Google Android vulnerabilities

CVE-2017-13262 [MEDIUM] CWE-125 CVE-2017-13262: In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing length dec In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing length decrement operation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID:

CVE-2026-28618 [HIGH] CWE-122 CVE-2026-28618: In dec_frm_prepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This coul In dec_frm_prepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2021-0316 [CRITICAL] CWE-787 CVE-2021-0316: In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds write due to a missing In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11, Android-8.0, Android-8.1, Android-9, Androi

CVE-2022-20473 [CRITICAL] CWE-125 CVE-2022-20473: In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-2392

CVE-2022-20145 [CRITICAL] CVE-2022-20145: In startLegacyVpnPrivileged of Vpn.java, there is a possible way to retrieve VPN credentials due to In startLegacyVpnPrivileged of Vpn.java, there is a possible way to retrieve VPN credentials due to a protocol downgrade attack. This could lead to remote escalation of privilege if a malicious Wi-Fi AP is used, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-

CVE-2024-43091 [CRITICAL] CWE-190 CVE-2024-43091: In filterMask of SkEmbossMaskFilter.cpp, there is a possible out of bounds write due to an integer o In filterMask of SkEmbossMaskFilter.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2022-20472 [CRITICAL] CWE-125 CVE-2022-20472: In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-2392

CVE-2019-2023 [HIGH] CWE-732 CVE-2019-2023: In ServiceManager::add function in the hardware service manager, there is an insecure permissions ch In ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller. This could allow an app to add or replace a HAL service with its own service, gaining code execution in a privileged process.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9Android ID: A-121035042Upstream ker

CVE-2026-55330 [CRITICAL] CWE-416 CVE-2026-55330: In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-36897 [CRITICAL] CWE-787 CVE-2025-36897: In unknown of cd_CnMsgCodecUserApi.cpp, there is a possible out of bounds write due to a missing bou In unknown of cd_CnMsgCodecUserApi.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2021-39675 [CRITICAL] CWE-787 CVE-2021-39675: In GKI_getbuf of gki_buffer.cc, there is a possible out of bounds write due to a heap buffer overflo In GKI_getbuf of gki_buffer.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-205729183

CVE-2026-49882 [HIGH] CWE-122 CVE-2026-49882: In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible memory safety issue due to a heap buffer In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-58710 [HIGH] CWE-120 CVE-2026-58710: In DecodeFilmGrainParams of film_grain_dec.cc, there is a possible out-of-bounds write due to a miss In DecodeFilmGrainParams of film_grain_dec.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-56974 [HIGH] CWE-20 CVE-2026-56974: In Start of AudioRtpPayloadEncoderNode.cpp, there is a possible out-of-bounds write due to improper In Start of AudioRtpPayloadEncoderNode.cpp, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.

CVE-2026-55331 [HIGH] CWE-120 CVE-2026-55331: In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-58683 [HIGH] CWE-20 CVE-2026-58683: In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-0159 [HIGH] CWE-787 CVE-2026-0159: In Cellular Modem, there is a possible out-of-bounds write due to a missing bounds check. This could In Cellular Modem, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-0132 [HIGH] CWE-122 CVE-2026-0132: In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-0149 [HIGH] CWE-122 CVE-2026-0149: In RtpSession::rtpSendRtcpPacket, there is a possible OOB write due to a heap buffer overflow. This In RtpSession::rtpSendRtcpPacket, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-0139 [HIGH] CWE-119 CVE-2026-0139: In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.