AN
Operating System
Android
On CISA KEVExploited in the wild
8,375
CVEs
23
On KEV
10.0
Max CVSS
33
New 30D
Severity mix
Critical 478High 16Medium 6Low 0
Watch
Add Android to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-0869 | 9.8 | Sep 21 | In GetTimeStampAndPkt of DumpstateDevice.cpp, there is a possible out of bounds write due to an incorrect bounds check Affected: All versions, or not specified |
| CVE-2021-25449 | 9.8 | Sep 9 | An improper input validation vulnerability in libsapeextractor library prior to SMR Sep-2021 Release 1 allows attackers to execute arbitrary code in mediaextractor process Affected: 8.1; 9.0; 10.0; 11.0 |
| CVE-2021-0515 | 9.8 | Jul 14 | In Factory::CreateStrictFunctionMap of factory.cc, there is a possible out of bounds write due to an incorrect bounds check Affected: 8.1; 9.0; 10.0; 11.0 |
| CVE-2021-0516 | 9.8 | Jun 21 | In p2p_process_prov_disc_req of p2p_pd.c, there is a possible out of bounds read and write due to a use after free Affected: 8.1; 9.0; 10.0; 11.0 |
| CVE-2021-0324 | 9.8 | Jun 14 | Product: AndroidVersions: Android SoCAndroid ID: A-175402462 Affected: All versions, or not specified |
| CVE-2021-0474 | 9.8 | Jun 11 | In avrc_msg_cback of avrc_api.cc, there is a possible out of bounds write due to a heap buffer overflow Affected: 8.1; 9.0; 10.0; 11.0 |
| CVE-2021-25386 | 9.8 | Jun 11 | An improper input validation vulnerability in sdfffd_parse_chunk_FVER() in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on… Affected: 8.1; 9.0; 10.0; 11.0 |
| CVE-2021-25385 | 9.8 | Jun 11 | An improper input validation vulnerability in sdfffd_parse_chunk_PROP() in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on… Affected: 8.1; 9.0; 10.0; 11.0 |
| CVE-2021-25384 | 9.8 | Jun 11 | An improper input validation vulnerability in sdfffd_parse_chunk_PROP() with Sample Rate Chunk in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to… Affected: 8.1; 9.0; 10.0; 11.0 |
| CVE-2021-25383 | 9.8 | Jun 11 | An improper input validation vulnerability in scmn_mfal_read() in libsapeextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on… Affected: 8.1; 9.0; 10.0; 11.0 |
| CVE-2021-0430 | 9.8 | Apr 13 | In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to a missing bounds check Affected: 10.0; 11.0 |
| CVE-2021-25360 | 9.8 | Apr 9 | An improper input validation vulnerability in libswmfextractor library prior to SMR APR-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process Affected: 10.0 |
| CVE-2021-0397 | 9.8 | Mar 10 | In sdp_copy_raw_data of sdp_discovery.cc, there is a possible system compromise due to a double free Affected: 8.1; 9.0; 10.0; 11.0 |
| CVE-2021-0396 | 9.8 | Mar 10 | In Builtins::Generate_ArgumentsAdaptorTrampoline of builtins-arm.cc and related files, there is a possible out of bounds write due to an incorrect bounds check Affected: 8.1; 9.0; 10.0; 11.0 |
| CVE-2021-25346 | 9.8 | Mar 4 | A possible arbitrary memory overwrite vulnerabilities in quram library version prior to SMR Jan-2021 Release 1 allow arbitrary code execution Affected: 8.0; 8.1; 9.0; 10.0 |
| CVE-2021-26689 | 9.8 | Feb 4 | An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software Affected: 8.0; 8.1; 9.0; 10.0 |
| CVE-2021-26688 | 9.8 | Feb 4 | An issue was discovered on LG Wing mobile devices with Android OS 10 software Affected: 10.0 |
| CVE-2021-26687 | 9.8 | Feb 4 | An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software Affected: 8.0; 8.1; 9.0; 10.0 |
| CVE-2021-0316 | 9.8 | Jan 11 | In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds write due to a missing bounds check Affected: 8.0; 8.1; 9.0; 10.0; 11.0 |
| CVE-2020-0471 | 9.8 | Jan 11 | In reassemble_and_dispatch of packet_fragmenter.cc, there is a possible way to inject packets into an encrypted Bluetooth connection due to improper input validation Affected: 8.0; 8.1; 9.0; 10.0; 11.0 |
| CVE-2020-35551 | 9.8 | Dec 18 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software Affected: 8.0; 8.1; 9.0; 10.0 |
| CVE-2020-35550 | 9.8 | Dec 18 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software Affected: 8.0; 8.1; 9.0; 10.0; 11.0 |
