Android
CVEs (475)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-30650 | Med | 0.44 | 6.7 | 0.00 | Jul 6, 2023 | Out of bounds read and write in callrunTspCmd of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code. | ||
| CVE-2023-21493 | Med | 0.44 | 6.8 | 0.00 | May 4, 2023 | Improper access control vulnerability in SemShareFileProvider prior to SMR May-2023 Release 1 allows local attackers to access protected data. | ||
| CVE-2023-21451 | Med | 0.44 | 6.7 | 0.00 | Feb 9, 2023 | A Stack-based overflow vulnerability in IpcRxEmbmsSessionList in SECRIL prior to Android S(12) allows attacker to cause memory corruptions. | ||
| CVE-2026-21010 | Med | 0.43 | 6.6 | 0.00 | Apr 13, 2026 | Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged functions. | ||
| CVE-2026-20981 | Med | 0.43 | 6.6 | 0.00 | Feb 4, 2026 | Improper input validation in FacAtFunction prior to SMR Feb-2026 Release 1 allows privileged physical attacker to execute arbitrary command with system privilege. | ||
| CVE-2025-20964 | Med | 0.43 | 6.6 | 0.00 | May 7, 2025 | Out-of-bounds write in parsing media files in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to write out-of-bounds memory. | ||
| CVE-2025-20963 | Med | 0.43 | 6.6 | 0.00 | May 7, 2025 | Out-of-bounds write in memory initialization in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to write out-of-bounds memory. | ||
| CVE-2024-34646 | Med | 0.43 | 6.6 | 0.00 | Sep 4, 2024 | Improper access control in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows local attackers to cause local permanent denial of service. | ||
| CVE-2024-20865 | Med | 0.43 | 6.6 | 0.00 | May 7, 2024 | Authentication bypass in bootloader prior to SMR May-2024 Release 1 allows physical attackers to flash arbitrary images. | ||
| CVE-2024-20819 | Med | 0.43 | 6.6 | 0.00 | Feb 6, 2024 | Out-of-bounds Write vulnerabilities in svc1td_vld_plh_ap of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow. | ||
| CVE-2024-20818 | Med | 0.43 | 6.6 | 0.00 | Feb 6, 2024 | Out-of-bounds Write vulnerabilities in svc1td_vld_elh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow. | ||
| CVE-2024-20817 | Med | 0.43 | 6.6 | 0.00 | Feb 6, 2024 | Out-of-bounds Write vulnerabilities in svc1td_vld_slh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow. | ||
| CVE-2023-42564 | Med | 0.43 | 6.6 | 0.00 | Dec 5, 2023 | Improper access control in knoxcustom service prior to SMR Dec-2023 Release 1 allows attacker to send broadcast with system privilege. | ||
| CVE-2023-42533 | Med | 0.43 | 6.6 | 0.00 | Nov 7, 2023 | Improper Input Validation with USB Gadget Interface prior to SMR Nov-2023 Release 1 allows a physical attacker to execute arbitrary code in Kernel. | ||
| CVE-2026-21008 | Med | 0.42 | 6.5 | 0.00 | Apr 13, 2026 | Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows adjacent attacker to access sensitive information. | ||
| CVE-2025-20983 | Med | 0.42 | 6.4 | 0.00 | Jul 8, 2025 | Out-of-bounds write in checking auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory. | ||
| CVE-2025-20982 | Med | 0.42 | 6.4 | 0.00 | Jul 8, 2025 | Out-of-bounds write in setting auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory. | ||
| CVE-2025-20943 | Med | 0.42 | 6.4 | 0.00 | Apr 8, 2025 | Out-of-bounds write in secfr trustlet prior to SMR Apr-2025 Release 1 allows local privileged attackers to cause memory corruption. | ||
| CVE-2025-20908 | Med | 0.42 | 6.5 | 0.00 | Mar 6, 2025 | Use of insufficiently random values in Auracast prior to SMR Mar-2025 Release 1 allows adjacent attackers to access Auracast broadcasting. | ||
| CVE-2025-20885 | Med | 0.42 | 6.4 | 0.00 | Feb 4, 2025 | Out-of-bounds write in softsim trustlet prior to SMR Jan-2025 Release 1 allows local privileged attackers to cause memory corruption. |
- risk 0.44cvss 6.7epss 0.00
Out of bounds read and write in callrunTspCmd of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code.
- risk 0.44cvss 6.8epss 0.00
Improper access control vulnerability in SemShareFileProvider prior to SMR May-2023 Release 1 allows local attackers to access protected data.
- risk 0.44cvss 6.7epss 0.00
A Stack-based overflow vulnerability in IpcRxEmbmsSessionList in SECRIL prior to Android S(12) allows attacker to cause memory corruptions.
- risk 0.43cvss 6.6epss 0.00
Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged functions.
- risk 0.43cvss 6.6epss 0.00
Improper input validation in FacAtFunction prior to SMR Feb-2026 Release 1 allows privileged physical attacker to execute arbitrary command with system privilege.
- risk 0.43cvss 6.6epss 0.00
Out-of-bounds write in parsing media files in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to write out-of-bounds memory.
- risk 0.43cvss 6.6epss 0.00
Out-of-bounds write in memory initialization in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to write out-of-bounds memory.
- risk 0.43cvss 6.6epss 0.00
Improper access control in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows local attackers to cause local permanent denial of service.
- risk 0.43cvss 6.6epss 0.00
Authentication bypass in bootloader prior to SMR May-2024 Release 1 allows physical attackers to flash arbitrary images.
- risk 0.43cvss 6.6epss 0.00
Out-of-bounds Write vulnerabilities in svc1td_vld_plh_ap of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow.
- risk 0.43cvss 6.6epss 0.00
Out-of-bounds Write vulnerabilities in svc1td_vld_elh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow.
- risk 0.43cvss 6.6epss 0.00
Out-of-bounds Write vulnerabilities in svc1td_vld_slh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow.
- risk 0.43cvss 6.6epss 0.00
Improper access control in knoxcustom service prior to SMR Dec-2023 Release 1 allows attacker to send broadcast with system privilege.
- risk 0.43cvss 6.6epss 0.00
Improper Input Validation with USB Gadget Interface prior to SMR Nov-2023 Release 1 allows a physical attacker to execute arbitrary code in Kernel.
- risk 0.42cvss 6.5epss 0.00
Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows adjacent attacker to access sensitive information.
- risk 0.42cvss 6.4epss 0.00
Out-of-bounds write in checking auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
- risk 0.42cvss 6.4epss 0.00
Out-of-bounds write in setting auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
- risk 0.42cvss 6.4epss 0.00
Out-of-bounds write in secfr trustlet prior to SMR Apr-2025 Release 1 allows local privileged attackers to cause memory corruption.
- risk 0.42cvss 6.5epss 0.00
Use of insufficiently random values in Auracast prior to SMR Mar-2025 Release 1 allows adjacent attackers to access Auracast broadcasting.
- risk 0.42cvss 6.4epss 0.00
Out-of-bounds write in softsim trustlet prior to SMR Jan-2025 Release 1 allows local privileged attackers to cause memory corruption.
Page 8 of 24