VYPR

Kernel

by Google

CVEs (527)

  • CVE-2021-39648MedDec 15, 2021
    risk 0.27cvss 4.1epss 0.00

    In gadget_dev_desc_UDC_show of configfs.c, there is a possible disclosure of kernel heap memory due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product:…

  • CVE-2022-20562LowDec 16, 2022
    risk 0.21cvss 3.3epss 0.00

    In various functions of ap_input_processor.c, there is a possible way to record audio during a phone call due to a logic error in the code. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for…

  • CVE-2016-10236LowApr 4, 2018
    risk 0.21cvss 3.3epss 0.00

    An information disclosure vulnerability in the Qualcomm USB driver. Product: Android. Versions: Android kernel. Android ID: A-33280689. References: QC-CR#1102418.

  • CVE-2019-9455LowSep 6, 2019
    risk 0.15cvss 2.3epss 0.00

    In the Android kernel in the video driver there is a kernel pointer leak due to a WARN_ON statement. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

  • CVE-2026-59609Nov 10, 2026
    risk 0.00cvss —epss —

    In fence_manager_extract_iif of fence_manager.c, there is a possible way to corrupt kernel memory via fence identifier reuse due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed…

  • CVE-2026-55319Nov 10, 2026
    risk 0.00cvss —epss —

    In thread_free of thread.c, there is a possible way to corrupt kernel heap metadata on thread creation failure due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…

  • CVE-2015-6619Dec 8, 2015
    risk 0.00cvss —epss 0.01

    The kernel in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to gain privileges via a crafted application, aka internal bug 23520714.

Page 27 of 27