Advisories · Technology

Google Android.

Every CVE that names Google Android among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2017-13227 CVE record

CVSS 5.5 Medium

In the autofill service, the package name that is provided by the app process is trusted inappropriately.
- Google Android
Not analysed yet 14 Nov 2024
CVE-2024-43093 CVE record

CVSS 7.3 HighCritical · KEVKEV

In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to incorrect unicode normalization.
- Google Android
- CWE-176
Not analysed yet 13 Nov 2024
CVE-2024-43091 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 13 Nov 2024
CVE-2024-43090 CVE record

CVSS 5.0 Medium

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 13 Nov 2024
CVE-2024-43089 CVE record

CVSS 7.8 High

Incorrect default permissions in Google Android
- Google Android
- Broken access control
Not analysed yet 13 Nov 2024
CVE-2024-43088 CVE record

CVSS 8.4 High

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 13 Nov 2024
CVE-2024-43087 CVE record

CVSS 8.4 High

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 13 Nov 2024
CVE-2024-43086 CVE record

CVSS 5.5 Medium

Incorrect default permissions in Google Android
- Google Android
- Broken access control
Not analysed yet 13 Nov 2024
CVE-2024-43085 CVE record

CVSS 7.8 High

Incorrect default permissions in Google Android
- Google Android
- Broken access control
Not analysed yet 13 Nov 2024
CVE-2024-43084 CVE record

CVSS 6.2 Medium

Clickjacking in Google Android
- Google Android
- CWE-1021
Not analysed yet 13 Nov 2024
CVE-2024-43083 CVE record

CVSS 6.2 Medium

Resource allocation without limits in Google Android
- Google Android
- Denial of service
Not analysed yet 13 Nov 2024
CVE-2024-43082 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 13 Nov 2024
CVE-2024-43081 CVE record

CVSS 7.8 High

Incorrect default permissions in Google Android
- Google Android
- Broken access control
Not analysed yet 13 Nov 2024
CVE-2024-43080 CVE record

CVSS 7.8 High

Deserialization of untrusted data in Google Android
- Google Android
- Insecure deserialization
Not analysed yet 13 Nov 2024
CVE-2024-40671 CVE record

CVSS 7.8 High

Code injection in Google Android
- Google Android
- Code injection
Not analysed yet 13 Nov 2024
CVE-2024-40661 CVE record

CVSS 7.8 High

Incorrect default permissions in Google Android
- Google Android
- Broken access control
Not analysed yet 13 Nov 2024
CVE-2024-40660 CVE record

CVSS 7.8 High

Incorrect default permissions in Google Android
- Google Android
- Broken access control
Not analysed yet 13 Nov 2024
CVE-2024-34747 CVE record

CVSS 8.4 High

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 13 Nov 2024
CVE-2024-34729 CVE record

CVSS 8.4 High

In multiple locations, there is a possible arbitrary code execution due to a logic error in the code.
- Google Android
Not analysed yet 13 Nov 2024
CVE-2024-34719 CVE record

CVSS 8.4 High

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 13 Nov 2024
CVE-2024-31337 CVE record

CVSS 8.4 High

In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation.
- Google Android
Not analysed yet 13 Nov 2024
CVE-2024-23715 CVE record

CVSS 7.8 High

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 13 Nov 2024
CVE-2023-35686 CVE record

CVSS 7.8 High

In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation.
- Google Android
Not analysed yet 13 Nov 2024
CVE-2023-35659 CVE record

CVSS 7.8 High

In DevmemIntChangeSparse of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code.
- Google Android
Not analysed yet 13 Nov 2024
CVE-2024-47041 CVE record

CVSS 7.4 High

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 25 Oct 2024
CVE-2024-47035 CVE record

CVSS 7.4 High

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 25 Oct 2024
CVE-2024-47034 CVE record

CVSS 5.1 Medium

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 25 Oct 2024
CVE-2024-47033 CVE record

CVSS 7.4 High

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 25 Oct 2024
CVE-2024-47031 CVE record

CVSS 7.4 High

Google Android: Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL…
- Google Android
Not analysed yet 25 Oct 2024
CVE-2024-47030 CVE record

