Android vulnerabilities

1,228 known vulnerabilities in Android from Google. 1,223 are rated high or critical, and 16 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T61…: Missing Authorization

  CVE-2023-30928Jul 12, 2023Unisoc

  In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

• 7.8 High severity

  MT6580, MT6735, MT6737, MT6739, MT6753…: Missing Authorization

  CVE-2023-20773Jul 4, 2023MediaTek

  In vow, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07611449; Iss

• 7.5 High severity

  MT6739, MT6895, MT6983, MT8167, MT8168…: Integer Overflow or Wraparound

  CVE-2023-20693Jul 4, 2023MediaTek

  In wlan firmware, there is possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07664711; Issue ID: ALPS07

• 7.5 High severity

  MT6739, MT8167, MT8168, MT8321, MT8365…: Improper Handling of Exceptional Conditions

  CVE-2023-20692Jul 4, 2023MediaTek

  In wlan firmware, there is possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07664720; Issue ID: ALPS07

• 7.5 High severity

  MT6739, MT8167, MT8321, MT8365, MT8385…: Integer Overflow or Wraparound

  CVE-2023-20691Jul 4, 2023MediaTek

  In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07664731; Issue ID: ALPS0766

• 7.5 High severity

  MT6739, MT8167, MT8168, MT8321, MT8365…: Integer Overflow or Wraparound

  CVE-2023-20690Jul 4, 2023MediaTek

  In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07664735; Issue ID: ALPS0766

• 7.5 High severity

  MT6739, MT8167, MT8321, MT8365, MT8385…: Integer Overflow or Wraparound

  CVE-2023-20689Jul 4, 2023MediaTek

  In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07664741; Issue ID: ALPS0766

• 5.5 Medium severity

  Android Pixel Information Disclosure Exploited

  CVE-2023-21237Jun 28, 2023Android

  In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or insufficient UI. This could lead to local information disclosure with no additional execution privileges needed. User i

• 7.8 High severity

  SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T61…: Missing Authorization

  CVE-2023-30864Jun 6, 2023Unisoc

  In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

• 7.8 High severity

  SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T61…: Missing Authorization

  CVE-2023-30863Jun 6, 2023Unisoc

  In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

• 7.8 High severity

  SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T61…: Missing Authorization

  CVE-2022-48392Jun 6, 2023Unisoc

  In dialer service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

• 7.8 High severity

  SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T61…: Missing Authorization

  CVE-2022-48390Jun 6, 2023Unisoc

  In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

• 7.8 High severity

  SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T61…: Missing Authorization

  CVE-2022-48388May 9, 2023Unisoc

  In powerEx service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

• 7.8 High severity

  SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T61…: Missing Authorization

  CVE-2022-48384May 9, 2023Unisoc

  In srtd service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

• 7.8 High severity

  SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T61…: Missing Authorization

  CVE-2022-48383May 9, 2023Unisoc

  .In srtd service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

• 7.8 High severity

  SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T61…: Missing Authorization

  CVE-2022-48369May 9, 2023Unisoc

  In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

• 7.8 High severity

  SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T61…: Missing Authorization

  CVE-2022-48368May 9, 2023Unisoc

  In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

• 7.8 High severity

  SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T61…: Missing Authorization

  CVE-2022-48250May 9, 2023Unisoc

  In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

• 7.8 High severity

  SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T61…: Missing Authorization

  CVE-2022-48249May 9, 2023Unisoc

  In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

• 7.8 High severity

  SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T61…: Missing Authorization

  CVE-2022-48248May 9, 2023Unisoc

  In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

• 7.8 High severity

  SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T61…: Missing Authorization

  CVE-2022-48247May 9, 2023Unisoc

  In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

• 7.8 High severity

  SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T61…: Missing Authorization

  CVE-2022-48246May 9, 2023Unisoc

  In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

• 7.8 High severity

  SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T61…: Missing Authorization

  CVE-2022-48245May 9, 2023Unisoc

  In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

• 7.8 High severity

  SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T61…: Missing Authorization

  CVE-2022-48244May 9, 2023Unisoc

  In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

• 7.8 High severity

  SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T61…: Missing Authorization

  CVE-2022-48243May 9, 2023Unisoc

  In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

• 7.8 High severity

  SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T61…: Missing Authorization

  CVE-2022-44433May 9, 2023Unisoc

  In phoneEx service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

• 7.8 High severity

  MT2715, MT6580, MT6735, MT6737, MT6739…: Improper Privilege Management

  CVE-2023-20655Apr 6, 2023MediaTek

  In mmsdk, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07203022; Issue ID: AL

• 7.8 High severity

  Android: Incorrect Authorization

  CVE-2023-20971Mar 24, 2023Google

  In removePermission of PermissionManagerServiceImpl.java, there is a possible way to obtain dangerous permissions without user consent due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges ne

• 7.8 High severity

  Android: Use After Free

  CVE-2023-20938Feb 28, 2023Android

  In binder_transaction_buffer_release of binder.c, there is a possible use after free due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitat

• 7.5 High severity

  Samsung Mobile Devices: Improper Authentication

  CVE-2023-21419Feb 9, 2023Samsung

  An improper implementation logic in Secure Folder prior to SMR Jan-2023 Release 1 allows the Secure Folder container remain unlocked under certain condition.

• 7.8 High severity

  MT6580, MT6735, MT6739, MT6753, MT6757…: Out-of-bounds Write

  CVE-2022-32635Jan 3, 2023MediaTek

  In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07573237; Issue ID: A

• 7.4 High severity

  Samsung Mobile Devices: Time-of-check Time-of-use (TOCTOU) Race Condition

  CVE-2022-39908Dec 8, 2022Samsung

  TOCTOU vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022 Release 1 allows local attacker to perform Out-Of-Bounds Write.

• 7.8 High severity

  Samsung Mobile Devices: Integer Overflow or Wraparound

  CVE-2022-39907Dec 8, 2022Samsung

  Integer overflow vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022 Release 1 allows local attacker to perform Out-Of-Bounds Write.

• 7.8 High severity

  SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T61…: Missing Authorization

  CVE-2022-42778Dec 6, 2022Unisoc

  In windows manager service, there is a missing permission check. This could lead to set up windows manager service with no additional execution privileges needed.

• 7.8 High severity

  SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T61…: Missing Authorization

  CVE-2022-42777Dec 6, 2022Unisoc

  In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.

• 7.8 High severity

  SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T61…: Missing Authorization

  CVE-2022-42776Dec 6, 2022Unisoc

  In UscAIEngine service, there is a missing permission check. This could lead to set up UscAIEngine service with no additional execution privileges needed.

• 7.8 High severity

  SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T61…: Missing Authorization

  CVE-2022-39102Dec 6, 2022Unisoc

  In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.

• 7.8 High severity

  SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T61…: Missing Authorization

  CVE-2022-39101Dec 6, 2022Unisoc

  In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.

• 7.8 High severity

  SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T61…: Missing Authorization

  CVE-2022-39100Dec 6, 2022Unisoc

  In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.

• 7.8 High severity

  SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T61…: Missing Authorization

  CVE-2022-39099Dec 6, 2022Unisoc

  In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.