Google Android vulnerabilities
6,771 known vulnerabilities affecting google/android.
Total CVEs
6,771
CISA KEV
13
actively exploited
Public exploits
50
Exploited in wild
24
Severity breakdown
CRITICAL472HIGH2821MEDIUM3190LOW252UNKNOWN36
Vulnerabilities
Page 220 of 339
CVE-2023-48422P4MEDIUMCVSS 5.5vAndroid kernel2023-12-08
CVE-2023-48422 [MEDIUM] CWE-125 CVE-2023-48422: In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds ch
In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
nvd
CVE-2018-9379P4MEDIUMCVSS 5.5v6.0v6.0.1+6 more2025-01-17
CVE-2018-9379 [MEDIUM] CWE-200 CVE-2018-9379: In multiple functions of MiniThumbFile.java, there is a possible way to view the thumbnails of delet
In multiple functions of MiniThumbFile.java, there is a possible way to view the thumbnails of deleted photos due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
nvd
CVE-2017-13321P4MEDIUMCVSS 5.5v8.0v8.1+1 more2024-11-27
CVE-2017-13321 [MEDIUM] CWE-125 CVE-2017-13321: In SensorService::isDataInjectionEnabled of frameworks/native/services/sensorservice/SensorService.c
In SensorService::isDataInjectionEnabled of frameworks/native/services/sensorservice/SensorService.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
nvd
CVE-2023-33892P4MEDIUMCVSS 5.5v10.0v11.0+2 more2023-07-12
CVE-2023-33892 [MEDIUM] CWE-862 CVE-2023-33892: In fastDial service, there is a missing permission check. This could lead to local information discl
In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
nvd
CVE-2023-33884P4MEDIUMCVSS 5.5v10.0v11.0+2 more2023-07-12
CVE-2023-33884 [MEDIUM] CWE-862 CVE-2023-33884: In telephony service, there is a missing permission check. This could lead to local information disc
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
nvd
CVE-2023-33885P4MEDIUMCVSS 5.5v10.0v11.0+2 more2023-07-12
CVE-2023-33885 [MEDIUM] CWE-862 CVE-2023-33885: In telephony service, there is a missing permission check. This could lead to local information disc
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
nvd
CVE-2023-33893P4MEDIUMCVSS 5.5v10.0v11.0+2 more2023-07-12
CVE-2023-33893 [MEDIUM] CWE-862 CVE-2023-33893: In fastDial service, there is a missing permission check. This could lead to local information discl
In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
nvd
CVE-2023-33888P4MEDIUMCVSS 5.5v10.0v11.0+2 more2023-07-12
CVE-2023-33888 [MEDIUM] CWE-862 CVE-2023-33888: In telephony service, there is a missing permission check. This could lead to local information disc
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
nvd
CVE-2023-33887P4MEDIUMCVSS 5.5v10.0v11.0+2 more2023-07-12
CVE-2023-33887 [MEDIUM] CWE-862 CVE-2023-33887: In telephony service, there is a missing permission check. This could lead to local information disc
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
nvd
CVE-2023-33899P4MEDIUMCVSS 5.5v10.0v11.0+2 more2023-07-12
CVE-2023-33899 [MEDIUM] CWE-862 CVE-2023-33899: In telephony service, there is a missing permission check. This could lead to local information disc
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
nvd
CVE-2023-33891P4MEDIUMCVSS 5.5v10.0v11.0+2 more2023-07-12
CVE-2023-33891 [MEDIUM] CWE-862 CVE-2023-33891: In telephony service, there is a missing permission check. This could lead to local information disc
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
nvd
CVE-2023-33895P4MEDIUMCVSS 5.5v10.0v11.0+2 more2023-07-12
CVE-2023-33895 [MEDIUM] CWE-862 CVE-2023-33895: In fastDial service, there is a missing permission check. This could lead to local information discl
In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
nvd
CVE-2023-33894P4MEDIUMCVSS 5.5v10.0v11.0+2 more2023-07-12
CVE-2023-33894 [MEDIUM] CWE-862 CVE-2023-33894: In fastDial service, there is a missing permission check. This could lead to local information discl
In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
nvd
CVE-2023-33883P4MEDIUMCVSS 5.5v10.0v11.0+2 more2023-07-12
CVE-2023-33883 [MEDIUM] CWE-862 CVE-2023-33883: In telephony service, there is a missing permission check. This could lead to local information disc
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
nvd
CVE-2023-33889P4MEDIUMCVSS 5.5v10.0v11.0+2 more2023-07-12
CVE-2023-33889 [MEDIUM] CWE-862 CVE-2023-33889: In telephony service, there is a missing permission check. This could lead to local information disc
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
nvd
CVE-2023-33890P4MEDIUMCVSS 5.5v10.0v11.0+2 more2023-07-12
CVE-2023-33890 [MEDIUM] CWE-862 CVE-2023-33890: In telephony service, there is a missing permission check. This could lead to local information disc
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
nvd
CVE-2023-33886P4MEDIUMCVSS 5.5v10.0v11.0+2 more2023-07-12
CVE-2023-33886 [MEDIUM] CWE-862 CVE-2023-33886: In telephony service, there is a missing permission check. This could lead to local information disc
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
nvd
CVE-2023-33900P4MEDIUMCVSS 5.5v10.0v11.0+2 more2023-07-12
CVE-2023-33900 [MEDIUM] CWE-862 CVE-2023-33900: In telephony service, there is a missing permission check. This could lead to local information disc
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
nvd
CVE-2024-22010P4MEDIUMCVSS 5.5v13.0v132024-03-11
CVE-2024-22010 [MEDIUM] CWE-125 CVE-2024-22010: In dvfs_plugin_caller of fvp.c, there is a possible out of bounds read due to a missing bounds check
In dvfs_plugin_caller of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
nvd
CVE-2025-22430P4MEDIUMCVSS 5.5v15.0v152025-09-02
CVE-2025-22430 [MEDIUM] CWE-200 CVE-2025-22430: In isInSignificantPlace of multiple files, there is a possible way to access sensitive information d
In isInSignificantPlace of multiple files, there is a possible way to access sensitive information due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
nvd