漏洞描述 Android是美国谷歌(Google)公司和开放手持设备联盟(简称OHA)共同开发的一套以Linux为基础的开源操作系统。 Google Android中的Media framework组件存在远程代码执行漏洞。远程攻击者可利用该漏洞执行代码。
相关漏洞推荐 POC CVE-2025-11307: WP Google Maps < 9.0.48 - Cross-Site Scripting POC wp-easy-google-fonts-log-disclosure: WordPress Easy Google Fonts - Error Log Disclosure POC CVE-2020-11732: Media Library Assistant < 2.82 - Unauthenticated Limited Local File Inclusion WordPress Google for WooCommerce /wp-content/plugins/google-listings-and-ads/vendor/googleads/google-ads-php/scripts/print_php_information.php 信息泄露漏洞(CVE-2024-10486) (CVE-2025-0087) Android UninstallerActivity onCreate 方法权限漏洞 权限管理错误 金和OA C6 /c6/jhsoft.mobileapp/AndroidSevices/HomeService.asmx/GetHomeInfo SQL 注入漏洞 POC CVE-2014-4535: Import Legacy Media <= 0.1 - Cross-Site Scripting POC CVE-2015-2755: WordPress AB Google Map Travel <=3.4 - Stored Cross-Site Scripting POC CVE-2016-15042: WordPress Frontend File Manager < 4.0 & N-Media Post Frontend < 1.1 - Arbitrary File Upload POC CVE-2017-18556: Google Analytics by BestWebSoft < 1.7.1 - Cross-Site Scripting POC CVE-2017-18557: Google Maps by BestWebSoft < 1.3.6 - Cross-Site Scripting POC CVE-2018-12613: PhpMyAdmin <4.8.2 - Local File Inclusion POC CVE-2018-3810: Oturia WordPress Smart Google Code Inserter <3.5 - Authentication Bypass