Advisories · Technology

Google Android.

Every CVE that names Google Android among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-48554 CVE record

CVSS 6.1 Medium

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 4 Sept 2025
CVE-2025-48553 CVE record

CVSS 7.8 High

In handlePackagesChanged of DevicePolicyManagerService.java, there is a possible DoS of a device admin due to a logic error in the code.
- Google Android
Not analysed yet 4 Sept 2025
CVE-2025-48552 CVE record

CVSS 7.8 High

In saveGlobalProxyLocked of DevicePolicyManagerService.java, there is a possible way to desync from persistence due to a logic error in the code.
- Google Android
Not analysed yet 4 Sept 2025
CVE-2025-48551 CVE record

CVSS 5.0 Medium

Google Android: In multiple locations, there is a possible leak of an image across the Android User…
- Google Android
- CWE-441
Not analysed yet 4 Sept 2025
CVE-2025-48550 CVE record

CVSS 5.5 Medium

Path traversal in Google Android
- Google Android
- Path traversal
Not analysed yet 4 Sept 2025
CVE-2025-48549 CVE record

CVSS 7.8 High

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 4 Sept 2025
CVE-2025-48548 CVE record

CVSS 7.3 High

Race condition in Google Android
- Google Android
- Race condition
Not analysed yet 4 Sept 2025
CVE-2025-48547 CVE record

CVSS 7.3 High

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 4 Sept 2025
CVE-2025-48546 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 4 Sept 2025
CVE-2025-48545 CVE record

CVSS 7.1 High

In isSystemUid of AccountManagerService.java, there is a possible way for an app to access privileged APIs due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 4 Sept 2025
CVE-2025-48544 CVE record

CVSS 7.8 High

SQL injection in Google Android
- Google Android
- SQL injection
Not analysed yet 4 Sept 2025
CVE-2025-48543 CVE record

CVSS 8.8 HighCritical · KEVKEV

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 4 Sept 2025
CVE-2025-48542 CVE record

CVSS 5.5 Medium

Uncontrolled resource consumption in Google Android
- Google Android
- Denial of service
Not analysed yet 4 Sept 2025
CVE-2025-48541 CVE record

CVSS 7.8 High

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 4 Sept 2025
CVE-2025-48540 CVE record

CVSS 7.8 High

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 4 Sept 2025
CVE-2025-48539 CVE record

CVSS 8.0 High

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 4 Sept 2025
CVE-2025-48538 CVE record

CVSS 5.5 Medium

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 4 Sept 2025
CVE-2025-48537 CVE record

CVSS 7.1 High

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 4 Sept 2025
CVE-2025-48535 CVE record

CVSS 7.8 High

Deserialization of untrusted data in Google Android
- Google Android
- Insecure deserialization
Not analysed yet 4 Sept 2025
CVE-2025-48534 CVE record

CVSS 8.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 4 Sept 2025
CVE-2025-48532 CVE record

CVSS 7.3 High

In markMediaAsFavorite of MediaProvider.java, there is a possible way to bypass the WRITE_EXTERNAL_STORAGE permission due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 4 Sept 2025
CVE-2025-48531 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 4 Sept 2025
CVE-2025-48529 CVE record

CVSS 5.5 Medium

In setRingtoneUri of VoicemailNotificationSettingsUtil.java , there is a possible cross user data leak due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 4 Sept 2025
CVE-2025-48528 CVE record

CVSS 4.0 Medium

In multiple locations, there is a possible way to overlay biometrics due to a tapjacking/overlay attack.
- Google Android
- Privilege escalation
Not analysed yet 4 Sept 2025
CVE-2025-48527 CVE record

CVSS 6.2 Medium

Information disclosure in Google Android
- Google Android
- Information disclosure
Not analysed yet 4 Sept 2025
CVE-2025-48526 CVE record

CVSS 4.0 Medium

In createMultiProfilePagerAdapter of ChooserActivity.java , there is a possible way for an app to launch the ChooserActivity in another profile due to improper input validation.
- Google Android
- Privilege escalation
Not analysed yet 4 Sept 2025
CVE-2025-48524 CVE record

CVSS 5.5 Medium

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 4 Sept 2025
CVE-2025-48523 CVE record

CVSS 7.8 High

Incorrect authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 4 Sept 2025
CVE-2025-48522 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 4 Sept 2025
CVE-2025-32350 CVE record

