Google: >> Android >> 12l Security Vulnerabilities
Cryptomator for Android offers multi-platform transparent client-side encryption for files in the cloud. Prior to version 1.12.3, an integrity check vulnerability allows an attacker tamper with the vault configuration file leading to a man-in-the-middle vulnerability in Hub key loading mechanism. Before this fix, the client trusted endpoints from the vault config without host authenticity checks, which could allow token exfiltration by mixing a legitimate auth endpoint with a malicious API endpoint. Impacted are users unlocking Hub-backed vaults with affected client versions in environments where an attacker can alter the vault.cryptomator file. This issue has been patched in version 1.12.3.
CVSS Score
7.6
EPSS Score
0.0
Published
2026-03-20
A security vulnerability has been detected in Rareprob HD Video Player All Formats App 12.1.372 on Android. Impacted is an unknown function of the component com.rocks.music.videoplayer. The manipulation leads to path traversal. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score
5.3
EPSS Score
0.001
Published
2025-12-02
Use of Implicit Intent for Sensitive Communication in Smart View prior to Android 16 allows local attackers to access sensitive information.
CVSS Score
3.3
EPSS Score
0.0
Published
2025-08-06
Out-of-bounds write in libsavscmn prior to Android 15 allows local attackers to execute arbitrary code.
CVSS Score
8.4
EPSS Score
0.0
Published
2025-05-07
Out-of-bounds write in libsavscmn prior to Android 15 allows local attackers to cause memory corruption.
CVSS Score
4.0
EPSS Score
0.0
Published
2025-05-07
Android before 2024-10-05 on Google Pixel devices allows information disclosure in the modem component, A-299774545.
CVSS Score
7.5
EPSS Score
0.001
Published
2024-10-25
Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ABL component, A-331966488.
CVSS Score
7.5
EPSS Score
0.002
Published
2024-10-25
Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-331255656.
CVSS Score
7.5
EPSS Score
0.002
Published
2024-10-25
CVE-2024-29748
there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Known exploited
CVSS Score
7.8
EPSS Score
0.004
Published
2024-04-05
In collapse of canonicalize_md.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score
5.5
EPSS Score
0.0
Published
2023-10-30
Page 1