Google Android vulnerabilities
6,770 known vulnerabilities affecting google/android.
Total CVEs
6,770
CISA KEV
13
actively exploited
Public exploits
50
Exploited in wild
24
Severity breakdown
CRITICAL471HIGH2821MEDIUM3190LOW252UNKNOWN36
Vulnerabilities
Page 159 of 339
CVE-2016-3804P4HIGHCVSS 7.8≤ 6.0.12016-07-11
CVE-2016-3804 [HIGH] CWE-264 CVE-2016-3804: The MediaTek power management driver in Android before 2016-07-05 on Android One devices allows atta
The MediaTek power management driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28332766 and MediaTek internal bug ALPS02694410.
nvd
CVE-2016-3771P4HIGHCVSS 7.8≤ 6.0.12016-07-11
CVE-2016-3771 [HIGH] CWE-264 CVE-2016-3771: The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain pri
The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 29007611 and MediaTek internal bug ALPS02703102.
nvd
CVE-2016-3773P4HIGHCVSS 7.8≤ 6.0.12016-07-11
CVE-2016-3773 [HIGH] CWE-264 CVE-2016-3773: The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain pri
The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 29008363 and MediaTek internal bug ALPS02703102.
nvd
CVE-2016-3770P4HIGHCVSS 7.8≤ 6.0.12016-07-11
CVE-2016-3770 [HIGH] CWE-264 CVE-2016-3770: The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain pri
The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28346752 and MediaTek internal bug ALPS02703102.
nvd
CVE-2016-3807P4HIGHCVSS 7.8≤ 6.0.12016-07-11
CVE-2016-3807 [HIGH] CWE-264 CVE-2016-3807: The serial peripheral interface driver in Android before 2016-07-05 on Nexus 5X and 6P devices allow
The serial peripheral interface driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 28402196.
nvd
CVE-2016-3805P4HIGHCVSS 7.8≤ 6.0.12016-07-11
CVE-2016-3805 [HIGH] CWE-264 CVE-2016-3805: The MediaTek power management driver in Android before 2016-07-05 on Android One devices allows atta
The MediaTek power management driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28333002 and MediaTek internal bug ALPS02694412.
nvd
CVE-2016-3793P4HIGHCVSS 7.8≤ 6.0.12016-07-11
CVE-2016-3793 [HIGH] CWE-264 CVE-2016-3793: The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain pr
The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28026625.
nvd
CVE-2016-2491P4HIGHCVSS 7.8≤ 6.0.12016-06-13
CVE-2016-2491 [HIGH] CWE-264 CVE-2016-2491: The NVIDIA camera driver in Android before 2016-06-01 on Nexus 9 devices allows attackers to gain pr
The NVIDIA camera driver in Android before 2016-06-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27556408.
nvd
CVE-2013-7457P4HIGHCVSS 7.8≤ 6.0.12016-07-11
CVE-2013-7457 [HIGH] CVE-2013-7457: Unspecified vulnerability in the Qualcomm components in Android before 2016-07-05 allows attackers t
Unspecified vulnerability in the Qualcomm components in Android before 2016-07-05 allows attackers to gain privileges via a crafted application.
nvd
CVE-2016-3832P4HIGHCVSS 7.8v4.0v4.0.1+20 more2016-08-05
CVE-2016-3832 [HIGH] CWE-264 CVE-2016-3832: The framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x befo
The framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 do not ensure that package data originated from the Package Manager, which allows attackers to bypass an unspecified protection mechanism via a crafted application, aka internal bug 28795098.
nvd
CVE-2016-3767P4HIGHCVSS 7.8≤ 6.0.12016-07-11
CVE-2016-3767 [HIGH] CWE-399 CVE-2016-3767: The MediaTek Wi-Fi driver in Android before 2016-07-05 on Android One devices allows attackers to ga
The MediaTek Wi-Fi driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28169363 and MediaTek internal bug ALPS02689526.
nvd
CVE-2016-3801P4HIGHCVSS 7.8≤ 6.0.12016-07-11
CVE-2016-3801 [HIGH] CWE-264 CVE-2016-3801: The MediaTek GPS driver in Android before 2016-07-05 on Android One devices allows attackers to gain
The MediaTek GPS driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28174914 and MediaTek internal bug ALPS02688853.
nvd
CVE-2016-3798P4HIGHCVSS 7.8≤ 6.0.12016-07-11
CVE-2016-3798 [HIGH] CWE-264 CVE-2016-3798: The MediaTek hardware sensor driver in Android before 2016-07-05 on Android One devices allows attac
The MediaTek hardware sensor driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28174490 and MediaTek internal bug ALPS02703105.
nvd
CVE-2016-3768P4HIGHCVSS 7.8≤ 6.0.12016-07-11
CVE-2016-3768 [HIGH] CWE-264 CVE-2016-3768: The Qualcomm performance component in Android before 2016-07-05 on Nexus 5, 6, 5X, 6P, and 7 (2013)
The Qualcomm performance component in Android before 2016-07-05 on Nexus 5, 6, 5X, 6P, and 7 (2013) devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28172137 and Qualcomm internal bug CR1010644.
nvd
CVE-2016-3808P4HIGHCVSS 7.8≤ 6.0.12016-07-11
CVE-2016-3808 [HIGH] CWE-264 CVE-2016-3808: The serial peripheral interface driver in Android before 2016-07-05 on Pixel C devices allows attack
The serial peripheral interface driver in Android before 2016-07-05 on Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 28430009.
nvd
CVE-2016-3811P4HIGHCVSS 7.8≤ 6.0.12016-07-11
CVE-2016-3811 [HIGH] CWE-264 CVE-2016-3811: The kernel video driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain pri
The kernel video driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 28447556.
nvd
CVE-2016-3806P4HIGHCVSS 7.8≤ 6.0.12016-07-11
CVE-2016-3806 [HIGH] CWE-264 CVE-2016-3806: The MediaTek display driver in Android before 2016-07-05 on Android One devices allows attackers to
The MediaTek display driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28402341 and MediaTek internal bug ALPS02715341.
nvd
CVE-2016-3933P4HIGHCVSS 7.8≤ 7.02016-10-10
CVE-2016-3933 [HIGH] CWE-264 CVE-2016-3933: mediaserver in Android before 2016-10-05 on Nexus 9 and Pixel C devices allows attackers to gain pri
mediaserver in Android before 2016-10-05 on Nexus 9 and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 29421408.
nvd
CVE-2016-3845P4HIGHCVSS 7.8≤ 6.0.12016-08-05
CVE-2016-3845 [HIGH] CWE-264 CVE-2016-3845: The video driver in the kernel in Android before 2016-08-05 on Nexus 5 devices allows attackers to g
The video driver in the kernel in Android before 2016-08-05 on Nexus 5 devices allows attackers to gain privileges via a crafted application, aka internal bug 28399876.
nvd
CVE-2016-3842P4HIGHCVSS 7.8≤ 6.0.12016-08-05
CVE-2016-3842 [HIGH] CWE-264 CVE-2016-3842: The Qualcomm GPU driver in Android before 2016-08-05 on Nexus 5X, 6, and 6P devices allows attackers
The Qualcomm GPU driver in Android before 2016-08-05 on Nexus 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28377352 and Qualcomm internal bug CR1002974.
nvd