Google Android vulnerabilities

CVE-2024-32909 [HIGH] CWE-787 CVE-2024-32909: In handle_msg of main.cpp, there is a possible out of bounds write due to a heap buffer overflow. Th In handle_msg of main.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-0051 [HIGH] CWE-787 CVE-2024-0051: In onQueueFilled of SoftMPEG4.cpp, there is a possible out of bounds write due to a heap buffer over In onQueueFilled of SoftMPEG4.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-48566 [HIGH] CWE-20 CVE-2025-48566: In multiple locations, there is a possible permission bypass due to a confused deputy. This could le In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-0050 [HIGH] CWE-787 CVE-2024-0050: In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a m In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a missing validation check. This could lead to a local non-security issue with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-0018 [HIGH] CWE-787 CVE-2024-0018: In convertYUV420Planar16ToY410 of ColorConverter.cpp, there is a possible out of bounds write due to In convertYUV420Planar16ToY410 of ColorConverter.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-0034 [HIGH] CWE-276 CVE-2024-0034: In BackgroundLaunchProcessController, there is a possible way to launch arbitrary activity from the In BackgroundLaunchProcessController, there is a possible way to launch arbitrary activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2018-9338 [HIGH] CWE-787 CVE-2018-9338: In ResStringPool::setTo of ResourceTypes.cpp, there is a possible out of bounds write due to a missi In ResStringPool::setTo of ResourceTypes.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-32327 [HIGH] CWE-89 CVE-2025-32327: In multiple functions of PickerDbFacade.java, there is a possible unauthorized data access due to SQ In multiple functions of PickerDbFacade.java, there is a possible unauthorized data access due to SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-43085 [HIGH] CWE-276 CVE-2024-43085: In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents over In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents over USB without unlocking the device due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-34729 [HIGH] CVE-2024-34729: In multiple locations, there is a possible arbitrary code execution due to a logic error in the code In multiple locations, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-48615 [HIGH] CWE-770 CVE-2025-48615: In getComponentName of MediaButtonReceiverHolder.java, there is a possible desync in persistence due In getComponentName of MediaButtonReceiverHolder.java, there is a possible desync in persistence due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-40128 [HIGH] CWE-787 CVE-2023-40128: In several functions of xmlregexp.c, there is a possible out of bounds write due to a heap buffer ov In several functions of xmlregexp.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2018-9389 [HIGH] CWE-787 CVE-2018-9389: In ip6_append_data of ip6_output.c, there is a possible way to achieve code execution due to a heap In ip6_append_data of ip6_output.c, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-40658 [HIGH] CWE-787 CVE-2024-40658: In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a h In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-31318 [HIGH] CWE-862 CVE-2024-31318: In CompanionDeviceManagerService.java, there is a possible way to pair a companion device without us In CompanionDeviceManagerService.java, there is a possible way to pair a companion device without user acceptance due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-23698 [HIGH] CWE-787 CVE-2024-23698: In RGXFWChangeOSidPriority of rgxfwutils.c, there is a possible arbitrary code execution due to a mi In RGXFWChangeOSidPriority of rgxfwutils.c, there is a possible arbitrary code execution due to a missing bounds check. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-23715 [HIGH] CWE-787 CVE-2024-23715: In PMRWritePMPageList of pmr.c, there is a possible out of bounds write due to a logic error in the In PMRWritePMPageList of pmr.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-43081 [HIGH] CWE-276 CVE-2024-43081: In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restrictio In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-48552 [HIGH] CVE-2025-48552: In saveGlobalProxyLocked of DevicePolicyManagerService.java, there is a possible way to desync from In saveGlobalProxyLocked of DevicePolicyManagerService.java, there is a possible way to desync from persistence due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-31313 [HIGH] CWE-787 CVE-2024-31313: In availableToWriteBytes of MessageQueueBase.h, there is a possible out of bounds write due to an in In availableToWriteBytes of MessageQueueBase.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.