{"items":[{"id":"CVE-2026-28576","published":"2026-06-17T07:19:47.943Z","updated":"2026-06-17T10:41:28.684Z","title":"In Contacts Provider, there is a possible way to access the contacts database due to SQL injection. This could lead to local information disclosure with no…","severity":"CRITICAL","score":10,"vendor":"Android","product":"Android","kev":false,"epss":0.00225,"kevAdded":null,"exploit":false},{"id":"CVE-2025-8192","published":"2025-07-31T08:24:26.612Z","updated":"2025-07-31T13:20:16.832Z","title":"Race condition in AndroidTV TvSettings","severity":"MEDIUM","score":6.9,"vendor":"Android","product":"TV","kev":false,"epss":0.00109,"kevAdded":null,"exploit":false},{"id":"CVE-2024-7014","published":"2024-07-23T09:55:42.837Z","updated":"2024-08-01T21:45:38.426Z","title":"Improper multimedia file attachment validation in Telegram for Android app","severity":"HIGH","score":7.1,"vendor":"Android","product":"Telegram for Android","kev":false,"epss":0.01375,"kevAdded":null,"exploit":false},{"id":"CVE-2019-2101","published":"2019-06-07T19:41:55.000Z","updated":"2024-08-04T18:42:50.251Z","title":"In uvc_parse_standard_control of uvc_driver.c, there is a possible out-of-bound read due to improper input validation. This could lead to local information…","severity":"MEDIUM","score":5.5,"vendor":"Android","product":"Android","kev":false,"epss":0.00435,"kevAdded":null,"exploit":false},{"id":"CVE-2019-2099","published":"2019-06-07T19:41:09.000Z","updated":"2024-08-04T18:42:49.683Z","title":"In nfa_rw_store_ndef_rx_buf of nfa_rw_act.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00565,"kevAdded":null,"exploit":false},{"id":"CVE-2019-2098","published":"2019-06-07T19:40:15.000Z","updated":"2024-08-04T18:42:50.019Z","title":"In areNotificationsEnabledForPackage of NotificationManagerService.java, there is a possible permissions bypass due to a missing permissions check. This could…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00153,"kevAdded":null,"exploit":false},{"id":"CVE-2019-2102","published":"2019-06-07T19:38:36.000Z","updated":"2024-08-04T18:42:50.123Z","title":"In the Bluetooth Low Energy (BLE) specification, there is a provided example Long Term Key (LTK). If a BLE device were to use this as a hardcoded LTK, it is…","severity":"HIGH","score":8.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00332,"kevAdded":null,"exploit":false},{"id":"CVE-2019-2097","published":"2019-06-07T19:37:22.000Z","updated":"2024-08-04T18:42:49.859Z","title":"In HAliasAnalyzer.Query of hydrogen-alias-analysis.h, there is possible memory corruption due to type confusion. This could lead to remote code execution from…","severity":"CRITICAL","score":9.8,"vendor":"Android","product":"Android","kev":false,"epss":0.01334,"kevAdded":null,"exploit":false},{"id":"CVE-2019-2096","published":"2019-06-07T19:36:39.000Z","updated":"2024-08-04T18:42:50.253Z","title":"In EffectRelease of EffectBundle.cpp, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege in the audio…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2019-2095","published":"2019-06-07T19:35:35.000Z","updated":"2024-08-04T18:42:49.864Z","title":"In callGenIDChangeListeners and related functions of SkPixelRef.cpp, there is a possible use after free due to a race condition. This could lead to remote code…","severity":"HIGH","score":7,"vendor":"Android","product":"Android","kev":false,"epss":0.00677,"kevAdded":null,"exploit":false},{"id":"CVE-2019-2094","published":"2019-06-07T19:34:50.000Z","updated":"2024-08-04T18:42:50.043Z","title":"In parseMPEGCCData of NuPlayerCCDecoder.cpp, there is a possible out of bounds write due to missing bounds checks. This could lead to remote code execution…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.01092,"kevAdded":null,"exploit":false},{"id":"CVE-2019-2093","published":"2019-06-07T19:34:03.000Z","updated":"2024-08-04T18:42:50.069Z","title":"In huff_dec_1D of nlc_dec.