Motorola vulnerabilities
Published CVEs affecting Motorola products: 4 record(s), with severity, exploitation and fixes.
CVE-2026-93832
Medium · 4.4
CWE-862 Oct 1, 2026
Missing Authorization in Motorola Setup App
A component of one of the Motorola system applications was
exported without permission, allowing for the revocation of runtime permissions
from other apps.
CVE-2026-18058
High · 7.5
CWE-862 Sep 2, 2026
Missing Authorization in Motorola Smart Connect Application
The mobile Smart Connect dashboard UI was subject to manipulation
by 3rd party apps. When paired with a phishing attack, this manipulation could
result in escalated privileges of an attacker within the system.
CVE-2026-5804
High · 8.4
May 19, 2026
An improper authentication vulnerability was discovered in the Motorola Factory Test…
An improper authentication vulnerability was discovered in the Motorola Factory Test component (com.motorola.motocit). The application contained a reference to a writable file descriptor in external storage which could be used by third party apps running on the device to open a TCP server, exposing sensitive permissions and data. This could allow a local attacker to bypass permission checks and access protected device settings.
CVE-2013-2596
High · 7.8
KEV High · 54 CWE-190 Apr 12, 2013
Linux Kernel Integer Overflow Vulnerability
Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted /dev/graphics/fb0 mmap2 system calls, as demonstrated by the Motochopper pwn program.