Vulnerabilities > Google > Android > Critical

DATE CVE VULNERABILITY TITLE RISK
2021-12-15 CVE-2021-0956 Out-of-bounds Write vulnerability in Google Android 11.0/12.0
In NfcTag::discoverTechnologies (activation) of NfcTag.cpp, there is a possible out of bounds write due to an incorrect bounds check.
network
low complexity
google CWE-787
critical
9.8
2021-12-15 CVE-2021-0889 Unspecified vulnerability in Google Android
In Android TV , there is a possible silent pairing due to lack of rate limiting in the pairing flow.
network
low complexity
google
critical
9.8
2021-09-21 CVE-2021-0869 Out-of-bounds Write vulnerability in Google Android
In GetTimeStampAndPkt of DumpstateDevice.cpp, there is a possible out of bounds write due to an incorrect bounds check.
network
low complexity
google CWE-787
critical
9.8
2021-09-09 CVE-2021-25449 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
An improper input validation vulnerability in libsapeextractor library prior to SMR Sep-2021 Release 1 allows attackers to execute arbitrary code in mediaextractor process.
network
low complexity
google CWE-119
critical
9.8
2021-07-14 CVE-2021-0515 Out-of-bounds Write vulnerability in Google Android
In Factory::CreateStrictFunctionMap of factory.cc, there is a possible out of bounds write due to an incorrect bounds check.
network
low complexity
google CWE-787
critical
9.8
2021-06-21 CVE-2021-0516 Use After Free vulnerability in Google Android
In p2p_process_prov_disc_req of p2p_pd.c, there is a possible out of bounds read and write due to a use after free.
network
low complexity
google CWE-416
critical
9.8
2021-06-14 CVE-2021-0324 Unspecified vulnerability in Google Android
Product: AndroidVersions: Android SoCAndroid ID: A-175402462
network
low complexity
google
critical
9.8
2021-06-11 CVE-2021-0474 Out-of-bounds Write vulnerability in Google Android
In avrc_msg_cback of avrc_api.cc, there is a possible out of bounds write due to a heap buffer overflow.
network
low complexity
google CWE-787
critical
9.8
2021-06-11 CVE-2021-25387 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
An improper input validation vulnerability in sflacfd_get_frm() in libsflacextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process.
network
low complexity
google CWE-119
critical
10.0
2021-06-11 CVE-2021-25386 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
An improper input validation vulnerability in sdfffd_parse_chunk_FVER() in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process.
network
low complexity
google CWE-119
critical
9.8