Android vulnerabilities

Products

• Android 55
• Framework 6
• Pixel 4
• Kernel 3
• Kernel 2

Newest

• android system October CMS: Safe Mode Sandbox Bypass via Session Store and Forwarded Builder Calls CVE-2026-46696 Fix available 3.3 LowSeptember 14, 2026
• android In Contacts Provider, there is a possible way to access the contacts database due to SQL... CVE-2026-28576 Public exploit 10.0 CriticalJune 17, 2026
• android framework, google android +1 more In multiple locations, there is a possible way to achieve code execution due to an integer... CVE-2025-48595 In KEVPublic exploitFix available 8.4 HighJune 1, 2026
• android framework, google android +1 more In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a... CVE-2025-48633 In KEVFix available 5.5 MediumDecember 1, 2025
• android framework, google android +1 more In multiple locations, there is a possible way to launch activities from the background due to a... CVE-2025-48572 In KEVFix available 7.8 HighDecember 1, 2025
• google android, android runtime +1 more In multiple locations, there is a possible way to escape chrome sandbox to attack android... CVE-2025-48543 In KEVPublic exploitFix available 8.8 HighSeptember 1, 2025
• android tv Race condition in AndroidTV TvSettings CVE-2025-8192 6.9 MediumJuly 31, 2025
• android framework, google android +1 more In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path... CVE-2024-43093 In KEVPublic exploitFix available 7.3 HighNovember 13, 2024
• android telegram for android, telegram +1 more Improper multimedia file attachment validation in Telegram for Android app CVE-2024-7014 Public exploit 7.1 HighJuly 23, 2024
• android kernel, debian linux +1 more net: fix __dst_negative_advice() race CVE-2024-36971 In KEVPublic exploitFix available 7.8 HighJune 10, 2024
• android pixel, google android +1 more there is a possible way to bypass due to a logic error in the code. This could lead to local... CVE-2024-32896 In KEVFix available 7.8 HighJune 1, 2024
• android pixel, google android +1 more there is a possible way to bypass due to a logic error in the code. This could lead to local... CVE-2024-29748 In KEVFix available 7.8 HighApril 1, 2024
• android pixel, google android +1 more there is a possible Information Disclosure due to uninitialized data. This could lead to local... CVE-2024-29745 In KEVFix available 5.5 MediumApril 1, 2024
• android mycrops higrade, mycrops higrade +1 more An issue was discovered in the MyCrops HiGrade "THC Testing & Cannabi" application 1.0.337 for... CVE-2023-40040 5.3 MediumSeptember 11, 2023
• android framework, google android +1 more In onCreate of WindowState.java, there is a possible way to launch a background activity due to a... CVE-2023-35674 In KEVPublic exploitFix available 7.8 HighSeptember 1, 2023
• google android, android pixel +1 more In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide... CVE-2023-21237 In KEVFix available 5.5 MediumJune 1, 2023
• google android, android framework +1 more In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of... CVE-2023-20963 In KEVPublic exploitFix available 7.8 HighMarch 1, 2023
• android kernel, google android +1 more In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use... CVE-2021-1048 In KEVFix available 7.8 HighNovember 1, 2021
• android kernel, google android, debian linux +2 more In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition.... CVE-2021-0920 In KEVFix available 6.4 MediumNovember 1, 2021
• android play core library, google llc android play core +1 more Local arbitrary code execution in splitinstall in Android's Play Core CVE-2020-8913 8.8 HighAugust 12, 2020
• android kernel, google android +1 more In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect... CVE-2020-0041 In KEVPublic exploitFix available 7.8 HighMarch 10, 2020
• android kernel, debian linux, google android +75 more +77 more A use-after-free in binder.c allows an elevation of privilege from an application to the Linux... CVE-2019-2215 In KEVPublic exploitFix available EPSS 72.1% 7.8 HighOctober 11, 2019
