AN
Operating System
Android
by Google · last CVE Oct 6, 2026
On CISA KEVExploited in the wild
8,375
CVEs
23
On KEV
10.0
Max CVSS
33
New 30D
Severity mix
Critical 478High 16Medium 6Low 0
Watch

Add Android to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-27570
9.8
1%
Apr 11
Heap-based buffer overflow vulnerability in parser_single_iref function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker
Affected: 10.0; 11.0; 12.0
CVE-2022-27569
9.8
1%
Apr 11
Heap-based buffer overflow vulnerability in parser_infe function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker
Affected: 10.0; 11.0; 12.0
CVE-2022-27568
9.8
1%
Apr 11
Heap-based buffer overflow vulnerability in parser_iloc function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker
Affected: 10.0; 11.0; 12.0
CVE-2022-27567
9.8
1%
Apr 11
Null pointer dereference vulnerability in parser_hvcC function of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attackers
Affected: 10.0; 11.0; 12.0
CVE-2022-26098
9.8
1%
Apr 11
Heap-based buffer overflow vulnerability in sheifd_create function of libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attackers
Affected: 10.0; 11.0; 12.0
CVE-2022-26097
9.8
1%
Apr 11
Null pointer dereference vulnerability in parser_unknown_property function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacker
Affected: 10.0; 11.0; 12.0
CVE-2022-26096
9.8
1%
Apr 11
Null pointer dereference vulnerability in parser_ispe function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacker
Affected: 10.0; 11.0; 12.0
CVE-2022-26095
9.8
1%
Apr 11
Null pointer dereference vulnerability in parser_colr function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacker
Affected: 10.0; 11.0; 12.0
CVE-2022-26094
9.8
1%
Apr 11
Null pointer dereference vulnerability in parser_auxC function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacker
Affected: 10.0; 11.0; 12.0
CVE-2022-26093
9.8
1%
Apr 11
Null pointer dereference vulnerability in parser_irot function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacker
Affected: 10.0; 11.0; 12.0
CVE-2021-39737
9.8
1%
Mar 16
Product: AndroidVersions: Android kernelAndroid ID: A-208229524References: N/A
Affected: All versions, or not specified
CVE-2021-39723
9.8
1%
Mar 16
Product: AndroidVersions: Android kernelAndroid ID: A-209014813References: N/A
Affected: All versions, or not specified
CVE-2021-39720
9.8
1%
Mar 16
Product: AndroidVersions: Android kernelAndroid ID: A-207433926References: N/A
Affected: All versions, or not specified
CVE-2021-39710
9.8
1%
Mar 16
Product: AndroidVersions: Android kernelAndroid ID: A-202160245References: N/A
Affected: All versions, or not specified
CVE-2021-39708
9.8
1%
Mar 16
In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to an incorrect bounds check
Affected: 12.0
CVE-2022-25818
9.8
0%
Mar 10
Improper boundary check in UWB stack prior to SMR Mar-2022 Release 1 allows arbitrary code execution
Affected: 12.0
CVE-2022-23425
9.8
0%
Feb 11
Improper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attackers to send arbitrary NAS signaling messages with fake base station
Affected: 10.0; 11.0; 12.0
CVE-2021-39675
9.8
6%
Feb 11
In GKI_getbuf of gki_buffer.cc, there is a possible out of bounds write due to a heap buffer overflow
Affected: 12.0
CVE-2021-39658
9.8
1%
Feb 11
ismsEx service is a vendor service in unisoc equipment。ismsEx service is an extension of sms system service,but it does not check the permissions of the caller,resulting in…
Affected: All versions, or not specified
CVE-2021-39616
9.8
1%
Feb 11
Summary:Product: AndroidVersions: Android SoCAndroid ID: A-204686438
Affected: All versions, or not specified
CVE-2021-39623
9.8
2%
Jan 14
In doRead of SimpleDecodingSource.cpp, there is a possible out of bounds write due to an incorrect bounds check
Affected: 9.0; 10.0; 11.0; 12.0
CVE-2021-1049
9.8
1%
Jan 14
Hacker one bug ID: 1343975Product: AndroidVersions: Android SoCAndroid ID: A-204256722
Affected: All versions, or not specified
CVE-2021-39655
9.8
0%
Dec 15
Product: AndroidVersions: Android kernelAndroid ID: A-192641593References: N/A
Affected: All versions, or not specified
CVE-2021-39645
9.8
1%
Dec 15
Product: AndroidVersions: Android kernelAndroid ID: A-199805112References: N/A
Affected: All versions, or not specified
CVE-2021-39644
9.8
0%
Dec 15
Product: AndroidVersions: Android kernelAndroid ID: A-199809304References: N/A
