google android 15.0 vulnerabilities and exploits

(subscribe to this query)

In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to incorrect unicode normalization. This could lead to local escalation of privilege with no additional execution privil...

Google Android 12.0 Google Android 13.0 Google Android 14.0 Google Android 15.0

1 Github repository2 Articles

In m4u, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08996894; Issue ID: MSV-1636.

Google Android 12.0 Google Android 13.0 Google Android 14.0 Google Android 15.0

In m4u, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08996900; Issue ID: MSV-1635.

Google Android 12.0 Google Android 13.0 Google Android 14.0 Google Android 15.0

In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09037038; Issue ID: MSV-1714.

Google Android 12.0 Google Android 13.0 Google Android 14.0 Google Android 15.0

In onReceive of AppRestrictionsFragment.java, there is a possible escalation of privilege due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Google Android 12.0 Google Android 12.1 Google Android 13.0 Google Android 14.0 Google Android 15.0

In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for explo...

Google Android 12.0 Google Android 12.1 Google Android 13.0 Google Android 14.0 Google Android 15.0

In validate of WifiConfigurationUtil.java , there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Google Android 12.0 Google Android 12.1 Google Android 13.0 Google Android 14.0 Google Android 15.0

In visitUris of multiple files, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Google Android 12.0 Google Android 12.1 Google Android 13.0 Google Android 14.0 Google Android 15.0

In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents over USB without unlocking the device due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interactio...

Google Android 12.0 Google Android 12.1 Google Android 13.0 Google Android 14.0 Google Android 15.0

In validateAccountsInternal of AccountManagerService.java, there is a possible way to leak account credentials to a third party app due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not ne...

Google Android 12.0 Google Android 12.1 Google Android 13.0 Google Android 14.0 Google Android 15.0

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook