Advisories · Technology

Google Android.

Every CVE that names Google Android among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-25985 CVE record

CVSS 8.4 High

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 11 Mar 2024
CVE-2024-25984 CVE record

CVSS 6.2 Medium

Buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 11 Mar 2024
CVE-2024-22011 CVE record

CVSS 7.5 High

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 11 Mar 2024
CVE-2024-22010 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 11 Mar 2024
CVE-2024-22009 CVE record

CVSS 7.1 High

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 11 Mar 2024
CVE-2024-22008 CVE record

CVSS 7.8 High

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 11 Mar 2024
CVE-2024-22007 CVE record

CVSS 6.2 Medium

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 11 Mar 2024
CVE-2024-22006 CVE record

CVSS 5.3 Medium

OOB read in the TMU plugin that allows for memory disclosure in the power management subsystem of the device.
- Google Android
Not analysed yet 11 Mar 2024
CVE-2024-22005 CVE record

CVSS 8.4 High

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 11 Mar 2024
CVE-2024-23717 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 11 Mar 2024
CVE-2024-0053 CVE record

CVSS 3.3 Low

In getCustomPrinterIcon of PrintManagerService.java, there is a possible way to view other user's images due to a confused deputy.
- Google Android
- Information disclosure
Not analysed yet 11 Mar 2024
CVE-2024-0052 CVE record

CVSS 6.2 Medium

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 11 Mar 2024
CVE-2024-0051 CVE record

CVSS 7.8 High

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 11 Mar 2024
CVE-2024-0050 CVE record

CVSS 7.1 High

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 11 Mar 2024
CVE-2024-0049 CVE record

CVSS 7.8 High

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 11 Mar 2024
CVE-2024-0048 CVE record

CVSS 8.4 High

In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of null responses.
- Google Android
- CWE-230
Not analysed yet 11 Mar 2024
CVE-2024-0047 CVE record

CVSS 5.5 Medium

Deserialization of untrusted data in Google Android
- Google Android
- Insecure deserialization
Not analysed yet 11 Mar 2024
CVE-2024-0046 CVE record

CVSS 7.8 High

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 11 Mar 2024
CVE-2024-0045 CVE record

CVSS 7.5 High

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 11 Mar 2024
CVE-2024-0044 CVE record

CVSS 7.8 High

In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation.
- Google Android
- CWE-75
Not analysed yet 11 Mar 2024
CVE-2024-0039 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 11 Mar 2024
CVE-2024-0023 CVE record

CVSS 7.4 High

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 16 Feb 2024
CVE-2024-0021 CVE record

CVSS 7.0 High

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 16 Feb 2024
CVE-2024-0020 CVE record

CVSS 5.5 Medium

Information disclosure in Google Android
- Google Android
- Information disclosure
Not analysed yet 16 Feb 2024
CVE-2024-0019 CVE record

CVSS 6.2 Medium

Incorrect permission assignment in Google Android
- Google Android
- Broken access control
Not analysed yet 16 Feb 2024
CVE-2024-0018 CVE record

CVSS 8.4 High

Heap-based buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 16 Feb 2024
CVE-2024-0017 CVE record

CVSS 5.5 Medium

Incorrect authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 16 Feb 2024
CVE-2024-0016 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 16 Feb 2024
CVE-2024-0015 CVE record

CVSS 7.8 High

In convertToComponentName of DreamService.java, there is a possible way to launch arbitrary protected activities due to intent redirection.
- Google Android
- CWE-280
Not analysed yet 16 Feb 2024
CVE-2023-40085 CVE record

CVSS 3.3 Low

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 16 Feb 2024
CVE-2023-21165 CVE record

CVSS 8.4 High

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 16 Feb 2024
CVE-2024-0041 CVE record

CVSS 8.4 High

Race condition in Google Android
- Google Android
- Race condition
Not analysed yet 16 Feb 2024
CVE-2024-0040 CVE record

CVSS 7.5 High

Heap-based buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 16 Feb 2024
CVE-2024-0038 CVE record

CVSS 8.4 High

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 16 Feb 2024
CVE-2024-0037 CVE record

CVSS 3.3 Low

Missing authorization in Google Android
- Google Android
- Broken access control
- Information disclosure
Not analysed yet 16 Feb 2024
CVE-2024-0036 CVE record

CVSS 7.4 High

Improper access control in Google Android
- Google Android
- Broken access control
Not analysed yet 16 Feb 2024
CVE-2024-0035 CVE record

CVSS 7.4 High

NULL pointer dereference in Google Android
- Google Android
- Memory corruption
Not analysed yet 16 Feb 2024
CVE-2024-0034 CVE record

CVSS 7.8 High

Incorrect default permissions in Google Android
- Google Android
- Broken access control
Not analysed yet 16 Feb 2024
CVE-2024-0033 CVE record

CVSS 8.4 High

Heap-based buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 16 Feb 2024
CVE-2024-0032 CVE record

CVSS 6.8 Medium

Improper access control in Google Android
- Google Android
- Broken access control
Not analysed yet 16 Feb 2024
CVE-2024-0031 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 16 Feb 2024
CVE-2024-0030 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 16 Feb 2024
CVE-2024-0029 CVE record

CVSS 7.1 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 16 Feb 2024
CVE-2024-0014 CVE record

CVSS 8.4 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 16 Feb 2024
CVE-2023-40122 CVE record

CVSS 5.3 Medium

In applyCustomDescription of SaveUi.java, there is a possible way to view other user's images due to a confused deputy.
- Google Android
Not analysed yet 16 Feb 2024
CVE-2023-40093 CVE record

CVSS 5.5 Medium

Insecure storage of sensitive information in Google Android
- Google Android
- Information disclosure
Not analysed yet 16 Feb 2024
CVE-2023-40124 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 15 Feb 2024
CVE-2023-40115 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 15 Feb 2024
CVE-2023-40114 CVE record

CVSS 8.4 High

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 15 Feb 2024
CVE-2023-40113 CVE record

CVSS 5.5 Medium

In multiple locations, there is a possible way for apps to access cross-user message data due to a missing permission check.
- Google Android
Not analysed yet 15 Feb 2024
CVE-2023-40112 CVE record

CVSS 5.1 Medium

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 15 Feb 2024
CVE-2023-40111 CVE record

CVSS 7.8 High

In setMediaButtonReceiver of MediaSessionRecord.java, there is a possible way to send a pending intent on behalf of system_server due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 15 Feb 2024
CVE-2023-40110 CVE record

CVSS 6.2 Medium

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 15 Feb 2024
CVE-2023-40109 CVE record

CVSS 7.3 High

In createFromParcel of UsbConfiguration.java, there is a possible background activity launch (BAL) due to a permissions bypass.
- Google Android
- Privilege escalation
Not analysed yet 15 Feb 2024
CVE-2023-40107 CVE record

CVSS 7.4 High

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 15 Feb 2024
CVE-2023-40106 CVE record

CVSS 7.8 High

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 15 Feb 2024
CVE-2023-40105 CVE record

CVSS 5.5 Medium

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 15 Feb 2024
CVE-2023-40104 CVE record

CVSS 7.5 High

Improper certificate validation in Google Android
- Google Android
- Weak cryptography or TLS
Not analysed yet 15 Feb 2024
CVE-2023-40100 CVE record

CVSS 8.4 High

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 15 Feb 2024
CVE-2024-22012 CVE record

CVSS 7.8 High

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 7 Feb 2024