Android vulnerabilities
1,228 known vulnerabilities in Android from Google. 1,223 are rated high or critical, and 16 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618: Missing Authorization
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618: Missing Authorization
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618: Missing Authorization
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618: Missing Authorization
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618: Missing Authorization
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618: Missing Authorization
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618: Missing Authorization
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
- 7.8 High severity
SC9832E/SC9863A/T606/T612/T616/T610/T618: Missing Authorization
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618: Missing Authorization
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618: Missing Authorization
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618: Missing Authorization
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
- 7.5 High severity
T760/T770/T820/S8000: Missing Authorization
In LTE protocol stack, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed
- 7.5 High severity
In NIA0 algorithm in Security Mode Command, there is a possible missing verification incorrect…
In NIA0 algorithm in Security Mode Command, there is a possible missing verification incorrect input. This could lead to remote information disclosure no additional execution privileges needed
- 7.8 High severity
Android: Initialization of a Resource with an Insecure Default
In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way to access adb before SUW completion due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User inter
- 9.8 Critical severity
Android: Access of Resource Using Incompatible Type
In multiple locations, there is a possible code execution due to type confusion. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
- 8.8 High severity
Android: Out-of-bounds Write
In TRANSPOSER_SETTINGS of lpp_tran.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.
- 8.8 High severity
Android: Out-of-bounds Write
In SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploita
- 7.8 High severity
In readFrom of Uri.java, there is a possible bad URI permission grant due to improper input…
In readFrom of Uri.java, there is a possible bad URI permission grant due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- 7.5 High severity
Android: Use of Uninitialized Resource
In multiple locations of avrc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
- 7.8 High severity
Android: Improper Privilege Management
In startActivityInner of ActivityStarter.java, there is a possible way to launch an activity into PiP mode from the background due to BAL bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction
- 7.5 High severity
Android: Improper Certificate Validation
In multiple locations, there are root CA certificates which need to be disabled. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
- 9.8 Critical severity
Android: Insufficiently Protected Credentials
In processMessageImpl of ClientModeImpl.java, there is a possible credential disclosure in the TOFU flow due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not
- 7.2 High severity
T606/T612/T616/T610/T618/T760/T770/T820/S8000: Out-of-bounds Write
In DRM/oemcrypto, there is a possible out of bounds write due to an incorrect calculation of buffer size.This could lead to remote escalation of privilege with System execution privileges needed
- 7.8 High severity
Android: Improper Check for Dropped Privileges
In getLocationCache of GeoLocation.java, there is a possible way to send a mock location during an emergency call due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interactio
- 7.5 High severity
Android: Out-of-bounds Read
In DMPixelLogger_ProcessDmCommand of DMPixelLogger.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for ex
- 7.2 High severity
Android: Out-of-bounds Read
there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed. User interaction is not needed for exploitation.
- 7.8 High severity
Android: Use of a Broken or Risky Cryptographic Algorithm
there is a possible way to bypass cryptographic assurances due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- 7.8 High severity
Android: Missing Authorization
In updateSettingsInternalLI of InstallPackageHelper.java, there is a possible way to sideload an app in the work profile due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User in
- 7.8 High severity
Android: Incorrect Authorization
In SettingsHomepageActivity.java, there is a possible way to launch arbitrary activities via Settings due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed
- 7.8 High severity
Android: Use After Free
In multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- 7.8 High severity
Android: Incorrect Authorization
In getCurrentState of OneTimePermissionUserManager.java, there is a possible way to hold one-time permissions after the app is being killed due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileg
- 7.3 High severity
In onCreate of ConfirmDialog.java, there is a possible way to connect to VNP bypassing user's…
In onCreate of ConfirmDialog.java, there is a possible way to connect to VNP bypassing user's consent due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for explo
- 9.8 Critical severity
Android: Out-of-bounds Write
In gatt_end_operation of gatt_utils.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
- 7.8 High severity
Android: Missing Authorization
In getAvailabilityStatus of WifiScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device policy restriction due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileg
- 7.8 High severity
Android: Missing Authorization
In getAvailabilityStatus of BluetoothScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device policy restriction due to a missing permission check. This could lead to local escalation of privilege with no additional execution pri
- 7.8 High severity
Android: Incorrect Authorization
In showNextSecurityScreenOrFinish of KeyguardSecurityContainerController.java, there is a possible way to access the lock screen during device setup due to a logic error in the code. This could lead to local escalation of privilege with no additional execution
- 7.8 High severity
Android: Integer Overflow or Wraparound
In rw_i93_send_to_upper of rw_i93.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- 7.8 High severity
Android: Inadequate Encryption Strength
In updatePictureInPictureMode of ActivityRecord.java, there is a possible bypass of background launch restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interacti
- 9.8 Critical severity
Android: Improper Restriction of XML External Entity Reference
In getPendingIntentLaunchFlags of ActivityOptions.java, there is a possible elevation of privilege due to a confused deputy with no additional execution privileges needed. User interaction is not needed for exploitation.
- 7.8 High severity
SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T61…: Missing Authorization
In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.