Memory Corruption

Every one of the 39 is a mark on the map. Named now: 1 to 26, most at risk first.

1. A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however explo…CVE-2019-2215Android · CVSS 7.8 · 72% likely

   CWE-416

2. The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code a…CVE-2011-1823Android · CVSS 7.8 · 41% likely

   CWE-190

3. In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execut…CVE-2021-1048Android · CVSS 7.8 · 1.1% likely

   CWE-416

4. In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges…CVE-2021-0920Android · CVSS 6.4 · 0.9% likely

   CWE-416

5. In bta_ag_parse_cmer of bta_ag_cmd.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out-of-bounds write due to a missin…CVE-2018-9583Android · 2.3% likely

   CWE-787

6. In btif_dm_data_copy of btif_core.cc, there is a possible out of bounds write due to a buffer overflow. This could lead to remote code execution with no additional execution privi…CVE-2019-1991Android · 2.0% likely

   CWE-787

7. In sample6 of SkSwizzler.cpp, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution in system_server with no additiona…CVE-2019-1988Android · 1.9% likely

   CWE-787

8. In SkSwizzler::onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege in system_s…CVE-2019-1986Android · 1.5% likely

   CWE-787

9. In mca_ccb_hdl_rsp of mca_cact.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to a missing bou…CVE-2018-9592Android · 1.3% likely

   CWE-125

10. In bta_hh_ctrl_dat_act of bta_hh_act.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to a missi…CVE-2018-9591Android · 1.3% likely

    CWE-125

11. In add_attr of sdp_discovery.c in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to a missing bounds…CVE-2018-9590Android · 1.3% likely

    CWE-125

12. In HAliasAnalyzer.Query of hydrogen-alias-analysis.h, there is possible memory corruption due to type confusion. This could lead to remote code execution from a malicious proxy co…CVE-2019-2097Android · 1.3% likely

    CWE-843

13. In onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution pri…CVE-2019-1987Android · 1.2% likely

    CWE-787

14. In floor0_inverse1 of floor0.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution pri…CVE-2019-2027Android · 1.2% likely

    CWE-787

15. In huff_dec_1D of nlc_dec.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privile…CVE-2019-2093Android · 1.2% likely

    CWE-787

16. In parseMPEGCCData of NuPlayerCCDecoder.cpp, there is a possible out of bounds write due to missing bounds checks. This could lead to remote code execution with no additional exec…CVE-2019-2094Android · 1.1% likely

    CWE-787

17. In removeInterfaceAddress of NetworkController.cpp, there is a possible use after free. This could lead to remote code execution with no additional execution privileges needed. Us…CVE-2019-2030Android · 0.9% likely

    CWE-416

18. In l2cu_send_peer_config_rej of l2c_utils.cc, there is a possible out-of-bound read due to an incorrect bounds check. This could lead to remote information disclosure with no addi…CVE-2019-2037Android · 0.8% likely

    CWE-125

19. In binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege in the kernel with no additi…CVE-2019-1999Android · 0.8% likely

    CWE-415

20. In btm_proc_smp_cback of tm_ble.cc, there is a possible memory corruption due to a use after free. This could lead to remote code execution with no additional execution privileges…CVE-2019-2029Android · 0.7% likely

    CWE-416

21. In several functions of binder.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privil…CVE-2019-2000Android · 0.7% likely

    CWE-416

22. In nfa_rw_store_ndef_rx_buf of nfa_rw_act.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additi…CVE-2019-2099Android · 0.6% likely

    CWE-787

23. In avdt_scb_hdl_report of avdt_scb_act.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to a mis…CVE-2018-9588Android · 0.5% likely

    CWE-125

24. In avrc_pars_browse_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth w…CVE-2019-1996Android · 0.5% likely

    CWE-125

25. In rw_i93_sm_read_ndef of rw_i93.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege in the NFC process with n…CVE-2019-2034Android · 0.5% likely

    CWE-190

26. In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional ex…CVE-2019-2035Android · 0.4% likely

    CWE-787

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.