Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

TI-2025-30913 CVE-2025-48636 · GHSA-fvxj-j7ff-jw68

Path traversal in Google Android

Priority LOW 37

In openFile of BugreportContentProvider.java, there is a possible way to read and write unauthorized files due to a path traversal error.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00096 Published 2026-03-02 No fix listed CWE-22
Priority LOW 39

In broadcastIntentLockedTraced of BroadcastController.java, there is a possible way to launch arbitrary activities from the background on the paired companion phone due to a logic error in the code.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00132 Published 2026-03-02 No fix listed CWE-693