Advisories · Technology

Google Android.

Every CVE that names Google Android among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-22433 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Sept 2025
CVE-2025-22431 CVE record

CVSS 5.5 Medium

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Sept 2025
CVE-2025-22430 CVE record

CVSS 5.5 Medium

Information disclosure in Google Android
- Google Android
- Information disclosure
Not analysed yet 2 Sept 2025
CVE-2025-22429 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Sept 2025
CVE-2025-22428 CVE record

CVSS 7.8 High

Incorrect authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 2 Sept 2025
CVE-2025-22427 CVE record

CVSS 7.3 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Sept 2025
CVE-2025-22423 CVE record

CVSS 7.5 High

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Sept 2025
CVE-2025-22422 CVE record

CVSS 7.8 High

Insecure direct object reference in Google Android
- Google Android
- Broken access control
Not analysed yet 2 Sept 2025
CVE-2025-22421 CVE record

CVSS 5.5 Medium

Sensitive information in error messages in Google Android
- Google Android
- Information disclosure
Not analysed yet 2 Sept 2025
CVE-2025-22419 CVE record

CVSS 7.3 High

Clickjacking in Google Android
- Google Android
- CWE-1021
Not analysed yet 2 Sept 2025
CVE-2025-22418 CVE record

CVSS 7.8 High

In multiple locations, there is a possible confused deputy due to Intent Redirect.
- Google Android
- CWE-441
Not analysed yet 2 Sept 2025
CVE-2025-22417 CVE record

CVSS 7.3 High

Clickjacking in Google Android
- Google Android
- CWE-1021
Not analysed yet 2 Sept 2025
CVE-2025-22416 CVE record

CVSS 7.8 High

In onCreate of ChooserActivity.java , there is a possible way to view other users' images due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 2 Sept 2025
CVE-2024-49730 CVE record

CVSS 7.8 High

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 2 Sept 2025
CVE-2024-49728 CVE record

CVSS 5.5 Medium

In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a confused deputy.
- Google Android
- CWE-610
Not analysed yet 2 Sept 2025
CVE-2024-49722 CVE record

CVSS 5.5 Medium

In showAvatarPicker of EditUserPhotoController.java, there is a possible cross user image leak due to a confused deputy.
- Google Android
- CWE-610
Not analysed yet 2 Sept 2025
CVE-2024-49720 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Sept 2025
CVE-2024-40653 CVE record

CVSS 7.3 High

Improper authentication in Google Android
- Google Android
- Authentication bypass
Not analysed yet 2 Sept 2025
CVE-2025-26417 CVE record

CVSS 4.0 Medium

In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening files in shared storage due to a confused deputy.
- Google Android
- CWE-610
Not analysed yet 26 Aug 2025
CVE-2025-22413 CVE record

CVSS 4.0 Medium

In multiple functions of hyp-main.c, there is a possible privilege escalation due to a logic error in the code.
- Google Android
- CWE-703
Not analysed yet 26 Aug 2025
CVE-2025-22412 CVE record

CVSS 8.8 High

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 26 Aug 2025
CVE-2025-22411 CVE record

CVSS 8.8 High

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 26 Aug 2025
CVE-2025-22410 CVE record

CVSS 8.4 High

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 26 Aug 2025
CVE-2025-22409 CVE record

CVSS 8.4 High

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 26 Aug 2025
CVE-2025-22408 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 26 Aug 2025
CVE-2025-22407 CVE record

CVSS 5.5 Medium

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 26 Aug 2025
CVE-2025-22406 CVE record

CVSS 8.4 High

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 26 Aug 2025
CVE-2025-22405 CVE record

CVSS 8.4 High

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 26 Aug 2025
CVE-2025-22404 CVE record

CVSS 8.4 High

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 26 Aug 2025
CVE-2025-22403 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 26 Aug 2025
CVE-2025-0093 CVE record

CVSS 7.5 High

Incorrect permission assignment in Google Android
- Google Android
- Broken access control
Not analysed yet 26 Aug 2025
CVE-2025-0092 CVE record

CVSS 6.5 Medium

Insufficient verification of data authenticity in Google Android
- Google Android
- CWE-345
- CWE-356
Not analysed yet 26 Aug 2025
CVE-2025-0086 CVE record