Affected: All versions, or not specified
CVE-2021-39641
9.8
0%
Dec 15
Product: AndroidVersions: Android kernelAndroid ID: A-126949257References: N/A
Affected: All versions, or not specified
CVE-2021-0956
9.8
1%
Dec 15
In NfcTag::discoverTechnologies (activation) of NfcTag.cpp, there is a possible out of bounds write due to an incorrect bounds check
Affected: 11.0; 12.0
CVE-2021-0889
9.8
2%
Dec 15
In Android TV , there is a possible silent pairing due to lack of rate limiting in the pairing flow
Affected: 8.1; 9.0; 10.0; 11.0; 12.0
CVE-2021-0869
9.8
1%
Sep 21
In GetTimeStampAndPkt of DumpstateDevice.cpp, there is a possible out of bounds write due to an incorrect bounds check
Affected: All versions, or not specified
CVE-2021-25449
9.8
0%
Sep 9
An improper input validation vulnerability in libsapeextractor library prior to SMR Sep-2021 Release 1 allows attackers to execute arbitrary code in mediaextractor process
Affected: 8.1; 9.0; 10.0; 11.0
CVE-2021-0515
9.8
1%
Jul 14
In Factory::CreateStrictFunctionMap of factory.cc, there is a possible out of bounds write due to an incorrect bounds check
Affected: 8.1; 9.0; 10.0; 11.0
CVE-2021-0516
9.8
2%
Jun 21
In p2p_process_prov_disc_req of p2p_pd.c, there is a possible out of bounds read and write due to a use after free
Affected: 8.1; 9.0; 10.0; 11.0
CVE-2021-0324
9.8
1%
Jun 14
Product: AndroidVersions: Android SoCAndroid ID: A-175402462
Affected: All versions, or not specified
CVE-2021-0474
9.8
3%
Jun 11
In avrc_msg_cback of avrc_api.cc, there is a possible out of bounds write due to a heap buffer overflow
Affected: 8.1; 9.0; 10.0; 11.0
CVE-2021-25386
9.8
1%
Jun 11
An improper input validation vulnerability in sdfffd_parse_chunk_FVER() in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on…
Affected: 8.1; 9.0; 10.0; 11.0
CVE-2021-25385
9.8
1%
Jun 11
An improper input validation vulnerability in sdfffd_parse_chunk_PROP() in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on…
Affected: 8.1; 9.0; 10.0; 11.0
CVE-2021-25384
9.8
1%
Jun 11
An improper input validation vulnerability in sdfffd_parse_chunk_PROP() with Sample Rate Chunk in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to…
Affected: 8.1; 9.0; 10.0; 11.0
CVE-2021-25383
9.8
1%
Jun 11
An improper input validation vulnerability in scmn_mfal_read() in libsapeextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on…
Affected: 8.1; 9.0; 10.0; 11.0
CVE-2021-0430
9.8
3%
Apr 13
In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to a missing bounds check
Affected: 10.0; 11.0
CVE-2021-25360
9.8
1%
Apr 9
An improper input validation vulnerability in libswmfextractor library prior to SMR APR-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process
Affected: 10.0
CVE-2021-0397
9.8
6%
Mar 10
In sdp_copy_raw_data of sdp_discovery.cc, there is a possible system compromise due to a double free
Affected: 8.1; 9.0; 10.0; 11.0
CVE-2021-0396
9.8
2%
Mar 10
In Builtins::Generate_ArgumentsAdaptorTrampoline of builtins-arm.cc and related files, there is a possible out of bounds write due to an incorrect bounds check
Affected: 8.1; 9.0; 10.0; 11.0
CVE-2021-25346
9.8
1%
Mar 4
A possible arbitrary memory overwrite vulnerabilities in quram library version prior to SMR Jan-2021 Release 1 allow arbitrary code execution
Affected: 8.0; 8.1; 9.0; 10.0
CVE-2021-26689
9.8
1%
Feb 4
An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software
Affected: 8.0; 8.1; 9.0; 10.0
CVE-2021-26688
9.8
0%
Feb 4
An issue was discovered on LG Wing mobile devices with Android OS 10 software
Affected: 10.0
CVE-2021-26687
9.8
1%
Feb 4
An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software
Affected: 8.0; 8.1; 9.0; 10.0
CVE-2021-0316
9.8
3%
Jan 11
In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds write due to a missing bounds check
Affected: 8.0; 8.1; 9.0; 10.0; 11.0
CVE-2020-0471
9.8
2%
Jan 11
In reassemble_and_dispatch of packet_fragmenter.cc, there is a possible way to inject packets into an encrypted Bluetooth connection due to improper input validation
Affected: 8.0; 8.1; 9.0; 10.0; 11.0
CVE-2020-35551
9.8
0%
Dec 18
An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software
Affected: 8.0; 8.1; 9.0; 10.0
CVE-2020-35550
9.8
1%
Dec 18
An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software
Affected: 8.0; 8.1; 9.0; 10.0; 11.0
Page 4 of 10 · 478 total
1…345…10
The 500 most important CVEs for this product (exploited first, then by severity)