Google Android vulnerabilities

CVE-2020-25283 [CRITICAL] CWE-862 CVE-2020-25283: An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. BT mana An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. BT manager allows attackers to bypass intended access restrictions on a certain mode. The LG ID is LVE-SMP-200021 (September 2020).

CVE-2018-9364 [HIGH] CWE-203 CVE-2018-9364: In the LG LAF component, there is a special command that allowed modification of certain partitions. In the LG LAF component, there is a special command that allowed modification of certain partitions. This could lead to bypass of secure boot. User interaction is not needed for exploitation.

CVE-2020-25062 [CRITICAL] CVE-2020-25062: An issue was discovered on LG mobile devices with Android OS 9 and 10 software. LGTelephonyProvider An issue was discovered on LG mobile devices with Android OS 9 and 10 software. LGTelephonyProvider allows a bypass of intended privilege restrictions. The LG ID is LVE-SMP-200017 (July 2020).

CVE-2020-12747 [CRITICAL] CWE-787 CVE-2020-12747: An issue was discovered on Samsung mobile devices with Q(10.0) (Exynos980 9630 and Exynos990 9830 ch An issue was discovered on Samsung mobile devices with Q(10.0) (Exynos980 9630 and Exynos990 9830 chipsets) software. The Bootloader has a heap-based buffer overflow because of the mishandling of specific commands. The Samsung IDs are SVE-2020-16981, SVE-2020-16991 (May 2020).

CVE-2017-18645 [CRITICAL] CWE-787 CVE-2017-18645: An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) (Qualcomm chipsets) softwar An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) (Qualcomm chipsets) software. There is a panel_lpm sysfs stack-based buffer overflow. The Samsung ID is SVE-2017-9414 (December 2017).

CVE-2019-20572 [CRITICAL] CWE-120 CVE-2019-20572: An issue was discovered on Samsung mobile devices with O(8.1) and P(9.0) (Exynos chipsets) software. An issue was discovered on Samsung mobile devices with O(8.1) and P(9.0) (Exynos chipsets) software. load_kernel has a buffer overflow via untrusted data. The Samsung ID is SVE-2019-14939 (September 2019).

CVE-2019-20530 [CRITICAL] CWE-345 CVE-2019-20530: An issue was discovered on Samsung mobile devices with N(7.1), O(8.x), P(9.0), and Q(10.0) software. An issue was discovered on Samsung mobile devices with N(7.1), O(8.x), P(9.0), and Q(10.0) software. Arbitrary code execution is possible on the lock screen. The Samsung ID is SVE-2019-15266 (December 2019).

CVE-2015-3831 [CRITICAL] CWE-119 CVE-2015-3831: Buffer overflow in the readAt function in BpMediaHTTPConnection in media/libmedia/IMediaHTTPConnecti Buffer overflow in the readAt function in BpMediaHTTPConnection in media/libmedia/IMediaHTTPConnection.cpp in the mediaserver service in Android before 5.1.1 LMY48I allows attackers to execute arbitrary code via a crafted application, aka internal bug 19400722.

CVE-2015-3842 [CRITICAL] CWE-119 CVE-2015-3842: Multiple heap-based buffer overflows in libeffects in the Audio Policy Service in mediaserver in And Multiple heap-based buffer overflows in libeffects in the Audio Policy Service in mediaserver in Android before 5.1.1 LMY48I allow attackers to execute arbitrary code via a crafted application, aka internal bug 21953516.

CVE-2025-48577 [HIGH] CWE-362 CVE-2025-48577: In multiple functions of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a r In multiple functions of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-48568 [HIGH] CWE-362 CVE-2025-48568: In multiple locations, there is a possible lockscreen bypass due to a race condition. This could lea In multiple locations, there is a possible lockscreen bypass due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-0112 [HIGH] CWE-362 CVE-2026-0112: In vpu_open_inst of vpu_ioctl.c, there is a possible use after free due to a race condition. This co In vpu_open_inst of vpu_ioctl.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-35691 [HIGH] CWE-125 CVE-2023-35691: there is a possible out of bounds read due to a missing bounds check. This could lead to remote deni there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-48634 [HIGH] CWE-862 CVE-2025-48634: In relayoutWindow of WindowManagerService.java, there is a possible tapjack attack due to a missing In relayoutWindow of WindowManagerService.java, there is a possible tapjack attack due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-28626 [HIGH] CWE-601 CVE-2026-28626: In onCreate of SetupPassthroughActivity.java, there is a possible way to launch arbitrary activity d In onCreate of SetupPassthroughActivity.java, there is a possible way to launch arbitrary activity due to Intent redirection . This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

CVE-2024-20057 [HIGH] CWE-787 CVE-2024-20057: In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lea In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08587881; Issue ID: ALPS08587881.

CVE-2020-13833 [CRITICAL] CWE-59 CVE-2020-13833: An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The sys An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The system area allows arbitrary file overwrites via a symlink attack. The Samsung ID is SVE-2020-17183 (June 2020).

CVE-2019-1994 [HIGH] CWE-1188 CVE-2019-1994: In refresh of DevelopmentTiles.java, there is the possibility of leaving development settings access In refresh of DevelopmentTiles.java, there is the possibility of leaving development settings accessible due to an insecure default value. This could lead to unwanted access to development settings, with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-8.0 Android-8.1 Android-9.

CVE-2024-40673 [MEDIUM] CWE-94 CVE-2024-40673: In Source of ZipFile.java, there is a possible way for an attacker to execute arbitrary code by mani In Source of ZipFile.java, there is a possible way for an attacker to execute arbitrary code by manipulating Dynamic Code Loading due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2020-35693 [HIGH] CVE-2020-35693: On some Samsung phones and tablets running Android through 7.1.1, it is possible for an attacker-con On some Samsung phones and tablets running Android through 7.1.1, it is possible for an attacker-controlled Bluetooth Low Energy (BLE) device to pair silently with a vulnerable target device, without any user interaction, when the target device's Bluetooth is on, and it is running an app that offers a connectable BLE advertisement. An example of such an app c