Android

Every one of the 61 is a mark on the map. Named now: 1 to 26, most at risk first.

1. A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however explo…CVE-2019-2215Android · CVSS 7.8 · 72% likely

   CWE-416

2. In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional ex…CVE-2020-0041Android · CVSS 7.8 · 3.2% likely

   CWE-20

3. In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed…CVE-2023-20963Android · CVSS 7.8 · 1.5% likely

   CWE-295

4. In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execut…CVE-2021-1048Android · CVSS 7.8 · 1.1% likely

   CWE-416

5. In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges…CVE-2021-0920Android · CVSS 6.4 · 0.9% likely

   CWE-416

6. In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or insufficient UI. This could lead to lo…CVE-2023-21237Android · CVSS 6.2 · 0.3% likely

   CWE-200

7. In bta_ag_parse_cmer of bta_ag_cmd.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out-of-bounds write due to a missin…CVE-2018-9583Android · 2.3% likely

   CWE-787

8. In btif_dm_data_copy of btif_core.cc, there is a possible out of bounds write due to a buffer overflow. This could lead to remote code execution with no additional execution privi…CVE-2019-1991Android · 2.0% likely

   CWE-787

9. In sample6 of SkSwizzler.cpp, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution in system_server with no additiona…CVE-2019-1988Android · 1.9% likely

   CWE-787

10. In SkSwizzler::onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege in system_s…CVE-2019-1986Android · 1.5% likely

    CWE-787

11. In bta_hl_sdp_query_results of bta_hl_main.cc, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution pr…CVE-2019-1992Android · 1.3% likely

    CWE-362

12. In mca_ccb_hdl_rsp of mca_cact.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to a missing bou…CVE-2018-9592Android · 1.3% likely

    CWE-125

13. In bta_hh_ctrl_dat_act of bta_hh_act.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to a missi…CVE-2018-9591Android · 1.3% likely

    CWE-125

14. In add_attr of sdp_discovery.c in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to a missing bounds…CVE-2018-9590Android · 1.3% likely

    CWE-125

15. In HAliasAnalyzer.Query of hydrogen-alias-analysis.h, there is possible memory corruption due to type confusion. This could lead to remote code execution from a malicious proxy co…CVE-2019-2097Android · 1.3% likely

    CWE-843

16. In onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution pri…CVE-2019-1987Android · 1.2% likely

    CWE-787

17. In floor0_inverse1 of floor0.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution pri…CVE-2019-2027Android · 1.2% likely

    CWE-787

18. In huff_dec_1D of nlc_dec.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privile…CVE-2019-2093Android · 1.2% likely

    CWE-787

19. In numerous hand-crafted functions in libmpeg2, NEON registers are not preserved. This could lead to remote code execution with no additional execution privileges needed. User int…CVE-2019-2028Android · 1.2% likely

    CWE-20

20. In parseMPEGCCData of NuPlayerCCDecoder.cpp, there is a possible out of bounds write due to missing bounds checks. This could lead to remote code execution with no additional exec…CVE-2019-2094Android · 1.1% likely

    CWE-787

21. In refresh of DevelopmentTiles.java, there is the possibility of leaving development settings accessible due to an insecure default value. This could lead to unwanted access to de…CVE-2019-1994Android · 1.0% likely

    CWE-1188

22. In removeInterfaceAddress of NetworkController.cpp, there is a possible use after free. This could lead to remote code execution with no additional execution privileges needed. Us…CVE-2019-2030Android · 0.9% likely

    CWE-416

23. In random_get_bytes of random.c, there is a possible degradation of randomness due to an insecure default value. This could lead to local information disclosure via an insecure wi…CVE-2019-1997Android · 0.9% likely

    CWE-330

24. In l2cu_send_peer_config_rej of l2c_utils.cc, there is a possible out-of-bound read due to an incorrect bounds check. This could lead to remote information disclosure with no addi…CVE-2019-2037Android · 0.8% likely

    CWE-125

25. An elevation of privilege vulnerability in the NVIDIA sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issu…CVE-2017-6249Android · 0.8% likely
26. In binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege in the kernel with no additi…CVE-2019-1999Android · 0.8% likely

    CWE-415

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.