Android

CVEs (8,640)

• CVE-2022-27835HigApr 11, 2022
  Samsung Mobile

  UWB firmware
  risk 0.49cvss 7.6epss 0.00

  Improper boundary check in UWB firmware prior to SMR Apr-2022 Release 1 allows arbitrary memory write.

• CVE-2021-39762HigMar 30, 2022
  Google

  Android
  risk 0.49cvss 7.5epss 0.01

  In tremolo, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID:…

• CVE-2021-39726HigMar 16, 2022
  Google

  Android
  risk 0.49cvss 7.5epss 0.01

  In cd_ParseMsg of cd_codec.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:…

• CVE-2021-39716HigMar 16, 2022
  Google

  Android
  risk 0.49cvss 7.5epss 0.00

  Product: AndroidVersions: Android kernelAndroid ID: A-206977562References: N/A

• CVE-2021-39677HigFeb 11, 2022
  Google

  Android
  risk 0.49cvss 7.5epss 0.00

  In startVideoStream() there is a possibility of an OOB Read in the heap, when the camera buffer is ‘zero’ in size.Product: AndroidVersions: Android-11Android ID: A-205097028

• CVE-2021-39646HigDec 15, 2021
  Google

  Android
  risk 0.49cvss 7.5epss 0.00

  Product: AndroidVersions: Android kernelAndroid ID: A-201537251References: N/A

• CVE-2021-1045HigDec 15, 2021
  Google

  Android
  risk 0.49cvss 7.5epss 0.00

  Product: AndroidVersions: Android kernelAndroid ID: A-195580473References: N/A

• CVE-2021-1022HigDec 15, 2021
  Google

  Android
  risk 0.49cvss 7.5epss 0.01

  In btif_in_hf_client_generic_evt of btif_hf_client.cc, there is a possible Bluetooth service crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product:…

• CVE-2021-1002HigDec 15, 2021
  Google

  Android
  risk 0.49cvss 7.5epss 0.01

  In WT_Interpolate of eas_wtengine.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:…

• CVE-2021-0925HigDec 15, 2021
  Google

  Android
  risk 0.49cvss 7.5epss 0.01

  In rw_t4t_sm_detect_ndef of rw_t4t.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure due to a limited change in behavior based on the out of bounds data with no additional execution privileges needed.…

• CVE-2021-0631HigOct 25, 2021
  Mediatek

  wifi driver
  risk 0.49cvss 7.5epss 0.01

  In wifi driver, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05551435; Issue ID: ALPS05551435.

• CVE-2021-0630HigOct 25, 2021
  Mediatek

  wifi driver
  risk 0.49cvss 7.5epss 0.01

  In wifi driver, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05551397; Issue ID: ALPS05551397.

• CVE-2021-25485HigOct 6, 2021
  Samsung Mobile

  FactoryAirCommnadManger
  risk 0.49cvss 7.5epss 0.00

  Path traversal vulnerability in FactoryAirCommnadManger prior to SMR Oct-2021 Release 1 allows attackers to write file as system UID via BT remote socket.

• CVE-2021-0596HigJul 14, 2021
  Google

  Android
  risk 0.49cvss 7.5epss 0.01

  In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over NFC with no additional execution privileges needed. User interaction is not needed for…

• CVE-2021-25426HigJul 8, 2021
  Samsung Mobile

  Message
  risk 0.49cvss 7.5epss 0.01

  Improper component protection vulnerability in SmsViewerActivity of Samsung Message prior to SMR July-2021 Release 1 allows untrusted applications to access Message files.

• CVE-2021-0555HigJun 22, 2021
  Google

  Android
  risk 0.49cvss 7.5epss 0.01

  In RenderStruct of protostream_objectsource.cc, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:…

• CVE-2021-0522HigJun 21, 2021
  Google

  Android
  risk 0.49cvss 7.5epss 0.01

  In ConnectionHandler::SdpCb of connection_handler.cc, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:…

• CVE-2021-0517HigJun 21, 2021
  Google

  Android
  risk 0.49cvss 7.5epss 0.01

  In updateCapabilities of ConnectivityService.java, there is a possible incorrect network state determination due to a logic error in the code. This could lead to biasing of networking tasks to occur on non-VPN networks, which could lead to remote information disclosure, with no…

• CVE-2021-0466HigJun 11, 2021
  Google

  Android
  risk 0.49cvss 7.5epss 0.01

  In startIpClient of ClientModeImpl.java, there is a possible identifier which could be used to track a device. This could lead to remote information disclosure to a proximal attacker, with no additional execution privileges needed. User interaction is not needed for…

• CVE-2021-25417HigJun 11, 2021
  Samsung Mobile

  SDP SDK
  risk 0.49cvss 7.5epss 0.00

  Improper authorization in SDP SDK prior to SMR JUN-2021 Release 1 allows access to internal storage.