AN
Operating System
Android
On CISA KEVExploited in the wild
8,375
CVEs
23
On KEV
10.0
Max CVSS
33
New 30D
Severity mix
Critical 478High 16Medium 6Low 0
Watch
Add Android to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-27570 | 9.8 | Apr 11 | Heap-based buffer overflow vulnerability in parser_single_iref function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker Affected: 10.0; 11.0; 12.0 |
| CVE-2022-27569 | 9.8 | Apr 11 | Heap-based buffer overflow vulnerability in parser_infe function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker Affected: 10.0; 11.0; 12.0 |
| CVE-2022-27568 | 9.8 | Apr 11 | Heap-based buffer overflow vulnerability in parser_iloc function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker Affected: 10.0; 11.0; 12.0 |
| CVE-2022-27567 | 9.8 | Apr 11 | Null pointer dereference vulnerability in parser_hvcC function of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attackers Affected: 10.0; 11.0; 12.0 |
| CVE-2022-26098 | 9.8 | Apr 11 | Heap-based buffer overflow vulnerability in sheifd_create function of libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attackers Affected: 10.0; 11.0; 12.0 |
| CVE-2022-26097 | 9.8 | Apr 11 | Null pointer dereference vulnerability in parser_unknown_property function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacker Affected: 10.0; 11.0; 12.0 |
| CVE-2022-26096 | 9.8 | Apr 11 | Null pointer dereference vulnerability in parser_ispe function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacker Affected: 10.0; 11.0; 12.0 |
| CVE-2022-26095 | 9.8 | Apr 11 | Null pointer dereference vulnerability in parser_colr function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacker Affected: 10.0; 11.0; 12.0 |
| CVE-2022-26094 | 9.8 | Apr 11 | Null pointer dereference vulnerability in parser_auxC function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacker Affected: 10.0; 11.0; 12.0 |
| CVE-2022-26093 | 9.8 | Apr 11 | Null pointer dereference vulnerability in parser_irot function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacker Affected: 10.0; 11.0; 12.0 |
| CVE-2021-39737 | 9.8 | Mar 16 | Product: AndroidVersions: Android kernelAndroid ID: A-208229524References: N/A Affected: All versions, or not specified |
| CVE-2021-39723 | 9.8 | Mar 16 | Product: AndroidVersions: Android kernelAndroid ID: A-209014813References: N/A Affected: All versions, or not specified |
| CVE-2021-39720 | 9.8 | Mar 16 | Product: AndroidVersions: Android kernelAndroid ID: A-207433926References: N/A Affected: All versions, or not specified |
| CVE-2021-39710 | 9.8 | Mar 16 | Product: AndroidVersions: Android kernelAndroid ID: A-202160245References: N/A Affected: All versions, or not specified |
| CVE-2021-39708 | 9.8 | Mar 16 | In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to an incorrect bounds check Affected: 12.0 |
| CVE-2022-25818 | 9.8 | Mar 10 | Improper boundary check in UWB stack prior to SMR Mar-2022 Release 1 allows arbitrary code execution Affected: 12.0 |
| CVE-2022-23425 | 9.8 | Feb 11 | Improper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attackers to send arbitrary NAS signaling messages with fake base station Affected: 10.0; 11.0; 12.0 |
| CVE-2021-39675 | 9.8 | Feb 11 | In GKI_getbuf of gki_buffer.cc, there is a possible out of bounds write due to a heap buffer overflow Affected: 12.0 |
| CVE-2021-39658 | 9.8 | Feb 11 | ismsEx service is a vendor service in unisoc equipment。ismsEx service is an extension of sms system service,but it does not check the permissions of the caller,resulting in… Affected: All versions, or not specified |
| CVE-2021-39616 | 9.8 | Feb 11 | Summary:Product: AndroidVersions: Android SoCAndroid ID: A-204686438 Affected: All versions, or not specified |
| CVE-2021-39623 | 9.8 | Jan 14 | In doRead of SimpleDecodingSource.cpp, there is a possible out of bounds write due to an incorrect bounds check Affected: 9.0; 10.0; 11.0; 12.0 |
| CVE-2021-1049 | 9.8 | Jan 14 | Hacker one bug ID: 1343975Product: AndroidVersions: Android SoCAndroid ID: A-204256722 Affected: All versions, or not specified |
| CVE-2021-39655 | 9.8 | Dec 15 | Product: AndroidVersions: Android kernelAndroid ID: A-192641593References: N/A Affected: All versions, or not specified |
| CVE-2021-39645 | 9.8 | Dec 15 | Product: AndroidVersions: Android kernelAndroid ID: A-199805112References: N/A Affected: All versions, or not specified |
| CVE-2021-39644 | 9.8 | Dec 15 | Product: AndroidVersions: Android kernelAndroid ID: A-199809304References: N/A Affected: All versions, or not specified |
| CVE-2021-39641 | 9.8 | Dec 15 | Product: AndroidVersions: Android kernelAndroid ID: A-126949257References: N/A Affected: All versions, or not specified |
| CVE-2021-0956 | 9.8 | Dec 15 | In NfcTag::discoverTechnologies (activation) of NfcTag.cpp, there is a possible out of bounds write due to an incorrect bounds check Affected: 11.0; 12.0 |
| CVE-2021-0889 | 9.8 | Dec 15 | In Android TV , there is a possible silent pairing due to lack of rate limiting in the pairing flow Affected: 8.1; 9.0; 10.0; 11.0; 12.0 |
| CVE-2021-0869 | 9.8 | Sep 21 | In GetTimeStampAndPkt of DumpstateDevice.cpp, there is a possible out of bounds write due to an incorrect bounds check Affected: All versions, or not specified |
| CVE-2021-25449 | 9.8 | Sep 9 | An improper input validation vulnerability in libsapeextractor library prior to SMR Sep-2021 Release 1 allows attackers to execute arbitrary code in mediaextractor process Affected: 8.1; 9.0; 10.0; 11.0 |
| CVE-2021-0515 | 9.8 | Jul 14 | In Factory::CreateStrictFunctionMap of factory.cc, there is a possible out of bounds write due to an incorrect bounds check Affected: 8.1; 9.0; 10.0; 11.0 |
| CVE-2021-0516 | 9.8 | Jun 21 | In p2p_process_prov_disc_req of p2p_pd.c, there is a possible out of bounds read and write due to a use after free Affected: 8.1; 9.0; 10.0; 11.0 |
| CVE-2021-0324 | 9.8 | Jun 14 | Product: AndroidVersions: Android SoCAndroid ID: A-175402462 Affected: All versions, or not specified |
| CVE-2021-0474 | 9.8 | Jun 11 | In avrc_msg_cback of avrc_api.cc, there is a possible out of bounds write due to a heap buffer overflow Affected: 8.1; 9.0; 10.0; 11.0 |
| CVE-2021-25386 | 9.8 | Jun 11 | An improper input validation vulnerability in sdfffd_parse_chunk_FVER() in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on… Affected: 8.1; 9.0; 10.0; 11.0 |
| CVE-2021-25385 | 9.8 | Jun 11 | An improper input validation vulnerability in sdfffd_parse_chunk_PROP() in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on… Affected: 8.1; 9.0; 10.0; 11.0 |
| CVE-2021-25384 | 9.8 | Jun 11 | An improper input validation vulnerability in sdfffd_parse_chunk_PROP() with Sample Rate Chunk in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to… Affected: 8.1; 9.0; 10.0; 11.0 |
| CVE-2021-25383 | 9.8 | Jun 11 | An improper input validation vulnerability in scmn_mfal_read() in libsapeextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on… Affected: 8.1; 9.0; 10.0; 11.0 |
| CVE-2021-0430 | 9.8 | Apr 13 | In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to a missing bounds check Affected: 10.0; 11.0 |
| CVE-2021-25360 | 9.8 | Apr 9 | An improper input validation vulnerability in libswmfextractor library prior to SMR APR-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process Affected: 10.0 |
| CVE-2021-0397 | 9.8 | Mar 10 | In sdp_copy_raw_data of sdp_discovery.cc, there is a possible system compromise due to a double free Affected: 8.1; 9.0; 10.0; 11.0 |
| CVE-2021-0396 | 9.8 | Mar 10 | In Builtins::Generate_ArgumentsAdaptorTrampoline of builtins-arm.cc and related files, there is a possible out of bounds write due to an incorrect bounds check Affected: 8.1; 9.0; 10.0; 11.0 |
| CVE-2021-25346 | 9.8 | Mar 4 | A possible arbitrary memory overwrite vulnerabilities in quram library version prior to SMR Jan-2021 Release 1 allow arbitrary code execution Affected: 8.0; 8.1; 9.0; 10.0 |
| CVE-2021-26689 | 9.8 | Feb 4 | An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software Affected: 8.0; 8.1; 9.0; 10.0 |
| CVE-2021-26688 | 9.8 | Feb 4 | An issue was discovered on LG Wing mobile devices with Android OS 10 software Affected: 10.0 |
| CVE-2021-26687 | 9.8 | Feb 4 | An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software Affected: 8.0; 8.1; 9.0; 10.0 |
| CVE-2021-0316 | 9.8 | Jan 11 | In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds write due to a missing bounds check Affected: 8.0; 8.1; 9.0; 10.0; 11.0 |
| CVE-2020-0471 | 9.8 | Jan 11 | In reassemble_and_dispatch of packet_fragmenter.cc, there is a possible way to inject packets into an encrypted Bluetooth connection due to improper input validation Affected: 8.0; 8.1; 9.0; 10.0; 11.0 |
| CVE-2020-35551 | 9.8 | Dec 18 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software Affected: 8.0; 8.1; 9.0; 10.0 |
| CVE-2020-35550 | 9.8 | Dec 18 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software Affected: 8.0; 8.1; 9.0; 10.0; 11.0 |
The 500 most important CVEs for this product (exploited first, then by severity)
