CVE-2024-49728 - How A Bluetooth Bug In Android Leaks Your Private Media Across Users
In June 2024, Google disclosed CVE-2024-49728, a critical vulnerability affecting Android’s Bluetooth file sharing (OBEX) functionality. The bug allows apps on a “non-owner” profile
CVE-2024-49722 - How a Confused Deputy in `EditUserPhotoController.java` Can Leak Avatars Across Android Users
In June 2024, a significant Android security vulnerability was identified and published as CVE-2024-49722. This local information disclosure flaw occurs when one Android user can
CVE-2024-49720 - How a Logic Error in Permissions.java Allows Local Privilege Escalation on Android
Security vulnerabilities can hide in plain sight, often brought on by simple logic errors in code. CVE-2024-49720 is a recent example that affects Android devices.
CVE-2024-40653 - How a Service Logic Bug in Android Could Let Apps Keep Permissions Forever
In June 2024, a new Android vulnerability was publicly disclosed: CVE-2024-40653. This bug centers on a logic error in the ConnectionServiceWrapper.java file, part of
CVE-2025-55177 - How WhatsApp’s Device Sync Flaw Exposed iOS and Mac Users to Remote Attacks
In June 2025, security researchers and WhatsApp themselves revealed a significant flaw affecting WhatsApp for iOS, WhatsApp Business for iOS, and WhatsApp for Mac. Tracked
Episode
00:00:00
00:00:00