Skip to content
OpenAdvisories

Product · Google

Android

2,760 known vulnerabilities.

2,760 results · Feed

  • Unscored —

    A information disclosure vulnerability in the Broadcom bcmdhd driver. Product: Android. Versions: Android kernel. Andro…

  • Unscored —

    In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible stack buffer overflow due to a missing bounds chec…

  • Unscored —

    In MediaPlayerService::Client::notify of MediaPlayerService.cpp, there is a possible use after free. This could lead to…

  • Unscored —

    In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible stack corruption due to a missing bounds check. This co…

  • Unscored —

    A other vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.…

  • Unscored —

    In config_set_string of config.cc, it is possible to pair a second BT keyboard without user approval due to improper in…

  • Unscored —

    In CProgramConfig_ReadHeightExt of tpdec_asc.cpp, there is a possible stack buffer overflow due to a missing bounds che…

  • Unscored —

    In avrc_ctrl_pars_vendor_rsp of bluetooth avrcp_ctrl, there is a possible out of bounds write on the stack due to a mis…

  • Unscored —

    In getVSCoverage of CmapCoverage.cpp, there is a possible out of bounds read due to an incorrect bounds check. This cou…

  • Unscored —

    In M3UParser::parse of M3UParser.cpp, there is a memory resource exhaustion due to a large loop of pushing items into a…

  • Unscored —

    In sdp_server_handle_client_req of sdp_server.cc, there is an out of bounds read due to a missing bounds check. This co…

  • Unscored —

    In xt_qtaguid.c, there is a race condition due to insufficient locking. This could lead to local elevation of privilege…

  • Unscored —

    A elevation of privilege vulnerability in the Upstream kernel audio driver. Product: Android. Versions: Android kernel.…

  • Unscored —

    In ihevcd_ctb_boundary_strength_pbslice of libhevc, there is possible resource exhaustion. This could lead to a remote …

  • Unscored —

    A other vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID…

  • Unscored —

    A remote code execution vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1…

  • Unscored —

    A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 6.0, 6.0.1, 7.0, …

  • Unscored —

    In hevc codec, there is an out-of-bounds write due to an incorrect bounds check with the i2_pic_width_in_luma_samples v…

  • Unscored —

    In XBLRamDump mode, there is a debug feature that can be used to dump memory contents, if an attacker has physical acce…

  • Unscored —

    In function ih264d_ref_idx_reordering of libavc, there is an out-of-bounds write due to modCount being defined as an un…

  • Unscored —

    In DLSParser of the sonivox library, there is possible resource exhaustion due to a memory leak. This could lead to rem…

  • Unscored —

    In the Pixel 2 bootloader, there is a missing permission check which bypasses carrier bootloader lock. This could lead …

  • Unscored —
    CVE-2017-13236 Public exploit

    In the KeyStore service, there is a permissions bypass that allows access to protected resources. This could lead to lo…

  • Unscored —

    A information disclosure vulnerability in the Android media framework (libstagefright_soft_avcenc). Product: Android. V…

  • Unscored —

    In libmediadrm, there is an out-of-bounds write due to improper input validation. This could lead to local elevation of…

  • Unscored —

    A information disclosure vulnerability in the Android system (ui). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, …

  • Unscored —

    A information disclosure vulnerability in the Android framework (ui framework). Product: Android. Versions: 8.0. ID: A-…

  • Unscored —

    In audioserver, there is an out-of-bounds write due to a log statement using %s with an array that may not be NULL term…

  • Unscored —

    A information disclosure vulnerability in the Upstream kernel network driver. Product: Android. Versions: Android kerne…

  • Unscored —

    A elevation of privilege vulnerability in the Upstream kernel easel. Product: Android. Versions: Android kernel. ID: A-…

  • Unscored —

    A information disclosure vulnerability in the Android framework (crypto framework). Product: Android. Versions: 8.0, 8.…

  • Unscored —

    An information disclosure vulnerability in the Android framework (clipboardservice). Product: Android. Versions: 5.1.1,…

  • Unscored —

    In MPEG4Extractor.cpp, there are several places where functions return early without cleaning up internal buffers which…

  • Unscored —

    In the parseURL function of URLStreamHandler, there is improper input validation of the host field. This could lead to …

  • Unscored —

    A vulnerability in the Android media framework (libavc) related to handling dec_hdl memory allocation failures. Product…

  • Unscored —

    An elevation of privilege vulnerability in the Broadcom bcmdhd driver. Product: Android. Versions: Android kernel. Andr…

  • Unscored —

    In the sendFormatChange function of ACodec, there is a possible integer overflow which could lead to an out-of-bounds w…

  • Unscored —

    In the ihevcd_allocate_static_bufs and ihevcd_create functions of SoftHEVC, there is a possible out-of-bounds write due…

  • Unscored —

    A vulnerability in the Android media framework (libhevc) related to handling ps_codec_obj memory allocation failures. P…

  • Unscored —

    A vulnerability in the Android media framework (libvpx) related to odd frame width. Product: Android. Versions: 7.0, 7.…