Skip to content

Known vulnerabilities in Google Android

Is your version affected?

CVE Summary Score Published
CVE-2024-20031 In da, there is a possible out of bounds write due to lack of valudation 6.7 Medium Mar 4, 2024
CVE-2024-20023 In flashc, there is a possible out of bounds write due to lack of valudation 6.7 Medium Mar 4, 2024
CVE-2024-0023 In ConvertRGBToPlanarYUV of Codec2BufferUtils.cpp, there is a possible out of bounds write due to an incorrect bounds… 7.4 High Feb 16, 2024
CVE-2024-0021 In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way for an app in the work profile to… 7.0 High Feb 16, 2024
CVE-2024-0020 In onActivityResult of NotificationSoundPreference.java, there is a possible way to hear audio files belonging to a… 5.5 Medium Feb 16, 2024
CVE-2024-0019 In setListening of AppOpsControllerImpl.java, there is a possible way to hide the microphone privacy indicator when… 6.2 Medium Feb 16, 2024
CVE-2024-0018 In convertYUV420Planar16ToY410 of ColorConverter.cpp, there is a possible out of bounds write due to a heap buffer… 8.4 High Feb 16, 2024
CVE-2024-0017 In shouldUseNoOpLocation of CameraActivity.java, there is a possible confused deputy due to a permissions bypass 5.5 Medium Feb 16, 2024
CVE-2024-0016 In multiple locations, there is a possible out of bounds read due to a missing bounds check 6.5 Medium Feb 16, 2024
CVE-2024-0015 In convertToComponentName of DreamService.java, there is a possible way to launch arbitrary protected activities due… 7.8 High Feb 16, 2024
CVE-2023-40085 In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check 3.3 Low Feb 16, 2024
CVE-2023-21165 In DevmemIntUnmapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free 8.4 High Feb 16, 2024
CVE-2024-0041 In removePersistentDot of SystemStatusAnimationSchedulerImpl.kt, there is a possible race condition due to a logic error… 8.4 High Feb 16, 2024
CVE-2024-0040 In setParameter of MtpPacket.cpp, there is a possible out of bounds read due to a heap buffer overflow 7.5 High Feb 16, 2024
CVE-2024-0038 In injectInputEventToInputFilter of AccessibilityManagerService.java, there is a possible arbitrary input event… 8.4 High Feb 16, 2024
CVE-2024-0037 In applyCustomDescription of SaveUi.java, there is a possible way to view images belonging to a different user due to… 3.3 Low Feb 16, 2024
CVE-2024-0036 In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to bypass the restrictions on… 7.4 High Feb 16, 2024
CVE-2024-0035 In onNullBinding of TileLifecycleManager.java, there is a possible way to launch an activity from the background due… 7.4 High Feb 16, 2024
CVE-2024-0034 In BackgroundLaunchProcessController, there is a possible way to launch arbitrary activity from the background due to… 7.8 High Feb 16, 2024
CVE-2024-0033 In multiple functions of ashmem-dev.cpp, there is a possible missing seal due to a heap buffer overflow 8.4 High Feb 16, 2024
CVE-2024-0032 In multiple locations, there is a possible way to request access to directories that should be hidden due to improper… 6.8 Medium Feb 16, 2024
CVE-2024-0031 In attp_build_read_by_type_value_cmd of att_protocol.cc , there is a possible out of bounds write due to improper… 9.8 Critical Feb 16, 2024
CVE-2024-0030 In btif_to_bta_response of btif_gatt_util.cc, there is a possible out of bounds read due to an incorrect bounds check 5.5 Medium Feb 16, 2024
CVE-2024-0029 In multiple files, there is a possible way to capture the device screen when disallowed by device policy due to a… 7.1 High Feb 16, 2024
CVE-2024-0014 In startInstall of UpdateFetcher.java, there is a possible way to trigger a malicious config update due to a logic error 8.4 High Feb 16, 2024

Other Google products