AN
Operating System
Android
On CISA KEVExploited in the wild
8,375
CVEs
23
On KEV
10.0
Max CVSS
33
New 30D
Severity mix
Critical 478High 16Medium 6Low 0
Watch
Add Android to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-25049 | 9.8 | Aug 31 | An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software Affected: 9.0; 10.0 |
| CVE-2020-0253 | 9.8 | Aug 11 | There is a possible memory corruption due to a use after free.Product: AndroidVersions: Android SoCAndroid ID: A-152647365 Affected: All versions, or not specified |
| CVE-2020-0252 | 9.8 | Aug 11 | There is a possible memory corruption due to a use after free.Product: AndroidVersions: Android SoCAndroid ID: A-152236803 Affected: All versions, or not specified |
| CVE-2020-0231 | 9.8 | Jul 17 | There is a possible out of bounds write due to an incorrect bounds check Affected: All versions, or not specified |
| CVE-2020-0230 | 9.8 | Jul 17 | There is a possible out of bounds write due to an incorrect bounds check Affected: All versions, or not specified |
| CVE-2020-0225 | 9.8 | Jul 17 | In a2dp_vendor_ldac_decoder_decode_packet of a2dp_vendor_ldac_decoder.cc, there is a possible out of bounds write due to a missing bounds check Affected: 10.0 |
| CVE-2020-0224 | 9.8 | Jul 17 | In FastKeyAccumulator::GetKeysSlow of keys.cc, there is a possible out of bounds write due to type confusion Affected: 8.0; 8.1; 9.0; 10.0 |
| CVE-2020-0235 | 9.8 | Jun 16 | In crus_sp_shared_ioctl we first copy 4 bytes from userdata into "size" variable, and then use that variable as the size parameter for "copy_from_user", ending up overwriting… Affected: All versions, or not specified |
| CVE-2020-0232 | 9.8 | Jun 16 | Function abc_pcie_issue_dma_xfer_sync creates a transfer object, adds it to the session object then continues to work with it Affected: All versions, or not specified |
| CVE-2020-0223 | 9.8 | Jun 16 | This is an unbounded write into kernel global memory, via a user-controlled buffer size.Product: AndroidVersions: Android kernelAndroid ID: A-135130450 Affected: All versions, or not specified |
| CVE-2020-0217 | 9.8 | Jun 11 | In RW_T4tPresenceCheck of rw_t4t.cc, there is a possible out of bounds write due to a missing bounds check Affected: 10.0 |
| CVE-2020-0201 | 9.8 | Jun 11 | In showSecurityFields of WifiConfigController.java there is a possible credential leak due to a confused deputy Affected: 10.0 |
| CVE-2020-0138 | 9.8 | Jun 11 | In get_element_attr_rsp of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check Affected: 10.0 |
| CVE-2020-0117 | 9.8 | Jun 10 | In aes_cmac of aes_cmac.cc, there is a possible out of bounds write due to an integer overflow Affected: 8.0; 8.1; 9.0; 10.0 |
| CVE-2020-13841 | 9.8 | Jun 5 | An issue was discovered on LG mobile devices with Android OS 9 and 10 (MTK chipsets) Affected: 9.0; 10.0 |
| CVE-2020-13840 | 9.8 | Jun 5 | An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets) Affected: 7.2; 8.0; 8.1; 9.0; 10.0 |
| CVE-2020-13839 | 9.8 | Jun 5 | An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets) Affected: 7.2; 8.0; 8.1; 9.0; 10.0 |
| CVE-2020-13835 | 9.8 | Jun 4 | An issue was discovered on Samsung mobile devices with O(8.x) (with TEEGRIS) software Affected: 8.0 |
| CVE-2020-13832 | 9.8 | Jun 4 | An issue was discovered on Samsung mobile devices with Q(10.0) (with TEEGRIS on Exynos chipsets) software Affected: 10.0 |
| CVE-2020-13831 | 9.8 | Jun 4 | An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos 7570 chipsets) software Affected: 8.0; 8.1; 9.0 |
| CVE-2020-0221 | 9.8 | May 14 | Airbrush FW's scratch memory allocator is susceptible to numeric overflow Affected: All versions, or not specified |
| CVE-2020-0103 | 9.8 | May 14 | In a2dp_aac_decoder_cleanup of a2dp_aac_decoder.cc, there is a possible invalid free due to memory corruption Affected: 9.0; 10.0 |
| CVE-2020-12753 | 9.8 | May 11 | An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software Affected: 7.2; 8.0; 8.1; 9.0; 10.0 |
| CVE-2020-12747 | 9.8 | May 11 | An issue was discovered on Samsung mobile devices with Q(10.0) (Exynos980 9630 and Exynos990 9830 chipsets) software Affected: 10.0 |
| CVE-2020-12746 | 9.8 | May 11 | An issue was discovered on Samsung mobile devices with O(8.X), P(9.0), and Q(10.0) (Exynos chipsets) software Affected: 8.0; 8.1; 9.0; 10.0 |
