Google Android vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Google Android: 627 record(s), with affected versions and fixes.
cpe:2.3:o:google:android

CVE-2017-0663 High · 7.8 CWE-787 Jun 14, 2017

A remote code execution vulnerability in libxml2 could enable an attacker using a specially...

A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37104170.

CVE-2011-1823 High · 7.8 KEV High · 56 CWE-190 Jun 9, 2011

Android OS Privilege Escalation Vulnerability

The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only signed integer check in the DirectVolume::handlePartitionAdded method, which triggers memory corruption, as demonstrated by Gingerbreak.