Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

google android 2.3 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2012-4222
drivers/gpu/msm/kgsl.c in the Qualcomm Innovation Center (QuIC) Graphics KGSL kernel-mode driver for Android 2.3 up to and including 4.2 allows malicious users to cause a denial of service (NULL pointer dereference) via an application that uses crafted arguments in a local kgsl_i...
Google Android 3.1Google Android 3.2Google Android 3.0Google Android 3.2.2Google Android 2.3.5Google Android 2.3.7Google Android 3.2.6Google Android 4.0Google Android 4.0.1Google Android 2.3Google Android 2.3.1Google Android 2.3.2Google Android 2.3.3Google Android 4.1Google Android 4.0.4Google Android 4.0.3Google Android 4.0.2Google Android 2.3.4Google Android 2.3.6Google Android 3.2.1Google Android 3.2.4Google Android 4.2
9.3
CVSSv2
CVE-2013-4787
Android 1.6 Donut up to and including 4.2 Jelly Bean does not properly check cryptographic signatures for applications, which allows malicious users to execute arbitrary code via an application package file (APK) that is modified in a way that does not violate the cryptographic s...
Google Android 2.3.3Google Android 2.3.4Google Android 4.0Google Android 4.1.2Google Android 4.0.4Google Android 4.0.3Google Android 4.0.2Google Android 4.2Google Android 4.0.1Google Android 2.3Google Android 2.2.2Google Android 1.6Google Android 2.1Google Android 3.1Google Android 2.3.2Google Android 3.2.2Google Android 3.2.1Google Android 2.2.1Google Android 2.3.5Google Android 2.2Google Android 2.3.6Google Android 3.0
7.8
CVSSv2
CVE-2011-3918
The Zygote process in Android 4.0.3 and previous versions accepts fork requests from processes with arbitrary UIDs, which allows remote malicious users to cause a denial of service (reboot loop) via a crafted application.
Google Android 2.2.3Google Android 2.0.1Google Android 1.0Google Android 3.2.6Google Android 1.6Google Android 2.1Google Android 3.2.4Google Android 3.2Google Android 3.2.2Google Android 4.0.2Google Android 2.3Google Android 2.3.6Google Android 4.0.1Google Android 2.3.3Google Android 3.0Google Android 2.0Google Android 2.3.1Google Android 2.3.5Google Android 1.5Google Android 3.1Google Android 2.2.1Google Android 2.2.2
10
CVSSv2
CVE-2014-7920
mediaserver in Android 2.2 up to and including 5.x prior to 5.1 allows malicious users to gain privileges. NOTE: This is a different vulnerability than CVE-2014-7921.
Google Android 2.2.3Google Android 3.2.6Google Android 4.2Google Android 4.1Google Android 3.2.4Google Android 5.0.2Google Android 3.2Google Android 3.2.2Google Android 4.0.2Google Android 2.3Google Android 4.4.3Google Android 2.3.6Google Android 4.0.4Google Android 4.3Google Android 4.0.1Google Android 2.3.3Google Android 4.4.4Google Android 3.0Google Android 4.2.1Google Android 2.3.1Google Android 2.3.5Google Android 5.0.1
7.5
CVSSv2
CVE-2013-7373
Android prior to 4.4 does not properly arrange for seeding of the OpenSSL PRNG, which makes it easier for malicious users to defeat cryptographic protection mechanisms by leveraging use of the PRNG within multiple applications.
Google Android 1.0Google Android 1.1Google Android 1.5Google Android 1.6Google Android 2.3.4Google Android 2.3.5Google Android 2.3.6Google Android 2.3.7Google Android 4.1.2Google Android 4.2Google Android 4.2.1Google Android 4.2.2Google Android 2.0Google Android 2.1Google Android 2.3Google Android 2.3.2Google Android 3.1Google Android 3.2.1Google Android 4.0.1Google Android 4.0.3Google Android 4.1Google Android 4.3
7.2
CVSSv2
CVE-2014-7911
luni/src/main/java/java/io/ObjectInputStream.java in the java.io.ObjectInputStream implementation in Android prior to 5.0.0 does not verify that deserialization will result in an object that met the requirements for serialization, which allows malicious users to execute arbitrary...
Google Android 2.2.3Google Android 2.0.1Google Android 1.0Google Android 3.2.6Google Android 4.2Google Android 1.6Google Android 2.1Google Android 4.1Google Android 3.2.4Google Android 3.2Google Android 3.2.2Google Android 4.0.2Google Android 2.3Google Android 4.4.3Google Android 2.3.6Google Android 4.0.4Google Android 4.3Google Android 4.0.1Google Android 2.3.3Google Android 3.0Google Android 2.0Google Android 4.2.1
7.5
CVSSv2
CVE-2016-1155
HTTP header injection vulnerability in the URLConnection class in Android OS 2.2 up to and including 6.0 allows remote malicious users to execute arbitrary scripts or set arbitrary values in cookies.
Google Android 2.2Google Android 2.2.1Google Android 2.2.2Google Android 2.2.3Google Android 3.2.1Google Android 3.2.2Google Android 3.2.4Google Android 3.2.6Google Android 4.4.1Google Android 4.4.2Google Android 4.4.3Google Android 4.4.4Google Android 2.3.3Google Android 2.3.4Google Android 2.3.5Google Android 2.3.6Google Android 4.0.4Google Android 4.1Google Android 4.1.2Google Android 4.2Google Android 4.2.1Google Android 5.1.0
7.5
CVSSv2
CVE-2014-8507
Multiple SQL injection vulnerabilities in the queryLastApp method in packages/WAPPushManager/src/com/android/smspush/WapPushManager.java in the WAPPushManager module in Android prior to 5.0.0 allow remote malicious users to execute arbitrary SQL commands, and consequently launch ...
Google Android 4.0.3Google Android 4.0.2Google Android 4.0.1Google Android 4.0Google Android 2.3.2Google Android 2.3.1Google Android 4.4Google Android 4.3.1Google Android 4.3Google Android 4.2.2Google Android 4.2.1Google Android 3.2Google Android 3.1Google Android 3.0Google Android 2.3.7Google Android 2.1Google Android 2.0.1Google Android 2.0Google Android 1.6Google Android 2.3Google Android 2.2.3Google Android
3.3
CVSSv2
CVE-2014-8610
AndroidManifest.xml in Android prior to 5.0.0 does not require the SEND_SMS permission for the SmsReceiver receiver, which allows malicious users to send stored SMS messages, and consequently transmit arbitrary new draft SMS messages or trigger additional per-message charges from...
Google Android 4.4.3Google Android 1.5Google Android 1.6Google Android 2.0Google Android 2.3.5Google Android 2.3.6Google Android 2.3.7Google Android 3.0Google Android 4.1.2Google Android 4.2Google Android 4.2.1Google Android 4.2.2Google Android 4.3Google Android 1.1Google Android 2.1Google Android 2.2Google Android 2.3Google Android 2.3.2Google Android 2.3.4Google Android 3.1Google Android 3.2.1Google Android 4.0.3
7.2
CVSSv2
CVE-2011-1149
Android prior to 2.3 does not properly restrict access to the system property space, which allows local applications to bypass the application sandbox and gain privileges, as demonstrated by psneuter and KillingInTheNameOf, related to the use of Android shared memory (ashmem) and...
Google Android 1.6Google Android 2.1Google Android 1.5Google Android 2.2.1Google Android 2.2Google Android
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-47626CVE-2024-3400physicalCVE-2024-31426CVE-2024-22423CVE-2024-22438injectlocal usersCVE-2024-3797
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook