CVE-2026-28576 | Medium | 5.5 | 2026-06-17 | In Contacts Provider, there is a possible way to access the contacts database due to SQL injection. This could lead to local information disclosure with no add… |
CVE-2025-8192 | | | 2025-07-31 | There exists a TOCTOU race condition in TvSettings AppRestrictionsFragment.java that lead to start of attacker supplied activity in Settings’ context, i.e. sys… |
CVE-2024-7014 | High | 8.1 | 2024-07-23 | EvilVideo vulnerability allows sending malicious apps disguised as videos in Telegram for Android application affecting
versions 10.14.4 and older. |
CVE-2020-8913 | High | 8.8 | 2020-08-12 | A local, arbitrary code execution vulnerability exists in the SplitCompat.install endpoint in Android's Play Core Library versions prior to 1.7.2. A malicious… |
CVE-2019-2102 | High | 8.8 | 2019-06-07 | In the Bluetooth Low Energy (BLE) specification, there is a provided example Long Term Key (LTK). If a BLE device were to use this as a hardcoded LTK, it is th… |
CVE-2019-2101 | Medium | 5.5 | 2019-06-07 | In uvc_parse_standard_control of uvc_driver.c, there is a possible out-of-bound read due to improper input validation. This could lead to local information dis… |
CVE-2019-2099 | High | 7.8 | 2019-06-07 | In nfa_rw_store_ndef_rx_buf of nfa_rw_act.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of priv… |
CVE-2019-2098 | High | 7.8 | 2019-06-07 | In areNotificationsEnabledForPackage of NotificationManagerService.java, there is a possible permissions bypass due to a missing permissions check. This could… |
CVE-2019-2097 | Critical | 9.8 | 2019-06-07 | In HAliasAnalyzer.Query of hydrogen-alias-analysis.h, there is possible memory corruption due to type confusion. This could lead to remote code execution from… |
CVE-2019-2096 | High | 7.8 | 2019-06-07 | In EffectRelease of EffectBundle.cpp, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege in the audio… |
CVE-2019-2095 | High | 7.0 | 2019-06-07 | In callGenIDChangeListeners and related functions of SkPixelRef.cpp, there is a possible use after free due to a race condition. This could lead to remote code… |
CVE-2019-2094 | High | 7.8 | 2019-06-07 | In parseMPEGCCData of NuPlayerCCDecoder.cpp, there is a possible out of bounds write due to missing bounds checks. This could lead to remote code execution wit… |
CVE-2019-2093 | High | 8.8 | 2019-06-07 | In huff_dec_1D of nlc_dec.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no addition… |
CVE-2019-2092 | High | 7.8 | 2019-06-07 | In isSeparateProfileChallengeAllowed of DevicePolicyManagerService.java, there is a possible permissions bypass due to a missing permission check. This could l… |
CVE-2019-2091 | High | 7.8 | 2019-06-07 | In GetPermittedAccessibilityServicesForUser of DevicePolicyManagerService.java, there is a possible permissions bypass due to a missing permission check. This… |
CVE-2019-2090 | High | 7.8 | 2019-06-07 | In isPackageDeviceAdminOnAnyUser of PackageManagerService.java, there is a possible permissions bypass due to a missing permissions check. This could lead to l… |
CVE-2019-2041 | High | 7.3 | 2019-04-19 | In the configuration of NFC modules on certain devices, there is a possible failure to distinguish individual devices due to an insecure default value. This co… |
CVE-2019-2040 | Medium | 5.0 | 2019-04-19 | In rw_i93_process_ext_sys_info of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosu… |
CVE-2019-2039 | Medium | 5.0 | 2019-04-19 | In rw_i93_sm_detect_ndef of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure wit… |
CVE-2019-2038 | Medium | 5.5 | 2019-04-19 | In rw_i93_process_sys_info of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure w… |
CVE-2019-2037 | High | 7.5 | 2019-04-19 | In l2cu_send_peer_config_rej of l2c_utils.cc, there is a possible out-of-bound read due to an incorrect bounds check. This could lead to remote information dis… |
CVE-2019-2035 | High | 7.8 | 2019-04-19 | In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege w… |
CVE-2019-2034 | High | 7.8 | 2019-04-19 | In rw_i93_sm_read_ndef of rw_i93.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege in th… |
CVE-2019-2033 | High | 7.8 | 2019-04-19 | In create_hdr of dnssd_clientstub.c, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileg… |
CVE-2019-2032 | High | 7.8 | 2019-04-19 | In SetScanResponseData of ble_advertiser_hci_interface.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escal… |
