Vulnerabilidades do Google Android
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Google Android: 627 registro(s), com versões afetadas e correções.cpe:2.3:o:google:android
CVE-2025-20766
Alta · 7.8
CWE-457 02/12/2025
Use of Uninitialized Variable em Google Android
In display, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4820.
CVE-2025-20765
Média · 4.7
CWE-362 02/12/2025
Race Condition em Linuxfoundation Yocto
In aee daemon, there is a possible system crash due to a race condition. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10190802; Issue ID: MSV-4833.
CVE-2025-20764
Alta · 7.8
CWE-787 02/12/2025
Out-of-bounds Write em Google Android
In smi, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10259774; Issue ID: MSV-5029.
CVE-2025-20763
Alta · 7.8
CWE-787 02/12/2025
Out-of-bounds Write em Google Android
In mmdvfs, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10267218; Issue ID: MSV-5032.
CVE-2025-61619
Alta · 7.5
01/12/2025
In nr modem, there is a possible system crash due to improper input validation. This…
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed
CVE-2025-61618
Alta · 7.5
01/12/2025
In nr modem, there is a possible system crash due to improper input validation. This…
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed
CVE-2025-61617
Alta · 7.5
01/12/2025
In nr modem, there is a possible system crash due to improper input validation. This…
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed
CVE-2025-61610
Alta · 7.5
01/12/2025
In nr modem, there is a possible system crash due to improper input validation. This…
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed
CVE-2025-61609
Alta · 7.5
01/12/2025
In modem, there is a possible system crash due to improper input validation. This could…
In modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed
CVE-2025-61608
Alta · 7.5
01/12/2025
In nr modem, there is a possible system crash due to improper input validation. This…
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed
CVE-2025-61607
Alta · 7.5
01/12/2025
In nr modem, there is a possible system crash due to improper input validation. This…
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed
CVE-2025-3012
Alta · 7.5
01/12/2025
In dpc modem, there is a possible system crash due to null pointer dereference. This…
In dpc modem, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no additional execution privileges needed
CVE-2025-11133
Alta · 7.5
01/12/2025
In nr modem, there is a possible system crash due to improper input validation. This…
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed
CVE-2025-11132
Alta · 7.5
01/12/2025
In nr modem, there is a possible system crash due to improper input validation. This…
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed
CVE-2025-11131
Alta · 7.5
01/12/2025
In nr modem, there is a possible system crash due to improper input validation. This…
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed
CVE-2025-48593
Alta · 8.0
CWE-416 18/11/2025
Use After Free em Google Android
In bta_hf_client_cb_init of bta_hf_client_main.cc, there is a possible remote code execution due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-20749
Média · 6.7
CWE-787 04/11/2025
Out-of-bounds Write em Google Android
In charger, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09915493; Issue ID: MSV-3800.
CVE-2025-20747
Média · 6.7
CWE-787 04/11/2025
Out-of-bounds Write em Linuxfoundation Yocto
In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10010443; Issue ID: MSV-3966.
CVE-2025-20746
Média · 6.7
CWE-787 04/11/2025
Out-of-bounds Write em Linuxfoundation Yocto
In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10010441; Issue ID: MSV-3967.
CVE-2025-20745
Média · 4.2
CWE-416 04/11/2025
Use After Free em Google Android
In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10095441; Issue ID: MSV-4294.
CVE-2025-20744
Média · 4.2
CWE-416 04/11/2025
Use After Free em Google Android
In pda, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10127160; Issue ID: MSV-4542.
CVE-2025-20743
Média · 4.2
CWE-416 04/11/2025
Use After Free em Google Android
In clkdbg, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10136671; Issue ID: MSV-4651.
CVE-2025-20730
Média · 6.7
CWE-287 04/11/2025
Improper Authentication em Linuxfoundation Yocto
In preloader, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10068463; Issue ID: MSV-4141.
CVE-2025-20723
Alta · 7.8
CWE-787 14/10/2025
Out-of-bounds Write em Google Android
In gnss driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09920033; Issue ID: MSV-3797.
CVE-2025-20722
Média · 5.5
CWE-190 14/10/2025
Integer Overflow or Wraparound em Rdkcentral Rdk-b
In gnss driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09920036; Issue ID: MSV-3798.