Android

CVEs (8,504)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2022-33703	Samsung Mobile CACertificateInfo	Hig	0.55	8.5	0.00	Jul 12, 2022	Improper validation vulnerability in CACertificateInfo prior to SMR Jul-2022 Release 1 allows attackers to launch certain activities.
CVE-2022-30756	Samsung Mobile Finder	Hig	0.55	8.5	0.00	Jul 12, 2022	Implicit Intent hijacking vulnerability in Finder prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities with privilege of Finder.
CVE-2022-30754	Samsung Mobile AppLinker	Hig	0.55	8.5	0.00	Jul 12, 2022	Implicit Intent hijacking vulnerability in AppLinker prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities with privilege of AppLinker.
CVE-2022-30713	Samsung Mobile LSOItemData	Hig	0.55	8.5	0.00	Jun 7, 2022	Improper validation vulnerability in LSOItemData prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities.
CVE-2022-30712	Samsung Mobile KfaOptions	Hig	0.55	8.5	0.00	Jun 7, 2022	Improper validation vulnerability in KfaOptions prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities.
CVE-2022-30711	Samsung Mobile FeedsInfo	Hig	0.55	8.5	0.00	Jun 7, 2022	Improper validation vulnerability in FeedsInfo prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities.
CVE-2022-30710	Google Android	Hig	0.55	8.5	0.00	Jun 7, 2022	Improper validation vulnerability in RemoteViews prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities.
CVE-2022-20111	Mediatek ion	Hig	0.55	8.4	0.00	May 3, 2022	In ion, there is a possible use after free due to incorrect error handling. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06366069; Issue ID: ALPS06366069.
CVE-2022-27836	Samsung Mobile Storage Manager	Hig	0.55	8.4	0.00	Apr 11, 2022	Improper access control and path traversal vulnerability in Storage Manager and Storage Manager Service prior to SMR Apr-2022 Release 1 allow local attackers to access arbitrary system files without a proper permission. The patch adds proper validation logic to prevent arbitrary…
CVE-2022-27830	Samsung Mobile SemBlurInfo	Hig	0.55	8.5	0.00	Apr 11, 2022	Improper validation vulnerability in SemBlurInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.
CVE-2022-27829	Samsung Mobile VerifyCredentialResponse	Hig	0.55	8.5	0.00	Apr 11, 2022	Improper validation vulnerability in VerifyCredentialResponse prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.
CVE-2022-27828	Samsung Mobile MediaMonitorEvent	Hig	0.55	8.5	0.00	Apr 11, 2022	Improper validation vulnerability in MediaMonitorEvent prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.
CVE-2022-27827	Google Android	Hig	0.55	8.5	0.00	Apr 11, 2022	Improper validation vulnerability in MediaMonitorDimension prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.
CVE-2022-27826	Samsung Mobile SemSuspendDialogInfo	Hig	0.55	8.5	0.00	Apr 11, 2022	Improper validation vulnerability in SemSuspendDialogInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.
CVE-2022-23428	Google Android	Hig	0.55	8.4	0.00	Feb 11, 2022	An improper boundary check in eden_runtime hal service prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution.
CVE-2018-21070	Samsung Mobile mobile devices	Hig	0.55	8.4	0.00	Apr 8, 2020	An issue was discovered on Samsung mobile devices with N(7.x), O(8.0) devices (MSM8998 or SDM845 chipsets) software. An attacker can bypass Secure Boot and obtain root access because of a missing Bootloader integrity check. The Samsung ID is SVE-2018-11552 (May 2018).
CVE-2018-21082	Samsung Mobile mobile devices	Hig	0.55	8.4	0.00	Apr 8, 2020	An issue was discovered on Samsung mobile devices with N(7.x) software. Dex Station allows App Pinning bypass and lock-screen bypass via the "Use screen lock type to unpin" option. The Samsung ID is SVE-2017-11106 (February 2018).
CVE-2018-9363	Google Android	Hig	0.55	8.4	0.00	Nov 6, 2018	In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-65853588…
CVE-2017-6295	Nvidia TrustZone Software	Hig	0.55	8.4	0.00	Mar 6, 2018	NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past the end, or before the beginning, of the intended buffer; and may lead to denial of service or information disclosure. This issue is rated as high.
CVE-2017-13156	Google Android	Hig	0.55	7.8	0.20	Dec 6, 2017	An elevation of privilege vulnerability in the Android system (art). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-64211847.

