Android vulnerabilities
57 CVEs and advisories name Android as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-28576In Contacts Provider, there is a possible way to access the contacts database due to SQL injection.
- CVE-2025-8192Race condition in AndroidTV TvSettings
- CVE-2024-7014Improper multimedia file attachment validation in Telegram for Android app
- CVE-2019-2101In uvc_parse_standard_control of uvc_driver.c, there is a possible out-of-bound read due to improper input validation.
- CVE-2019-2099In nfa_rw_store_ndef_rx_buf of nfa_rw_act.cc, there is a possible out-of-bound write due to a missing bounds check.
- CVE-2019-2098In areNotificationsEnabledForPackage of NotificationManagerService.java, there is a possible permissions bypass due to a missing permissions
- CVE-2019-2102In the Bluetooth Low Energy (BLE) specification, there is a provided example Long Term Key (LTK).
- CVE-2019-2097In HAliasAnalyzer.Query of hydrogen-alias-analysis.h, there is possible memory corruption due to type confusion.
- CVE-2019-2096In EffectRelease of EffectBundle.cpp, there is a possible memory corruption due to a double free.
- CVE-2019-2095In callGenIDChangeListeners and related functions of SkPixelRef.cpp, there is a possible use after free due to a race condition.
- CVE-2019-2094In parseMPEGCCData of NuPlayerCCDecoder.cpp, there is a possible out of bounds write due to missing bounds checks.
- CVE-2019-2093In huff_dec_1D of nlc_dec.cpp, there is a possible out of bounds write due to a missing bounds check.
- CVE-2019-2092In isSeparateProfileChallengeAllowed of DevicePolicyManagerService.java, there is a possible permissions bypass due to a missing permission
- CVE-2019-2091In GetPermittedAccessibilityServicesForUser of DevicePolicyManagerService.java, there is a possible permissions bypass due to a missing perm
- CVE-2019-2090In isPackageDeviceAdminOnAnyUser of PackageManagerService.java, there is a possible permissions bypass due to a missing permissions check.
- CVE-2019-2037In l2cu_send_peer_config_rej of l2c_utils.cc, there is a possible out-of-bound read due to an incorrect bounds check.
- CVE-2019-2041In the configuration of NFC modules on certain devices, there is a possible failure to distinguish individual devices due to an insecure def
- CVE-2019-2032In SetScanResponseData of ble_advertiser_hci_interface.cc, there is a possible out-of-bound write due to a missing bounds check.
- CVE-2019-2029In btm_proc_smp_cback of tm_ble.cc, there is a possible memory corruption due to a use after free.
- CVE-2019-2040In rw_i93_process_ext_sys_info of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check.
- CVE-2019-2039In rw_i93_sm_detect_ndef of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check.
- CVE-2019-2038In rw_i93_process_sys_info of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check.
- CVE-2019-2035In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible out-of-bound write due to a missing bounds check.
- CVE-2019-2034In rw_i93_sm_read_ndef of rw_i93.cc, there is a possible out-of-bounds write due to an integer overflow.
- CVE-2019-2033In create_hdr of dnssd_clientstub.c, there is a possible use after free.
- CVE-2019-2031In rw_t3t_act_handle_check_ndef_rsp of rw_t3t.cc, there is a possible out-of-bound write due to a missing bounds check.
- CVE-2019-2030In removeInterfaceAddress of NetworkController.cpp, there is a possible use after free.
- CVE-2019-2028In numerous hand-crafted functions in libmpeg2, NEON registers are not preserved.
- CVE-2019-2027In floor0_inverse1 of floor0.c, there is a possible out of bounds write due to an incorrect bounds check.
- CVE-2019-2026In updateAssistMenuItems of Editor.java, there is a possible escape from the Setup Wizard due to a missing permission check.