Android

Every one of the 6,317 is a mark on the map. Named now: 1 to 26, most at risk first.

1. there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interacti…CVE-2024-32896Google · CVSS 8.1 · 3.0% likely

   CWE-783

2. In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local escalation of privilege with no…CVE-2023-35674Google · CVSS 8.8 · 2.6% likely

   CWE-269

3. In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution…CVE-2025-48595Google · CVSS 8.4 · 1.9% likelycovered by CyberSIXT

   CWE-190

4. In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to incorrect unicod…CVE-2024-43093Google · CVSS 7.3 · 0.7% likely

   CWE-176

5. In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with…CVE-2021-39793Google · CVSS 7.8 · 0.7% likely

   CWE-787

6. there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interacti…CVE-2024-29748Google · CVSS 7.8 · 0.7% likely

   CWE-280

7. In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use after free. This could lead to local escalation of privilege w…CVE-2025-48543Google · CVSS 8.8 · 0.7% likely

   CWE-416

8. In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with no additional…CVE-2026-58704Google · CVSS 8.8 · 0.6% likelycovered by CyberSIXT

   CWE-6938 articles

9. there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interact…CVE-2024-29745Google · CVSS 5.5 · 0.5% likely

   CWE-908

10. In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisioning due to a logic error in the code. This could lead to l…CVE-2025-48633Google · CVSS 5.5 · 0.3% likely
11. In multiple locations, there is a possible way to launch activities from the background due to a permissions bypass. This could lead to local escalation of privilege with no addit…CVE-2025-48572Google · CVSS 7.8 · 0.3% likely

    CWE-306

12. Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitra…CVE-2015-1538Google · 99% likely

    CWE-189

13. The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly restrict size addition, which allows remote attack…CVE-2015-3824Google · 90% likely

    CWE-119

14. Off-by-one error in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary cod…CVE-2015-3829Google · 90% likely

    CWE-189

15. Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allows remote attackers to execu…CVE-2015-3864Google · 87% likely

    CWE-189

16. Multiple integer underflows in the ESDS::parseESDescriptor function in ESDS.cpp in libstagefright in Android before 5.1.1 LMY48I allow remote attackers to execute arbitrary code v…CVE-2015-1539Google · 86% likely

    CWE-189

17. The MPEG4Extractor::parse3GPPMetaData function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not enforce a minimum size for UTF-16 strings containing…CVE-2015-3828Google · 85% likely

    CWE-119

18. The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not validate the relationship between chunk sizes and skip size…CVE-2015-3827Google · 81% likely

    CWE-119

19. The MPEG4Extractor::parse3GPPMetaData function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not enforce a minimum size for UTF-16 strings containing…CVE-2015-3826Google · 74% likely

    CWE-119

20. Android 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other devices does not properly implement the WebView class, which allows remote attackers to…CVE-2013-4710Google · 43% likely

    CWE-201 bounty report

21. The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause…CVE-2016-0801Google · 33% likely

    CWE-20

22. A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary code within the context of the Wi-Fi SoC. This issue is ra…CVE-2017-0561Google Inc. · 30% likely

    CWE-787

23. The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// URIs, related to (1) BrowserActivity.java and (2) BrowserSett…CVE-2010-4804Google · 27% likely

    CWE-200

24. luni/src/main/java/java/io/ObjectInputStream.java in the java.io.ObjectInputStream implementation in Android before 5.0.0 does not verify that deserialization will result in an ob…CVE-2014-7911Google · 23% likely

    CWE-264

25. A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-6314610…CVE-2017-0781Google Inc. · 21% likely

    CWE-119

26. An elevation of privilege vulnerability in the Android system (art). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-64211847.CVE-2017-13156Google Inc. · 20% likely

    CWE-434

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.