Vulmon Recent Vulnerabilities Trends Blog About Contact

android vulnerabilities and exploits

(subscribe to this query)

NA
CVE-2013-1161
The XML parser in the Cisco Jabber IM application for Android allows remote authenticated users to cause a denial of service (blocked connection) by leveraging an entry on a Buddy list and sending a crafted XMPP presence update message, aka Bug ID CSCue38383....
Cisco Jabber Im -
NA
CVE-2015-6384
The Cisco WebEx Meetings application before 8.5.1 for Android improperly initializes custom application permissions, which allows attackers to bypass intended access restrictions via a crafted application, aka Bug ID CSCuw86442....
Cisco Webex Meetings 8.0 Base
9.8
CVSSv3
CVE-2014-7920
mediaserver in Android 2.2 through 5.x before 5.1 allows attackers to gain privileges. NOTE: This is a different vulnerability than CVE-2014-7921....
Google Android 2.2Google Android 2.2.1Google Android 2.2.2Google Android 2.2.3Google Android 2.3Google Android 2.3.1Google Android 2.3.2Google Android 2.3.3Google Android 2.3.4Google Android 2.3.5Google Android 2.3.6Google Android 2.3.7Google Android 3.0Google Android 3.1Google Android 3.2Google Android 3.2.1Google Android 3.2.2Google Android 3.2.4Google Android 3.2.6Google Android 4.0Google Android 4.0.1Google Android 4.0.2Google Android 4.0.3Google Android 4.0.4Google Android 4.1Google Android 4.1.2Google Android 4.2Google Android 4.2.1Google Android 4.2.2Google Android 4.3Google Android 4.3.1Google Android 4.4Google Android 4.4.1Google Android 4.4.2Google Android 4.4.3Google Android 4.4.4Google Android 5.0Google Android 5.0.1Google Android 5.0.2
NA
CVE-2013-7373
Android before 4.4 does not properly arrange for seeding of the OpenSSL PRNG, which makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging use of the PRNG within multiple applications....
Google Android 1.0Google Android 1.1Google Android 1.5Google Android 1.6Google Android 2.0Google Android 2.0.1Google Android 2.1Google Android 2.2Google Android 2.2.1Google Android 2.2.2Google Android 2.2.3Google Android 2.3Google Android 2.3.1Google Android 2.3.2Google Android 2.3.3Google Android 2.3.4Google Android 2.3.5Google Android 2.3.6Google Android 2.3.7Google Android 3.0Google Android 3.1Google Android 3.2Google Android 3.2.1Google Android 3.2.2Google Android 3.2.4Google Android 3.2.6Google Android 4.0Google Android 4.0.1Google Android 4.0.2Google Android 4.0.3Google Android 4.0.4Google Android 4.1Google Android 4.1.2Google Android 4.2Google Android 4.2.1Google Android 4.2.2Google Android 4.3Google Android
7.8
CVSSv3
CVE-2017-0737
A elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37563942....
Google Android 4.0Google Android 4.0.1Google Android 4.0.2Google Android 4.0.3Google Android 4.0.4Google Android 4.1Google Android 4.1.2Google Android 4.2Google Android 4.2.1Google Android 4.2.2Google Android 4.3Google Android 4.3.1Google Android 4.4Google Android 4.4.1Google Android 4.4.2Google Android 4.4.3Google Android 4.4.4Google Android 5.0Google Android 5.0.1Google Android 5.0.2Google Android 5.1Google Android 5.1.0Google Android 5.1.1Google Android 6.0Google Android 6.0.1Google Android 7.0Google Android 7.1.0Google Android 7.1.1Google Android 7.1.2
7.8
CVSSv3
CVE-2017-0745
A remote code execution vulnerability in the Android media framework (avc decoder). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37079296....
