Advisories · Technology
Google Android.
Every CVE that names Google Android among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.5 Medium
Buffer overflow in Google Android
- Google Android
- Memory corruption
- CVSS 7.8 High
Improper privilege management in Google Android
- Google Android
- Privilege escalation
- CVSS 7.8 High
Improper privilege management in Google Android
- Google Android
- Privilege escalation
- CVSS 5.5 Medium
Out-of-bounds read in Google Android
- Google Android
- Memory corruption
- CVSS 7.8 High
Incorrect default permissions in Google Android
- Google Android
- Broken access control
- CVSS 7.8 High
Incorrect default permissions in Google Android
- Google Android
- Broken access control
- CVSS 7.3 High
Missing authorization in Google Android
- Google Android
- Broken access control
- CVSS 7.8 High
In wifi_item_edit_content of styles.xml , there is a possible FRP bypass due to Missing check for FRP state.
- Google Android
- CWE-358
- CVSS 8.4 High
Out-of-bounds write in Google Android
- Google Android
- Memory corruption
- CVSS 7.4 High
Use after free in Google Android
- Google Android
- Memory corruption
- CVSS 7.8 High
Use after free in Google Android
- Google Android
- Memory corruption
- CVSS 7.8 High
Improper privilege management in Google Android
- Google Android
- Privilege escalation
- CVSS 5.5 Medium
Type confusion in Google Android
- Google Android
- Memory corruption
- CVSS 7.8 High
Improper privilege management in Google Android
- Google Android
- Privilege escalation
- CWE-783
- CVSS 7.7 High
XML injection in Google Android
- Google Android
- Other injection
- Memory corruption
- CVSS 7.8 High
Improper output encoding in Google Android
- Google Android
- CWE-116
- CVSS 7.7 High
In multiple functions of AppOpsService.java, there is a possible way for unprivileged apps to read their own restrictRead app-op states due to a logic error in the code.
- Google Android
- Privilege escalation
- CVSS 7.7 High
In ensureSetPipAspectRatioQuotaTracker of ActivityClientController.java, there is a possible way to generate unmovable and undeletable pip windows due to a logic error in the code.
- Google Android
- CVSS 6.2 Medium
In setupVideoEncoder of StagefrightRecorder.cpp, there is a possible asynchronous playback when B-frame support is enabled.
- Google Android
- CVSS 7.7 High
In onForegroundServiceButtonClicked of FooterActionsViewModel.kt, there is a possible way to disable the active VPN app from the lockscreen due to an insecure default value.
- Google Android
- CWE-1188
- CVSS 7.7 High
In multiple functions of TranscodingResourcePolicy.cpp, there is a possible memory corruption due to a race condition.
- Google Android
- CWE-368
- CVSS 7.5 High
Buffer overflow in Google Android
- Google Android
- Memory corruption
- CVSS 7.8 High
Integer overflow in Google Android
- Google Android
- Memory corruption
- CVSS 7.8 High
In PVRSRV_MMap of pvr_bridge_k.c, there is a possible arbitrary code execution due to a logic error in the code.
- Google Android
- CWE-783
- CVSS 7.4 High
Improper privilege management in Google Android
- Google Android
- Privilege escalation
- Broken access control
- CVSS 7.0 High
Race condition in Google Android
- Google Android
- Race condition
- CVSS 5.3 Medium
In onTransact of ParcelableListBinder.java , there is a possible way to steal mAllowlistToken to launch an app from background due to a logic error in the code.
- Google Android
- CWE-783
- CVSS 7.4 High
In smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a protocol.
- Google Android
- Authentication bypass
- CVSS 6.2 Medium
Insecure storage of sensitive information in Google Android
- Google Android
- Information disclosure
- CVSS 7.4 High
Google Android: In com_android_internal_os_ZygoteCommandBuffer_nativeForkRepeatedly of…
- Google Android
- CWE-783
- CVSS 7.8 High
Use after free in Google Android
- Google Android
- Memory corruption
- CVSS 8.4 High
In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code.
- Google Android
- CWE-783
- CVSS 6.7 Medium
Improper privilege management in Google Android
- Google Android
- Privilege escalation
- CVSS 8.4 High
Missing authorization in Google Android
- Google Android
- Broken access control
- CVSS 7.8 High
In setMimeGroup of PackageManagerService.java, there is a possible way to hide the service from Settings due to a logic error in the code.
- Google Android
- CWE-783
- CVSS 7.4 High
Improper privilege management in Google Android
- Google Android
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
Race condition in Google Android
- Google Android
- Race condition
- CVSS 7.8 High
In multiple locations, there is a possible way in which policy migration code will never be executed due to a logic error in the code.
- Google Android
- CWE-783
- CVSS 7.8 High
Improper privilege management in Google Android
- Google Android
- Privilege escalation
- CVSS 7.8 High
Clickjacking in Google Android
- Google Android
- CWE-1021
- CVSS 7.8 High
Improper privilege management in Google Android
- Google Android
- Privilege escalation
- CVSS 6.3 Medium
Improper privilege management in Google Android
- Google Android
- Privilege escalation
- CVSS 8.4 High
In updateNotificationChannelFromPrivilegedListener of NotificationManagerService.java, there is a possible cross-user data leak due to a confused deputy.
- Google Android
- CWE-441
- CVSS 7.8 High
Improper privilege management in Google Android
- Google Android
- Privilege escalation
- CVSS 7.8 High
Deserialization of untrusted data in Google Android
- Google Android
- Insecure deserialization
- CVSS 7.8 High
In onResult of AccountManagerService.java, there is a possible way to perform an arbitrary background activity launch due to parcel mismatch.
- Google Android
- CVSS 5.3 Medium
In multiple functions of ManagedServices.java, there is a possible way to hide an app with notification access in the Device & app notifications settings due to improper input validation.
- Google Android
- Privilege escalation
- CVSS 6.2 Medium
Resource allocation without limits in Google Android
- Google Android
- Denial of service
- CVSS 7.8 High
Improper privilege management in Google Android
- Google Android
- Privilege escalation
- CVSS 5.5 Medium
Incorrect default permissions in Google Android
- Google Android
- Broken access control
- CVSS 6.3 Medium
Improper privilege management in Google Android
- Google Android
- Privilege escalation
- CVSS 7.8 High
Improper input validation in Google Android
- Google Android
- CWE-20
- CVSS 7.8 High
Improper privilege management in Google Android
- Google Android
- Privilege escalation
- CVSS 7.8 High
Out-of-bounds write in Google Android
- Google Android
- Memory corruption
- CVSS 7.3 High
Use after free in Google Android
- Google Android
- Memory corruption
- CVSS 8.4 High
Use after free in Google Android
- Google Android
- Memory corruption
- CVSS 8.4 High
Integer overflow in Google Android
- Google Android
- Memory corruption
- CVSS 7.8 High
Improper privilege management in Google Android
- Google Android
- Privilege escalation
- CVSS 7.8 High
Improper privilege management in Google Android
- Google Android
- Privilege escalation
- CVSS 5.5 Medium
In plugin_ipc_handler of slc_plugin.c, there is a possible information disclosure due to uninitialized data.
- Google Android