CVE-2019-2031 | High | 7.8 | 2019-04-19 | In rw_t3t_act_handle_check_ndef_rsp of rw_t3t.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of… |
CVE-2019-2030 | Critical | 9.8 | 2019-04-19 | In removeInterfaceAddress of NetworkController.cpp, there is a possible use after free. This could lead to remote code execution with no additional execution p… |
CVE-2019-2029 | High | 8.8 | 2019-04-19 | In btm_proc_smp_cback of tm_ble.cc, there is a possible memory corruption due to a use after free. This could lead to remote code execution with no additional… |
CVE-2019-2028 | High | 8.8 | 2019-04-19 | In numerous hand-crafted functions in libmpeg2, NEON registers are not preserved. This could lead to remote code execution with no additional execution privile… |
CVE-2019-2027 | High | 8.8 | 2019-04-19 | In floor0_inverse1 of floor0.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no addi… |
CVE-2019-2026 | High | 7.8 | 2019-04-19 | In updateAssistMenuItems of Editor.java, there is a possible escape from the Setup Wizard due to a missing permission check. This could lead to local escalatio… |
CVE-2019-2001 | Medium | 5.5 | 2019-02-28 | The permissions on /proc/iomem were world-readable. This could lead to local information disclosure with no additional execution privileges needed. User intera… |
CVE-2019-2000 | High | 7.8 | 2019-02-28 | In several functions of binder.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additio… |
CVE-2019-1999 | High | 7.8 | 2019-02-28 | In binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege in the k… |
CVE-2019-1998 | Medium | 5.5 | 2019-02-28 | In event_handler of keymaster_app.c, there is possible resource exhaustion due to a table being lost on reboot. This could lead to local denial of service that… |
CVE-2019-1997 | High | 7.5 | 2019-02-28 | In random_get_bytes of random.c, there is a possible degradation of randomness due to an insecure default value. This could lead to local information disclosur… |
CVE-2019-1996 | Medium | 6.5 | 2019-02-28 | In avrc_pars_browse_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclos… |
CVE-2019-1995 | Medium | 5.5 | 2019-02-28 | In ComposeActivityEmail of ComposeActivityEmail.java, there is a possible way to silently attach files to an email due to a confused deputy. This could lead to… |
CVE-2019-1994 | High | 8.8 | 2019-02-28 | In refresh of DevelopmentTiles.java, there is the possibility of leaving development settings accessible due to an insecure default value. This could lead to u… |
CVE-2019-1993 | High | 7.8 | 2019-02-28 | In register_app of btif_hd.cc, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with no addit… |
CVE-2019-1992 | High | 7.5 | 2019-02-28 | In bta_hl_sdp_query_results of bta_hl_main.cc, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no add… |
CVE-2019-1991 | High | 8.8 | 2019-02-28 | In btif_dm_data_copy of btif_core.cc, there is a possible out of bounds write due to a buffer overflow. This could lead to remote code execution with no additi… |
CVE-2019-1988 | High | 8.8 | 2019-02-28 | In sample6 of SkSwizzler.cpp, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution in system_serv… |
CVE-2019-1987 | High | 7.8 | 2019-02-28 | In onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no addi… |
CVE-2019-1986 | High | 8.8 | 2019-02-28 | In SkSwizzler::onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of p… |
CVE-2018-9593 | Medium | 6.5 | 2019-02-11 | In llcp_dlc_proc_i_pdu of llcp_dlc.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds r… |
CVE-2018-9592 | High | 7.5 | 2019-02-11 | In mca_ccb_hdl_rsp of mca_cact.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read… |
CVE-2018-9591 | High | 7.5 | 2019-02-11 | In bta_hh_ctrl_dat_act of bta_hh_act.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds… |
CVE-2018-9590 | High | 7.5 | 2019-02-11 | In add_attr of sdp_discovery.c in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due… |
CVE-2018-9589 | Medium | 5.5 | 2019-02-11 | In ieee802_11_rx_wnmsleep_req of wnm_ap.c in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of boun… |
CVE-2018-9588 | Medium | 6.5 | 2019-02-11 | In avdt_scb_hdl_report of avdt_scb_act.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of boun… |
CVE-2018-9587 | High | 7.3 | 2019-02-11 | In savePhotoFromUriToUri of ContactPhotoUtils.java in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is possible unau… |
CVE-2018-9586 | High | 7.0 | 2019-02-11 | In run of InstallPackageTask.java in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, it is possible that package verificatio… |