CVSS 7.8 High

Clickjacking in Google Android
- Google Android
- CWE-1021
Not analysed yet 4 Sept 2025
CVE-2025-32349 CVE record

CVSS 7.8 High

Clickjacking in Google Android
- Google Android
- CWE-1021
Not analysed yet 4 Sept 2025
CVE-2025-32347 CVE record

CVSS 7.8 High

Exported Android component in Google Android
- Google Android
- CWE-926
Not analysed yet 4 Sept 2025
CVE-2025-32346 CVE record

CVSS 7.8 High

In onActivityResult of VoicemailSettingsActivity.java, there is a possible work profile contact number leak due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 4 Sept 2025
CVE-2025-32345 CVE record

CVSS 7.8 High

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 4 Sept 2025
CVE-2025-32333 CVE record

CVSS 7.8 High

Incorrect authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 4 Sept 2025
CVE-2025-32332 CVE record

CVSS 7.8 High

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 4 Sept 2025
CVE-2025-32331 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 4 Sept 2025
CVE-2025-32330 CVE record

CVSS 5.7 Medium

In generateRandomPassword of LocalBluetoothLeBroadcast.java, there is a possible way to intercept the Auracast audio stream due to an insecure default value.
- Google Android
- CWE-1188
Not analysed yet 4 Sept 2025
CVE-2025-32327 CVE record

CVSS 7.8 High

SQL injection in Google Android
- Google Android
- SQL injection
Not analysed yet 4 Sept 2025
CVE-2025-32326 CVE record

CVSS 7.8 High

In multiple functions of AppRestrictionsFragment.java, there is a possible way to bypass intent security check due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 4 Sept 2025
CVE-2025-32325 CVE record

CVSS 7.8 High

Heap-based buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 4 Sept 2025
CVE-2025-32324 CVE record

CVSS 7.8 High

In onCommand of ActivityManagerShellCommand.java, there is a possible arbitrary activity launch due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 4 Sept 2025
CVE-2025-32323 CVE record

CVSS 7.8 High

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 4 Sept 2025
CVE-2025-32321 CVE record

CVSS 7.8 High

In isSafeIntent of AccountTypePreferenceLoader.java, there is a possible way to bypass an intent type check due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 4 Sept 2025
CVE-2025-26464 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 4 Sept 2025
CVE-2025-26454 CVE record

CVSS 7.8 High

In validateUriSchemeAndPermission of DisclaimersParserImpl.java , there is a possible way to access data from another user due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 4 Sept 2025
CVE-2025-0089 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 4 Sept 2025
CVE-2025-0076 CVE record

CVSS 3.3 Low

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 4 Sept 2025
CVE-2024-49714 CVE record

CVSS 7.8 High

Heap-based buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 4 Sept 2025
CVE-2025-48533 CVE record

CVSS 7.0 High

Race condition in Google Android
- Google Android
- Race condition
Not analysed yet 4 Sept 2025
CVE-2025-48530 CVE record

CVSS 8.1 High

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 4 Sept 2025
CVE-2025-22441 CVE record

CVSS 7.3 High

In getContextForResourcesEnsuringCorrectCachedApkPaths of RemoteViews.java, there is a possible way to load arbitrary java code in a privileged context due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 4 Sept 2025
CVE-2025-32312 CVE record

CVSS 7.8 High

Deserialization of untrusted data in Google Android
- Google Android
- Insecure deserialization
Not analysed yet 4 Sept 2025
CVE-2025-26463 CVE record

CVSS 5.5 Medium

Uncontrolled resource consumption in Google Android
- Google Android
- Denial of service
Not analysed yet 4 Sept 2025
CVE-2025-26462 CVE record

CVSS 7.8 High

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 4 Sept 2025
CVE-2025-26458 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 4 Sept 2025
CVE-2025-26456 CVE record

CVSS 5.5 Medium

In multiple functions of DexUseManagerLocal.java, there is a possible way to crash system server due to a logic error in the code.
- Google Android
- CWE-703
Not analysed yet 4 Sept 2025
CVE-2025-26455 CVE record

CVSS 7.8 High

Heap-based buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 4 Sept 2025
CVE-2025-26453 CVE record

CVSS 5.5 Medium

Information disclosure in Google Android
- Google Android
- Information disclosure
Not analysed yet 4 Sept 2025
CVE-2025-26452 CVE record

CVSS 7.8 High

In loadDrawableForCookie of ResourcesImpl.java, there is a possible way to access task snapshots of other apps due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 4 Sept 2025