| CVE-2020-27068 | 9.8 | Dec 15 | Product: AndroidVersions: Android kernelAndroid ID: A-127973231References: Upstream kernel Affected: All versions, or not specified |
| CVE-2020-0456 | 9.8 | Dec 14 | There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170378843 Affected: All versions, or not specified |
| CVE-2020-0457 | 9.8 | Dec 14 | There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170367562 Affected: All versions, or not specified |
| CVE-2020-0455 | 9.8 | Dec 14 | There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170372514 Affected: All versions, or not specified |
| CVE-2020-0452 | 9.8 | Nov 10 | In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow Affected: 8.0; 8.1; 9.0; 10.0; 11.0 |
| CVE-2020-0447 | 9.8 | Nov 10 | There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168251617 Affected: All versions, or not specified |
| CVE-2020-0446 | 9.8 | Nov 10 | There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168264528 Affected: All versions, or not specified |
| CVE-2020-0445 | 9.8 | Nov 10 | There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168264527 Affected: All versions, or not specified |
| CVE-2020-28340 | 9.8 | Nov 8 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software Affected: 8.0; 8.1; 9.0; 10.0; 11.0 |
| CVE-2020-26607 | 9.8 | Oct 6 | An issue was discovered in TimaService on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software Affected: 8.0; 8.1; 9.0; 10.0 |
| CVE-2020-0354 | 9.8 | Sep 18 | In Bluetooth, there is a possible out of bounds write due to a missing bounds check Affected: 11.0 |
| CVE-2020-0333 | 9.8 | Sep 17 | In UrlQuerySanitizer, there is a possible improper input validation Affected: 11.0 |
| CVE-2020-0380 | 9.8 | Sep 17 | In allocExcessBits of bitalloc.c, there is a possible out of bounds write due to an incorrect bounds check Affected: 8.0; 8.1; 9.0; 10.0; 11.0 |
| CVE-2020-0342 | 9.8 | Sep 17 | There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-160812576 Affected: All versions, or not specified |
| CVE-2020-0278 | 9.8 | Sep 17 | There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-160812574 Affected: All versions, or not specified |
| CVE-2020-0229 | 9.8 | Sep 17 | There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-156333725 Affected: All versions, or not specified |
| CVE-2020-0123 | 9.8 | Sep 17 | There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-149871374 Affected: All versions, or not specified |
| CVE-2020-25283 | 9.8 | Sep 11 | An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software Affected: 8.0; 8.1; 9.0; 10.0 |
| CVE-2020-25282 | 9.8 | Sep 11 | An issue was discovered on LG mobile devices with Android OS 10 software Affected: 10.0 |
| CVE-2020-25279 | 9.8 | Sep 11 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software Affected: 8.0; 8.1; 9.0; 10.0 |
| CVE-2020-25278 | 9.8 | Sep 11 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software Affected: 8.0; 8.1; 9.0; 10.0 |
| CVE-2020-25062 | 9.8 | Aug 31 | An issue was discovered on LG mobile devices with Android OS 9 and 10 software Affected: 9.0; 10.0 |
| CVE-2020-25061 | 9.8 | Aug 31 | An issue was discovered on LG mobile devices with Android OS 9 and 10 software on the VZW network Affected: 9.0; 10.0 |
| CVE-2020-25058 | 9.8 | Aug 31 | An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9, and 10 software Affected: 8.0; 8.1; 9.0; 10.0 |
| CVE-2020-25057 | 9.8 | Aug 31 | An issue was discovered on LG mobile devices with Android OS 10 software Affected: 10.0 |
| CVE-2020-25055 | 9.8 | Aug 31 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software Affected: 8.0; 8.1; 9.0; 10.0 |
| CVE-2020-25053 | 9.8 | Aug 31 | An issue was discovered on Samsung mobile devices with Q(10.0) (exynos9830 chipsets) software Affected: 10.0 |
| CVE-2020-25052 | 9.8 | Aug 31 | An issue was discovered on Samsung mobile devices with Q(10.0) (exynos9830 chipsets) software Affected: 10.0 |
The 500 most important CVEs for this product (exploited first, then by severity)
