Vulnerabilidades do Google Android

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Google Android: 627 registro(s), com versões afetadas e correções.
cpe:2.3:o:google:android

CVE-2017-0663 Alta · 7.8 CWE-787 14/06/2017

A remote code execution vulnerability in libxml2 could enable an attacker using a specially...

A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37104170.

CVE-2011-1823 Alta · 7.8 KEV Alta · 56 CWE-190 09/06/2011

Android OS Privilege Escalation Vulnerability

The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only signed integer check in the DirectVolume::handlePartitionAdded method, which triggers memory corruption, as demonstrated by Gingerbreak.