| CVE-2020-8899 | 9.8 | May 6 | There is a buffer overwrite vulnerability in the Quram qmg library of Samsung's Android OS versions O(8.x), P(9.0) and Q(10.0) Affected: 8.0; 8.1; 9.0; 10.0 |
| CVE-2020-0073 | 9.8 | Apr 17 | In rw_t2t_handle_tlv_detect_rsp of rw_t2t_ndef.cc, there is a possible out of bounds write due to a missing bounds check Affected: 8.0; 8.1; 9.0; 10.0 |
| CVE-2020-0072 | 9.8 | Apr 17 | In rw_t2t_handle_tlv_detect_rsp of rw_t2t_ndef.cc, there is a possible out of bounds write due to a missing bounds check Affected: 8.0; 8.1; 9.0; 10.0 |
| CVE-2020-0071 | 9.8 | Apr 17 | In rw_t2t_extract_default_locks_info of rw_t2t_ndef.cc, there is a possible out of bounds write due to a missing bounds check Affected: 8.0; 8.1; 9.0; 10.0 |
| CVE-2020-0070 | 9.8 | Apr 17 | In rw_t2t_update_lock_attributes of rw_t2t_ndef.cc, there is a possible out of bounds write due to a missing bounds check Affected: 8.0; 8.1; 9.0; 10.0 |
| CVE-2020-11873 | 9.8 | Apr 17 | An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software Affected: 7.2; 8.0; 8.1; 9.0; 10.0 |
| CVE-2019-20782 | 9.8 | Apr 17 | An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software Affected: 7.0; 7.1; 7.2; 8.0; 8.1 |
| CVE-2019-20780 | 9.8 | Apr 17 | An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software Affected: 7.0; 7.1; 7.2; 8.0; 8.1 |
| CVE-2019-20778 | 9.8 | Apr 17 | An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software Affected: 7.0; 7.1; 7.2; 8.0; 8.1; 9.0 |
| CVE-2019-20777 | 9.8 | Apr 17 | An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software Affected: 7.0; 7.1; 7.2; 8.0; 8.1; 9.0 |
| CVE-2019-20772 | 9.8 | Apr 17 | An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software Affected: 7.0; 7.1; 7.2; 8.0; 8.1; 9.0 |
| CVE-2015-8546 | 9.8 | Apr 10 | An issue was discovered on Samsung mobile devices with software through 2015-11-12, affecting the Galaxy S6/S6 Edge, Galaxy S6 Edge+, and Galaxy Note5 with the Shannon333 chipset Affected: All versions, or not specified |
| CVE-2015-5524 | 9.8 | Apr 10 | An issue was discovered on Samsung mobile devices with KK(4.4) and later software through 2015-05-13 Affected: 4.4 |
| CVE-2018-21075 | 9.8 | Apr 8 | An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software Affected: 7.0; 7.1.0; 7.1.1; 7.1.2; 8.0; 8.1 |
| CVE-2018-21072 | 9.8 | Apr 8 | An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.0) (Exynos chipsets) software Affected: 6.0; 7.0; 7.1.0; 7.1.1; 7.1.2; 8.0 |
| CVE-2018-21066 | 9.8 | Apr 8 | An issue was discovered on Samsung mobile devices with M(6.0) (Exynos or MediaTek chipsets) software Affected: 6.0 |
| CVE-2018-21065 | 9.8 | Apr 8 | An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.x) software Affected: 6.0; 7.0; 7.1.0; 7.1.1; 7.1.2; 8.0; +1 more |
| CVE-2018-21064 | 9.8 | Apr 8 | An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software Affected: 7.0; 7.1.0; 7.1.1; 7.1.2; 8.0; 8.1 |
| CVE-2018-21063 | 9.8 | Apr 8 | An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.x) (Exynos chipsets) software Affected: 6.0; 7.0; 7.1.0; 7.1.1; 7.1.2; 8.0; +1 more |
| CVE-2018-21058 | 9.8 | Apr 8 | An issue was discovered on Samsung mobile devices with N(7.0), O(8.0) (exynos7420 or Exynos 8890/8996 chipsets) software Affected: 7.0; 8.0 |
| CVE-2018-21057 | 9.8 | Apr 8 | An issue was discovered on Samsung mobile devices with N(7.x) O(8.x, and P(9.0) (Exynos chipsets) software Affected: 7.0; 7.1.0; 7.1.1; 7.1.2; 8.0; 8.1; +1 more |
| CVE-2018-21055 | 9.8 | Apr 8 | An issue was discovered on Samsung mobile devices with N(7.0) (Qualcomm models using MSM8996 chipsets) software Affected: 7.0 |
| CVE-2018-21054 | 9.8 | Apr 8 | An issue was discovered on Samsung mobile devices with M(6.0), N(7.x) and O(8.x) except exynos9610/9820 in all Platforms, M(6.0) except MSM8909 SC77xx/9830 exynos3470/5420, N(7.0)… Affected: 6.0; 7.0; 7.1.0; 7.1.1; 7.1.2; 8.0; +4 more |
| CVE-2018-21052 | 9.8 | Apr 8 | An issue was discovered on Samsung mobile devices with N(7.x) and O(8.X) (Exynos chipsets) software Affected: 7.0; 7.1.0; 7.1.1; 7.1.2; 8.0; 8.1 |
| CVE-2018-21051 | 9.8 | Apr 8 | An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) (Exynos chipsets) software Affected: 7.0; 7.1.0; 7.1.1; 7.1.2; 8.0; 8.1 |
The 500 most important CVEs for this product (exploited first, then by severity)
