Google Android vulnerabilities

CVE-2017-13285 [CRITICAL] CWE-787 CVE-2017-13285: In SvoxSsmlParser and startElement of svox_ssml_parser.cpp, there is a possible out of bounds write In SvoxSsmlParser and startElement of svox_ssml_parser.cpp, there is a possible out of bounds write due to an uninitialized buffer. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7

CVE-2020-0224 [CRITICAL] CWE-787 CVE-2020-0224: In FastKeyAccumulator::GetKeysSlow of keys.cc, there is a possible out of bounds write due to type c In FastKeyAccumulator::GetKeysSlow of keys.cc, there is a possible out of bounds write due to type confusion. This could lead to remote code execution when processing a proxy configuration with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Androi

CVE-2020-0117 [CRITICAL] CWE-190 CVE-2020-0117: In aes_cmac of aes_cmac.cc, there is a possible out of bounds write due to an integer overflow. This In aes_cmac of aes_cmac.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution in the bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-151155194

CVE-2021-0515 [CRITICAL] CWE-787 CVE-2021-0515: In Factory::CreateStrictFunctionMap of factory.cc, there is a possible out of bounds write due to an In Factory::CreateStrictFunctionMap of factory.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Andr

CVE-2020-0138 [CRITICAL] CWE-787 CVE-2020-0138: In get_element_attr_rsp of btif_rc.cc, there is a possible out of bounds write due to a missing boun In get_element_attr_rsp of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if bluetoothtbd were used, which it isn't in typical Android platforms, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Androi

CVE-2020-0333 [CRITICAL] CWE-20 CVE-2020-0333: In UrlQuerySanitizer, there is a possible improper input validation. This could lead to remote code In UrlQuerySanitizer, there is a possible improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-73822755

CVE-2023-40082 [CRITICAL] CVE-2023-40082: In modify_for_next_stage of fdt.rs, there is a possible way to render KASLR ineffective due to impro In modify_for_next_stage of fdt.rs, there is a possible way to render KASLR ineffective due to improperly used crypto. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-20011 [CRITICAL] CWE-119 CVE-2024-20011: In alac decoder, there is a possible information disclosure due to an incorrect bounds check. This c In alac decoder, there is a possible information disclosure due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08441146; Issue ID: ALPS08441146.

CVE-2023-21162 [CRITICAL] CVE-2023-21162: In RGXUnbackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use afte In RGXUnbackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-21215 [CRITICAL] CVE-2023-21215: In DevmemIntAcquireRemoteCtx of devicemem_server.c, there is a possible arbitrary code execution due In DevmemIntAcquireRemoteCtx of devicemem_server.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-21163 [CRITICAL] CVE-2023-21163: In PMR_ReadBytes of pmr.c, there is a possible arbitrary code execution due to a use after free. Thi In PMR_ReadBytes of pmr.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-21164 [CRITICAL] CVE-2023-21164: In DevmemIntMapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use In DevmemIntMapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-21166 [CRITICAL] CVE-2023-21166: In RGXBackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after In RGXBackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-21216 [CRITICAL] CWE-276 CVE-2023-21216: In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible arbitrary code execution du In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2018-9450 [HIGH] CWE-787 CVE-2018-9450: In avrc_proc_vendor_command of avrc_api.cc, there is a possible out of bounds write due to a missing In avrc_proc_vendor_command of avrc_api.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8

CVE-2025-0078 [HIGH] CWE-250 CVE-2025-0078: In main of main.cpp, there is a possible way to bypass SELinux due to a logic error in the code. Thi In main of main.cpp, there is a possible way to bypass SELinux due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-48534 [HIGH] CWE-693 CVE-2025-48534: In getDefaultCBRPackageName of CellBroadcastHandler.java, there is a possible escalation of privileg In getDefaultCBRPackageName of CellBroadcastHandler.java, there is a possible escalation of privilege due to a logic error in the code. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation.

CVE-2021-0870 [HIGH] CWE-362 CVE-2021-0870: In RW_SetActivatedTagType of rw_main.cc, there is possible memory corruption due to a race condition In RW_SetActivatedTagType of rw_main.cc, there is possible memory corruption due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-192472262

CVE-2016-6725 [CRITICAL] CWE-284 CVE-2016-6725: A remote code execution vulnerability in the Qualcomm crypto driver in Android before 2016-11-05 cou A remote code execution vulnerability in the Qualcomm crypto driver in Android before 2016-11-05 could enable a remote attacker to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of remote code execution in the context of the kernel. Android ID: A-30515053. References: Qualcomm QC-CR#10

CVE-2017-13272 [CRITICAL] CWE-416 CVE-2017-13272: In alarm_ready_generic of alarm.cc, there is a possible out of bounds write due to a use after free. In alarm_ready_generic of alarm.cc, there is a possible out of bounds write due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67110137.