Android

CVEs (8,504)

• CVE-2021-26687CriFeb 4, 2021
  LG

  mobile devices
  risk 0.64cvss 9.8epss 0.01

  An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. In preloaded applications, the HostnameVerified default is mishandled. The LG ID is LVE-SMP-200029 (February 2021).

• CVE-2021-0316CriJan 11, 2021
  Google

  Android
  risk 0.64cvss 9.8epss 0.03

  In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product:…

• CVE-2020-0471CriJan 11, 2021
  Google

  Android
  risk 0.64cvss 9.8epss 0.02

  In reassemble_and_dispatch of packet_fragmenter.cc, there is a possible way to inject packets into an encrypted Bluetooth connection due to improper input validation. This could lead to remote escalation of privilege between two Bluetooth devices by a proximal attacker, with no…

• CVE-2020-35551CriDec 18, 2020
  Samsung Mobile

  mobile devices
  risk 0.64cvss 9.8epss 0.00

  An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software. They allow attackers to conduct RPMB state-change attacks because an unauthorized RPMB write operation can be replayed, a related issue to CVE-2020-13799. The Samsung…

• CVE-2020-35550CriDec 18, 2020
  Samsung Mobile

  mobile devices
  risk 0.64cvss 9.8epss 0.01

  An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software. Attackers can bypass Factory Reset Protection (FRP) via StatusBar. The Samsung ID is SVE-2020-17888 (December 2020).

• CVE-2020-27068CriDec 15, 2020
  Google

  Android
  risk 0.64cvss 9.8epss 0.01

  Product: AndroidVersions: Android kernelAndroid ID: A-127973231References: Upstream kernel

• CVE-2020-0456CriDec 14, 2020
  Google

  Android
  risk 0.64cvss 9.8epss 0.01

  There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170378843

• CVE-2020-0457CriDec 14, 2020
  Google

  Android
  risk 0.64cvss 9.8epss 0.01

  There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170367562

• CVE-2020-0455CriDec 14, 2020
  Google

  Android
  risk 0.64cvss 9.8epss 0.01

  There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170372514

• CVE-2020-0452CriNov 10, 2020
  Google

  Android
  risk 0.64cvss 9.8epss 0.03

  In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User…

• CVE-2020-0447CriNov 10, 2020
  Google

  Android
  risk 0.64cvss 9.8epss 0.01

  There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168251617

• CVE-2020-0446CriNov 10, 2020
  Google

  Android
  risk 0.64cvss 9.8epss 0.01

  There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168264528

• CVE-2020-0445CriNov 10, 2020
  Google

  Android
  risk 0.64cvss 9.8epss 0.01

  There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168264527

• CVE-2020-28340CriNov 8, 2020
  Samsung Mobile

  mobile devices
  risk 0.64cvss 9.8epss 0.00

  An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software. Attackers can bypass Factory Reset Protection (FRP) via Secure Folder. The Samsung ID is SVE-2020-18546 (November 2020).

• CVE-2020-26607CriOct 6, 2020
  Samsung Mobile

  TimaService
  risk 0.64cvss 9.8epss 0.00

  An issue was discovered in TimaService on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. PendingIntent with an empty intent is mishandled, allowing an attacker to perform a privileged action via a modified intent. The Samsung ID is SVE-2020-18418 (October…

• CVE-2020-0354CriSep 18, 2020
  Google

  Android
  risk 0.64cvss 9.8epss 0.01

  In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:…

• CVE-2020-0333CriSep 17, 2020
  Google

  Android
  risk 0.64cvss 9.8epss 0.01

  In UrlQuerySanitizer, there is a possible improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-73822755

• CVE-2020-0380CriSep 17, 2020
  Google

  Android
  risk 0.64cvss 9.8epss 0.03

  In allocExcessBits of bitalloc.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:…

• CVE-2020-0342CriSep 17, 2020
  Google

  Android
  risk 0.64cvss 9.8epss 0.01

  There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-160812576

• CVE-2020-0278CriSep 17, 2020
  Google

  Android
  risk 0.64cvss 9.8epss 0.01

  There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-160812574