DeutschShown in its original language — a full translation is planned for a future version.
Android Patchday März 2025: Mehrere Schwachstellen
view advisory published 2025-03-03
Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu erzeugen, beliebigen Code auszuführen oder vertrauliche Informationen preiszugeben.
01
describes (43)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-0087US | — | Exploit | ||
In onCreate of UninstallerActivity.java, there is a possible way to uninstall a different user's app due to a missing permission check. This could lead to local escalation of privi… | ||||
| CVE-2024-49728US | — | — | ||
In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a confused deputy. This could lead to local information disclosure with… | ||||
| CVE-2025-26417US | — | Exploit | ||
In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening files in shared storage due to a confused deputy. This could le… | ||||
| CVE-2025-22413US | — | — | ||
In multiple functions of hyp-main.c, there is a possible privilege escalation due to a logic error in the code. This could lead to local information disclosure with no additional e… | ||||
| CVE-2025-22412US | — | — | ||
In multiple functions of sdp_server.cc, there is a possible use after free due to a logic error in the code. This could lead to remote (proximal/adjacent) code execution with no ad… | ||||
| CVE-2025-22411US | — | — | ||
In process_service_attr_rsp of sdp_discovery.cc, there is a possible use after free due to a logic error in the code. This could lead to remote (proximal/adjacent) code execution w… | ||||
| CVE-2025-22410US | — | — | ||
In multiple locations, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no additional execution priv… | ||||
| CVE-2025-22409US | — | — | ||
In rfc_send_buf_uih of rfc_ts_frames.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no additio… | ||||
| CVE-2025-22408US | — | — | ||
In rfc_check_send_cmd of rfc_utils.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code execution with no additional execut… | ||||
| CVE-2025-22407US | — | — | ||
In hidd_check_config_done of hidd_conn.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to local information disclosure with no additi… | ||||
| CVE-2025-22406US | — | — | ||
In bnepu_check_send_packet of bnep_utils.cc, there is a possible way to achieve code execution due to a use after free. This could lead to local escalation of privilege with no add… | ||||
| CVE-2025-22405US | — | — | ||
In multiple locations, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no additional execution priv… | ||||
| CVE-2025-22404US | — | — | ||
In avct_lcb_msg_ind of avct_lcb_act.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no addition… | ||||
| CVE-2025-22403US | — | — | ||
In sdp_snd_service_search_req of sdp_discovery.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code execution with no addit… | ||||
| CVE-2025-0093US | — | — | ||
In handleBondStateChanged of AdapterService.java, there is a possible unapproved data access due to a missing permission check. This could lead to remote information disclosure wit… | ||||
| CVE-2025-0092US | —OT elevated | — | ||
In handleBondStateChanged of AdapterService.java, there is a possible permission bypass due to misleading or insufficient UI. This could lead to remote (proximal/adjacent) informat… | ||||
| CVE-2025-0086US | —OT elevated | — | ||
In onResult of AccountManagerService.java, there is a possible way to overwrite auth token due to a missing permission check. This could lead to local information disclosure with n… | ||||
| CVE-2025-0084US | — | — | ||
In multiple locations, there is a possible out of bounds write due to a use after free. This could lead to remote code execution over Bluetooth, if HFP support is enabled, with no… | ||||
| CVE-2025-0083US | — | — | ||
In multiple locations, there is a possible way to access content across user profiles due to URI double encoding. This could lead to local information disclosure with no additional… | ||||
| CVE-2025-0082US | — | — | ||
In multiple functions of StatusHint.java and TelecomServiceImpl.java, there is a possible way to reveal images across users due to a confused deputy. This could lead to local infor… | ||||
showing 20 of 43
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan