Android vulnerabilities

CVEs per yearBy the year they were published

1. 20171
2. 201953
3. 20241
4. 20251
5. 20261

Newest CVEs

• CVE-2026-28576

  In Contacts Provider, there is a possible way to access the contacts database due to SQL injection. This could lead to local information disclosure with no…

  Android · Android

  Critical10.0
• CVE-2025-8192

  Race condition in AndroidTV TvSettings

  Android · TV

  Medium6.9
• CVE-2024-7014

  Improper multimedia file attachment validation in Telegram for Android app

  Android · Telegram for Android

  High7.1
• CVE-2019-2101

  In uvc_parse_standard_control of uvc_driver.c, there is a possible out-of-bound read due to improper input validation. This could lead to local information…

  Android · Android

  Medium5.5
• CVE-2019-2099

  In nfa_rw_store_ndef_rx_buf of nfa_rw_act.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of…

  Android · Android

  High7.8
• CVE-2019-2098

  In areNotificationsEnabledForPackage of NotificationManagerService.java, there is a possible permissions bypass due to a missing permissions check. This could…

  Android · Android

  High7.8
• CVE-2019-2102

  In the Bluetooth Low Energy (BLE) specification, there is a provided example Long Term Key (LTK). If a BLE device were to use this as a hardcoded LTK, it is…

  Android · Android

  High8.8
• CVE-2019-2097

  In HAliasAnalyzer.Query of hydrogen-alias-analysis.h, there is possible memory corruption due to type confusion. This could lead to remote code execution from…

  Android · Android

  Critical9.8
• CVE-2019-2096

  In EffectRelease of EffectBundle.cpp, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege in the audio…

  Android · Android

  High7.8
• CVE-2019-2095

  In callGenIDChangeListeners and related functions of SkPixelRef.cpp, there is a possible use after free due to a race condition. This could lead to remote code…

  Android · Android

  High7.0