Software Detail

Software Informaton Top

SmartPhone

Software Detail

Android

Number Of NVD

6838

CRITICAL

484

HIGH

2986

MEDIUM

3124

LOW

236

URL	https://www.android.com/
Explanation	It is an operating system installed on smartphones provided by Google. Since it is open source, many manufacturers use it in their smartphones, tablets, and wearable devices. The support period differs for each development vendor. After Google provides a security patch, it is up to the vendor to provide the patch to the target devices.
Tag	GPL v2 LGPL 2.1+ Mobile Google Apache License v2.0

Add Information URL

No	Type	Name	URL
1			https://en.wikipedia.org/wiki/Android_version_history
2			https://source.android.com/setup/start/licenses
3			https://source.android.com/security/bulletin/
4			https://developer.android.com/
5			https://developer.android.com/about/versions/
6			https://android-developers.googleblog.com/

List Of Product [ Click to show release history and vulnerability information ]

No	Name	Latest Version	Release date	Initial release	Critical	High	Medium	Low
41	Android 14	14.1	Nov. 6, 2024	Aug. 7, 2024	0	3	1	0
42	Android 13	13.4	Aug. 7, 2023	Aug. 15, 2022	15	311	812	67
43	Android 12	12.4	Oct. 17, 2022	Oct. 4, 2020	43	479	1193	106
44	Android 11	11	Sept. 8, 2020	Sept. 8, 2020	58	636	1364	107
45	Android 10	10	Sept. 3, 2019	Sept. 3, 2019	103	680	1055	110
46	Android 9	9	Aug. 6, 2018	Aug. 6, 2018	112	463	331	35
47	Android 8	8.1.0	Dec. 5, 2017	Aug. 21, 2017	144	529	318	25
48	Android 7	7.1.2	April 4, 2017	Aug. 22, 2016	116	627	380	20
49	Android 6	6.0.1	Dec. 7, 2015	Oct. 5, 2015	109	734	397	20
50	Android 5	5.1.1	April 21, 2015	Nov. 12, 2014	67	661	317	16
51	Android 4	4.4.4	June 19, 2014	Oct. 18, 2011	53	577	271	16
52	Android 3	3.2.6	Feb. 1, 2012	Feb. 22, 2011	25	420	174	10
53	Android 2	2.2.3	Nov. 21, 2011	Oct. 26, 2009	25	424	181	12
54	Android 1	1.6	Sept. 15, 2009	Sept. 23, 2008	150	1558	2312	204
55	Android 9.0	9.0			109	441	323	34
56	Android 7.2	7.2			16	61	79	9
57	Android 12.1	12.1			15	229	224	23
58	Android 12.0l	12.0l			0	28	68	9
59	Android 12.0	12.0			43	447	1159	104
60	Android 11.0	11.0			58	636	1364	107
61	Android 10.0	10.0			103	680	1055	110

NVD Vulnerability Information

CRITICAL
HIGH
MEDIUM
LOW

No	CVSS3 CVSS2	Level Attach Vector	Title	CWE	CVE	cpe23Uri	Update date Published date	Show Affected	Exploit PoC Search
41	6.4 -	MEDIUM Physics	In the Mediatek Preloader, there are out of bounds reads and writes due to an exposed interface that allows arbitrary peripheral memory mapping with insufficient blacklisting/whitelisting. This could…	CWE-125 CWE-787 Out-of-bounds Read Out-of-bounds Write	CVE-2018-9371	cpe:2.3:o:google:android:-:*	2024-11-23 06:25 2024-11-20	Show	GitHub Exploit DB Packet Storm

42	7.3 -	HIGH Local	In download.c there is a special mode allowing user to download data into memory and causing possible memory corruptions due to missing bounds check. This could lead to local escalation of privilege …	CWE-787 Out-of-bounds Write	CVE-2018-9370	cpe:2.3:o:google:android:-:*	2024-11-23 06:24 2024-11-20	Show	GitHub Exploit DB Packet Storm

43	7.3 -	HIGH Local	In bootloader there is fastboot command allowing user specified kernel command line arguments. This could lead to local escalation of privilege with no additional execution privileges needed. User in…	NVD-CWE-noinfo	CVE-2018-9369	cpe:2.3:o:google:android:-:*	2024-11-23 06:24 2024-11-20	Show	GitHub Exploit DB Packet Storm

44	7.8 -	HIGH Local	In mtkscoaudio debugfs there is a possible arbitrary kernel memory write due to missing bounds check and weakened SELinux policies. This could lead to local escalation of privilege with system execu…	CWE-787 Out-of-bounds Write	CVE-2018-9368	cpe:2.3:o:google:android:-:*	2024-11-23 06:23 2024-11-20	Show	GitHub Exploit DB Packet Storm

45	7.8 -	HIGH Local	In FT_ACDK_CCT_V2_OP_ISP_SET_TUNING_PARAS of Meta_CCAP_Para.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no add…	CWE-787 Out-of-bounds Write	CVE-2018-9367	cpe:2.3:o:google:android:-:*	2024-11-23 06:23 2024-11-20	Show	GitHub Exploit DB Packet Storm

46	7.8 -	HIGH Local	In IMSA_Recv_Thread and VT_IMCB_Thread of ImsaClient.cpp and VideoTelephony.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege wit…	CWE-190 Integer Overflow or Wraparound	CVE-2018-9366	cpe:2.3:o:google:android:-:*	2024-11-23 06:23 2024-11-20	Show	GitHub Exploit DB Packet Storm

47	7.5 -	HIGH Network	In the LG LAF component, there is a special command that allowed modification of certain partitions. This could lead to bypass of secure boot. User interaction is not needed for exploitation.	NVD-CWE-noinfo	CVE-2018-9364	cpe:2.3:o:google:android:-:*	2024-11-23 06:22 2024-11-20	Show	GitHub Exploit DB Packet Storm

48	6.5 -	MEDIUM Network	In SMF_ParseMetaEvent of eas_smf.c, there is a possible integer overflow. This could lead to remote denial of service due to resource exhaustion with no additional execution privileges needed. User i…	CWE-190 Integer Overflow or Wraparound	CVE-2018-9348	cpe:2.3:o:google:android:8.1:* cpe:2.3:o:google:android:8.0:* cpe:2.3:o:google:android:7.1.2:* cpe:2.3:o:googl…	2024-11-23 06:14 2024-11-20	Show	GitHub Exploit DB Packet Storm

49	5.5 -	MEDIUM Local	In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional…	CWE-908 Use of Uninitialized Resource	CVE-2018-9346	cpe:2.3:o:google:android:8.1:* cpe:2.3:o:google:android:8.0:* cpe:2.3:o:google:android:7.1.2:* cpe:2.3:o:googl…	2024-11-23 01:26 2024-11-20	Show	GitHub Exploit DB Packet Storm

50	5.5 -	MEDIUM Local	In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional…	CWE-908 Use of Uninitialized Resource	CVE-2018-9345	cpe:2.3:o:google:android:8.1:* cpe:2.3:o:google:android:8.0:* cpe:2.3:o:google:android:7.1.2:* cpe:2.3:o:googl…	2024-11-23 01:25 2024-11-20	Show	GitHub Exploit DB Packet Storm