← Back

Android

android

Vendor: Google • 8,153 CVEs

CVEs (8,153)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Android
May 13, 2026
Sep 8, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62534693.
1Google
1Android
May 13, 2026
Sep 8, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-62214264.
1Google
1Android
May 13, 2026
Sep 8, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-38448381.
1Google
1Android
May 13, 2026
Sep 8, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37237396.
1Google
1Android
May 13, 2026
Sep 8, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36715268.
1Google
1Android
May 13, 2026
Sep 8, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36492741.
1Google
1Android
May 13, 2026
Sep 8, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36006815.
1Google
1Android
May 13, 2026
Sep 8, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34621073.
1Google
1Android
May 13, 2026
Sep 8, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A elevation of privilege vulnerability in the Android libraries (libminikin). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-32178311.
1Google
1Android
May 13, 2026
Sep 8, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A remote code execution vulnerability in the Android libraries (libgdx). Product: Android. Versions: 7.1.1, 7.1.2, 8.0. Android ID: A-62218744.
1Google
1Android
May 13, 2026
Sep 8, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A elevation of privilege vulnerability in the Android framework (windowmanager). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-62196835.
1Google
1Android
May 13, 2026
Aug 24, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37237701.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
8.1 HIGH· v3
9.3 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a WLAN driver can lead to a Use After Free condition.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
7.0 HIGH· v3
7.6 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a USB driver can lead to a Use After Free condition.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
4.7 MEDIUM· v3
2.6 LOW· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in two KGSL driver functions can lead to a Use After Free condition.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, if a pointer argument coming from userspace is invalid, a driver may use an uninitialized structure to log an error message.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, if a userspace string is not NULL-terminated, kernel memory contents can leak to system logs.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, in a video driver, memory corruption can potentially occur due to lack of bounds checking in a memcpy().
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_data(), variable ds_data[i].scale may still point to a user-provided address (which could point to arb...Show more
In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_data(), variable ds_data[i].scale may still point to a user-provided address (which could point to arbitrary kernel address), so on an error condition, this user-provided address will be freed (arbitrary free), and continued operation could result in use after free condition.Show less
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, in a driver function, a value from userspace is not properly validated potentially leading to an out of bounds heap write.