Google CVEs
9,110 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2018-9338In ResStringPool::setTo of ResourceTypes.cpp, there is a possible out of bounds write due to a missing bounds check.
- CVE-2023-21270In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way for an app to keep permissions that should be revoke
- CVE-2017-13315In writeToParcel and createFromParcel of DcParamObject.java, there is a permission bypass due to a write size mismatch.
- CVE-2017-13313In ElementaryStreamQueue::dequeueAccessUnitMPEG4Video of ESQueue.cpp, there is a possible infinite loop leading to resource exhaustion due t
- CVE-2017-13314In setAllowOnlyVpnForUids of NetworkManagementService.java, there is a possible security settings bypass due to a missing permission check.
- CVE-2017-13312In createFromParcel of MediaCas.java, there is a possible parcel read/write mismatch due to improper input validation.
- CVE-2017-13311In the read() function of ProcessStats.java, there is a possible read/write serialization issue leading to a permissions bypass.
- CVE-2017-13310In createFromParcel of ViewPager.java, there is a possible read/write serialization issue leading to a permissions bypass.
- CVE-2017-13309In readEncryptedData of ConscryptEngine.java, there is a possible plaintext leak due to improperly used crypto.
- CVE-2017-13227In the autofill service, the package name that is provided by the app process is trusted inappropriately.
- CVE-2024-43093In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to sensit
- CVE-2024-43091In filterMask of SkEmbossMaskFilter.cpp, there is a possible out of bounds write due to an integer overflow.
- CVE-2024-43090In multiple locations, there is a possible cross-user image read due to a missing permission check.
- CVE-2024-43089In updateInternal of MediaProvider.java , there is a possible access of another app's files due to a missing permission check.
- CVE-2024-43088In multiple functions in AppInfoBase.java, there is a possible way to manipulate app permission settings belonging to another user on the de
- CVE-2024-43087In getInstalledAccessibilityPreferences of AccessibilitySettings.java, there is a possible way to hide an enabled accessibility service in t
- CVE-2024-43086In validateAccountsInternal of AccountManagerService.java, there is a possible way to leak account credentials to a third party app due to a
- CVE-2024-43085In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents over USB without unlocking the device due to
- CVE-2024-43084In visitUris of multiple files, there is a possible information disclosure due to a confused deputy.
- CVE-2024-43083In validate of WifiConfigurationUtil.java , there is a possible persistent denial of service due to resource exhaustion.
- CVE-2024-43082In onActivityResult of EditUserPhotoController.java, there is a possible cross-user media read due to a confused deputy.
- CVE-2024-43081In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a logic error in the cod
- CVE-2024-43080In onReceive of AppRestrictionsFragment.java, there is a possible escalation of privilege due to unsafe deserialization.
- CVE-2024-40671In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible way to achieve arbitrary code execution due to a missing permission che
- CVE-2024-40661In mayAdminGrantPermission of AdminRestrictedPermissionsUtils.java, there is a possible way to access the microphone due to a missing permis
- CVE-2024-40660In setTransactionState of SurfaceFlinger.cpp, there is a possible way to change protected display attributes due to a logic error in the cod
- CVE-2024-34747In DevmemXIntMapPages of devicemem_server.c, there is a possible use-after-free due to a logic error in the code.
- CVE-2024-34729In multiple locations, there is a possible arbitrary code execution due to a logic error in the code.
- CVE-2024-34719In multiple locations, there is a possible permissions bypass due to a missing null check.
- CVE-2024-31337In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation.