Vulnerabilities
Tracked app vulnerabilities
6,476 CVEs affect a tracked app or OS (all severities, Android). 48 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 6,476
- Actively exploited
- 48
- Publication window
- 2015-07-23 → 2026-11-04
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2025-20726
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2025-20725
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2025-11133
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2025-11132
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2025-11131
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-35970
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2023-40130
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2025-65018
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 … |
|
CVE-2025-64720
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 … |
|
CVE-2025-64505
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.… |
|
CVE-2025-48593
HIGH 8.0
In bta_hf_client_cb_init of bta_hf_client_main.cc, there is a possible remote code execution due to a use after free. This could lead to remote code execution … |
|
CVE-2025-58407
HIGH 7.4
Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or w… |
|
CVE-2025-58410
HIGH 7.5
Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only. T… |
|
CVE-2025-60724
CRITICAL · vendor
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. |
|
CVE-2025-60722
MEDIUM 6.5
Improper limitation of a pathname to a restricted directory ('path traversal') in OneDrive for Android allows an authorized attacker to elevate privileges over… |
|
CVE-2025-47370
MEDIUM 6.5
Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan. |
|
CVE-2025-27074
HIGH 8.8
Memory corruption while processing a GP command response. |
|
CVE-2025-27070
HIGH 7.8
Memory corruption while performing encryption and decryption commands. |
|
CVE-2025-54957
An issue was discovered in Dolby UDC 4.5 through 4.13. A crash of the DD+ decoder process can occur when a malformed DD+ bitstream is processed. When Evolution… |
|
CVE-2025-31718
HIGH 7.5
In modem, there is a possible system crash due to improper input validation. This could lead to remote escalation of privilege with no additional execution pri… |
|
CVE-2025-31717
HIGH 7.5
In modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privilege… |
|
CVE-2025-47354
HIGH 7.8
Memory corruption while allocating buffers in DSP service. |
|
CVE-2025-47351
HIGH 7.8
Memory corruption while processing user buffers. |
|
CVE-2025-27054
HIGH 7.8
Memory corruption while processing a malformed license file during reboot. |
|
CVE-2025-27053
HIGH 7.8
Memory corruption during PlayReady APP usecase while processing TA commands. |
|
CVE-2025-39946
CRITICAL 9.8
In the Linux kernel, the following vulnerability has been resolved: tls: make sure to abort the stream if headers are bogus Normally we wait for the socket t… |
|
CVE-2025-21488
HIGH 8.2
Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set. |
|
CVE-2025-21487
HIGH 8.2
Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length. |
|
CVE-2025-21484
HIGH 8.2
Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet. |
|
CVE-2025-21482
HIGH 7.1
Cryptographic issue while performing RSA PKCS padding decoding. |
|
CVE-2025-47967
MEDIUM 4.7
Insufficient ui warning of dangerous operations in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network. |
|
CVE-2025-53799
CRITICAL · vendor
Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally. |
|
CVE-2025-3212
MEDIUM 5.3
Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows… |
|
CVE-2025-39682
In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process … |
|
CVE-2025-48581
HIGH 8.4
In VerifyNoOverlapInSessions of apexd.cpp, there is a possible way to block security updates due to a logic error in the code. This could lead to local escalat… |
|
CVE-2025-48560
MEDIUM 5.5
In AndroidManifest.xml, there is a possible way for an app to monitor motion events due to a confused deputy. This could lead to local information disclosure w… |
|
CVE-2025-48559
MEDIUM 5.5
In multiple functions of AppOpsService.java, there is a possible add a large amount of app ops due to improper input validation. This could lead to local denia… |
|
CVE-2025-48549
HIGH 7.8
In multiple locations, there is a possible way to record audio via a background app due to a missing permission check. This could lead to local escalation of p… |
|
CVE-2025-48544
HIGH 7.8
In multiple locations, there is a possible way to read files belonging to other apps due to SQL injection. This could lead to local escalation of privilege wit… |
|
CVE-2025-48541
HIGH 7.8
In onCreate of FaceSettings.java, there is a possible way to remove biometric unlock across user profiles due to improper input validation. This could lead to … |
|
CVE-2025-48533
HIGH 7.0
In multiple locations, there is a possible way to use apps linked from a context menu of a lockscreen app due to a race condition. This could lead to local esc… |
|
CVE-2025-48529
MEDIUM 5.5
In setRingtoneUri of VoicemailNotificationSettingsUtil.java , there is a possible cross user data leak due to a confused deputy. This could lead to local infor… |
|
CVE-2025-32347
HIGH 7.8
In onStart of BiometricEnrollIntroduction.java, there is a possible way to determine the device's location due to an unsafe PendingIntent. This could lead to l… |
|
CVE-2025-32331
HIGH 7.8
In showDismissibleKeyguard of KeyguardService.java, there is a possible way to bypass app pinning due to a logic error in the code. This could lead to local es… |
|
CVE-2025-26444
HIGH 7.8
In onHandleForceStop of VoiceInteractionManagerService.java, there is a bug that could cause the system to incorrectly revert to the default assistant applicat… |
|
CVE-2025-26423
MEDIUM 6.2
In validateIpConfiguration of WifiConfigurationUtil.java, there is a possible way to trigger a permanent DoS due to a missing bounds check. This could lead to … |
|
CVE-2025-56139
MEDIUM 5.3
LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata (image, title, description) when a user replaces the original … |
|
CVE-2025-22438
HIGH 7.8
In afterKeyEventLockedInterruptable of InputDispatcher.cpp, there is a possible use after free. This could lead to local escalation of privilege with no additi… |
|
CVE-2025-22437
HIGH 7.8
In setMediaButtonReceiver of multiple files, there is a possible way to launch arbitrary activities from background due to a logic error in the code. This coul… |
|
CVE-2025-8109
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.