Skip to content
OpenAdvisories

Product · Google

Android

2,761 known vulnerabilities.

107 results · Clear filters · Feed

  • Unscored —
    CVE-2017-13262 Public exploit

    In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing length decrement operation. T…

  • Unscored —
    CVE-2017-13258 Public exploit

    In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead…

  • Unscored —
    CVE-2017-13253 Public exploit

    In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. Th…

  • Unscored —
    CVE-2017-13286 Public exploit

    In writeToParcel and readFromParcel of OutputConfiguration.java, there is a permission bypass due to mismatched seriali…

  • Unscored —
    CVE-2017-13236 Public exploit

    In the KeyStore service, there is a permissions bypass that allows access to protected resources. This could lead to lo…

  • Unscored —
    CVE-2017-13208 Public exploit

    In receive_packet of libnetutils/packet.c, there is a possible out-of-bounds write due to a missing bounds check on the…

  • Unscored —
    CVE-2017-13209 Public exploit

    In the ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on th…

  • Unscored —
    CVE-2017-13216 Public exploit

    In ashmem_ioctl of ashmem.c, there is an out-of-bounds write due to insufficient locking when accessing asma. This coul…

  • Unscored —
    CVE-2017-13156 Public exploit EPSS 20%

    An elevation of privilege vulnerability in the Android system (art). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0…

  • Unscored —
    CVE-2017-0806 Public exploit

    An elevation of privilege vulnerability in the Android framework (gatekeeperresponse). Product: Android. Versions: 6.0,…

  • Unscored —
    CVE-2017-0807 Public exploit

    An elevation of privilege vulnerability in the Android framework (ui framework). Product: Android. Versions: 4.4.4, 5.0…

  • Unscored —
    CVE-2017-0781 Public exploit EPSS 21%

    A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.…

  • Unscored —
    CVE-2017-0785 Public exploit EPSS 12%

    A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1…

  • Unscored —
    CVE-2016-10277 Public exploit

    An elevation of privilege vulnerability in the Motorola bootloader could enable a local malicious application to execut…

  • Unscored —
    CVE-2017-0561 Public exploit EPSS 30%

    A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrar…

  • Unscored —
    CVE-2017-0541 Public exploit

    A remote code execution vulnerability in sonivox in Mediaserver could enable an attacker using a specially crafted file…

  • Unscored —
    CVE-2017-0554 Public exploit

    An elevation of privilege vulnerability in the Telephony component could enable a local malicious application to access…

  • Unscored —
    CVE-2017-0569 Public exploit

    An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to exec…

  • Unscored —
    CVE-2017-0505 Public exploit

    An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen dri…

  • Unscored —
    CVE-2017-0478 Public exploit

    A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted f…

  • Unscored —
    CVE-2017-0411 Public exploit

    An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arb…

  • Unscored —
    CVE-2017-0412 Public exploit

    An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arb…

  • Unscored —
    CVE-2016-8467 Public exploit

    An elevation of privilege vulnerability in the bootloader could enable a local attacker to execute arbitrary modem comm…

  • Unscored —
    CVE-2016-8462 Public exploit

    An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its p…

  • Unscored —
    CVE-2016-6772 Public exploit

    An elevation of privilege vulnerability in Wi-Fi could enable a local malicious application to execute arbitrary code w…

  • Unscored —
    CVE-2016-6754 Public exploit

    A remote code execution vulnerability in Webview in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016…

  • Unscored —
    CVE-2016-6707 Public exploit

    An elevation of privilege vulnerability in System Server in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 cou…