CVSS 6.2 Medium

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 26 Aug 2025
CVE-2025-0084 CVE record

CVSS 8.8 High

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 26 Aug 2025
CVE-2025-0083 CVE record

CVSS 4.0 Medium

Improper output encoding in Google Android
- Google Android
- CWE-116
Not analysed yet 26 Aug 2025
CVE-2025-0082 CVE record

CVSS 5.5 Medium

In multiple functions of StatusHint.java and TelecomServiceImpl.java, there is a possible way to reveal images across users due to a confused deputy.
- Google Android
- CWE-610
Not analysed yet 26 Aug 2025
CVE-2025-0081 CVE record

CVSS 7.5 High

Use of uninitialized variable in Google Android
- Google Android
- Memory corruption
Not analysed yet 26 Aug 2025
CVE-2025-0080 CVE record

CVSS 7.8 High

Execution with unnecessary privileges in Google Android
- Google Android
- Privilege escalation
Not analysed yet 26 Aug 2025
CVE-2025-0079 CVE record

CVSS 7.8 High

Execution with unnecessary privileges in Google Android
- Google Android
- Privilege escalation
Not analysed yet 26 Aug 2025
CVE-2025-0078 CVE record

CVSS 8.8 High

Execution with unnecessary privileges in Google Android
- Google Android
- Privilege escalation
Not analysed yet 26 Aug 2025
CVE-2025-0075 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 26 Aug 2025
CVE-2025-0074 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 26 Aug 2025
CVE-2024-49740 CVE record

CVSS 5.5 Medium

Uncontrolled resource consumption in Google Android
- Google Android
- Denial of service
Not analysed yet 26 Aug 2025
CVE-2023-21125 CVE record

CVSS 8.0 High

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 26 Aug 2025
CVE-2025-27701 CVE record

CVSS 5.5 Medium

NULL pointer dereference in Google Android
- Google Android
- Memory corruption
Not analysed yet 27 May 2025
CVE-2025-27700 CVE record

CVSS 8.4 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 27 May 2025
CVE-2024-56193 CVE record

CVSS 5.1 Medium

Information disclosure in Google Android
- Google Android
- Information disclosure
Not analysed yet 27 May 2025
CVE-2024-56192 CVE record

CVSS 7.8 High

In wl_notify_gscan_event of wl_cfgscan.c, there is a possible out of bounds write due to a missing bounds check.
- Google Android
- CWE-281
Not analysed yet 10 Mar 2025
CVE-2024-56191 CVE record

CVSS 8.4 High

In dhd_process_full_gscan_result of dhd_pno.c, there is a possible EoP due to an integer overflow.
- Google Android
- CWE-281
Not analysed yet 10 Mar 2025
CVE-2024-56188 CVE record

CVSS 5.1 Medium

NULL pointer dereference in Google Android
- Google Android
- Memory corruption
Not analysed yet 10 Mar 2025
CVE-2024-56187 CVE record

CVSS 6.6 Medium

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 10 Mar 2025
CVE-2024-56186 CVE record

CVSS 5.1 Medium

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 10 Mar 2025
CVE-2024-56185 CVE record

CVSS 5.1 Medium

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 10 Mar 2025
CVE-2024-56184 CVE record

CVSS 5.1 Medium

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 10 Mar 2025
CVE-2024-40677 CVE record

CVSS 8.4 High

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 28 Jan 2025
CVE-2024-40676 CVE record

CVSS 7.7 High

Type confusion in Google Android
- Google Android
- Memory corruption
Not analysed yet 28 Jan 2025
CVE-2024-40675 CVE record

CVSS 7.5 High

Infinite loop in Google Android
- Google Android
- Denial of service
Not analysed yet 28 Jan 2025
CVE-2024-40674 CVE record

CVSS 5.3 Medium

Buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 28 Jan 2025
CVE-2024-40673 CVE record

CVSS 6.5 Medium

Code injection in Google Android
- Google Android
- Code injection
Not analysed yet 28 Jan 2025
CVE-2024-40672 CVE record

CVSS 8.4 High

In onCreate of ChooserActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check.
- Google Android
- CWE-281
Not analysed yet 28 Jan 2025