AN
Operating System
Android
by Google · last CVE Oct 6, 2026
On CISA KEVExploited in the wild
8,375
CVEs
23
On KEV
10.0
Max CVSS
33
New 30D
Severity mix
Critical 478High 16Medium 6Low 0
Watch

Add Android to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-11079
9.8
0%
Jan 10
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing sparse image, uninitialized heap memory can…
Affected: All versions, or not specified
CVE-2017-13160
9.8
2%
Dec 6
A remote code execution vulnerability in the Android system (bluetooth)
Affected: 7.0; 7.1.1; 7.1.2; 8.0
CVE-2017-6211
9.8
1%
Dec 5
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the processing of a downlink supplementary services message, a…
Affected: All versions, or not specified
CVE-2017-14918
9.8
1%
Dec 5
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the GPS location wireless interface, a Use After Free condition…
Affected: All versions, or not specified
CVE-2017-14917
9.8
1%
Dec 5
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer sizes in the message passing interface are not properly…
Affected: All versions, or not specified
CVE-2017-14916
9.8
1%
Dec 5
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer sizes in the message passing interface are not properly…
Affected: All versions, or not specified
CVE-2017-14914
9.8
1%
Dec 5
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, handles in the global client structure can become stale
Affected: All versions, or not specified
CVE-2017-14909
9.8
1%
Dec 5
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a count value that is read from a file is not properly validated
Affected: All versions, or not specified
CVE-2017-14908
9.8
1%
Dec 5
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the SafeSwitch test application does not properly validate the…
Affected: All versions, or not specified
CVE-2017-11006
9.8
1%
Dec 5
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a Use After Free condition can occur during positioning
Affected: All versions, or not specified
CVE-2017-11005
9.8
1%
Dec 5
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a Use After Free condition can occur during a deinitialization path
Affected: All versions, or not specified
CVE-2017-9709
9.8
0%
Dec 5
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a privilege escalation vulnerability exists in telephony
Affected: All versions, or not specified
CVE-2017-15813
9.8
0%
Dec 5
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a buffer overflow can occur while reading firmware logs
Affected: All versions, or not specified
CVE-2017-14907
9.8
0%
Dec 5
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, cryptographic strength is reduced while deriving disk encryption…
Affected: All versions, or not specified
CVE-2017-0847
9.8
0%
Nov 16
An elevation of privilege vulnerability in the Android media framework (mediaanalytics)
Affected: 8.0
CVE-2017-6274
9.8
0%
Nov 14
An elevation of Privilege vulnerability exists in the Thermal Driver, where a missing bounds checks in the thermal throttle driver can cause an out-of-bounds write in the kernel
Affected: All versions, or not specified
CVE-2017-0829
9.8
0%
Oct 4
An elevation of privilege vulnerability in the Motorola bootloader
Affected: through 8.0
CVE-2017-0828
9.8
0%
Oct 4
An elevation of privilege vulnerability in the Huawei bootloader
Affected: through 8.0
CVE-2017-0824
9.8
0%
Oct 4
An elevation of privilege vulnerability in the Broadcom wifi driver
Affected: through 8.0
CVE-2017-0822
9.8
1%
Oct 4
An elevation of privilege vulnerability in the Android system (camera)
Affected: 6.0; 6.0.1; 7.0; 7.1.0; 7.1.1; 7.1.2; +1 more
CVE-2017-0807
9.8
2%
Oct 4
An elevation of privilege vulnerability in the Android framework (ui framework)
Affected: 4.4.4; 5.0.2; 5.1.1; 6.0; 6.0.1; 7.0; +2 more
CVE-2017-7364
9.8
1%
Aug 18
In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_data(), variable ds_data[i].scale may still point to a…
Affected: All versions, or not specified
CVE-2016-5872
9.8
1%
Aug 18
In all Qualcomm products with Android releases from CAF using the Linux kernel, arguments to several QTEE syscalls are not properly validated
Affected: All versions, or not specified
CVE-2016-5871
9.8
1%
Aug 18
In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow vulnerability exists when loading an image file
Affected: All versions, or not specified
CVE-2016-10392
9.8
1%
Aug 18
In all Qualcomm products with Android releases from CAF using the Linux kernel, a driver can potentially leak kernel memory
Affected: All versions, or not specified
