← Back

Android

android

Vendor: Google • 8,153 CVEs

CVEs (8,153)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in an Inter-RAT procedure.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a UE can respond to a UEInformationRequest before Access Stratum security is established.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send IMEI or IMEISV to the network on a network request before NAS security has been activated.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a procedure involving a remote UIM client.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow vulnerability exists when loading an ELF file.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, playReady DRM failed to check a length potentially leading to unauthorized access to secure memory.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a pointer is not properly validated in a QTEE system call.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a memory management routine.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced during GAL decoding.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the processing of certain responses from the USIM.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reached while processing a downlink message.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reached due to an improper bound on a length in a System Information message.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists where an array out of bounds access can occur during a CA call.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in the processing of certain responses from the USIM.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in the processing of lost RTP packets.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in GNSS when performing a scan after bootup.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reached due to an improper bound on the size of a frequency list.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in GERAN where a buffer can be overflown while taking power measurements.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reached due to an improper bound on the size of a frequency list.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced upon the expiry of a timer.