NLShown in its original language — a full translation is planned for a future version.
Kwetsbaarheden verholpen in Google Android en Samsung Mobile
view advisory published 2025-03-04
Google heeft meerdere kwetsbaarheden verholpen in Android en Samsung Mobile, waaronder twee zero-day kwetsbaarheden die actief werden uitgebuit in gerichte aanvallen.
01
describes (41)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-49728US | — | — | ||
In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a confused deputy. This could lead to local information disclosure with… | ||||
| CVE-2025-26417US | — | Exploit | ||
In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening files in shared storage due to a confused deputy. This could le… | ||||
| CVE-2025-22413US | — | — | ||
In multiple functions of hyp-main.c, there is a possible privilege escalation due to a logic error in the code. This could lead to local information disclosure with no additional e… | ||||
| CVE-2025-22412US | — | — | ||
In multiple functions of sdp_server.cc, there is a possible use after free due to a logic error in the code. This could lead to remote (proximal/adjacent) code execution with no ad… | ||||
| CVE-2025-22411US | — | — | ||
In process_service_attr_rsp of sdp_discovery.cc, there is a possible use after free due to a logic error in the code. This could lead to remote (proximal/adjacent) code execution w… | ||||
| CVE-2025-22410US | — | — | ||
In multiple locations, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no additional execution priv… | ||||
| CVE-2025-22409US | — | — | ||
In rfc_send_buf_uih of rfc_ts_frames.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no additio… | ||||
| CVE-2025-22408US | — | — | ||
In rfc_check_send_cmd of rfc_utils.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code execution with no additional execut… | ||||
| CVE-2025-22407US | — | — | ||
In hidd_check_config_done of hidd_conn.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to local information disclosure with no additi… | ||||
| CVE-2025-22406US | — | — | ||
In bnepu_check_send_packet of bnep_utils.cc, there is a possible way to achieve code execution due to a use after free. This could lead to local escalation of privilege with no add… | ||||
| CVE-2025-22405US | — | — | ||
In multiple locations, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no additional execution priv… | ||||
| CVE-2025-22404US | — | — | ||
In avct_lcb_msg_ind of avct_lcb_act.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no addition… | ||||
| CVE-2025-22403US | — | — | ||
In sdp_snd_service_search_req of sdp_discovery.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code execution with no addit… | ||||
| CVE-2025-0093US | — | — | ||
In handleBondStateChanged of AdapterService.java, there is a possible unapproved data access due to a missing permission check. This could lead to remote information disclosure wit… | ||||
| CVE-2025-0092US | —OT elevated | — | ||
In handleBondStateChanged of AdapterService.java, there is a possible permission bypass due to misleading or insufficient UI. This could lead to remote (proximal/adjacent) informat… | ||||
| CVE-2025-0084US | — | — | ||
In multiple locations, there is a possible out of bounds write due to a use after free. This could lead to remote code execution over Bluetooth, if HFP support is enabled, with no… | ||||
| CVE-2025-0082US | — | — | ||
In multiple functions of StatusHint.java and TelecomServiceImpl.java, there is a possible way to reveal images across users due to a confused deputy. This could lead to local infor… | ||||
| CVE-2025-0081US | — | — | ||
In dng_lossless_decoder::HuffDecode of dng_lossless_jpeg.cpp, there is a possible way to cause a crash due to uninitialized data. This could lead to remote denial of service with n… | ||||
| CVE-2025-0079US | — | — | ||
In multiple locations, there is a possible way that avdtp and avctp channels could be unencrypted due to a logic error in the code. This could lead to local escalation of privilege… | ||||
| CVE-2025-0075US | — | — | ||
In process_service_search_attr_req of sdp_server.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code execution with no add… | ||||
showing 20 of 41
02
references
External citations — patches, advisories, analysis.
- Reference - ncscclearexternal
- Reference - ncscclearexternal
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan