Google Android vulnerabilities
6,770 known vulnerabilities affecting google/android.
Total CVEs
6,770
CISA KEV
13
actively exploited
Public exploits
50
Exploited in wild
24
Severity breakdown
CRITICAL471HIGH2821MEDIUM3190LOW252UNKNOWN36
Vulnerabilities
Page 167 of 339
CVE-2014-9883P4HIGHCVSS 7.8≤ 6.0.12016-08-06
CVE-2014-9883 [HIGH] CWE-191 CVE-2014-9883: Integer overflow in drivers/char/diag/diag_dci.c in the Qualcomm components in Android before 2016-0
Integer overflow in drivers/char/diag/diag_dci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices allows attackers to gain privileges or obtain sensitive information via a crafted application, aka Android internal bug 28769912 and Qualcomm internal bug CR565160.
nvd
CVE-2016-3769P4HIGHCVSS 7.8≤ 6.0.12016-07-11
CVE-2016-3769 [HIGH] CWE-264 CVE-2016-3769: The NVIDIA video driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain pri
The NVIDIA video driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28376656.
nvd
CVE-2016-3800P4HIGHCVSS 7.8≤ 6.0.12016-07-11
CVE-2016-3800 [HIGH] CWE-264 CVE-2016-3800: The MediaTek video driver in Android before 2016-07-05 on Android One devices allows attackers to ga
The MediaTek video driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28175027 and MediaTek internal bug ALPS02693739.
nvd
CVE-2016-3799P4HIGHCVSS 7.8≤ 6.0.12016-07-11
CVE-2016-3799 [HIGH] CWE-264 CVE-2016-3799: The MediaTek video driver in Android before 2016-07-05 on Android One devices allows attackers to ga
The MediaTek video driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28175025 and MediaTek internal bug ALPS02693738.
nvd
CVE-2016-2466P4HIGHCVSS 7.8≤ 6.0.12016-06-13
CVE-2016-2466 [HIGH] CVE-2016-2466: The Qualcomm sound driver in Android before 2016-06-01 on Nexus 6 devices allows attackers to gain p
The Qualcomm sound driver in Android before 2016-06-01 on Nexus 6 devices allows attackers to gain privileges via a crafted application, aka internal bug 27947307.
nvd
CVE-2016-2470P4HIGHCVSS 7.8≤ 6.0.12016-06-13
CVE-2016-2470 [HIGH] CVE-2016-2470: The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to
The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 27662174.
nvd
CVE-2016-2467P4HIGHCVSS 7.8≤ 6.0.12016-06-13
CVE-2016-2467 [HIGH] CVE-2016-2467: The Qualcomm sound driver in Android before 2016-06-01 on Nexus 5 devices allows attackers to gain p
The Qualcomm sound driver in Android before 2016-06-01 on Nexus 5 devices allows attackers to gain privileges via a crafted application, aka internal bug 28029010.
nvd
CVE-2016-2490P4HIGHCVSS 7.8≤ 6.0.12016-06-13
CVE-2016-2490 [HIGH] CWE-264 CVE-2016-2490: The NVIDIA camera driver in Android before 2016-06-01 on Nexus 9 devices allows attackers to gain pr
The NVIDIA camera driver in Android before 2016-06-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27533373.
nvd
CVE-2016-2471P4HIGHCVSS 7.8≤ 6.0.12016-06-13
CVE-2016-2471 [HIGH] CVE-2016-2471: The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to
The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 27773913.
nvd
CVE-2016-2472P4HIGHCVSS 7.8≤ 6.0.12016-06-13
CVE-2016-2472 [HIGH] CVE-2016-2472: The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to
The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 27776888.
nvd
CVE-2016-2436P4HIGHCVSS 7.8≤ 6.0.12016-05-09
CVE-2016-2436 [HIGH] CWE-264 CVE-2016-2436: The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain pri
The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27299111.
nvd
CVE-2016-3844P4HIGHCVSS 7.8≤ 6.0.12016-08-05
CVE-2016-3844 [HIGH] CWE-264 CVE-2016-3844: mediaserver in Android before 2016-08-05 on Nexus 9 and Pixel C devices allows attackers to gain pri
mediaserver in Android before 2016-08-05 on Nexus 9 and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 28299517.
