Google Android vulnerabilities
6,771 known vulnerabilities affecting google/android.
Total CVEs
6,771
CISA KEV
13
actively exploited
Public exploits
50
Exploited in wild
24
Severity breakdown
CRITICAL472HIGH2821MEDIUM3190LOW252UNKNOWN36
Vulnerabilities
Page 309 of 339
CVE-2021-0590P4MEDIUMCVSS 4.4v8.1v9.0+3 more2021-07-14
CVE-2021-0590 [MEDIUM] CVE-2021-0590: In sendNetworkConditionsBroadcast of NetworkMonitor.java, there is a possible way for a privileged a
In sendNetworkConditionsBroadcast of NetworkMonitor.java, there is a possible way for a privileged app to receive WiFi BSSID and SSID without location permissions due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:
nvd
CVE-2021-0374P4MEDIUMCVSS 4.4v11.0vAndroid-112021-03-10
CVE-2021-0374 [MEDIUM] CWE-125 CVE-2021-0374: In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible out of bounds re
In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169572641
nvd
CVE-2022-20033P4MEDIUMCVSS 4.4v11.0v12.02022-02-09
CVE-2022-20033 [MEDIUM] CWE-125 CVE-2022-20033: In camera driver, there is a possible out of bounds read due to an incorrect bounds check. This coul
In camera driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05862973; Issue ID: ALPS05862973.
nvd
CVE-2022-20029P4MEDIUMCVSS 4.4v10.0v11.0+1 more2022-02-09
CVE-2022-20029 [MEDIUM] CWE-125 CVE-2022-20029: In cmdq driver, there is a possible out of bounds read due to an incorrect bounds check. This could
In cmdq driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05747150; Issue ID: ALPS05747150.
nvd
CVE-2022-48389P4MEDIUMCVSS 4.4v10.02023-05-09
CVE-2022-48389 [MEDIUM] CWE-787 CVE-2022-48389: In modem control device, there is a possible out of bounds write due to a missing bounds check. This
In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
nvd
CVE-2022-48381P4MEDIUMCVSS 4.4v10.02023-05-09
CVE-2022-48381 [MEDIUM] CWE-787 CVE-2022-48381: In modem control device, there is a possible out of bounds write due to a missing bounds check. This
In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
nvd
CVE-2022-48380P4MEDIUMCVSS 4.4v10.02023-05-09
CVE-2022-48380 [MEDIUM] CWE-787 CVE-2022-48380: In modem control device, there is a possible out of bounds write due to a missing bounds check. This
In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
nvd
CVE-2021-0566P4MEDIUMCVSS 4.4v11.0vAndroid-112021-06-22
CVE-2021-0566 [MEDIUM] CWE-125 CVE-2021-0566: In accessAudioHalPidscpp of TimeCheck.cpp, there is a possible out of bounds read due to a missing b
In accessAudioHalPidscpp of TimeCheck.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-175894436
nvd
CVE-2021-0676P4MEDIUMCVSS 4.4v8.1v9.0+2 more2021-12-17
CVE-2021-0676 [MEDIUM] CWE-125 CVE-2021-0676: In geniezone driver, there is a possible out of bounds read due to an incorrect bounds check. This c
In geniezone driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05863009; Issue ID: ALPS05863009.
nvd
CVE-2022-21769P4MEDIUMCVSS 4.4v10.0v11.0+1 more2022-07-06
CVE-2022-21769 [MEDIUM] CWE-125 CVE-2022-21769: In CCCI, there is a possible out of bounds read due to a missing bounds check. This could lead to lo
In CCCI, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641673; Issue ID: ALPS06641687.
nvd
CVE-2021-1007P4MEDIUMCVSS 4.4v12.0vAndroid-122021-12-15
CVE-2021-1007 [MEDIUM] CWE-125 CVE-2021-1007: In btu_hcif_process_event of btu_hcif.cc, there is a possible out of bounds read due to an incorrect
In btu_hcif_process_event of btu_hcif.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-167759047
nvd
CVE-2022-20198P4MEDIUMCVSS 4.4v12.1vAndroid-12L2022-06-15
CVE-2022-20198 [MEDIUM] CWE-125 CVE-2022-20198: In llcp_dlc_proc_connect_pdu of llcp_dlc.cc, there is a possible out of bounds read due to a missing
In llcp_dlc_proc_connect_pdu of llcp_dlc.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure from the NFC stack with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-221851879
nvd
CVE-2022-20208P4MEDIUMCVSS 4.4v12.1vAndroid-12L2022-06-15
CVE-2022-20208 [MEDIUM] CWE-125 CVE-2022-20208: In parseRecursively of cppbor_parse.cpp, there is a possible out of bounds read due to an incorrect
In parseRecursively of cppbor_parse.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-192743373
nvd
CVE-2022-20076P4MEDIUMCVSS 4.4v10.0v11.0+1 more2022-04-11
CVE-2022-20076 [MEDIUM] CWE-755 CVE-2022-20076: In ged, there is a possible memory corruption due to an incorrect error handling. This could lead to
In ged, there is a possible memory corruption due to an incorrect error handling. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05838808; Issue ID: ALPS05839556.
nvd
CVE-2023-32857P4MEDIUMCVSS 4.4v12.0v13.02023-12-04
CVE-2023-32857 [MEDIUM] CWE-125 CVE-2023-32857: In display, there is a possible out of bounds read due to an incorrect status check. This could lead
In display, there is a possible out of bounds read due to an incorrect status check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07993705; Issue ID: ALPS07993710.
nvd
CVE-2023-32856P4MEDIUMCVSS 4.4v12.0v13.02023-12-04
CVE-2023-32856 [MEDIUM] CWE-125 CVE-2023-32856: In display, there is a possible out of bounds read due to an incorrect status check. This could lead
In display, there is a possible out of bounds read due to an incorrect status check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07993705; Issue ID: ALPS07993705.
nvd
CVE-2023-20711P4MEDIUMCVSS 4.4v11.0v12.0+1 more2023-05-15
CVE-2023-20711 [MEDIUM] CWE-125 CVE-2023-20711: In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead
In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07581668; Issue ID: ALPS07581668.
nvd
CVE-2023-20983P4MEDIUMCVSS 4.4v13.0vAndroid-132023-03-24
CVE-2023-20983 [MEDIUM] CWE-125 CVE-2023-20983: In btm_ble_rand_enc_complete of btm_ble.cc, there is a possible out of bounds read due to a missing
In btm_ble_rand_enc_complete of btm_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-260569449
nvd
CVE-2023-20635P4MEDIUMCVSS 4.4v10.0v11.0+2 more2023-03-07
CVE-2023-20635 [MEDIUM] CWE-191 CVE-2023-20635: In keyinstall, there is a possible information disclosure due to an integer overflow. This could lea
In keyinstall, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07563028; Issue ID: ALPS07563028.
nvd
CVE-2022-21755P4MEDIUMCVSS 4.4v11.0v12.02022-06-06
CVE-2022-21755 [MEDIUM] CWE-125 CVE-2022-21755: In WLAN driver, there is a possible out of bounds read due to an incorrect bounds check. This could
In WLAN driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06545464; Issue ID: ALPS06545464.
nvd