Skip to content

Known vulnerabilities in Google Android

Is your version affected?

CVE Summary Score Published
CVE-2024-34742 In shouldWrite of OwnersData.java, there is a possible edge case that prevents MDM policies from being persisted due… 5.5 Medium Aug 15, 2024
CVE-2024-34741 In setForceHideNonSystemOverlayWindowIfNeeded of WindowState.java, there is a possible way for message content to be… 7.8 High Aug 15, 2024
CVE-2024-34740 In attributeBytesBase64 and attributeBytesHex of BinaryXmlSerializer.java, there is a possible arbitrary XML injection… 7.7 High Aug 15, 2024
CVE-2024-34739 In shouldRestrictOverlayActivities of UsbProfileGroupSettingsManager.java, there is a possible escape from SUW due to… 7.8 High Aug 15, 2024
CVE-2024-34738 In multiple functions of AppOpsService.java, there is a possible way for unprivileged apps to read their own… 7.7 High Aug 15, 2024
CVE-2024-34737 In ensureSetPipAspectRatioQuotaTracker of ActivityClientController.java, there is a possible way to generate unmovable… 7.7 High Aug 15, 2024
CVE-2024-34736 In setupVideoEncoder of StagefrightRecorder.cpp, there is a possible asynchronous playback when B-frame support is… 6.2 Medium Aug 15, 2024
CVE-2024-34734 In onForegroundServiceButtonClicked of FooterActionsViewModel.kt, there is a possible way to disable the active VPN… 7.7 High Aug 15, 2024
CVE-2024-34731 In multiple functions of TranscodingResourcePolicy.cpp, there is a possible memory corruption due to a race condition 7.7 High Aug 15, 2024
CVE-2024-34727 In sdpu_compare_uuid_with_attr of sdp_utils.cc, there is a possible out of bounds read due to a heap buffer overflow 7.5 High Aug 15, 2024
CVE-2024-31333 In _MMU_AllocLevel of mmu_common.c, there is a possible arbitrary code execution due to an integer overflow 7.8 High Aug 15, 2024
CVE-2024-34726 In PVRSRV_MMap of pvr_bridge_k.c, there is a possible arbitrary code execution due to a logic error in the code 7.8 High Jul 9, 2024
CVE-2024-34725 In DevmemIntUnexportCtx of devicemem_server.c, there is a possible arbitrary code execution due to a race condition 7.4 High Jul 9, 2024
CVE-2024-34724 In _UnrefAndMaybeDestroy of pmr.c, there is a possible arbitrary code execution due to a race condition 7.0 High Jul 9, 2024
CVE-2024-34723 In onTransact of ParcelableListBinder.java , there is a possible way to steal mAllowlistToken to launch an app from… 5.3 Medium Jul 9, 2024
CVE-2024-34722 In smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect… 7.4 High Jul 9, 2024
CVE-2024-34721 In ensureFileColumns of MediaProvider.java, there is a possible disclosure of files owned by another user due to… 6.2 Medium Jul 9, 2024
CVE-2024-34720 In com_android_internal_os_ZygoteCommandBuffer_nativeForkRepeatedly of… 7.4 High Jul 9, 2024
CVE-2024-31320 In setSkipPrompt of AssociationRequest.java , there is a possible way to establish a companion device association… 7.4 High Jul 9, 2024
CVE-2024-31335 In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in… 8.4 High Jul 9, 2024
CVE-2024-31334 In DevmemIntFreeDefBackingPage of devicemem_server.c, there is a possible arbitrary code execution due to a logic… 6.7 Medium Jul 9, 2024
CVE-2024-31332 In multiple locations, there is a possible way to bypass a restriction on adding new Wi-Fi connections due to a… 8.4 High Jul 9, 2024
CVE-2024-31331 In setMimeGroup of PackageManagerService.java, there is a possible way to hide the service from Settings due to a… 7.8 High Jul 9, 2024
CVE-2024-31339 In multiple functions of StatsService.cpp, there is a possible memory corruption due to a use after free 7.8 High Jul 9, 2024
CVE-2024-31324 In hide of WindowState.java, there is a possible way to bypass tapjacking/overlay protection by launching the activity… 7.8 High Jul 9, 2024

Other Google products