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no…","severity":"HIGH","score":8.8,"vendor":"Android","product":"Android","kev":false,"epss":0.01153,"kevAdded":null,"exploit":false},{"id":"CVE-2019-2092","published":"2019-06-07T19:33:21.000Z","updated":"2024-08-04T18:42:49.897Z","title":"In isSeparateProfileChallengeAllowed of DevicePolicyManagerService.java, there is a possible permissions bypass due to a missing permission check. This could…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00153,"kevAdded":null,"exploit":false},{"id":"CVE-2019-2091","published":"2019-06-07T19:32:24.000Z","updated":"2024-08-04T18:42:50.429Z","title":"In GetPermittedAccessibilityServicesForUser of DevicePolicyManagerService.java, there is a possible permissions bypass due to a missing permission check. This…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00153,"kevAdded":null,"exploit":false},{"id":"CVE-2019-2090","published":"2019-06-07T19:31:35.000Z","updated":"2024-08-04T18:42:50.272Z","title":"In isPackageDeviceAdminOnAnyUser of PackageManagerService.java, there is a possible permissions bypass due to a missing permissions check. This could lead to…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00131,"kevAdded":null,"exploit":false},{"id":"CVE-2019-2037","published":"2019-04-19T19:47:33.000Z","updated":"2024-08-04T18:35:52.468Z","title":"In l2cu_send_peer_config_rej of l2c_utils.cc, there is a possible out-of-bound read due to an incorrect bounds check. This could lead to remote information…","severity":"HIGH","score":7.5,"vendor":"Android","product":"Android","kev":false,"epss":0.00818,"kevAdded":null,"exploit":false},{"id":"CVE-2019-2041","published":"2019-04-19T19:46:40.000Z","updated":"2024-08-04T18:35:52.449Z","title":"In the configuration of NFC modules on certain devices, there is a possible failure to distinguish individual devices due to an insecure default value. This…","severity":"HIGH","score":7.3,"vendor":"Android","product":"Android","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2019-2032","published":"2019-04-19T19:45:24.000Z","updated":"2024-08-04T18:35:52.443Z","title":"In SetScanResponseData of ble_advertiser_hci_interface.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00162,"kevAdded":null,"exploit":false},{"id":"CVE-2019-2029","published":"2019-04-19T19:44:17.000Z","updated":"2024-08-04T18:35:52.546Z","title":"In btm_proc_smp_cback of tm_ble.cc, there is a possible memory corruption due to a use after free. This could lead to remote code execution with no additional…","severity":"HIGH","score":8.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00712,"kevAdded":null,"exploit":false},{"id":"CVE-2019-2040","published":"2019-04-19T19:43:24.000Z","updated":"2024-08-04T18:35:52.452Z","title":"In rw_i93_process_ext_sys_info of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information…","severity":"MEDIUM","score":5,"vendor":"Android","product":"Android","kev":false,"epss":0.00157,"kevAdded":null,"exploit":false},{"id":"CVE-2019-2039","published":"2019-04-19T19:42:16.000Z","updated":"2024-08-04T18:35:52.482Z","title":"In rw_i93_sm_detect_ndef of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":5,"vendor":"Android","product":"Android","kev":false,"epss":0.00185,"kevAdded":null,"exploit":false},{"id":"CVE-2019-2038","published":"2019-04-19T19:41:13.000Z","updated":"2024-08-04T18:35:52.472Z","title":"In rw_i93_process_sys_info of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure…","severity":"MEDIUM","score":5.5,"vendor":"Android","product":"Android","kev":false,"epss":0.00436,"kevAdded":null,"exploit":false},{"id":"CVE-2019-2035","published":"2019-04-19T19:39:51.000Z","updated":"2024-08-04T18:35:52.451Z","title":"In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00445,"kevAdded":null,"exploit":false},{"id":"CVE-2019-2034","published":"2019-04-19T19:38:52.000Z","updated":"2024-08-04T18:35:52.428Z","title":"In rw_i93_sm_read_ndef of rw_i93.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege in…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00485,"kevAdded":null,"exploit":false},{"id":"CVE-2019-2033","published":"2019-04-19T19:36:54.000Z","updated":"2024-08-04T18:35:52.398Z","title":"In create_hdr of dnssd_clientstub.c, there is a possible use after free. This could lead to local escalation of privilege with no additional execution…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.0017,"kevAdded":null,"exploit":false},{"id":"CVE-2019-2031","published":"2019-04-19T19:26:00.000Z","updated":"2024-08-04T18:35:52.483Z","title":"In rw_t3t_act_handle_check_ndef_rsp of rw_t3t.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00175,"kevAdded":null,"exploit":false},{"id":"CVE-2019-2030","published":"2019-04-19T19:24:37.000Z","updated":"2024-08-04T18:35:52.413Z","title":"In removeInterfaceAddress of NetworkController.cpp, there is a possible use after free. This could lead to remote code execution with no additional execution…","severity":"CRITICAL","score":9.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00859,"kevAdded":null,"exploit":false},{"id":"CVE-2019-2028","published":"2019-04-19T19:23:22.000Z","updated":"2024-08-04T18:35:52.469Z","title":"In numerous hand-crafted functions in libmpeg2, NEON registers are not preserved. This could lead to remote code execution with no additional execution…","severity":"HIGH","score":8.8,"vendor":"Android","product":"Android","kev":false,"epss":0.01153,"kevAdded":null,"exploit":false},{"id":"CVE-2019-2027","published":"2019-04-19T19:21:23.000Z","updated":"2024-08-04T18:35:52.455Z","title":"In floor0_inverse1 of floor0.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no…","severity":"HIGH","score":8.8,"vendor":"Android","product":"Android","kev":false,"epss":0.01224,"kevAdded":null,"exploit":false},{"id":"CVE-2019-2026","published":"2019-04-19T19:15:24.000Z","updated":"2024-08-04T18:35:52.427Z","title":"In updateAssistMenuItems of Editor.java, there is a possible escape from the Setup Wizard due to a missing permission check. This could lead to local…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.0015,"kevAdded":null,"exploit":false},{"id":"CVE-2019-2001","published":"2019-02-28T17:00:00.000Z","updated":"2024-09-16T19:09:52.134Z","title":"The permissions on /proc/iomem were world-readable. This could lead to local information disclosure with no additional execution privileges needed. User…","severity":"MEDIUM","score":5.5,"vendor":"Android","product":"Android","kev":false,"epss":0.0018,"kevAdded":null,"exploit":false},{"id":"CVE-2019-2000","published":"2019-02-28T17:00:00.000Z","updated":"2024-09-16T22:01:39.066Z","title":"In several functions of binder.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00675,"kevAdded":null,"exploit":true},{"id":"CVE-2019-1999","published":"2019-02-28T17:00:00.000Z","updated":"2024-09-17T03:17:33.855Z","title":"In binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege in the…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00807,"kevAdded":null,"exploit":true},{"id":"CVE-2019-1998","published":"2019-02-28T17:00:00.000Z","updated":"2024-09-17T00:07:01.556Z","title":"In event_handler of keymaster_app.c, there is possible resource exhaustion due to a table being lost on reboot. This could lead to local denial of service that…","severity":"MEDIUM","score":5.5,"vendor":"Android","product":"Android","kev":false,"epss":0.00176,"kevAdded":null,"exploit":false},{"id":"CVE-2019-1997","published":"2019-02-28T17:00:00.000Z","updated":"2024-09-16T23:40:56.912Z","title":"In