DeutschShown in its original language — a full translation is planned for a future version.
Android Patchday Juni 2025: Mehrere Schwachstellen
view advisory published 2025-06-02
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Rechte zu erweitern, beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Denial-of-Service auszulösen und weitere nicht spezifizierte Auswirkungen zu erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.
01
describes (34)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-32312US | — | — | ||
In createIntentsList of PackageParser.java , there is a possible way to bypass lazy bundle hardening, allowing modified data to be passed to the next process due to unsafe deserial… | ||||
| CVE-2025-26463US | — | — | ||
In allowPackageAccess of multiple files, resource exhaustion is possible when repeatedly adding allowed packages. This could lead to a local persistent denial of service with no ad… | ||||
| CVE-2025-26462US | high7.8 | — | ||
In AccessibilityServiceConnection.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no ad… | ||||
| CVE-2025-26458US | high7.8 | — | ||
In multiple functions of LocationProviderManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privi… | ||||
| CVE-2025-26456US | — | — | ||
In multiple functions of DexUseManagerLocal.java, there is a possible way to crash system server due to a logic error in the code. This could lead to local permanent denial of serv… | ||||
| CVE-2025-26455US | — | — | ||
In multiple functions of NdkMediaCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no addition… | ||||
| CVE-2025-26453US | — | — | ||
In isContentUriForOtherUser of BluetoothOppSendFileInfo.java, there is a possible cross user data leak due to a logic error in the code. This could lead to local information disclo… | ||||
| CVE-2025-26452US | — | — | ||
In loadDrawableForCookie of ResourcesImpl.java, there is a possible way to access task snapshots of other apps due to a confused deputy. This could lead to local escalation of priv… | ||||
| CVE-2025-26450US | —OT elevated | — | ||
In onInputEvent of IInputMethodSessionWrapper.java, there is a possible way for an untrusted app to inject key and motion events to the default IME due to a missing permission chec… | ||||
| CVE-2025-26449US | — | — | ||
In multiple locations, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privilege… | ||||
| CVE-2025-26448US | — | — | ||
In writeToParcel of CursorWindow.cpp, there is a possible out of bounds read due to uninitialized data. This could lead to local information disclosure with no additional execution… | ||||
| CVE-2025-26445US | —OT elevated | — | ||
In offerNetwork of ConnectivityService.java, there is a possible leak of sensitive data due to a missing permission check. This could lead to local information disclosure with no a… | ||||
| CVE-2025-26443US | — | Exploit | ||
In parseHtml of HtmlToSpannedParser.java, there is a possible way to install apps without allowing installation from unknown sources due to a logic error in the code. This could le… | ||||
| CVE-2025-26441US | — | — | ||
In add_attr of sdp_discovery.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution… | ||||
| CVE-2025-26437US | —OT elevated | — | ||
In CredentialManagerServiceStub of CredentialManagerService.java, there is a possible way to retrieve candidate credentials due to a missing permission check. This could lead to lo… | ||||
| CVE-2025-26432US | medium5.5 | — | ||
In multiple locations, there is a possible way to persistently DoS the device due to a missing length check. This could lead to local denial of service with no additional execution… | ||||
| CVE-2025-27029US | — | — | ||
Transient DOS while processing the tone measurement response buffer when the response buffer is out of range. | ||||
| CVE-2025-21486US | — | — | ||
Memory corruption during dynamic process creation call when client is only passing address and length of shell binary. | ||||
| CVE-2025-21485US | — | — | ||
Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC. | ||||
| CVE-2024-53026US | — | — | ||
Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call. | ||||
showing 20 of 34
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan