deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-26450
Published: 2025-09-04
Description: In onInputEvent of IInputMethodSessionWrapper.java, there is a possible way for an untrusted app to inject key and motion events to the default IME due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://android.googlesource.com/platform/frameworks/base/+/f48bf9a2e7c728d7010f8c9ad047fa76a869d3d4; https://source.android.com/security/bulletin/2025-06-01
CVE: CVE-2025-26452
Published: 2025-09-04
Description: In loadDrawableForCookie of ResourcesImpl.java, there is a possible way to access task snapshots of other apps due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-441
References: https://android.googlesource.com/platform/frameworks/base/+/37a272435a238d8ca312b3ffeacac7dc348905e7; https://source.android.com/security/bulletin/2025-06-01
CVE: CVE-2025-26453
Published: 2025-09-04
Description: In isContentUriForOtherUser of BluetoothOppSendFileInfo.java, there is a possible cross user data leak due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://android.googlesource.com/platform/packages/modules/Bluetooth/+/495d32429fd801c6cd7fe5e568b9c805f47fb4ed; https://source.android.com/security/bulletin/2025-06-01
CVE: CVE-2025-26455
Published: 2025-09-04
Description: In multiple functions of NdkMediaCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://android.googlesource.com/platform/frameworks/av/+/e28ca0c3d70c67cda2a09dc2d663a3395b13c779; https://source.android.com/security/bulletin/2025-06-01
CVE: CVE-2025-26456
Published: 2025-09-04
Description: In multiple functions of DexUseManagerLocal.java, there is a possible way to crash system server due to a logic error in the code. This could lead to local permanent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-703
References: https://android.googlesource.com/platform/art/+/06a99377e368b688dbeb4e6bb11b6e1dfca8bb70; https://android.googlesource.com/platform/art/+/1aedae6e1049aa794b3554183bf07634c8fa291b; https://android.googlesource.com/platform/art/+/3c76194d116bad95e11bda345feaedda6c02c8b4
CVE: CVE-2025-26458
Published: 2025-09-04
Description: In multiple functions of LocationProviderManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-693
References: https://android.googlesource.com/platform/frameworks/base/+/9d2acb2d3c5dae5ace5add3e1d0c0e3ab5cfb900; https://source.android.com/security/bulletin/2025-06-01
CVE: CVE-2025-26462
Published: 2025-09-04
Description: In AccessibilityServiceConnection.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://android.googlesource.com/platform/frameworks/base/+/7076b2b2bd3cceea45f5d3dfa5ee279da819c9e1; https://source.android.com/security/bulletin/2025-06-01
CVE: CVE-2025-26463
Published: 2025-09-04
Description: In allowPackageAccess of multiple files, resource exhaustion is possible when repeatedly adding allowed packages. This could lead to a local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://android.googlesource.com/platform/frameworks/base/+/4b630be2e2b30ff3c57128c660bfef6514193d25; https://source.android.com/security/bulletin/2025-06-01
CVE: CVE-2025-32312
Published: 2025-09-04
Description: In createIntentsList of PackageParser.java , there is a possible way to bypass lazy bundle hardening, allowing modified data to be passed to the next process due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502
References: https://android.googlesource.com/platform/frameworks/base/+/577cdba1048ce04816c962264a11efd02f1f5b73; https://source.android.com/security/bulletin/2025-06-01
CVE: CVE-2024-49714
Published: 2025-09-04
Description: In avrc_vendor_msg of avrc_opt.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://android.googlesource.com/platform/packages/modules/Bluetooth/+/6b669f231d0faf4658bb3ba6ea7f77d4d4a5e1b1; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-0076
Published: 2025-09-04
Description: In multiple locations, there is a possible way to view icons belonging to another user due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 3.3 (LOW)
CWE: CWE-862
References: https://android.googlesource.com/platform/frameworks/base/+/d6ad7f34eaf5f0452b93a650265ee432288c0978; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-0089
Published: 2025-09-04
Description: In multiple locations, there is a possible way to hijack the Launcher app due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-693
References: https://android.googlesource.com/platform/frameworks/base/+/ed39b7c3895c8c63a1ccdbcc9783a2d3ca15127f; https://android.googlesource.com/platform/frameworks/base/+/f27918b39cffb404ed429829f93b20344310da34; https://android.googlesource.com/platform/frameworks/base/+/fd66d834553ffab769ef21017bff95bdfd138493
CVE: CVE-2025-22441
Published: 2025-09-04
Description: In getContextForResourcesEnsuringCorrectCachedApkPaths of RemoteViews.java, there is a possible way to load arbitrary java code in a privileged context due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 7.3 (HIGH)
CWE: CWE-441
References: https://source.android.com/security/bulletin/2025-08-01
CVE: CVE-2025-26454
Published: 2025-09-04
Description: In validateUriSchemeAndPermission of DisclaimersParserImpl.java , there is a possible way to access data from another user due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-441
