Android

CVEs (8,558)

• CVE-2022-30710HigJun 7, 2022
  Google

  Android
  risk 0.55cvss 8.5epss 0.00

  Improper validation vulnerability in RemoteViews prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities.

• CVE-2022-20111HigMay 3, 2022
  Mediatek

  ion
  risk 0.55cvss 8.4epss 0.00

  In ion, there is a possible use after free due to incorrect error handling. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06366069; Issue ID: ALPS06366069.

• CVE-2022-27836HigApr 11, 2022
  Samsung Mobile

  Storage Manager
  risk 0.55cvss 8.4epss 0.00

  Improper access control and path traversal vulnerability in Storage Manager and Storage Manager Service prior to SMR Apr-2022 Release 1 allow local attackers to access arbitrary system files without a proper permission. The patch adds proper validation logic to prevent arbitrary…

• CVE-2022-27830HigApr 11, 2022
  Samsung Mobile

  SemBlurInfo
  risk 0.55cvss 8.5epss 0.00

  Improper validation vulnerability in SemBlurInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.

• CVE-2022-27829HigApr 11, 2022
  Samsung Mobile

  VerifyCredentialResponse
  risk 0.55cvss 8.5epss 0.00

  Improper validation vulnerability in VerifyCredentialResponse prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.

• CVE-2022-27828HigApr 11, 2022
  Samsung Mobile

  MediaMonitorEvent
  risk 0.55cvss 8.5epss 0.00

  Improper validation vulnerability in MediaMonitorEvent prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.

• CVE-2022-27827HigApr 11, 2022
  Google

  Android
  risk 0.55cvss 8.5epss 0.00

  Improper validation vulnerability in MediaMonitorDimension prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.

• CVE-2022-27826HigApr 11, 2022
  Samsung Mobile

  SemSuspendDialogInfo
  risk 0.55cvss 8.5epss 0.00

  Improper validation vulnerability in SemSuspendDialogInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.

• CVE-2022-23428HigFeb 11, 2022
  Google

  Android
  risk 0.55cvss 8.4epss 0.00

  An improper boundary check in eden_runtime hal service prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution.

• CVE-2018-21070HigApr 8, 2020
  Samsung Mobile

  mobile devices
  risk 0.55cvss 8.4epss 0.00

  An issue was discovered on Samsung mobile devices with N(7.x), O(8.0) devices (MSM8998 or SDM845 chipsets) software. An attacker can bypass Secure Boot and obtain root access because of a missing Bootloader integrity check. The Samsung ID is SVE-2018-11552 (May 2018).

• CVE-2018-21082HigApr 8, 2020
  Samsung Mobile

  mobile devices
  risk 0.55cvss 8.4epss 0.00

  An issue was discovered on Samsung mobile devices with N(7.x) software. Dex Station allows App Pinning bypass and lock-screen bypass via the "Use screen lock type to unpin" option. The Samsung ID is SVE-2017-11106 (February 2018).

• CVE-2018-9363HigNov 6, 2018
  Google

  Android
  risk 0.55cvss 8.4epss 0.00

  In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-65853588…

• CVE-2017-6295HigMar 6, 2018
  Nvidia

  TrustZone Software
  risk 0.55cvss 8.4epss 0.00

  NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past the end, or before the beginning, of the intended buffer; and may lead to denial of service or information disclosure. This issue is rated as high.

• CVE-2017-13156HigDec 6, 2017
  Google

  Android
  risk 0.55cvss 7.8epss 0.21

  An elevation of privilege vulnerability in the Android system (art). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-64211847.

• CVE-2016-3861HigSep 11, 2016
  Google

  Android
  risk 0.55cvss 7.8epss 0.23

  LibUtils in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 mishandles conversions between Unicode character encodings with different encoding widths, which allows remote attackers to execute arbitrary code or…

• CVE-2016-3749HigJul 11, 2016
  Google

  Android
  risk 0.55cvss 8.4epss 0.00

  server/LockSettingsService.java in LockSettingsService in Android 6.x before 2016-07-01 allows attackers to modify the screen-lock password or pattern via a crafted application, aka internal bug 28163930.

• CVE-2016-3748HigJul 11, 2016
  Google

  Android
  risk 0.55cvss 8.4epss 0.00

  The sockets subsystem in Android 6.x before 2016-07-01 allows attackers to bypass intended system-call restrictions via a crafted application that makes an ioctl call, aka internal bug 28171804.

• CVE-2016-2463HigJun 13, 2016
  Google

  Android
  risk 0.55cvss 8.4epss 0.01

  Multiple integer overflows in the h264dec component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption)…

• CVE-2016-0849HigApr 18, 2016
  Google

  Android
  risk 0.55cvss 8.4epss 0.00

  Multiple integer overflows in minzip/SysUtil.c in the Recovery Procedure in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allow attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access,…

• CVE-2016-0848HigApr 18, 2016
  Google

  Android
  risk 0.55cvss 8.4epss 0.00

  Race condition in Download Manager in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows attackers to bypass private-storage file-access restrictions via a crafted application that changes a symlink target, as demonstrated by…