• android In nfa_rw_store_ndef_rx_buf of nfa_rw_act.cc, there is a possible out-of-bound write due to a... CVE-2019-2099 7.8 HighJune 7, 2019
• android In areNotificationsEnabledForPackage of NotificationManagerService.java, there is a possible... CVE-2019-2098 7.8 HighJune 7, 2019
• android In the Bluetooth Low Energy (BLE) specification, there is a provided example Long Term Key (LTK).... CVE-2019-2102 8.8 HighJune 7, 2019
• android In HAliasAnalyzer.Query of hydrogen-alias-analysis.h, there is possible memory corruption due to... CVE-2019-2097 9.8 CriticalJune 7, 2019
• android In EffectRelease of EffectBundle.cpp, there is a possible memory corruption due to a double free.... CVE-2019-2096 7.8 HighJune 7, 2019
• android In callGenIDChangeListeners and related functions of SkPixelRef.cpp, there is a possible use... CVE-2019-2095 7.0 HighJune 7, 2019
• android In parseMPEGCCData of NuPlayerCCDecoder.cpp, there is a possible out of bounds write due to... CVE-2019-2094 7.8 HighJune 7, 2019
• android In huff_dec_1D of nlc_dec.cpp, there is a possible out of bounds write due to a missing bounds... CVE-2019-2093 8.8 HighJune 7, 2019
• android In isSeparateProfileChallengeAllowed of DevicePolicyManagerService.java, there is a possible... CVE-2019-2092 7.8 HighJune 7, 2019
• android In GetPermittedAccessibilityServicesForUser of DevicePolicyManagerService.java, there is a... CVE-2019-2091 7.8 HighJune 7, 2019
• android In isPackageDeviceAdminOnAnyUser of PackageManagerService.java, there is a possible permissions... CVE-2019-2090 7.8 HighJune 7, 2019
• android, canonical ubuntu linux, debian linux +2 more In uvc_parse_standard_control of uvc_driver.c, there is a possible out-of-bound read due to... CVE-2019-2101 Fix available 5.5 MediumJune 7, 2019
• android In l2cu_send_peer_config_rej of l2c_utils.cc, there is a possible out-of-bound read due to an... CVE-2019-2037 7.5 HighApril 19, 2019
• android In the configuration of NFC modules on certain devices, there is a possible failure to... CVE-2019-2041 7.3 HighApril 19, 2019
• android In SetScanResponseData of ble_advertiser_hci_interface.cc, there is a possible out-of-bound write... CVE-2019-2032 7.8 HighApril 19, 2019
• android In btm_proc_smp_cback of tm_ble.cc, there is a possible memory corruption due to a use after free... CVE-2019-2029 8.8 HighApril 19, 2019
• android In rw_i93_process_ext_sys_info of rw_i93.cc, there is a possible out-of-bound read due to a... CVE-2019-2040 5.0 MediumApril 19, 2019
• android In rw_i93_sm_detect_ndef of rw_i93.cc, there is a possible out-of-bound read due to a missing... CVE-2019-2039 5.0 MediumApril 19, 2019
• android In rw_i93_process_sys_info of rw_i93.cc, there is a possible out-of-bound read due to a missing... CVE-2019-2038 5.5 MediumApril 19, 2019
• android In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible out-of-bound write due to a missing... CVE-2019-2035 7.8 HighApril 19, 2019
• android In rw_i93_sm_read_ndef of rw_i93.cc, there is a possible out-of-bounds write due to an integer... CVE-2019-2034 7.8 HighApril 19, 2019
• android In create_hdr of dnssd_clientstub.c, there is a possible use after free. This could lead to local... CVE-2019-2033 7.8 HighApril 19, 2019
• android In rw_t3t_act_handle_check_ndef_rsp of rw_t3t.cc, there is a possible out-of-bound write due to a... CVE-2019-2031 7.8 HighApril 19, 2019
• android In removeInterfaceAddress of NetworkController.cpp, there is a possible use after free. This... CVE-2019-2030 9.8 CriticalApril 19, 2019
• android In numerous hand-crafted functions in libmpeg2, NEON registers are not preserved. This could lead... CVE-2019-2028 8.8 HighApril 19, 2019
• android In floor0_inverse1 of floor0.c, there is a possible out of bounds write due to an incorrect... CVE-2019-2027 8.8 HighApril 19, 2019
• android In updateAssistMenuItems of Editor.java, there is a possible escape from the Setup Wizard due to... CVE-2019-2026 7.8 HighApril 19, 2019
• android The permissions on /proc/iomem were world-readable. This could lead to local information... CVE-2019-2001 Fix available 5.5 MediumFebruary 28, 2019
• Show olderLoading…