References: https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/03cadb65c0b6a91a480041aa9129e9dbf995279b; https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/d33d045407c5bd[PII_REDACTED]d9ef5c9fc3f590e5; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-26464
Published: 2025-09-04
Description: In executeAppFunction of AppSearchManagerService.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-693
References: https://android.googlesource.com/platform/packages/modules/AppSearch/+/e272ad00529243f766c6ebd4e976549bd4fff4fb; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-32321
Published: 2025-09-04
Description: In isSafeIntent of AccountTypePreferenceLoader.java, there is a possible way to bypass an intent type check due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-441
References: https://android.googlesource.com/platform/packages/apps/Settings/+/bb6e84fd04fcc[PII_REDACTED]982f8c667b0cd8c5e; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-32323
Published: 2025-09-04
Description: In getCallingAppName of Shared.java, there is a possible way to trick users into granting file access via deceptive text in a permission popup due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/f0336ada165fdda955eaf6245b501779f36f0bd3; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-32324
Published: 2025-09-04
Description: In onCommand of ActivityManagerShellCommand.java, there is a possible arbitrary activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-441
References: https://android.googlesource.com/platform/frameworks/base/+/0fb2788dac393086b7e53fbe05414368ae395d9b; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-32325
Published: 2025-09-04
Description: In appendFrom of Parcel.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://android.googlesource.com/platform/frameworks/native/+/96f0dd71bc07051e4faae44abf7121a3f7b5b2aa; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-32326
Published: 2025-09-04
Description: In multiple functions of AppRestrictionsFragment.java, there is a possible way to bypass intent security check  due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-441
References: https://android.googlesource.com/platform/packages/apps/Settings/+/e8a17485771e54124abc08e8fb6c987bf83726a2; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-32327
Published: 2025-09-04
Description: In multiple functions of PickerDbFacade.java, there is a possible unauthorized data access due to SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-89
References: https://android.googlesource.com/platform/packages/providers/MediaProvider/+/3f48b77e7cb9c15a76d42cfe4b2c771611625f9c; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-32330
Published: 2025-09-04
Description: In generateRandomPassword of LocalBluetoothLeBroadcast.java, there is a possible way to intercept the Auracast audio stream due to an insecure default value. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-1188
References: https://android.googlesource.com/platform/frameworks/base/+/5b10581d2a91ddb256a1e37efcbcdb015091f5a1; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-32331
Published: 2025-09-04
Description: In showDismissibleKeyguard of KeyguardService.java, there is a possible way to bypass app pinning due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-693
References: https://android.googlesource.com/platform/frameworks/base/+/7f5cc94e82fca9b758c46c97d6be9cc38ef07208; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-32332
Published: 2025-09-04
Description: In multiple locations, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-32333
Published: 2025-09-04
Description: In startSpaActivityForApp of SpaActivity.kt, there is a possible cross-user permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-863, CWE-863
References: https://android.googlesource.com/platform/packages/apps/Settings/+/591ea09a63e577a9ed666006e70430cc4f245078; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-32345
Published: 2025-09-04
Description: In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a secondary user to disable the primary user's deceptive app scanning setting due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://android.googlesource.com/platform/packages/apps/Settings/+/6c9a5944dd0458b90263da2e4a4ba618c69779dd; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-32346
Published: 2025-09-04
Description: In onActivityResult of VoicemailSettingsActivity.java, there is a possible work profile contact number leak due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-441
References: https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-32347
Published: 2025-09-04
Description: In onStart of BiometricEnrollIntroduction.java, there is a possible way to determine the device's location due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-926
References: https://android.googlesource.com/platform/packages/apps/Settings/+/25cfacbe5ac2423b8fe1375e0593ef69e98b8d09; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-32349
Published: 2025-09-04
Description: In multiple locations, there is a possible privilege escalation due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1021
References: https://android.googlesource.com/platform/frameworks/base/+/394acf2aa1dade06c9cb2b98d92d6e585de31012; https://android.googlesource.com/platform/frameworks/base/+/e4a93e6ffdaf0e51c2effd26a222a4e0b66ea5cb; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-32350