CVSS 5.1 Medium

Google Android: Android before 2024-10-05 on Google Pixel devices allows information disclosure in the…
- Google Android
Not analysed yet 25 Oct 2024
CVE-2024-47029 CVE record

CVSS 5.1 Medium

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 25 Oct 2024
CVE-2024-47028 CVE record

CVSS 5.1 Medium

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 25 Oct 2024
CVE-2024-47027 CVE record

CVSS 7.4 High

Path traversal in Google Android
- Google Android
- Path traversal
Not analysed yet 25 Oct 2024
CVE-2024-47026 CVE record

CVSS 5.1 Medium

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 25 Oct 2024
CVE-2024-47025 CVE record

CVSS 5.1 Medium

Incorrect authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 25 Oct 2024
CVE-2024-47024 CVE record

CVSS 7.4 High

Integer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 25 Oct 2024
CVE-2024-47023 CVE record

CVSS 7.4 High

there is a possible man-in-the-middle attack due to a logic error in the code.
- Google Android
Not analysed yet 25 Oct 2024
CVE-2024-47022 CVE record

CVSS 5.1 Medium

Google Android: Android before 2024-10-05 on Google Pixel devices allows information disclosure in the…
- Google Android
Not analysed yet 25 Oct 2024
CVE-2024-47021 CVE record

CVSS 5.1 Medium

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 25 Oct 2024
CVE-2024-47020 CVE record

CVSS 5.1 Medium

Google Android: Android before 2024-10-05 on Google Pixel devices allows information disclosure in the…
- Google Android
Not analysed yet 25 Oct 2024
CVE-2024-47019 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 25 Oct 2024
CVE-2024-47018 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 25 Oct 2024
CVE-2024-47017 CVE record

CVSS 7.8 High

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 25 Oct 2024
CVE-2024-47016 CVE record

CVSS 7.8 High

Incorrect default permissions in Google Android
- Google Android
- Broken access control
Not analysed yet 25 Oct 2024
CVE-2024-47015 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 25 Oct 2024
CVE-2024-47014 CVE record

CVSS 8.8 High

Incorrect default permissions in Google Android
- Google Android
- Broken access control
Not analysed yet 25 Oct 2024
CVE-2024-47013 CVE record

CVSS 7.8 High

Incorrect default permissions in Google Android
- Google Android
- Broken access control
Not analysed yet 25 Oct 2024
CVE-2024-47012 CVE record

CVSS 7.8 High

Incorrect default permissions in Google Android
- Google Android
- Broken access control
Not analysed yet 25 Oct 2024
CVE-2024-44101 CVE record

CVSS 7.5 High

NULL pointer dereference in Google Android
- Google Android
- Memory corruption
Not analysed yet 25 Oct 2024
CVE-2024-44100 CVE record

CVSS 7.5 High

Incorrect default permissions in Google Android
- Google Android
- Broken access control
Not analysed yet 25 Oct 2024
CVE-2024-44099 CVE record

CVSS 5.5 Medium

Incorrect authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 25 Oct 2024
CVE-2024-44098 CVE record

CVSS 7.4 High

Double free in Google Android
- Google Android
- Memory corruption
Not analysed yet 25 Oct 2024
CVE-2024-44097 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 2 Oct 2024
CVE-2024-44096 CVE record

CVSS 4.4 Medium

there is a possible arbitrary read due to an insecure default value.
- Google Android
Not analysed yet 13 Sept 2024
CVE-2024-44095 CVE record

CVSS 7.4 High

In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible corrupt memory due to a logic error in the code.
- Google Android
Not analysed yet 13 Sept 2024
CVE-2024-44094 CVE record

CVSS 7.4 High

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 13 Sept 2024
CVE-2024-44093 CVE record

CVSS 7.4 High

In ppmp_unprotect_buf of drm/code/drm_fw.c, there is a possible memory corruption due to a logic error in the code.
- Google Android
- CWE-783
Not analysed yet 13 Sept 2024
CVE-2024-44092 CVE record

CVSS 7.8 High

Active debug code in Google Android
- Google Android
- CWE-489
Not analysed yet 13 Sept 2024
CVE-2024-29779 CVE record

CVSS 7.4 High

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 13 Sept 2024
CVE-2024-40662 CVE record

CVSS 7.8 High

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 11 Sept 2024