Advisories · Technology
Google Android.
Every CVE that names Google Android among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.5 Medium
there is a possible information disclosure due to side channel information disclosure.
- Google Android
- CVSS 8.8 High
Code injection in Google Android
- Google Android
- Code injection
- CVSS 7.5 High
In DeregAcceptProcINT of cn_NrmmStateDeregInit.cpp, there is a possible denial of service due to a logic error in the code.
- Google Android
- CVSS 4.0 Medium
there is a possible cellular denial of service due to a logic error in the code.
- Google Android
- CVSS 7.4 High
Type confusion in Google Android
- Google Android
- Memory corruption
- CVSS 7.4 High
Out-of-bounds write in Google Android
- Google Android
- Memory corruption
- CVSS 7.1 High
Out-of-bounds read in Google Android
- Google Android
- Memory corruption
- CVSS 7.8 High
Type confusion in Google Android
- Google Android
- Memory corruption
- CVSS 6.1 Medium
Improper privilege management in Google Android
- Google Android
- Privilege escalation
- CVSS 7.1 High
Out-of-bounds write in Google Android
- Google Android
- Memory corruption
- CVSS 5.9 Medium
In fvp_freq_histogram_init of fvp.c, there is a possible Information Disclosure due to uninitialized data.
- Google Android
- CVSS 4.3 Medium
Out-of-bounds read in Google Android
- Google Android
- Memory corruption
- CVSS 5.5 Medium
Out-of-bounds read in Google Android
- Google Android
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Integer overflow in Google Android
- Google Android
- Memory corruption
- CVSS 5.5 Medium
Uncontrolled resource consumption in Google Android
- Google Android
- Denial of service
- CVSS 7.5 High
Improper signature verification in Google Android
- Google Android
- Weak cryptography or TLS
- CVSS 5.5 Medium
Use of uninitialized resource in Google Android
- Google Android
- Memory corruption
- CVSS 8.1 High
Out-of-bounds write in Google Android
- Google Android
- Memory corruption
- CVSS 8.4 High
Race condition in Google Android
- Google Android
- Race condition
- CVSS 8.4 High
Improper input validation in Google Android
- Google Android
- CWE-20
- CVSS 7.8 High
Improper privilege management in Google Android
- Google Android
- Privilege escalation
- CVSS 9.8 CriticalCritical · CVSS 9+
Out-of-bounds write in Google Android
- Google Android
- Memory corruption
- CVSS 4.7 Medium
Out-of-bounds read in Google Android
- Google Android
- Memory corruption
- CVSS 7.4 High
Improper input validation in Google Android
- Google Android
- CWE-20
- CVSS 7.5 High
Uncontrolled resource consumption in Google Android
- Google Android
- Denial of service
- CVSS 7.8 High
In v4l2_smfc_qbuf of smfc-v4l2-ioctls.c, there is a possible out of bounds write due to a missing bounds check.
- Google Android
- Privilege escalation
- CVSS 9.8 CriticalCritical · CVSS 9+
In lwis_fence_signal of lwis_debug.c, there is a possible Use after Free due to improper locking.
- Google Android
- CWE-667
- CVSS 7.0 High
Improper privilege management in Google Android
- Google Android
- Privilege escalation
- CVSS 4.7 Medium
Out-of-bounds read in Google Android
- Google Android
- Memory corruption
- CVSS 5.9 Medium
Out-of-bounds read in Google Android
- Google Android
- Memory corruption
- CVSS 8.1 HighCritical · KEVKEV
there is a possible way to bypass due to a logic error in the code.
- Google Android
- CWE-783
- CVSS 9.8 CriticalCritical · CVSS 9+
Out-of-bounds write in Google Android
- Google Android
- Memory corruption
- CVSS 7.5 High
Out-of-bounds read in Google Android
- Google Android
- Memory corruption
- CVSS 8.1 High
Out-of-bounds read in Google Android
- Google Android
- Memory corruption
- CVSS 7.8 High
Type confusion in Google Android
- Google Android
- Memory corruption
- CVSS 7.0 High
Race condition in Google Android
- Google Android
- Race condition
- CVSS 7.4 High
Use after free in Google Android
- Google Android
- Memory corruption
- CVSS 6.4 Medium
Out-of-bounds write in Google Android
- Google Android
- Memory corruption
- CVSS 5.5 Medium
Use of uninitialized resource in Google Android
- Google Android
- Memory corruption
- CVSS 7.7 High
Improper privilege management in Google Android
- Google Android
- Privilege escalation
- CVSS 7.5 High
Out-of-bounds read in Google Android
- Google Android
- Memory corruption
- CVSS 5.5 Medium
Use of uninitialized resource in Google Android
- Google Android
- Memory corruption
- CVSS 4.7 Medium
Out-of-bounds read in Google Android
- Google Android
- Memory corruption
- CVSS 8.1 High
Use after free in Google Android
- Google Android
- Memory corruption
- CVSS 6.5 Medium
Out-of-bounds write in Google Android
- Google Android
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
In multiple functions of NotificationManagerService.java, there is a possible way to not show a toast message when a clipboard message has been accessed.
- Google Android
- CWE-451
- CVSS 7.8 High
Improper input validation in Google Android
- Google Android
- CWE-20
- CVSS 7.4 High
Improper input validation in Google Android
- Google Android
- CWE-20
- CVSS 9.8 CriticalCritical · CVSS 9+
Improper input validation in Google Android
- Google Android
- CWE-20
- CVSS 7.8 High
Incorrect authorization in Google Android
- Google Android
- Broken access control
- CVSS 7.8 High
Improper access control in Google Android
- Google Android
- Broken access control
- CVSS 7.8 High
Improper privilege management in Google Android
- Google Android
- Privilege escalation
- CVSS 7.8 High
Improper privilege management in Google Android
- Google Android
- Privilege escalation
- CVSS 5.5 Medium
Uncontrolled resource consumption in Google Android
- Google Android
- Denial of service
- CVSS 7.8 High
Improper privilege management in Google Android
- Google Android
- Privilege escalation
- CVSS 7.0 High
In onCreate of WifiDialogActivity.java, there is a possible way to bypass the DISALLOW_ADD_WIFI_CONFIG restriction due to a missing permission check.
- Google Android
- CWE-280
- CVSS 5.6 Medium
Improper certificate validation in Google Android
- Google Android
- Weak cryptography or TLS
- CVSS 5.9 Medium
In multiple functions of SnoozeHelper.java, there is a possible way to cause a boot loop due to resource exhaustion.
- Google Android
- CVSS 4.7 Medium
Uncontrolled resource consumption in Google Android
- Google Android
- Denial of service
- CVSS 5.5 Medium
Improper input validation in Google Android
- Google Android
- CWE-20