Platform Frameworks Base vulnerabilities

CVE-2022-20446 CVE-2022-20446: In AlwaysOnHotwordDetector of AlwaysOnHotwordDetector In AlwaysOnHotwordDetector of AlwaysOnHotwordDetector.java, there is a possible way to access the microphone from the background due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-21278 CVE-2023-21278: In multiple locations, there is a possible way to obscure the microphone privacy indicator due to a logic error in the code In multiple locations, there is a possible way to obscure the microphone privacy indicator due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-40122 CVE-2023-40122: In applyCustomDescription of SaveUi In applyCustomDescription of SaveUi.java, there is a possible way to view another user's image content. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-0037 CVE-2024-0037: In renderSuggestion of RemoteInlineSuggestionViewConnector In renderSuggestion of RemoteInlineSuggestionViewConnector.java , there is a possible way to view images belonging to a different user of the device due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-40138 CVE-2023-40138: In FillUi of FillUi In FillUi of FillUi.java, there is a possible way to view another user's images. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-40137 CVE-2023-40137: In createDatasetItems of DialogFillUi In createDatasetItems of DialogFillUi.java, there is a possible way to view another user's image. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-40135 CVE-2023-40135: In applyCustomDescription of SaveUi In applyCustomDescription of SaveUi.java, there is a possible way to view another user's image due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-40134 CVE-2023-40134: In FillUi of FillUi In FillUi of FillUi.java, there is a possible way to view another users images. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-40136 CVE-2023-40136: In setHeader of DialogFillUi In setHeader of DialogFillUi.java, there is a possible way to view other user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2020-0459 CVE-2020-0459: In sendConfiguredNetworkChangedBroadcast of WifiConfigManager In sendConfiguredNetworkChangedBroadcast of WifiConfigManager.java, there is a possible leak of sensitive WiFi configuration data due to a missing permission check. This could lead to local information disclosure of WiFi network names with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2022-20526 CVE-2022-20526: In CanvasContext::draw of CanvasContext In CanvasContext::draw of CanvasContext.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

CVE-2025-26428 CVE-2025-26428: In startLockTaskMode of LockTaskController In startLockTaskMode of LockTaskController.java, there is a possible lock screen bypass due to a logic error in the code. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

CVE-2025-0076 CVE-2025-0076: In multiple locations, there is a possible way to view icons belonging to another user due to a missing permission check In multiple locations, there is a possible way to view icons belonging to another user due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2022-20358 CVE-2022-20358: In startSync of AbstractThreadedSyncAdapter In startSync of AbstractThreadedSyncAdapter.java, there is a possible way to access protected content of content providers due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.

CVE-2020-0412 CVE-2020-0412: In setProcessMemoryTrimLevel of ActivityManagerService In setProcessMemoryTrimLevel of ActivityManagerService.java, there is a missing permission check. This could lead to local information disclosure of foreground processes with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2020-0368 CVE-2020-0368: In queryInternal of CallLogProvider In queryInternal of CallLogProvider.java, there is a possible permission bypass due to improper input validation. This could lead to local information disclosure of voicemail metadata with User execution privileges needed. User interaction is not needed for exploitation.

CVE-2021-39628 CVE-2021-39628: In StatusBar In StatusBar.java, there is a possible disclosure of notification content on the lockscreen due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2021-1034 CVE-2021-1034: In getLine1NumberForDisplay of PhoneInterfaceManager In getLine1NumberForDisplay of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2021-0982 CVE-2021-0982: In getOrganizationNameForUser of DevicePolicyManagerService In getOrganizationNameForUser of DevicePolicyManagerService.java, there is a possible organization name disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2022-20240 CVE-2022-20240: In sOpAllowSystemRestrictionBypass of AppOpsManager In sOpAllowSystemRestrictionBypass of AppOpsManager.java, there is a possible leak of location information due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.