android vulnerabilities
CVEs whose affected-version data names the android package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
442 CVEsRSS
CVE-2025-20795High· 7.8In KeyInstall, there is a possible out of bounds write due to a missing bounds check
In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exp…
CVE-2025-20787Medium· 6.7In display, there is a possible memory corruption due to use after free
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Pa…
CVE-2025-20786Medium· 6.7In display, there is a possible memory corruption due to use after free
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Pa…
CVE-2025-20785Medium· 6.7In display, there is a possible memory corruption due to use after free
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Pa…
CVE-2025-20784Medium· 6.7In display, there is a possible memory corruption due to uninitialized data
In display, there is a possible memory corruption due to uninitialized data. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation…
CVE-2025-20783Medium· 6.7In display, there is a possible out of bounds write due to a missing bounds check
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploi…
CVE-2025-20782Medium· 6.7In display, there is a possible out of bounds write due to a missing bounds check
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploi…
CVE-2025-20781High· 7.8In display, there is a possible memory corruption due to use after free
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Pa…
CVE-2025-20780High· 7.8In display, there is a possible memory corruption due to use after free
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Pa…
CVE-2025-20779High· 7.0In display, there is a possible use after free due to a race condition
In display, there is a possible use after free due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Pat…
CVE-2025-20778High· 7.8In display, there is a possible out of bounds write due to a missing bounds check
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploi…
CVE-2025-36938Medium· 6.8In U-Boot of append_uint32_le(), there is a possible fault injection due to a logic error in the code
In U-Boot of append_uint32_le(), there is a possible fault injection due to a logic error in the code. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for…
CVE-2025-36937Critical· 9.8In AudioDecoder::HandleProduceRequest of audio_decoder.cc, there is a possible out of bounds write due to an incorrect bounds check
In AudioDecoder::HandleProduceRequest of audio_decoder.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interactio…
CVE-2025-36936High· 7.8In GetTachyonCommand of tachyon_server_common.h, there is a possible out of bounds write due to an integer overflow
In GetTachyonCommand of tachyon_server_common.h, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not…
CVE-2025-36935High· 7.8In trusty_ffa_mem_reclaim of shared-mem-smcall.c, there is a possible memory corruption due to uninitialized data
In trusty_ffa_mem_reclaim of shared-mem-smcall.c, there is a possible memory corruption due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not n…
CVE-2025-36934High· 7.4In bigo_worker_thread of private/google-modules/video/gchips/bigo.c, there is a possible use after free due to a race condition
In bigo_worker_thread of private/google-modules/video/gchips/bigo.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User intera…
CVE-2025-36932High· 7.8In tracepoint_msg_handler of cpm/google/lib/tracepoint/tracepoint_ipc.c, there is a possible memory overwrite due to improper input validation
In tracepoint_msg_handler of cpm/google/lib/tracepoint/tracepoint_ipc.c, there is a possible memory overwrite due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges need…
CVE-2025-36931High· 7.8In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to a missing bounds check
In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…
CVE-2025-36930High· 7.8In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to a missing bounds check
In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…
CVE-2025-36929Medium· 5.5In AreFencesRegistered of gxp_fence_manager.cc, there is a possible information leak due to improper input validation
In AreFencesRegistered of gxp_fence_manager.cc, there is a possible information leak due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is no…
CVE-2025-36928High· 7.8In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to an incorrect bounds check
In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed …
CVE-2025-36927High· 7.8In GetTachyonCommand of tachyon_server_common.h, there is a possible out of bounds write due to a missing bounds check
In GetTachyonCommand of tachyon_server_common.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is …
CVE-2025-36925High· 7.8In WAVES_send_data_to_dsp of libaoc_waves.c, there is a possible out of bounds write due to a missing bounds check
In WAVES_send_data_to_dsp of libaoc_waves.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not …
CVE-2025-36924High· 8.0In ss_DecodeLcsAssistDataReqMsg(void) of ss_LcsManagement.c, there is a possible out of bounds write due to an incorrect bounds check
In ss_DecodeLcsAssistDataReqMsg(void) of ss_LcsManagement.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution pri…
CVE-2025-36923High· 8.0In NrmmDecoder::DecodeSORTransparentContext of cn_NrmmDecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow
In NrmmDecoder::DecodeSORTransparentContext of cn_NrmmDecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution …
CVE-2025-36922Medium· 6.7In bigo_map of bigo_iommu.c, there is a possible information disclosure due to a use after free
In bigo_map of bigo_iommu.c, there is a possible information disclosure due to a use after free. This could lead to local escalation of privilege in the OS Kernel level with System execution privileges needed. User interaction is not ne…
CVE-2025-36921Medium· 5.5In ProtocolPsUnthrottleApn() of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bounds check
In ProtocolPsUnthrottleApn() of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User interaction is …
CVE-2025-36919High· 7.8In aocc_read of aoc_channel_dev.c, there is a possible double free due to improper locking
In aocc_read of aoc_channel_dev.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-36918High· 7.8In aoc_service_read_message of aoc_ipc_core.c, there is a possible out of bounds read due to improper input validation
In aoc_service_read_message of aoc_ipc_core.c, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not nee…
CVE-2025-36917Medium· 6.5In SwDcpItg of up_L2commonPdcpSecurity.cpp, there is a possible denial of service due to an incorrect bounds check
In SwDcpItg of up_L2commonPdcpSecurity.cpp, there is a possible denial of service due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not neede…