Google Android 4.0Google Android 4.0.1Google Android 4.0.2Google Android 4.0.3Google Android 4.0.4Google Android 4.1Google Android 4.1.2Google Android 4.2Google Android 4.2.1Google Android 4.2.2Google Android 4.3Google Android 4.3.1Google Android 4.4Google Android 4.4.1Google Android 4.4.2Google Android 4.4.3Google Android 4.4.4Google Android 5.0Google Android 5.0.1Google Android 5.0.2Google Android 5.1Google Android 5.1.0Google Android 5.1.1Google Android 6.0Google Android 6.0.1Google Android 7.0Google Android 7.1.0Google Android 7.1.1Google Android 7.1.2
7.8
CVSSv3
CVE-2017-0767
A elevation of privilege vulnerability in the Android media framework (libeffects). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37536407....
Google Android 4.0Google Android 4.0.1Google Android 4.0.2Google Android 4.0.3Google Android 4.0.4Google Android 4.1Google Android 4.1.2Google Android 4.2Google Android 4.2.1Google Android 4.2.2Google Android 4.3Google Android 4.3.1Google Android 4.4Google Android 4.4.1Google Android 4.4.2Google Android 4.4.3Google Android 4.4.4Google Android 5.0Google Android 5.0.1Google Android 5.0.2Google Android 5.1Google Android 5.1.0Google Android 5.1.1Google Android 6.0Google Android 6.0.1Google Android 7.0Google Android 7.1.0Google Android 7.1.1Google Android 7.1.2
5.5
CVSSv3
CVE-2017-0598
An information disclosure vulnerability in the Framework APIs could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that...
Google Android 4.0Google Android 4.0.1Google Android 4.0.2Google Android 4.0.3Google Android 4.0.4Google Android 4.1Google Android 4.1.2Google Android 4.2Google Android 4.2.1Google Android 4.2.2Google Android 4.3Google Android 4.3.1Google Android 4.4Google Android 4.4.1Google Android 4.4.2Google Android 4.4.3Google Android 4.4.4Google Android 5.0Google Android 5.0.1Google Android 5.0.2Google Android 5.1Google Android 5.1.0Google Android 5.1.1Google Android 6.0Google Android 6.0.1Google Android 7.0Google Android 7.1.0Google Android 7.1.1Google Android 7.1.2
5.5
CVSSv3
CVE-2017-0777
A information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-38342499....
Google Android 4.0Google Android 4.0.1Google Android 4.0.2Google Android 4.0.3Google Android 4.0.4Google Android 4.1Google Android 4.1.2Google Android 4.2Google Android 4.2.1Google Android 4.2.2Google Android 4.3Google Android 4.3.1Google Android 4.4Google Android 4.4.1Google Android 4.4.2Google Android 4.4.3Google Android 4.4.4Google Android 5.0Google Android 5.0.1Google Android 5.0.2Google Android 5.1Google Android 5.1.0Google Android 5.1.1Google Android 6.0Google Android 6.0.1Google Android 7.0Google Android 7.1.0Google Android 7.1.1Google Android 7.1.2
5.5
CVSSv3
CVE-2017-0602
An information disclosure vulnerability in Bluetooth could allow a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as Moderate due to details specific to the vulnerability. Product:...
Google Android 4.0Google Android 4.0.1Google Android 4.0.2Google Android 4.0.3Google Android 4.0.4Google Android 4.1Google Android 4.1.2Google Android 4.2Google Android 4.2.1Google Android 4.2.2Google Android 4.3Google Android 4.3.1Google Android 4.4Google Android 4.4.1Google Android 4.4.2Google Android 4.4.3Google Android 4.4.4Google Android 5.0Google Android 5.0.1Google Android 5.0.2Google Android 5.1Google Android 5.1.0Google Android 5.1.1Google Android 6.0Google Android 6.0.1Google Android 7.0Google Android 7.1.0Google Android 7.1.1Google Android 7.1.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-3691insecure direct object referenceCVE-2021-1140CVE-2021-2109information disclosureCVE-2021-1303CVE-2021-1304IDORCVE-2020-14882