Skip to content

Known vulnerabilities in Google Android

Is your version affected?

CVE Summary Score Published
CVE-2024-31323 In onCreate of multiple files, there is a possible way to trick the user into granting health permissions due to… 7.8 High Jul 9, 2024
CVE-2024-31322 In updateServicesLocked of AccessibilityManagerService.java, there is a possible way for an app to be hidden from the… 6.3 Medium Jul 9, 2024
CVE-2024-31319 In updateNotificationChannelFromPrivilegedListener of NotificationManagerService.java, there is a possible cross-user… 8.4 High Jul 9, 2024
CVE-2024-31318 In CompanionDeviceManagerService.java, there is a possible way to pair a companion device without user acceptance due to… 7.8 High Jul 9, 2024
CVE-2024-31327 In multiple functions of MessageQueueBase.h, there is a possible out of bounds write due to a race condition 5.3 Medium Jul 9, 2024
CVE-2024-31326 In multiple locations, there is a possible way in which policy migration code will never be executed due to a logic… 7.8 High Jul 9, 2024
CVE-2024-31325 In multiple locations, there is a possible way to reveal images across users data due to a logic error in the code 7.8 High Jul 9, 2024
CVE-2024-23698 In RGXFWChangeOSidPriority of rgxfwutils.c, there is a possible arbitrary code execution due to a missing bounds check 7.8 High Jul 9, 2024
CVE-2024-23697 In RGXCreateHWRTData_aux of rgxta3d.c, there is a possible arbitrary code execution due to a use after free 7.3 High Jul 9, 2024
CVE-2024-31313 In availableToWriteBytes of MessageQueueBase.h, there is a possible out of bounds write due to an incorrect bounds check 7.8 High Jul 9, 2024
CVE-2024-31312 In multiple locations, there is a possible information leak due to a missing permission check 5.5 Medium Jul 9, 2024
CVE-2024-31311 In increment_annotation_count of stats_event.c, there is a possible out of bounds write due to a missing bounds check 6.3 Medium Jul 9, 2024
CVE-2024-31310 In newServiceInfoLocked of AutofillManagerServiceImpl.java, there is a possible way to hide an enabled Autofill… 7.8 High Jul 9, 2024
CVE-2024-31317 In multiple functions of ZygoteProcess.java, there is a possible way to achieve code execution as any app via… 7.8 High Jul 9, 2024
CVE-2024-31316 In onResult of AccountManagerService.java, there is a possible way to perform an arbitrary background activity launch… 7.8 High Jul 9, 2024
CVE-2024-31315 In multiple functions of ManagedServices.java, there is a possible way to hide an app with notification access in the… 5.3 Medium Jul 9, 2024
CVE-2024-31314 In multiple functions of ShortcutService.java, there is a possible persistent DOS due to resource exhaustion 6.2 Medium Jul 9, 2024
CVE-2024-23711 In DevmemXIntUnreserveRange of devicemem_server.c, there is a possible arbitrary code execution due to a logic error… 7.8 High Jul 9, 2024
CVE-2024-23696 In RGXCreateZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to a use after free 8.4 High Jul 9, 2024
CVE-2024-23695 In CacheOpPMRExec of cache_km.c, there is a possible out of bounds write due to an integer overflow 8.4 High Jul 9, 2024
CVE-2023-21113 In multiple locations, there is a possible permission bypass due to a confused deputy 7.8 High Jul 9, 2024
CVE-2023-21114 In multiple locations, there is a possible permission bypass due to a confused deputy 7.8 High Jul 9, 2024
CVE-2024-20081 In gnss service, there is a possible out of bounds write due to improper input validation 9.8 Critical Jul 1, 2024
CVE-2024-20080 In gnss service, there is a possible escalation of privilege due to improper certificate validation 9.8 Critical Jul 1, 2024
CVE-2024-20079 In gnss service, there is a possible out of bounds write due to improper input validation 9.8 Critical Jul 1, 2024

Other Google products