CVE-2018-9585 | High | 7.8 | 2019-02-11 | In nfc_ncif_proc_get_routing of nfc_ncif.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bo… |
CVE-2018-9584 | High | 7.8 | 2019-02-11 | In nfc_ncif_set_config_status of nfc_ncif.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of b… |
CVE-2018-9583 | Critical | 9.8 | 2019-02-11 | In bta_ag_parse_cmer of bta_ag_cmd.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out-of-bounds w… |
CVE-2018-9582 | High | 7.8 | 2019-02-11 | In package installer in Android-8.0, Android-8.1 and Android-9, there is a possible bypass of the unknown source warning due to a confused deputy scenario. Thi… |
CVE-2017-6249 | High | 7.0 | 2017-07-13 | An elevation of privilege vulnerability in the NVIDIA sound driver could enable a local malicious application to execute arbitrary code within the context of t… |
CVE-2011-4867 | | | 2012-01-25 | The Tencent QQPhoto (com.tencent.qqphoto) application 0.97 for Android does not properly protect data, which allows remote attackers to read or modify contact… |
CVE-2011-4866 | | | 2012-01-25 | The Kaixin001 (com.kaixin001.activity) application 1.3.1 and 1.3.3 for Android does not properly protect data, which allows remote attackers to read or modify… |
CVE-2011-4773 | | | 2012-01-25 | The AnGuanJia (com.anguanjia.safe) application 2.10.343 for Android does not properly protect data, which allows remote attackers to read or modify SMS message… |
CVE-2011-4772 | | | 2012-01-25 | The 360 KouXin (com.qihoo360.kouxin) application 1.5.3 for Android does not properly protect data, which allows remote attackers to read or modify SMS messages… |
CVE-2011-4771 | | | 2012-01-25 | The Scan to PDF Free (com.scan.to.pdf.trial) application 2.0.4 for Android does not properly protect data, which allows remote attackers to read or modify scan… |
CVE-2011-4770 | | | 2012-01-25 | The QIWI Wallet (ru.mw) application before 1.14.2 for Android does not properly protect data, which allows remote attackers to read or modify financial informa… |
CVE-2011-4769 | | | 2012-01-25 | The 360 MobileSafe (com.qihoo360.mobilesafe) application 2.x before 2.3.0 for Android does not properly protect data, which allows remote attackers to read or… |
CVE-2011-4705 | | | 2012-01-25 | The Ming Blacklist Free (vc.software.blacklist) application 1.8.1 and 1.9.2.1 for Android does not properly protect data, which allows remote attackers to read… |
CVE-2011-4704 | | | 2012-01-25 | The Voxofon (com.voxofon) application before 2.5.2 for Android does not properly protect data, which allows remote attackers to read or modify SMS information… |
CVE-2011-4703 | | | 2012-01-25 | The Limit My Call (com.limited.call.view) application 2.11 for Android does not properly protect data, which allows remote attackers to read or modify call log… |
CVE-2011-4702 | | | 2012-01-25 | The Nimbuzz (com.nimbuzz) application 2.0.8 and 2.0.10 for Android does not properly protect data, which allows remote attackers to read or modify a contact li… |
CVE-2011-4701 | | | 2012-01-25 | The CallConfirm (jp.gr.java_conf.ofnhwx.callconfirm) application 2.0.0 for Android does not properly protect data, which allows remote attackers to read or mod… |
CVE-2011-4700 | | | 2012-01-25 | The UberMedia UberSocial (com.twidroid) application 7.x before 7.2.4 for Android does not properly protect data, which allows remote attackers to read or modif… |
CVE-2011-4699 | | | 2012-01-25 | The Ubermedia Twidroyd Legacy (com.twidroydlegacy) application 4.3.11 for Android does not properly protect data, which allows remote attackers to read or modi… |
CVE-2011-4698 | | | 2012-01-25 | The AndroidAppTools Easy Filter (com.phoneblocker.android) application 1.1 and 1.2 for Android does not properly protect data, which allows remote attackers to… |
CVE-2011-4697 | | | 2012-01-25 | The Xiaomi MiTalk Messenger (com.xiaomi.channel) application before 2.1.320 for Android does not properly protect data, which allows remote attackers to read o… |
CVE-2008-7298 | | | 2011-08-09 | The Android browser in Android cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to ove… |
CVE-2009-0608 | | | 2009-02-17 | Integer overflow in the showLog function in fake_log_device.c in liblog in Open Handset Alliance Android 1.0 allows attackers to trigger a buffer overflow and… |
CVE-2009-0475 | | | 2009-02-11 | Integer underflow in the Huffman decoding functionality (pvmp3_huffman_parsing.cpp) in OpenCORE 2.0 and earlier allows remote attackers to cause a denial of se… |