← Back

Android

android

Vendor: Google • 8,366 CVEs

CVEs (8,366)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Android
May 13, 2026
May 16, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
In TrustZone an information exposure vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.
1Google
1Android
May 13, 2026
May 16, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
In TrustZone an untrusted pointer dereference vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.
1Google
1Android
May 13, 2026
May 16, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
In TrustZone a buffer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel while loading an ELF file.
1Google
1Android
May 13, 2026
May 16, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.
1Google
1Android
May 13, 2026
May 16, 2017
N/A· v4
7.0 HIGH· v3
7.6 HIGH· v2
In TrustZone a time-of-check time-of-use race condition could potentially exist in a listener routine in all Android releases from CAF using the Linux kernel.
1Google
1Android
May 13, 2026
May 16, 2017
N/A· v4
7.0 HIGH· v3
7.6 HIGH· v2
In TrustZone a time-of-check time-of-use race condition could potentially exist in a QFPROM routine in all Android releases from CAF using the Linux kernel.
1Google
1Android
May 13, 2026
May 16, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.
1Google
1Android
May 13, 2026
May 16, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
In TrustZone a buffer overflow vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.
1Google
1Android
May 13, 2026
May 16, 2017
N/A· v4
7.0 HIGH· v3
7.6 HIGH· v2
In TrustZone a time-of-check time-of-use race condition could potentially exist in an authentication routine in all Android releases from CAF using the Linux kernel.
1Google
1Android
May 13, 2026
May 16, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
In TrustZone an integer overflow vulnerability leading to a buffer overflow could potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.
1Google
1Android
May 13, 2026
May 16, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A PKCS#1 v1.5 signature verification routine in all Android releases from CAF using the Linux kernel may not check padding.
1Google
1Android
May 13, 2026
May 16, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Due to missing input validation in all Android releases from CAF using the Linux kernel, HLOS can write to fuses for which it should not have access.
1Google
1Android
May 13, 2026
May 16, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel due to an improper address range computation.
1Google
1Android
May 13, 2026
May 16, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A buffer overflow vulnerability in all Android releases from CAF using the Linux kernel can potentially occur if an OEM performs an app region size customization due to a hard-coded value.
1Google
1Android
May 13, 2026
May 12, 2017
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
In function msm_pcm_playback_close() in all Android releases from CAF using the Linux kernel, prtd is assigned substream->runtime->private_data. Later, prtd is freed. However, prtd is not sanitized and set to NULL, resul...Show more
In function msm_pcm_playback_close() in all Android releases from CAF using the Linux kernel, prtd is assigned substream->runtime->private_data. Later, prtd is freed. However, prtd is not sanitized and set to NULL, resulting in a dangling pointer. There are other functions that access the same memory (substream->runtime->private_data) with a NULL check, such as msm_pcm_volume_ctl_put(), which means this freed memory could be used.Show less
1Google
1Android
May 13, 2026
May 12, 2017
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
In all Android releases from CAF using the Linux kernel, while processing a voice SVC request which is nonstandard by specifying a payload size that will overflow its own declared size, an out of bounds memory copy occur...Show more
In all Android releases from CAF using the Linux kernel, while processing a voice SVC request which is nonstandard by specifying a payload size that will overflow its own declared size, an out of bounds memory copy occurs.Show less
1Google
1Android
May 13, 2026
May 12, 2017
N/A· v4
7.0 HIGH· v3
6.9 MEDIUM· v2
In core_info_read and inst_info_read in all Android releases from CAF using the Linux kernel, variable "dbg_buf", "dbg_buf->curr" and "dbg_buf->filled_size" could be modified by different threads at the same time, but th...Show more
In core_info_read and inst_info_read in all Android releases from CAF using the Linux kernel, variable "dbg_buf", "dbg_buf->curr" and "dbg_buf->filled_size" could be modified by different threads at the same time, but they are not protected with mutex or locks. Buffer overflow is possible on race conditions. "buffer->curr" itself could also be overwritten, which means that it may point to anywhere of kernel memory (for write).Show less
1Google
1Android
May 13, 2026
May 12, 2017
N/A· v4
5.5 MEDIUM· v3
7.1 HIGH· v2
A remote denial of service vulnerability in HevcUtils.cpp in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as Low due to deta...Show more
A remote denial of service vulnerability in HevcUtils.cpp in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as Low due to details specific to the vulnerability. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-35467107.Show less
1Google
1Android
May 13, 2026
May 12, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An information disclosure vulnerability in the MediaTek command queue driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be use...Show more
An information disclosure vulnerability in the MediaTek command queue driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: N/A. Android ID: A-35142799. References: M-ALPS03161531.Show less
2Google
Linux
2Android
Linux Kernel
May 13, 2026
May 12, 2017
N/A· v4
7.0 HIGH· v3
7.6 HIGH· v2
An elevation of privilege vulnerability in the Qualcomm Secure Channel Manager driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High bec...Show more
An elevation of privilege vulnerability in the Qualcomm Secure Channel Manager driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35401052. References: QC-CR#1081711.Show less