Google Android vulnerabilities

CVE-2018-9476 [CRITICAL] CWE-416 CVE-2018-9476: In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible use-after-free due to improper loc In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible use-after-free due to improper locking. This could lead to remote escalation of privilege in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android ID: A-10969911

CVE-2018-9446 [CRITICAL] CWE-787 CVE-2018-9446: In smp_br_state_machine_event of smp_br_main.cc, there is a possible out of bounds write due to memo In smp_br_state_machine_event of smp_br_main.cc, there is a possible out of bounds write due to memory corruption. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Andro

CVE-2019-2036 [CRITICAL] CVE-2019-2036: In okToConnect of HidHostService.java, there is a possible permission bypass due to an incorrect sta In okToConnect of HidHostService.java, there is a possible permission bypass due to an incorrect state check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-79703832

CVE-2017-13229 [CRITICAL] CWE-20 CVE-2017-13229: A remote code execution vulnerability in the Android media framework (n/a). Product: Android. Versio A remote code execution vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID: A-68160703.

CVE-2017-13160 [CRITICAL] CWE-125 CVE-2017-13160: A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-37160362.

CVE-2021-0516 [CRITICAL] CWE-125 CVE-2021-0516: In p2p_process_prov_disc_req of p2p_pd.c, there is a possible out of bounds read and write due to a In p2p_process_prov_disc_req of p2p_pd.c, there is a possible out of bounds read and write due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-1816604

CVE-2019-2045 [CRITICAL] CWE-787 CVE-2019-2045: In JSCallTyper of typer.cc, there is an out of bounds write due to an incorrect bounds check. This c In JSCallTyper of typer.cc, there is an out of bounds write due to an incorrect bounds check. This could lead to remote code execution in the proxy auto-config with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.1 Android-9 Andro

CVE-2020-0354 [CRITICAL] CWE-787 CVE-2020-0354: In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-143604331

CVE-2020-0217 [CRITICAL] CWE-787 CVE-2020-0217: In RW_T4tPresenceCheck of rw_t4t.cc, there is a possible out of bounds write due to a missing bounds In RW_T4tPresenceCheck of rw_t4t.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141331405

CVE-2023-20965 [CRITICAL] CWE-522 CVE-2023-20965: In processMessageImpl of ClientModeImpl.java, there is a possible credential disclosure in the TOFU In processMessageImpl of ClientModeImpl.java, there is a possible credential disclosure in the TOFU flow due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-21096 [CRITICAL] CWE-416 CVE-2023-21096: In OnWakelockReleased of attribution_processor.cc, there is a use after free that could lead to remo In OnWakelockReleased of attribution_processor.cc, there is a use after free that could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-254774758

CVE-2022-25818 [CRITICAL] CWE-20 CVE-2022-25818: Improper boundary check in UWB stack prior to SMR Mar-2022 Release 1 allows arbitrary code execution Improper boundary check in UWB stack prior to SMR Mar-2022 Release 1 allows arbitrary code execution.

CVE-2023-21217 [CRITICAL] CVE-2023-21217: In PMRWritePMPageList of TBD, there is a possible out of bounds write due to an integer overflow. Th In PMRWritePMPageList of TBD, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2018-9467 [CRITICAL] CWE-276 CVE-2018-9467: In the getHost() function of UriTest.java, there is the possibility of incorrect web origin determin In the getHost() function of UriTest.java, there is the possibility of incorrect web origin determination. This could lead to incorrect security decisions with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-32911 [CRITICAL] CWE-327 CVE-2024-32911: There is a possible escalation of privilege due to improperly used crypto. This could lead to remote There is a possible escalation of privilege due to improperly used crypto. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-48609 [CRITICAL] CWE-400 CVE-2025-48609: In multiple functions of MmsProvider.java, there is a possible way to arbitrarily delete files which In multiple functions of MmsProvider.java, there is a possible way to arbitrarily delete files which affect telephony, SMS, and MMS functionalities due to a path traversal error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-48534 [HIGH] CWE-693 CVE-2025-48534: In getDefaultCBRPackageName of CellBroadcastHandler.java, there is a possible escalation of privileg In getDefaultCBRPackageName of CellBroadcastHandler.java, there is a possible escalation of privilege due to a logic error in the code. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-32925 [HIGH] CWE-787 CVE-2024-32925: In dhd_prot_txstatus_process of dhd_msgbuf.c, there is a possible out of bounds write due to a missi In dhd_prot_txstatus_process of dhd_msgbuf.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-36940 [HIGH] CWE-416 CVE-2025-36940: Use-After-Free vulnerability in a zircon kernel pager proxy (Fuchsia), which could lead to a Privile Use-After-Free vulnerability in a zircon kernel pager proxy (Fuchsia), which could lead to a Privilege Escalation from Userspace to Kernel (AP)

CVE-2018-9413 [HIGH] CWE-787 CVE-2018-9413: In handle_notification_response of btif_rc.cc, there is a possible out of bounds write due to a miss In handle_notification_response of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.