Published: 2025-09-04
Description: In maybeShowDialog of ControlsSettingsDialogManager.kt, there is a possible overlay of the ControlsSettingsDialog due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1021
References: https://android.googlesource.com/platform/frameworks/base/+/47424521c49b638334ed676223e[PII_REDACTED]da9; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-48522
Published: 2025-09-04
Description: In setDisplayName of AssociationRequest.java, there is a possible way for an app to retain CDM association due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-693
References: https://android.googlesource.com/platform/frameworks/base/+/bdad29b85a6ca7c55a697e4e66356b744ef6cdb9; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-48523
Published: 2025-09-04
Description: In onCreate of SelectAccountActivity.java, there is a possible way to add contacts without permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://android.googlesource.com/platform/packages/apps/Contacts/+/7c8dbcffbc9382fcdb788919106c3b0525db83ab; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-48524
Published: 2025-09-04
Description: In isSystem of WifiPermissionsUtil.java, there is a possible permission bypass due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://android.googlesource.com/platform/packages/modules/Wifi/+/298745e0cb23cbef631aff1977b284155384bbf0; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-48526
Published: 2025-09-04
Description: In createMultiProfilePagerAdapter of ChooserActivity.java , there is a possible way for an app to launch the ChooserActivity in another profile due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-266
References: https://android.googlesource.com/platform/packages/modules/IntentResolver/+/923a5673ac9d4b366097a8912a04e40e85111ed4; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-48527
Published: 2025-09-04
Description: In multiple locations, there is a possible way to leak hidden work profile notifications due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-200
References: https://android.googlesource.com/platform/packages/apps/Settings/+/d8b1de7a18fc6a469c2d191ff9a0771f5d104fe4; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-48528
Published: 2025-09-04
Description: In multiple locations, there is a possible way to overlay biometrics due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-266
References: https://android.googlesource.com/platform/frameworks/base/+/ca71b9a63c40ef3fa741c76a[PII_REDACTED]fbb69a; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-48529
Published: 2025-09-04
Description: In setRingtoneUri of VoicemailNotificationSettingsUtil.java , there is a possible cross user data leak due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-441
References: https://android.googlesource.com/platform/frameworks/opt/telephony/+/e5cdca27526f5c2c358880538c7a15d8d5d5dd6d; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-48530
Published: 2025-09-04
Description: In multiple locations, there is a possible condition that results in OOB accesses due to an incorrect bounds check. This could lead to remote code execution in combination with other bugs, with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2025-08-01
CVE: CVE-2025-48531
Published: 2025-09-04
Description: In getCallingPackageName of CredentialStorage, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-693
References: https://android.googlesource.com/platform/packages/apps/Settings/+/cc1b1b5e493affcb1ef9c3543b10c89141f245c4; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-48532
Published: 2025-09-04
Description: In markMediaAsFavorite of MediaProvider.java, there is a possible way to bypass the WRITE_EXTERNAL_STORAGE permission due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 7.3 (HIGH)
CWE: CWE-441
References: https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-48533
Published: 2025-09-04
Description: In multiple locations, there is a possible way to use apps linked from a context menu of a lockscreen app due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://source.android.com/security/bulletin/2025-08-01
CVE: CVE-2025-48534
Published: 2025-09-04
Description: In getDefaultCBRPackageName of CellBroadcastHandler.java, there is a possible escalation of privilege due to a logic error in the code. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-693
References: https://android.googlesource.com/platform/packages/modules/CellBroadcastService/+/584cec4f17eab96ac44bce4e1bce8d6a2c59cd75; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-48535
Published: 2025-09-04
Description: In assertSafeToStartCustomActivity of AppRestrictionsFragment.java , there is a possible way to exploit a parcel mismatch resulting in a launch anywhere vulnerability due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502
References: https://android.googlesource.com/platform/packages/apps/Settings/+/1e4423730f8776bd09df[PII_REDACTED]ae735d2176; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-48537
Published: 2025-09-04
Description: In multiple locations, there is a possible way to persistently DoS the device due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20
References: https://android.googlesource.com/platform/frameworks/base/+/63aab59ce13856799a7c24a70b35625d32ae5357; https://source.android.com/security/bulletin/2025-09-01