Skip to content

Known vulnerabilities in Google Android

Is your version affected?

CVE Summary Score Published
CVE-2024-32905 In circ_read of link_device_memory_legacy.c, there is a possible out of bounds write due to an incorrect bounds check 9.8 Critical Jun 13, 2024
CVE-2024-32895 In BCMFASTPATH of dhd_msgbuf.c, there is a possible out of bounds write due to a missing bounds check 9.8 Critical Jun 13, 2024
CVE-2024-23708 In multiple functions of NotificationManagerService.java, there is a possible way to not show a toast message when a… 9.8 Critical May 7, 2024
CVE-2024-23705 In multiple locations, there is a possible failure to persist or enforce user restrictions due to improper input… 9.8 Critical May 7, 2024
CVE-2024-29756 In afe_callback of q6afe.c, there is a possible out of bounds write due to a buffer overflow 9.8 Critical Apr 5, 2024
CVE-2024-27228 there is a possible out of bounds write due to a heap buffer overflow 9.8 Critical Mar 11, 2024
CVE-2024-27227 A malicious DNS response can trigger a number of OOB reads, writes, and other memory issues 9.8 Critical Mar 11, 2024
CVE-2024-27207 Exported broadcast receivers allowing malicious apps to bypass broadcast protection 9.1 Critical Mar 11, 2024
CVE-2024-23717 In access_secure_service_from_temp_bond of btm_sec.cc, there is a possible way to achieve keystroke injection due to… 9.1 Critical Mar 11, 2024
CVE-2024-0039 In attp_build_value_cmd of att_protocol.cc, there is a possible out of bounds write due to a missing bounds check 9.8 Critical Mar 11, 2024
CVE-2024-0031 In attp_build_read_by_type_value_cmd of att_protocol.cc , there is a possible out of bounds write due to improper… 9.8 Critical Feb 16, 2024
CVE-2023-40115 In readLogs of StatsService.cpp, there is a possible memory corruption due to a use after free 9.8 Critical Feb 15, 2024
CVE-2023-48425 U-Boot vulnerability resulting in persistent Code Execution  9.8 Critical Dec 11, 2023
CVE-2023-48424 U-Boot shell vulnerability resulting in Privilege escalation in a production device 9.8 Critical Dec 11, 2023
CVE-2023-40077 In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition 9.8 Critical Dec 4, 2023
CVE-2023-21216 In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible arbitrary code execution due to a use after… 9.8 Critical Dec 4, 2023
CVE-2023-21166 In RGXBackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free 9.8 Critical Dec 4, 2023
CVE-2022-42541 Remote code execution 9.8 Critical Nov 29, 2023
CVE-2023-20965 In processMessageImpl of ClientModeImpl.java, there is a possible credential disclosure in the TOFU flow due to a… 9.8 Critical Aug 14, 2023
CVE-2020-16010 Exploited Google Chrome for Android UI Heap Buffer Overflow Vulnerability 9.6 Critical Nov 3, 2020

Other Google products