random_get_bytes of random.c, there is a possible degradation of randomness due to an insecure default value. This could lead to local information…","severity":"HIGH","score":7.5,"vendor":"Android","product":"Android","kev":false,"epss":0.00857,"kevAdded":null,"exploit":false},{"id":"CVE-2019-1996","published":"2019-02-28T17:00:00.000Z","updated":"2024-09-17T02:15:36.924Z","title":"In avrc_pars_browse_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information…","severity":"MEDIUM","score":6.5,"vendor":"Android","product":"Android","kev":false,"epss":0.00486,"kevAdded":null,"exploit":false},{"id":"CVE-2019-1995","published":"2019-02-28T17:00:00.000Z","updated":"2024-09-16T23:20:42.094Z","title":"In ComposeActivityEmail of ComposeActivityEmail.java, there is a possible way to silently attach files to an email due to a confused deputy. This could lead to…","severity":"MEDIUM","score":5.5,"vendor":"Android","product":"Android","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2019-1994","published":"2019-02-28T17:00:00.000Z","updated":"2024-09-17T00:36:18.392Z","title":"In refresh of DevelopmentTiles.java, there is the possibility of leaving development settings accessible due to an insecure default value. This could lead to…","severity":"HIGH","score":8.8,"vendor":"Android","product":"Android","kev":false,"epss":0.01007,"kevAdded":null,"exploit":false},{"id":"CVE-2019-1993","published":"2019-02-28T17:00:00.000Z","updated":"2024-09-16T22:45:54.447Z","title":"In register_app of btif_hd.cc, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with no…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00182,"kevAdded":null,"exploit":false},{"id":"CVE-2019-1992","published":"2019-02-28T17:00:00.000Z","updated":"2024-09-16T17:37:57.595Z","title":"In bta_hl_sdp_query_results of bta_hl_main.cc, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no…","severity":"HIGH","score":7.5,"vendor":"Android","product":"Android","kev":false,"epss":0.01335,"kevAdded":null,"exploit":false},{"id":"CVE-2019-1991","published":"2019-02-28T17:00:00.000Z","updated":"2024-09-17T02:41:29.598Z","title":"In btif_dm_data_copy of btif_core.cc, there is a possible out of bounds write due to a buffer overflow. This could lead to remote code execution with no…","severity":"HIGH","score":8.8,"vendor":"Android","product":"Android","kev":false,"epss":0.02027,"kevAdded":null,"exploit":false},{"id":"CVE-2019-1988","published":"2019-02-28T17:00:00.000Z","updated":"2024-09-16T20:17:33.437Z","title":"In sample6 of SkSwizzler.cpp, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution in…","severity":"HIGH","score":8.8,"vendor":"Android","product":"Android","kev":false,"epss":0.0191,"kevAdded":null,"exploit":false},{"id":"CVE-2019-1987","published":"2019-02-28T17:00:00.000Z","updated":"2024-09-16T18:48:20.754Z","title":"In onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.01245,"kevAdded":null,"exploit":false},{"id":"CVE-2019-1986","published":"2019-02-28T17:00:00.000Z","updated":"2024-09-16T18:13:17.589Z","title":"In SkSwizzler::onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of…","severity":"HIGH","score":8.8,"vendor":"Android","product":"Android","kev":false,"epss":0.01502,"kevAdded":null,"exploit":false},{"id":"CVE-2018-9593","published":"2019-02-12T00:00:00.000Z","updated":"2024-09-17T02:17:02.894Z","title":"In llcp_dlc_proc_i_pdu of llcp_dlc.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds…","severity":"MEDIUM","score":6.5,"vendor":"Android","product":"Android","kev":false,"epss":0.00314,"kevAdded":null,"exploit":false},{"id":"CVE-2018-9592","published":"2019-02-12T00:00:00.000Z","updated":"2024-09-17T02:47:16.783Z","title":"In mca_ccb_hdl_rsp of mca_cact.