nvd
CVE-2016-2488P4HIGHCVSS 7.8≤ 6.0.12016-06-13
CVE-2016-2488 [HIGH] CWE-264 CVE-2016-2488: The Qualcomm camera driver in Android before 2016-06-01 on Nexus 5, 5X, 6, 6P, and 7 (2013) devices
The Qualcomm camera driver in Android before 2016-06-01 on Nexus 5, 5X, 6, 6P, and 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 27600832.
nvd
CVE-2016-2493P4HIGHCVSS 7.8≤ 6.0.12016-06-13
CVE-2016-2493 [HIGH] CWE-264 CVE-2016-2493: The Broadcom Wi-Fi driver in Android before 2016-06-01 on Nexus 5, Nexus 6, Nexus 6P, Nexus 7 (2013)
The Broadcom Wi-Fi driver in Android before 2016-06-01 on Nexus 5, Nexus 6, Nexus 6P, Nexus 7 (2013), Nexus Player, and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 26571522.
nvd
CVE-2013-7373P4HIGHCVSS 7.5≤ 4.3.1v1.0+36 more2014-04-29
CVE-2013-7373 [HIGH] CWE-200 CVE-2013-7373: Android before 4.4 does not properly arrange for seeding of the OpenSSL PRNG, which makes it easier
Android before 4.4 does not properly arrange for seeding of the OpenSSL PRNG, which makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging use of the PRNG within multiple applications.
nvd
CVE-2015-1530P4HIGHCVSS 7.8fixed in 5.12020-01-24
CVE-2015-1530 [HIGH] CWE-190 CVE-2015-1530: media/libmedia/IAudioPolicyService.cpp in Android before 5.1 allows attackers to execute arbitrary c
media/libmedia/IAudioPolicyService.cpp in Android before 5.1 allows attackers to execute arbitrary code with media_server privileges or cause a denial of service (integer overflow) via a crafted application that provides an invalid array size.
nvd
CVE-2014-3164P4HIGHCVSS 7.5≤ 4.4.42017-10-18
CVE-2014-3164 [HIGH] CWE-476 CVE-2014-3164: cmds/servicemanager/service_manager.c in Android before commit 7d42a3c31ba78a418f9bdde0e0ab951469f32
cmds/servicemanager/service_manager.c in Android before commit 7d42a3c31ba78a418f9bdde0e0ab951469f321b5 allows attackers to cause a denial of service (NULL pointer dereference, or out-of-bounds write) via vectors related to binder passed lengths.
nvd
CVE-2016-3847P4HIGHCVSS 7.8≤ 6.0.12016-08-05
CVE-2016-3847 [HIGH] CWE-264 CVE-2016-3847: The NVIDIA media driver in Android before 2016-08-05 on Nexus 9 devices allows attackers to gain pri
The NVIDIA media driver in Android before 2016-08-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 28871433.
nvd
CVE-2016-3765P4HIGHCVSS 7.7v6.0v6.0.12016-07-11
CVE-2016-3765 [HIGH] CWE-200 CVE-2016-3765: decoder/impeg2d_bitstream.c in mediaserver in Android 6.x before 2016-07-01 allows attackers to obta
decoder/impeg2d_bitstream.c in mediaserver in Android 6.x before 2016-07-01 allows attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted application, aka internal bug 28168413.
nvd
CVE-2016-6692P4CRITICALCVSS 9.8≤ 7.02016-10-10
CVE-2016-6692 [CRITICAL] CWE-476 CVE-2016-6692: drivers/video/msm/mdss/mdss_mdp_pp.c in the Qualcomm MDSS driver in Android before 2016-10-05 allows
drivers/video/msm/mdss/mdss_mdp_pp.c in the Qualcomm MDSS driver in Android before 2016-10-05 allows attackers to cause a denial of service (invalid pointer access) or possibly have unspecified other impact via unknown vectors, aka Qualcomm internal bug CR 1004933.
nvd