CVE-2016-10391
9.8
1%
Aug 18
In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for validity
Affected: All versions, or not specified
CVE-2016-10390
9.8
1%
Aug 18
In all Qualcomm products with Android releases from CAF using the Linux kernel, when downloading a file, an excessive amount of memory may be consumed
Affected: All versions, or not specified
CVE-2016-10388
9.8
1%
Aug 18
In all Qualcomm products with Android releases from CAF using the Linux kernel, a configuration vulnerability exists when loading a 3rd-party QTEE application
Affected: All versions, or not specified
CVE-2016-10387
9.8
1%
Aug 18
In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a handover scenario
Affected: All versions, or not specified
CVE-2016-10386
9.8
1%
Aug 18
In all Qualcomm products with Android releases from CAF using the Linux kernel, an array index out of bounds vulnerability exists in LPP
Affected: All versions, or not specified
CVE-2016-10385
9.8
1%
Aug 18
In all Qualcomm products with Android releases from CAF using the Linux kernel, a use-after-free vulnerability exists in IMS RCS
Affected: All versions, or not specified
CVE-2016-10384
9.8
1%
Aug 18
In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a WLAN driver ioctl
Affected: All versions, or not specified
CVE-2016-10382
9.8
1%
Aug 18
In all Qualcomm products with Android releases from CAF using the Linux kernel, access control to the I2C bus is not sufficient
Affected: All versions, or not specified
CVE-2016-10381
9.8
1%
Aug 18
In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected MeasurementReports revealing UE location
Affected: All versions, or not specified
CVE-2016-10380
9.8
1%
Aug 18
In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected MeasurementReports revealing UE location
Affected: All versions, or not specified
CVE-2016-10347
9.8
1%
Aug 18
In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a hypervisor function is not properly validated
Affected: All versions, or not specified
CVE-2016-10346
9.8
1%
Aug 18
In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in the hypervisor
Affected: All versions, or not specified
CVE-2016-10344
9.8
1%
Aug 18
In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially possible in LTE
Affected: All versions, or not specified
CVE-2016-10343
9.8
1%
Aug 18
In all Qualcomm products with Android releases from CAF using the Linux kernel, sSL handshake failure with ClientHello rejection results in memory leak
Affected: All versions, or not specified
CVE-2015-9073
9.8
1%
Aug 18
In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occur in a TrustZone syscall
Affected: All versions, or not specified
CVE-2015-9072
9.8
1%
Aug 18
In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occur in a TrustZone syscall
Affected: All versions, or not specified
CVE-2015-9071
9.8
1%
Aug 18
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone syscall
Affected: All versions, or not specified
CVE-2015-9070
9.8
1%
Aug 18
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone syscall
Affected: All versions, or not specified
CVE-2015-9069
9.8
1%
Aug 18
In all Qualcomm products with Android releases from CAF using the Linux kernel, the Secure File System can become corrupted
Affected: All versions, or not specified
CVE-2015-9068
9.8
1%
Aug 18
In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a mink syscall is not properly validated
Affected: All versions, or not specified
CVE-2015-9067
9.8
1%
Aug 18
In all Qualcomm products with Android releases from CAF using the Linux kernel, a potential compiler optimization of memset() is addressed
Affected: All versions, or not specified
CVE-2015-9066
9.8
1%
Aug 18
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in an Inter-RAT procedure
Affected: All versions, or not specified
CVE-2015-9065
9.8
1%
Aug 18
In all Qualcomm products with Android releases from CAF using the Linux kernel, a UE can respond to a UEInformationRequest before Access Stratum security is established
Affected: All versions, or not specified
CVE-2015-9064
9.8
1%
Aug 18
In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send IMEI or IMEISV to the network on a network request before NAS security has been…
Affected: All versions, or not specified
CVE-2015-9063
9.8
1%
Aug 18
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a procedure involving a remote UIM client
Affected: All versions, or not specified
Page 10 of 10 · 500 total
1…910
The 500 most important CVEs for this product (exploited first, then by severity)