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read…","severity":"HIGH","score":7.5,"vendor":"Android","product":"Android","kev":false,"epss":0.01335,"kevAdded":null,"exploit":false},{"id":"CVE-2018-9591","published":"2019-02-12T00:00:00.000Z","updated":"2024-09-16T22:26:44.143Z","title":"In bta_hh_ctrl_dat_act of bta_hh_act.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds…","severity":"HIGH","score":7.5,"vendor":"Android","product":"Android","kev":false,"epss":0.01335,"kevAdded":null,"exploit":false},{"id":"CVE-2018-9590","published":"2019-02-12T00:00:00.000Z","updated":"2024-09-16T20:02:57.026Z","title":"In add_attr of sdp_discovery.c in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due…","severity":"HIGH","score":7.5,"vendor":"Android","product":"Android","kev":false,"epss":0.01335,"kevAdded":null,"exploit":false},{"id":"CVE-2018-9589","published":"2019-02-12T00:00:00.000Z","updated":"2024-09-17T01:21:47.211Z","title":"In ieee802_11_rx_wnmsleep_req of wnm_ap.c in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of…","severity":"MEDIUM","score":5.5,"vendor":"Android","product":"Android","kev":false,"epss":0.00179,"kevAdded":null,"exploit":false},{"id":"CVE-2018-9588","published":"2019-02-12T00:00:00.000Z","updated":"2024-09-17T02:16:15.332Z","title":"In avdt_scb_hdl_report of avdt_scb_act.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of…","severity":"MEDIUM","score":6.5,"vendor":"Android","product":"Android","kev":false,"epss":0.00509,"kevAdded":null,"exploit":false},{"id":"CVE-2018-9587","published":"2019-02-12T00:00:00.000Z","updated":"2024-09-17T03:02:20.568Z","title":"In savePhotoFromUriToUri of ContactPhotoUtils.java in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is possible…","severity":"HIGH","score":7.3,"vendor":"Android","product":"Android","kev":false,"epss":0.00193,"kevAdded":null,"exploit":false},{"id":"CVE-2018-9586","published":"2019-02-12T00:00:00.000Z","updated":"2024-09-16T16:58:02.607Z","title":"In run of InstallPackageTask.java in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, it is possible that package…","severity":"HIGH","score":7,"vendor":"Android","product":"Android","kev":false,"epss":0.00131,"kevAdded":null,"exploit":false},{"id":"CVE-2018-9585","published":"2019-02-12T00:00:00.000Z","updated":"2024-09-16T16:58:56.897Z","title":"In nfc_ncif_proc_get_routing of nfc_ncif.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00186,"kevAdded":null,"exploit":false},{"id":"CVE-2018-9584","published":"2019-02-12T00:00:00.000Z","updated":"2024-09-16T19:14:37.623Z","title":"In nfc_ncif_set_config_status of nfc_ncif.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00186,"kevAdded":null,"exploit":false},{"id":"CVE-2018-9583","published":"2019-02-12T00:00:00.000Z","updated":"2024-09-16T23:40:39.530Z","title":"In bta_ag_parse_cmer of bta_ag_cmd.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out-of-bounds…","severity":"CRITICAL","score":9.8,"vendor":"Android","product":"Android","kev":false,"epss":0.02262,"kevAdded":null,"exploit":false},{"id":"CVE-2018-9582","published":"2019-02-12T00:00:00.000Z","updated":"2024-09-17T02:46:32.549Z","title":"In package installer in Android-8.0, Android-8.1 and Android-9, there is a possible bypass of the unknown source warning due to a confused deputy scenario.…","severity":"HIGH","score":7.8,"vendor":"Android","product":"Android","kev":false,"epss":0.00211,"kevAdded":null,"exploit":false},{"id":"CVE-2017-6249","published":"2017-07-13T16:00:00.000Z","updated":"2024-09-17T04:09:51.561Z","title":"An elevation of privilege vulnerability in the NVIDIA sound driver could enable a local malicious application to execute arbitrary code within the context of…","severity":"HIGH","score":7,"vendor":"Android","product":"Android","kev":false,"epss":0.00816,"kevAdded":null,"exploit":false}]}