bounds check

In Modem, there is a possible out of bounds write due to an incorrect bounds check

In ns_GetUserData of ns_SmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check

In ns_GetUserData of ns_SmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check

In MM_DATA_IND of cn_NrSmMsgHdlrFromMM.cpp, there is a possible EoP due to memory corruption

In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow

In AudioDecoder::HandleProduceRequest of audio_decoder.cc, there is a possible out of bounds write due to an incorrect bounds check

In multiple locations, there is a possible way to launch an application from the background due to a precondition check failure

WLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, aka A-396458384

In unknown of cd_CnMsgCodecUserApi.cpp, there is a possible out of bounds write due to a missing bounds check

WLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, aka A-394765106

Elevation of Privilege

In initializeSwizzler of SkBmpStandardCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow

In avdt_msg_ind of avdt_msg.cc, there is a possible memory corruption due to type confusion

In multiple locations, there is a possible way to execute arbitrary code due to a logic error in the code

In rfc_check_send_cmd of rfc_utils.cc, there is a possible way to execute arbitrary code due to a use after free