← Back

Android

android

Vendor: Google • 8,153 CVEs

CVEs (8,153)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Android
Jun 17, 2026
Mar 10, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Security misconfiguration of RKP in kernel prior to SMR Mar-2022 Release 1 allows a system not to be protected by RKP.
1Google
1Android
Jun 17, 2026
Mar 10, 2022
N/A· v4
6.6 MEDIUM· v3
4.4 MEDIUM· v2
In preloader (usb), there is a possible permission bypass due to a missing proper image authentication. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no add...Show more
In preloader (usb), there is a possible permission bypass due to a missing proper image authentication. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06160806; Issue ID: ALPS06137462.Show less
1Google
1Android
Jun 17, 2026
Mar 10, 2022
N/A· v4
6.6 MEDIUM· v3
4.4 MEDIUM· v2
In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execu...Show more
In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06160806; Issue ID: ALPS06160781.Show less
1Google
1Android
Jun 17, 2026
Mar 10, 2022
N/A· v4
6.6 MEDIUM· v3
4.4 MEDIUM· v2
In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execu...Show more
In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06160806; Issue ID: ALPS06160485.Show less
1Google
1Android
Jun 17, 2026
Mar 10, 2022
N/A· v4
6.5 MEDIUM· v3
4.4 MEDIUM· v2
In btif, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch...Show more
In btif, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06271186; Issue ID: ALPS06271186.Show less
1Google
1Android
Jun 17, 2026
Mar 10, 2022
N/A· v4
6.6 MEDIUM· v3
4.4 MEDIUM· v2
In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execu...Show more
In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06160806; Issue ID: ALPS06160820.Show less
1Google
1Android
Jun 17, 2026
Mar 10, 2022
N/A· v4
6.8 MEDIUM· v3
7.2 HIGH· v2
In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execu...Show more
In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06160806; Issue ID: ALPS06160830.Show less
1Google
1Android
Jun 17, 2026
Mar 10, 2022
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
In ims service, there is a possible AT command injection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed...Show more
In ims service, there is a possible AT command injection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219083; Issue ID: ALPS06219083.Show less
1Google
1Android
Jun 17, 2026
Mar 10, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In ims service, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need...Show more
In ims service, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219097; Issue ID: ALPS06219097.Show less
1Google
1Android
Jun 17, 2026
Mar 10, 2022
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
In ims service, there is a possible unexpected application behavior due to incorrect privilege assignment. This could lead to local denial of service with no additional execution privileges needed. User interaction is no...Show more
In ims service, there is a possible unexpected application behavior due to incorrect privilege assignment. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219127; Issue ID: ALPS06219127.Show less
1Google
1Android
Jun 17, 2026
Mar 10, 2022
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
In connsyslogger, there is a possible symbolic link following due to improper link resolution. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for...Show more
In connsyslogger, there is a possible symbolic link following due to improper link resolution. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06335038; Issue ID: ALPS06335038.Show less
1Google
1Android
Jun 17, 2026
Mar 10, 2022
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
In vpu, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploita...Show more
In vpu, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05954679; Issue ID: ALPS05954679.Show less
1Google
1Android
Jun 17, 2026
Mar 10, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...Show more
In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05917502; Issue ID: ALPS05917502.Show less
1Google
1Android
Jun 17, 2026
Mar 10, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...Show more
In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05917489; Issue ID: ALPS05917489.Show less
1Google
1Android
Jun 17, 2026
Mar 4, 2022
N/A· v4
7.8 HIGH· v3
6.9 MEDIUM· v2
When the device is in factory state, it can be access the shell without adb authentication process. The LG ID is LVE-SMP-210010.
1Google
1Android
Jun 17, 2026
Feb 11, 2022
N/A· v4
6.5 MEDIUM· v3
6.8 MEDIUM· v2
Improper input validation vulnerability in SettingsProvider prior to Android S(12) allows privileged attackers to trigger a permanent denial of service attack on a victim's devices.
1Google
1Android
Jun 17, 2026
Feb 11, 2022
N/A· v4
4.6 MEDIUM· v3
2.1 LOW· v2
Information disclosure vulnerability in Edge Panel prior to Android S(12) allows physical attackers to access screenshot in clipboard via Edge Panel.
1Google
1Android
Jun 17, 2026
Feb 11, 2022
N/A· v4
3.3 LOW· v3
2.1 LOW· v2
PendingIntent hijacking vulnerability in DataUsageReminderReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent.
1Google
1Android
Jun 17, 2026
Feb 11, 2022
N/A· v4
3.3 LOW· v3
2.1 LOW· v2
PendingIntent hijacking vulnerability in CpaReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent.
1Google
1Android
Jun 17, 2026
Feb 11, 2022
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
An improper input validation in SMC_SRPMB_WSM handler of RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution.