Google Android vulnerabilities

CVE-2024-43095 [HIGH] CWE-203 CVE-2024-43095: In multiple locations, there is a possible way to obtain any system permission due to a logic error In multiple locations, there is a possible way to obtain any system permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

CVE-2024-22008 [HIGH] CWE-269 CVE-2024-22008: In config_gov_time_windows of tmu.c, there is a possible out of bounds write due to a missing bounds In config_gov_time_windows of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2018-9374 [HIGH] CWE-863 CVE-2018-9374: In installPackageLI of PackageManagerService.java, there is a possible permissions bypass. This coul In installPackageLI of PackageManagerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-23713 [HIGH] CWE-269 CVE-2024-23713: In migrateNotificationFilter of NotificationManagerService.java, there is a possible failure to pers In migrateNotificationFilter of NotificationManagerService.java, there is a possible failure to persist notifications settings due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-21139 [HIGH] CWE-276 CVE-2023-21139: In bindPlayer of MediaControlPanel.java, there is a possible launch arbitrary activity in SysUI due In bindPlayer of MediaControlPanel.java, there is a possible launch arbitrary activity in SysUI due to Unsafe Intent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-271845008

CVE-2025-32346 [HIGH] CWE-441 CVE-2025-32346: In onActivityResult of VoicemailSettingsActivity.java, there is a possible work profile contact numb In onActivityResult of VoicemailSettingsActivity.java, there is a possible work profile contact number leak due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-32927 [HIGH] CWE-416 CVE-2024-32927: In sendDeviceState_1_6 of RadioExt.cpp, there is a possible use after free due to improper locking. In sendDeviceState_1_6 of RadioExt.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-34743 [HIGH] CWE-1021 CVE-2024-34743: In setTransactionState of SurfaceFlinger.cpp, there is a possible way to perform tapjacking due to a In setTransactionState of SurfaceFlinger.cpp, there is a possible way to perform tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-43769 [HIGH] CWE-276 CVE-2024-43769: In isPackageDeviceAdmin of PackageManagerService.java, there is a possible edge case which could pre In isPackageDeviceAdmin of PackageManagerService.java, there is a possible edge case which could prevent the uninstallation of CloudDpc due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2018-9431 [HIGH] CWE-276 CVE-2018-9431: In OSUInfo of OSUInfo.java, there is a possible escalation of privilege due to improper input valida In OSUInfo of OSUInfo.java, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-47017 [HIGH] CWE-416 CVE-2024-47017: In ufshc_scsi_cmd of ufs.c, there is a possible stack variable use after free due to a use after fre In ufshc_scsi_cmd of ufs.c, there is a possible stack variable use after free due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-20796 [HIGH] CWE-1285 CVE-2025-20796: In imgsys, there is a possible out of bounds write due to improper input validation. This could lead In imgsys, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS10314745; Issue ID: MSV-5553.

CVE-2025-20800 [HIGH] CWE-787 CVE-2025-20800: In mminfra, there is a possible out of bounds write due to a missing bounds check. This could lead t In mminfra, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10267349; Issue ID: MSV-5033.

CVE-2025-48558 [HIGH] CWE-927 CVE-2025-48558: In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent inte In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent intended for system app due to Implicit intent hijacking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-44092 [HIGH] CWE-489 CVE-2024-44092: There is a possible LCS signing enforcement missing due to test/debugging code left in a production There is a possible LCS signing enforcement missing due to test/debugging code left in a production build. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-40650 [HIGH] CWE-862 CVE-2024-40650: In wifi_item_edit_content of styles.xml , there is a possible FRP bypass due to Missing check for FR In wifi_item_edit_content of styles.xml , there is a possible FRP bypass due to Missing check for FRP state. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-27210 [HIGH] CWE-269 CVE-2024-27210: In policy_check of fvp.c, there is a possible out of bounds write due to a missing bounds check. Thi In policy_check of fvp.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-27224 [HIGH] CWE-269 CVE-2024-27224: In strncpy of strncpy.c, there is a possible out of bounds write due to a missing bounds check. This In strncpy of strncpy.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-22416 [HIGH] CWE-441 CVE-2025-22416: In onCreate of ChooserActivity.java , there is a possible way to view other users' images due to a c In onCreate of ChooserActivity.java , there is a possible way to view other users' images due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-49738 [HIGH] CWE-787 CVE-2024-49738: In writeInplace of Parcel.cpp, there is a possible out of bounds write. This could lead to local esc In writeInplace of Parcel.cpp, there is a possible out of bounds write. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.