CVE-2022-33703HigJul 12, 2022
Samsung Mobile
CACertificateInfo
risk 0.55cvss 8.5epss 0.00
Improper validation vulnerability in CACertificateInfo prior to SMR Jul-2022 Release 1 allows attackers to launch certain activities.
CVE-2022-30756HigJul 12, 2022
Samsung Mobile
Finder
risk 0.55cvss 8.5epss 0.00
Implicit Intent hijacking vulnerability in Finder prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities with privilege of Finder.
CVE-2022-30754HigJul 12, 2022
Samsung Mobile
AppLinker
risk 0.55cvss 8.5epss 0.00
Implicit Intent hijacking vulnerability in AppLinker prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities with privilege of AppLinker.
CVE-2022-30713HigJun 7, 2022
Samsung Mobile
LSOItemData
risk 0.55cvss 8.5epss 0.00
Improper validation vulnerability in LSOItemData prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities.
CVE-2022-30712HigJun 7, 2022
Samsung Mobile
KfaOptions
risk 0.55cvss 8.5epss 0.00
Improper validation vulnerability in KfaOptions prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities.
CVE-2022-30711HigJun 7, 2022
Samsung Mobile
FeedsInfo
risk 0.55cvss 8.5epss 0.00
Improper validation vulnerability in FeedsInfo prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities.
CVE-2022-30710HigJun 7, 2022
Google
Android
risk 0.55cvss 8.5epss 0.00
Improper validation vulnerability in RemoteViews prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities.
CVE-2022-20111HigMay 3, 2022
Mediatek
ion
risk 0.55cvss 8.4epss 0.00
In ion, there is a possible use after free due to incorrect error handling. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06366069; Issue ID: ALPS06366069.
CVE-2022-27836HigApr 11, 2022
Samsung Mobile
Storage Manager
risk 0.55cvss 8.4epss 0.00
Improper access control and path traversal vulnerability in Storage Manager and Storage Manager Service prior to SMR Apr-2022 Release 1 allow local attackers to access arbitrary system files without a proper permission. The patch adds proper validation logic to prevent arbitrary…
CVE-2022-27830HigApr 11, 2022
Samsung Mobile
SemBlurInfo
risk 0.55cvss 8.5epss 0.00
Improper validation vulnerability in SemBlurInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.
CVE-2022-27829HigApr 11, 2022
Samsung Mobile
VerifyCredentialResponse
risk 0.55cvss 8.5epss 0.00
Improper validation vulnerability in VerifyCredentialResponse prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.
CVE-2022-27828HigApr 11, 2022
Samsung Mobile
MediaMonitorEvent
risk 0.55cvss 8.5epss 0.00
Improper validation vulnerability in MediaMonitorEvent prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.
CVE-2022-27827HigApr 11, 2022
Google
Android
risk 0.55cvss 8.5epss 0.00
Improper validation vulnerability in MediaMonitorDimension prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.
CVE-2022-27826HigApr 11, 2022
Samsung Mobile
SemSuspendDialogInfo
risk 0.55cvss 8.5epss 0.00
Improper validation vulnerability in SemSuspendDialogInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.
CVE-2022-23428HigFeb 11, 2022
Google
Android
risk 0.55cvss 8.4epss 0.00
An improper boundary check in eden_runtime hal service prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution.
CVE-2018-21070HigApr 8, 2020
Samsung Mobile
mobile devices
risk 0.55cvss 8.4epss 0.00
An issue was discovered on Samsung mobile devices with N(7.x), O(8.0) devices (MSM8998 or SDM845 chipsets) software. An attacker can bypass Secure Boot and obtain root access because of a missing Bootloader integrity check. The Samsung ID is SVE-2018-11552 (May 2018).
CVE-2018-21082HigApr 8, 2020
Samsung Mobile
mobile devices
risk 0.55cvss 8.4epss 0.00
An issue was discovered on Samsung mobile devices with N(7.x) software. Dex Station allows App Pinning bypass and lock-screen bypass via the "Use screen lock type to unpin" option. The Samsung ID is SVE-2017-11106 (February 2018).
CVE-2018-9363HigNov 6, 2018
Google
Android
risk 0.55cvss 8.4epss 0.00
In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-65853588…
CVE-2017-6295HigMar 6, 2018
Nvidia
TrustZone Software
risk 0.55cvss 8.4epss 0.00
NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past the end, or before the beginning, of the intended buffer; and may lead to denial of service or information disclosure. This issue is rated as high.
CVE-2017-13156HigDec 6, 2017
Google
Android
risk 0.55cvss 7.8epss 0.20
An elevation of privilege vulnerability in the Android system (art). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-64211847.

Page 52 of 426