Google Android vulnerabilities

9,646 known vulnerabilities affecting google/android.

Total CVEs
9,646
CISA KEV
48
actively exploited
Public exploits
89
Exploited in wild
44
Severity breakdown
CRITICAL883HIGH5184MEDIUM3317LOW260UNKNOWN2

Vulnerabilities

Page 131 of 483
CVE-2023-20717MEDIUMCVSS 4.1v11.0v12.0+1 more2023-05-15
CVE-2023-20717 [MEDIUM] CVE-2023-20717: In vcu, there is a possible leak of dma buffer due to a race condition. This could lead to local inf In vcu, there is a possible leak of dma buffer due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07645185; Issue ID: ALPS07645185.
nvd
CVE-2023-20720MEDIUMCVSS 6.7v12.0v13.02023-05-15
CVE-2023-20720 [MEDIUM] CWE-20 CVE-2023-20720: In pqframework, there is a possible out of bounds read due to a missing bounds check. This could lea In pqframework, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629586; Issue ID: ALPS07629586.
nvd
CVE-2023-20700MEDIUMCVSS 6.7v11.0v12.02023-05-15
CVE-2023-20700 [MEDIUM] CWE-787 CVE-2023-20700: In widevine, there is a possible out of bounds write due to a logic error. This could lead to local In widevine, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07643304; Issue ID: ALPS07643304.
nvd
CVE-2023-20705MEDIUMCVSS 5.5v12.0v13.02023-05-15
CVE-2023-20705 [MEDIUM] CWE-20 CVE-2023-20705: In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to loc In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07767870; Issue ID: ALPS07767870.
nvd
CVE-2023-20719MEDIUMCVSS 4.4v12.0v13.02023-05-15
CVE-2023-20719 [MEDIUM] CWE-20 CVE-2023-20719: In pqframework, there is a possible out of bounds read due to a missing bounds check. This could lea In pqframework, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629583; Issue ID: ALPS07629583.
nvd
CVE-2023-20722MEDIUMCVSS 6.7v12.0v13.02023-05-15
CVE-2023-20722 [MEDIUM] CWE-20 CVE-2023-20722: In m4u, there is a possible out of bounds write due to improper input validation. This could lead to In m4u, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07771518; Issue ID: ALPS07680084.
nvd
CVE-2023-20708MEDIUMCVSS 6.7v11.0v12.0+1 more2023-05-15
CVE-2023-20708 [MEDIUM] CWE-20 CVE-2023-20708: In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07581655; Issue ID: ALPS07581655.
nvd
CVE-2023-20726LOWCVSS 3.3v11.0v12.0+1 more2023-05-15
CVE-2023-20726 [LOW] CWE-862 CVE-2023-20726: In mnld, there is a possible leak of GPS location due to a missing permission check. This could lead In mnld, there is a possible leak of GPS location due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07735968 / ALPS07884552 (For MT6880, MT6890, MT6980, MT6980D and MT6990 only); Issue ID: ALPS07735968 / ALPS07
nvdandroid
CVE-2022-48247HIGHCVSS 7.8v10.0v11.0+2 more2023-05-09
CVE-2022-48247 [HIGH] CWE-862 CVE-2022-48247: In audio service, there is a possible missing permission check. This could lead to local escalation In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
nvd
CVE-2022-48368HIGHCVSS 7.8v10.0v11.0+2 more2023-05-09
CVE-2022-48368 [HIGH] CWE-862 CVE-2022-48368: In audio service, there is a possible missing permission check. This could lead to local escalation In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
nvd
CVE-2022-44433HIGHCVSS 7.8v10.02023-05-09
CVE-2022-44433 [HIGH] CWE-862 CVE-2022-44433: In phoneEx service, there is a possible missing permission check. This could lead to local escalatio In phoneEx service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
nvd
CVE-2022-48249HIGHCVSS 7.8v10.0v11.0+2 more2023-05-09
CVE-2022-48249 [HIGH] CWE-862 CVE-2022-48249: In audio service, there is a possible missing permission check. This could lead to local escalation In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
nvd
CVE-2022-48244HIGHCVSS 7.8v10.0v11.0+2 more2023-05-09
CVE-2022-48244 [HIGH] CWE-862 CVE-2022-48244: In audio service, there is a possible missing permission check. This could lead to local escalation In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
nvd
CVE-2022-48248HIGHCVSS 7.8v10.0v11.0+2 more2023-05-09
CVE-2022-48248 [HIGH] CWE-862 CVE-2022-48248: In audio service, there is a possible missing permission check. This could lead to local escalation In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
nvd
CVE-2022-48388HIGHCVSS 7.8v10.0v11.0+2 more2023-05-09
CVE-2022-48388 [HIGH] CWE-862 CVE-2022-48388: In powerEx service, there is a possible missing permission check. This could lead to local escalatio In powerEx service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
nvd
CVE-2022-48250HIGHCVSS 7.8v10.0v11.0+2 more2023-05-09
CVE-2022-48250 [HIGH] CWE-862 CVE-2022-48250: In audio service, there is a possible missing permission check. This could lead to local escalation In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
nvd
CVE-2022-48383HIGHCVSS 7.8v10.0v11.0+2 more2023-05-09
CVE-2022-48383 [HIGH] CWE-862 CVE-2022-48383: .In srtd service, there is a possible missing permission check. This could lead to local escalation .In srtd service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
nvd
CVE-2022-48384HIGHCVSS 7.8v10.0v11.0+2 more2023-05-09
CVE-2022-48384 [HIGH] CWE-862 CVE-2022-48384: In srtd service, there is a possible missing permission check. This could lead to local escalation o In srtd service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
nvd
CVE-2022-48369HIGHCVSS 7.8v10.0v11.0+2 more2023-05-09
CVE-2022-48369 [HIGH] CWE-862 CVE-2022-48369: In audio service, there is a possible missing permission check. This could lead to local escalation In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
nvd
CVE-2022-48243HIGHCVSS 7.8v10.0v11.0+2 more2023-05-09
CVE-2022-48243 [HIGH] CWE-862 CVE-2022-48243: In audio service, there is a possible missing permission check. This could lead to local escalation In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
nvd
← Previous131 / 483Next →