Android vulnerabilities

1,228 known vulnerabilities in Android from Google. 1,223 are rated high or critical, and 16 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Samsung Mobile Devices: NULL Pointer Dereference

  CVE-2022-26094Apr 11, 2022Samsung

  Null pointer dereference vulnerability in parser_auxC function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacker.

• 9.8 Critical severity

  Samsung Mobile Devices: NULL Pointer Dereference

  CVE-2022-26093Apr 11, 2022Samsung

  Null pointer dereference vulnerability in parser_irot function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacker.

• 7.8 High severity

  Samsung Mobile Devices: Incorrect Default Permissions

  CVE-2022-25815Mar 10, 2022Samsung

  PendingIntent hijacking vulnerability in Weather application prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent.

• 7.8 High severity

  Samsung Mobile Devices: Incorrect Default Permissions

  CVE-2022-25814Mar 10, 2022Samsung

  PendingIntent hijacking vulnerability in Wearable Manager Installer prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent.

• 7.8 High severity

  Samsung Mobile Devices: Improper Privilege Management

  CVE-2022-24931Mar 10, 2022Samsung

  Improper access control vulnerability in dynamic receiver in ApkInstaller prior to SMR MAR-2022 Release allows unauthorized attackers to execute arbitrary activity without a proper permission

• 7.8 High severity

  MT6580, MT6739, MT6750, MT6761, MT6762…: Missing Authorization

  CVE-2022-20054Mar 10, 2022MediaTek

  In ims service, there is a possible AT command injection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219083

• 7.8 High severity

  MT6731, MT6732, MT6735, MT6737, MT6739…: Missing Authorization

  CVE-2022-20053Mar 10, 2022MediaTek

  In ims service, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219

• 7.8 High severity

  MT5816, MT5835, MT6885, MT6893, MT9900…: Out-of-bounds Write

  CVE-2022-20048Mar 10, 2022MediaTek

  In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05917502; I

• 7.8 High severity

  MT5816, MT5835, MT6885, MT6893, MT9900…: Out-of-bounds Write

  CVE-2022-20047Mar 10, 2022MediaTek

  In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05917489; I

• 7.1 High severity

  PendingIntent hijacking vulnerability in KnoxPrivacyNoticeReceiver prior to SMR Feb-2022…

  CVE-2022-23427Feb 11, 2022Samsung

  PendingIntent hijacking vulnerability in KnoxPrivacyNoticeReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission via implicit Intent.

• 9.8 Critical severity

  Improper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attackers…

  CVE-2022-23425Feb 11, 2022Samsung

  Improper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attackers to send arbitrary NAS signaling messages with fake base station.

• 7.8 High severity

  MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385: Use After Free

  CVE-2022-20045Feb 9, 2022MediaTek

  In Bluetooth, there is a possible service crash due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06126820; Issue ID: ALPS061

• 7.8 High severity

  MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385: Use After Free

  CVE-2022-20044Feb 9, 2022MediaTek

  In Bluetooth, there is a possible service crash due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06126814; Issue ID: ALPS061

• 7.8 High severity

  MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385: Missing Authorization

  CVE-2022-20043Feb 9, 2022MediaTek

  In Bluetooth, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0614817

• 7.8 High severity

  MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385: Missing Authorization

  CVE-2022-20041Feb 9, 2022MediaTek

  In Bluetooth, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0610859

• 7.8 High severity

  MT6735, MT6737, MT6739, MT6755, MT6757…: Out-of-bounds Write

  CVE-2022-20040Feb 9, 2022MediaTek

  In power_hal_manager_service, there is a possible permission bypass due to a stack-based buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID

• 7.8 High severity

  MT6580, MT6582E, MT6582H, MT6582T, MT6582W…: Use After Free

  CVE-2022-20031Feb 9, 2022MediaTek

  In fb driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05850708; Issue ID: ALP

• 7.8 High severity

  MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385: Out-of-bounds Write

  CVE-2022-20028Feb 9, 2022MediaTek

  In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06198663; Issue

• 7.8 High severity

  MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385: Out-of-bounds Write

  CVE-2022-20027Feb 9, 2022MediaTek

  In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06126826; Issue

• 7.8 High severity

  MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385: Out-of-bounds Write

  CVE-2022-20026Feb 9, 2022MediaTek

  In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06126827; Issue

• 7.8 High severity

  MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385: Out-of-bounds Write

  CVE-2022-20025Feb 9, 2022MediaTek

  In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06126832; Issue

• 7.8 High severity

  MT6580, MT6739, MT6750, MT6761, MT6762…: Missing Authorization

  CVE-2022-20024Feb 9, 2022MediaTek

  In system service, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219064

• 7.8 High severity

  Samsung Mobile Devices Use-After-Free Exploited

  CVE-2022-22265Jan 10, 2022Samsung

  An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution.

• 7.1 High severity

  Improper sanitization of incoming intent in Dressroom prior to SMR Jan-2022 Release 1 allows…

  CVE-2022-22264Jan 10, 2022Samsung

  Improper sanitization of incoming intent in Dressroom prior to SMR Jan-2022 Release 1 allows local attackers to read and write arbitrary files without permission.

• 7.8 High severity

  MT6580, MT6739, MT6750, MT6750S, MT6753…: Integer Overflow or Wraparound

  CVE-2022-20012Jan 4, 2022MediaTek

  In mdp driver, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05836478; Issue ID:

• 6.1 Medium severity

  Google Chromium Intents Improper Input Validation Exploited

  CVE-2021-38000Nov 23, 2021GoogleEPSS 4.95%

  Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page.

• 9.6 Critical severity

  Google Chrome for Android UI Heap Buffer Overflow Exploited

  CVE-2020-16010Nov 3, 2020GoogleEPSS 6.36%

  Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

• 7.8 High severity

  Android OS Privilege Escalation Exploited

  CVE-2011-1823Jun 9, 2011GoogleEPSS 41.4%

  The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only signed