Google Android vulnerabilities

CVE-2019-2064 [HIGH] CWE-787 CVE-2019-2064: In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead t In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-116469592

CVE-2019-2068 [HIGH] CWE-787 CVE-2019-2068: In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead t In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117099943

CVE-2019-2086 [HIGH] CWE-787 CVE-2019-2086: In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead t In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-114735603

CVE-2019-2070 [HIGH] CWE-787 CVE-2019-2070: In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead t In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117883804

CVE-2019-2141 [HIGH] CWE-787 CVE-2019-2141: In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112705155

CVE-2019-9303 [HIGH] CWE-190 CVE-2019-9303: In libFDK, there is a possible out of bounds write due to an integer overflow. This could lead to re In libFDK, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112661057

CVE-2019-2066 [HIGH] CWE-787 CVE-2019-2066: In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead t In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117100617

CVE-2019-2071 [HIGH] CWE-787 CVE-2019-2071: In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117216549

CVE-2019-2055 [HIGH] CWE-787 CVE-2019-2055: In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead t In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113164693

CVE-2022-21745 [HIGH] CWE-416 CVE-2022-21745: In WIFI Firmware, there is a possible memory corruption due to a use after free. This could lead to In WIFI Firmware, there is a possible memory corruption due to a use after free. This could lead to remote escalation of privilege, when devices are connecting to the attacker-controllable Wi-Fi hotspot, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06468872; Issue ID: ALPS06468872.

CVE-2023-21392 [HIGH] CWE-416 CVE-2023-21392: In Bluetooth, there is a possible way to corrupt memory due to a use after free. This could lead to In Bluetooth, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege when connecting to a Bluetooth device with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-21361 [HIGH] CWE-416 CVE-2023-21361: In Bluetooth, there is a possibility of code-execution due to a use after free. This could lead to p In Bluetooth, there is a possibility of code-execution due to a use after free. This could lead to paired device escalation of privilege in the privileged Bluetooth process with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-21085 [HIGH] CWE-787 CVE-2023-21085: In nci_snd_set_routing_cmd of nci_hmsgs.cc, there is a possible out of bounds write due to a missing In nci_snd_set_routing_cmd of nci_hmsgs.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID:

CVE-2021-0514 [HIGH] CWE-362 CVE-2021-0514: In several functions of the V8 library, there is a possible use after free due to a race condition. In several functions of the V8 library, there is a possible use after free due to a race condition. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-9 Android-11 Android-8.1Android ID: A-162604069

CVE-2026-0030 [HIGH] CWE-787 CVE-2026-0030: In __host_check_page_state_range of mem_protect.c, there is a possible out of bounds write due to an In __host_check_page_state_range of mem_protect.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-0028 [HIGH] CWE-190 CVE-2026-0028: In __pkvm_host_share_guest of mem_protect.c, there is a possible out of bounds write due to an integ In __pkvm_host_share_guest of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-0031 [HIGH] CWE-190 CVE-2026-0031: In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer ov In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-0011 [HIGH] CWE-693 CVE-2026-0011: In enableSystemPackageLPw of Settings.java, there is a possible way to prevent location access from In enableSystemPackageLPw of Settings.java, there is a possible way to prevent location access from working due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-57012 [HIGH] CWE-693 CVE-2026-57012: In the Setup Wizard, there is a possible remote package install due to a missing permission check. T In the Setup Wizard, there is a possible remote package install due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-0008 [HIGH] CWE-441 CVE-2026-0008: In multiple functions of FaceEnroll.kt, there is a possible privilege escalation due to a confused d In multiple functions of FaceEnroll.kt, there is a possible privilege escalation due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.