Skip to contentGoogle Android vulnerabilities
- google android, mediatek, inc. mt6580, mt6735, mt6737, mt6739, mt6750s, mt6753, mt6755s, mt6757, mt6757c, mt6757cd, mt6757ch, mt6763, mt6771, mt8163, mt8167, mt8167s, mt8173, mt8183, mt8321, mt8362a, mt8385, mt8518, mt8532, mt8765, mt8788, yoctoproject yocto +2 moreIn BT firmware, there is a possible out of bounds write due to a missing bounds check. This could...CVE-2022-26447Fix available9.8 Critical
- google androidIn the SEPolicy configuration of system apps, there is a possible access to the 'ip' utility due...CVE-2022-20399Fix available5.5 Medium
- google androidIn addOrUpdateNetwork of WifiServiceImpl.java, there is a possible way for a guest user to...CVE-2022-20398Fix available7.8 High
- google androidIn SettingsActivity.java, there is a possible way to make a device discoverable over Bluetooth,...CVE-2022-20396Fix available5.5 Medium
- google androidIn checkAccess of MediaProvider.java, there is a possible file deletion due to a path traversal...CVE-2022-20395Fix available7.8 High
- google androidIn extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read...CVE-2022-20393Fix available5.5 Medium
- google androidIn declareDuplicatePermission of ParsedPermissionUtils.java, there is a possible way to obtain a...CVE-2022-20392Fix available7.8 High
- google androidSummary:Product: AndroidVersions: Android SoCAndroid ID: A-238257000CVE-2022-203919.8 Critical
- google androidSummary:Product: AndroidVersions: Android SoCAndroid ID: A-238257002CVE-2022-203909.8 Critical
- google androidSummary:Product: AndroidVersions: Android SoCAndroid ID: A-238257004CVE-2022-203899.8 Critical
- google androidSummary:Product: AndroidVersions: Android SoCAndroid ID: A-238227323CVE-2022-203889.8 Critical
- google androidSummary:Product: AndroidVersions: Android SoCAndroid ID: A-238227324CVE-2022-203879.8 Critical
- google androidSummary:Product: AndroidVersions: Android SoCAndroid ID: A-238227328CVE-2022-20386Fix available9.8 Critical
- google androida function called 'nla_parse', do not check the len of para, it will check nla_type (which can be...CVE-2022-203859.8 Critical
- google androidIn MMU_MapPages of TBD, there is a possible out of bounds write due to improper input validation....CVE-2021-0943Fix available7.8 High
- google androidThe path in this case is a little bit convoluted. The end result is that via an ioctl an...CVE-2021-0942Fix available9.8 Critical
- google androidIn PVRSRVBridgePMRPDumpSymbolicAddr of the PowerVR kernel driver, a missing size check means...CVE-2021-0871Fix available7.8 High
- google androidIn PVRSRVRGXSubmitTransferKM of rgxtransfer.c, there is a possible user after free due to a race...CVE-2021-0697Fix available7.0 High
- google androidIn Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead...CVE-2022-203628.8 High
- google androidIn WiFi, there is a possible disclosure of WiFi password to the end user due to an insecure...CVE-2022-203423.3 Low
- google androidIn ConnectivityService, there is a possible bypass of network permissions due to a missing...CVE-2022-203415.5 Medium
- google androidIn SELinux policy, there is a possible way of inferring which websites are being opened in the...CVE-2022-203403.3 Low
- google androidIn Android, there is a possible access of network neighbor table information due to an insecure...CVE-2022-203393.3 Low
- google androidIn Settings, there is a possible installed application disclosure due to a missing permission...CVE-2022-203363.3 Low
- google androidIn Wifi Slice, there is a possible way to adjust Wi-Fi settings even when the permission has been...CVE-2022-203353.3 Low
- google androidIn Bluetooth, there are possible process crashes due to dereferencing a null pointer. This could...CVE-2022-203346.5 Medium
- google androidIn Bluetooth, there is a possible crash due to a missing null check. This could lead to remote...CVE-2022-203336.5 Medium
- google androidIn PackageManager, there is a possible way to determine whether an app is installed, without...CVE-2022-203325.5 Medium
- google androidIn the Framework, there is a possible way to enable a work profile without user consent due to a...CVE-2022-203317.8 High
- google androidIn Bluetooth, there is a possible way to connect or disconnect bluetooth devices without user...CVE-2022-203303.5 Low
- google androidIn Wifi, there is a possible way to enable Wifi without permissions due to a missing permission...CVE-2022-203297.8 High
- google androidIn PackageManager, there is a possible way to determine whether an app is installed due to a...CVE-2022-203283.3 Low
- google androidIn Wi-Fi, there is a possible way to retrieve the WiFi SSID without location permissions due to a...CVE-2022-203272.8 Low
- google androidIn Telephony, there is a possible disclosure of SIM identifiers due to a missing permission check...CVE-2022-203265.5 Medium
- google androidIn Media, there is a possible code execution due to a use after free. This could lead to local...CVE-2022-203257.8 High
- google androidIn Framework, there is a possible way to determine whether an app is installed, without query...CVE-2022-203245.5 Medium
- google androidIn PackageManager, there is a possible package installation disclosure due to a missing...CVE-2022-203235.5 Medium
- google androidIn PackageManager, there is a possible installed package disclosure due to a missing permission...CVE-2022-203225.5 Medium
- google androidIn Settings, there is a possible way for an application without permissions to read content of...CVE-2022-203213.3 Low
- google androidIn ActivityManager, there is a possible way to determine whether an app is installed, without...CVE-2022-203203.3 Low
- google androidIn DreamServices, there is a possible way to launch arbitrary protected activities due to a...CVE-2022-203197.8 High
- google androidIn PackageInstaller, there is a possible way to determine whether an app is installed, without...CVE-2022-203183.3 Low
- google androidIn SystemUI, there is a possible way to unexpectedly enable the external speaker due to a logic...CVE-2022-203175.5 Medium
- google androidIn ContentResolver, there is a possible way to determine whether an app is installed, without...CVE-2022-203163.3 Low
- google androidIn ActivityManager, there is a possible disclosure of installed packages due to a missing...CVE-2022-203153.3 Low
- google androidIn KeyChain, there is a possible spoof keychain chooser activity request due to improper input...CVE-2022-203146.7 Medium
- google androidIn Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could...CVE-2022-203136.8 Medium
- google androidIn WifiP2pManager, there is a possible toobtain WiFi P2P MAC address without user consent due to...CVE-2022-203125.5 Medium
- google androidIn Telecomm, there is a possible disclosure of registered self managed phone accounts due to a...CVE-2022-203113.3 Low
- google androidIn Telecomm, there is a possible disclosure of registered self managed phone accounts due to a...CVE-2022-203103.3 Low
- Show moreLoading…