Google Android vulnerabilities

CVE-2025-48653 [HIGH] CWE-693 CVE-2025-48653: In loadDataAndPostValue of multiple files, there is a possible way to obscure permission usage due t In loadDataAndPostValue of multiple files, there is a possible way to obscure permission usage due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-48654 [HIGH] CWE-610 CVE-2025-48654: In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-48637 [HIGH] CWE-190 CVE-2025-48637: In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer ov In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-32325 [HIGH] CWE-122 CVE-2025-32325: In appendFrom of Parcel.cpp, there is a possible out of bounds write due to a heap buffer overflow. In appendFrom of Parcel.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-23696 [HIGH] CWE-416 CVE-2024-23696: In RGXCreateZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to a use after In RGXCreateZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-23695 [HIGH] CWE-190 CVE-2024-23695: In CacheOpPMRExec of cache_km.c, there is a possible out of bounds write due to an integer overflow. In CacheOpPMRExec of cache_km.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-23697 [HIGH] CWE-416 CVE-2024-23697: In RGXCreateHWRTData_aux of rgxta3d.c, there is a possible arbitrary code execution due to a use aft In RGXCreateHWRTData_aux of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-36918 [HIGH] CWE-125 CVE-2025-36918: In aoc_service_read_message of aoc_ipc_core.c, there is a possible out of bounds read due to imprope In aoc_service_read_message of aoc_ipc_core.c, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-23711 [HIGH] CWE-269 CVE-2024-23711: In DevmemXIntUnreserveRange of devicemem_server.c, there is a possible arbitrary code execution due In DevmemXIntUnreserveRange of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-55359 [HIGH] CWE-693 CVE-2026-55359: In multiple locations, there is a possible permission bypass due to a logic error in the code. This In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-58678 [HIGH] CWE-693 CVE-2026-58678: In Bootloader, there is a possible permission bypass due to a logic error in the code. This could le In Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-48525 [HIGH] CWE-20 CVE-2025-48525: In disassociate of DisassociationProcessor.java, there is a possible way for an app to continue read In disassociate of DisassociationProcessor.java, there is a possible way for an app to continue reading notifications when not associated to a companion device due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-35659 [HIGH] CVE-2023-35659: In DevmemIntChangeSparse of devicemem_server.c, there is a possible arbitrary code execution due to In DevmemIntChangeSparse of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-58766 [HIGH] CWE-693 CVE-2026-58766: In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic e In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-28594 [HIGH] CWE-693 CVE-2026-28594: In multiple locations, there is a possible use after free due to a logic error in the code. This cou In multiple locations, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-28642 [HIGH] CWE-693 CVE-2026-28642: In executeRequest of ActivityStarter.java, there is a possible background activity launch due to a l In executeRequest of ActivityStarter.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-28612 [HIGH] CWE-693 CVE-2026-28612: In resolveActivity of ActivityStarter.java, there is a possible way to perform Intent Redirection at In resolveActivity of ActivityStarter.java, there is a possible way to perform Intent Redirection attacks due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-0084 [HIGH] CWE-693 CVE-2026-0084: In multiple functions of HostEmulationManager.java, there is a possible background activity launch d In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-28664 [HIGH] CWE-693 CVE-2026-28664: In WriteImageToDisk of runtime_image.cc, there is a possible file tampering due to a logic error in In WriteImageToDisk of runtime_image.cc, there is a possible file tampering due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-28634 [HIGH] CWE-693 CVE-2026-28634: In handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to send a USSD request w In handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to send a USSD request without permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.