Google Android vulnerabilities

CVE-2024-34733 [HIGH] CWE-190 CVE-2024-34733: In DevmemXIntMapPages of devicemem_server.c, there is a possible arbitrary code execution due to an In DevmemXIntMapPages of devicemem_server.c, there is a possible arbitrary code execution due to an integer overflow. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-56914 [HIGH] CWE-416 CVE-2026-56914: In multiple locations, there is a possible use-after-free due to improper locking. This could lead t In multiple locations, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2020-8860 [HIGH] CWE-121 CVE-2020-8860: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sa This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy S10 Firmware G973FXXS3ASJA, O(8.x), P(9.0), Q(10.0) devices with Exynos chipsets. User interaction is required to exploit this vulnerability in that the target must answer a phone call. The specific flaw exists within the Call Control Setup m

CVE-2024-0040 [HIGH] CWE-787 CVE-2024-0040: In setParameter of MtpPacket.cpp, there is a possible out of bounds read due to a heap buffer overfl In setParameter of MtpPacket.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-47023 [HIGH] CVE-2024-47023: there is a possible man-in-the-middle attack due to a logic error in the code. This could lead to re there is a possible man-in-the-middle attack due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-32929 [HIGH] CWE-416 CVE-2024-32929: In gpu_slc_get_region of pixel_gpu_slc.c, there is a possible EoP due to a use after free. This coul In gpu_slc_get_region of pixel_gpu_slc.c, there is a possible EoP due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-48539 [HIGH] CWE-416 CVE-2025-48539: In SendPacketToPeer of acl_arbiter.cc, there is a possible out of bounds read due to a use after fre In SendPacketToPeer of acl_arbiter.cc, there is a possible out of bounds read due to a use after free. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2016-3821 [CRITICAL] CWE-476 CVE-2016-3821: libmedia in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x libmedia in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 has certain incorrect declarations, which allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference or memory corruption) via a crafted media file, aka internal bug 28166152.

CVE-2025-36911 [HIGH] CVE-2025-36911: In key-based pairing, there is a possible ID due to a logic error in the code. This could lead to re In key-based pairing, there is a possible ID due to a logic error in the code. This could lead to remote (proximal/adjacent) information disclosure of user's conversations and location with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-36924 [HIGH] CWE-120 CVE-2025-36924: In ss_DecodeLcsAssistDataReqMsg(void) of ss_LcsManagement.c, there is a possible out of bounds write In ss_DecodeLcsAssistDataReqMsg(void) of ss_LcsManagement.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2016-3741 [CRITICAL] CWE-20 CVE-2016-3741: The H.264 decoder in mediaserver in Android 6.x before 2016-07-01 does not initialize certain slice The H.264 decoder in mediaserver in Android 6.x before 2016-07-01 does not initialize certain slice data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28165661.

CVE-2016-3820 [CRITICAL] CWE-119 CVE-2016-3820: The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 mishandles slice numbers, which a The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 mishandles slice numbers, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28673410.

CVE-2025-48645 [HIGH] CWE-269 CVE-2025-48645: In loadDescription of DeviceAdminInfo.java, there is a possible persistent package due to improper i In loadDescription of DeviceAdminInfo.java, there is a possible persistent package due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-0135 [HIGH] CWE-125 CVE-2026-0135: In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to r In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-49881 [HIGH] CWE-693 CVE-2026-49881: In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-55323 [HIGH] CWE-122 CVE-2026-55323: In gf_base_update_finger_base of gf_base.c, there is a possible out-of-bounds write due to a heap bu In gf_base_update_finger_base of gf_base.c, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-0199 [HIGH] CWE-20 CVE-2026-0199: In gf_ta_test_set_config of gf_ta_test.c, there is a possible out-of-bounds write due to improper in In gf_ta_test_set_config of gf_ta_test.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-45515 [HIGH] CWE-122 CVE-2026-45515: In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-55294 [HIGH] CWE-122 CVE-2026-55294: In ihevcd_get_tu_data_size of ihevcd_utils.c, there is a possible out of bounds write due to a heap In ihevcd_get_tu_data_size of ihevcd_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-0100 [HIGH] CWE-122 CVE-2026-0100: In Load of LoadedArsc.cpp, there is a possible out of bounds write due to a heap buffer overflow. Th In Load of LoadedArsc.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.