Software Detail

Software Informaton Top

SmartPhone

Software Detail

Android

Number Of NVD

6845

CRITICAL

484

HIGH

2993

MEDIUM

3124

LOW

236

URL	https://www.android.com/
Explanation	It is an operating system installed on smartphones provided by Google. Since it is open source, many manufacturers use it in their smartphones, tablets, and wearable devices. The support period differs for each development vendor. After Google provides a security patch, it is up to the vendor to provide the patch to the target devices.
Tag	LGPL 2.1+ Mobile Google Apache License v2.0 GPL v2

Add Information URL

No	Type	Name	URL
1			https://en.wikipedia.org/wiki/Android_version_history
2			https://source.android.com/setup/start/licenses
3			https://source.android.com/security/bulletin/
4			https://developer.android.com/
5			https://developer.android.com/about/versions/
6			https://android-developers.googleblog.com/

List Of Product [ Click to show release history and vulnerability information ]

No	Name	Latest Version	Release date	Initial release	Critical	High	Medium	Low
751	Android 14	14.1	Nov. 6, 2024	Aug. 7, 2024	0	3	1	0
752	Android 13	13.4	Aug. 7, 2023	Aug. 15, 2022	15	317	812	67
753	Android 12	12.4	Oct. 17, 2022	Oct. 4, 2020	43	479	1193	106
754	Android 11	11	Sept. 8, 2020	Sept. 8, 2020	58	636	1364	107
755	Android 10	10	Sept. 3, 2019	Sept. 3, 2019	103	680	1055	110
756	Android 9	9	Aug. 6, 2018	Aug. 6, 2018	112	463	331	35
757	Android 8	8.1.0	Dec. 5, 2017	Aug. 21, 2017	144	529	318	25
758	Android 7	7.1.2	April 4, 2017	Aug. 22, 2016	116	627	380	20
759	Android 6	6.0.1	Dec. 7, 2015	Oct. 5, 2015	109	734	397	20
760	Android 5	5.1.1	April 21, 2015	Nov. 12, 2014	67	661	317	16
761	Android 4	4.4.4	June 19, 2014	Oct. 18, 2011	53	577	271	16
762	Android 3	3.2.6	Feb. 1, 2012	Feb. 22, 2011	25	420	174	10
763	Android 2	2.2.3	Nov. 21, 2011	Oct. 26, 2009	25	424	181	12
764	Android 1	1.6	Sept. 15, 2009	Sept. 23, 2008	150	1565	2312	204
765	Android 9.0	9.0			109	441	323	34
766	Android 7.2	7.2			16	61	79	9
767	Android 12.1	12.1			15	229	224	23
768	Android 12.0l	12.0l			0	28	68	9
769	Android 12.0	12.0			43	447	1159	104
770	Android 11.0	11.0			58	636	1364	107
771	Android 10.0	10.0			103	680	1055	110

NVD Vulnerability Information

CRITICAL
HIGH
MEDIUM
LOW

No	CVSS3 CVSS2	Level Attach Vector	Title	CWE	CVE	cpe23Uri	Update date Published date	Show Affected	Exploit PoC Search
751	5.5 -	MEDIUM Local	In parseInputs of ShimPreparedModel.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileg…	CWE-125 Out-of-bounds Read	CVE-2023-21271	cpe:2.3:o:google:android:13.0:- cpe:2.3:o:google:android:12.1:* cpe:2.3:o:google:android:12.0:-	2024-11-21 16:42 2023-08-15	Show	GitHub Exploit DB Packet Storm

752	7.8 -	HIGH Local	In onCreate of LockSettingsActivity.java, there is a possible way set a new lockscreen PIN without entering the existing PIN due to a permissions bypass. This could lead to local escalation of privil…	NVD-CWE-noinfo	CVE-2023-21235	cpe:2.3:o:google:android:13.0:- cpe:2.3:o:google:android:11.0:-	2024-11-21 16:42 2023-08-15	Show	GitHub Exploit DB Packet Storm

753	5.5 -	MEDIUM Local	In launchConfirmationActivity of ChooseLockSettingsHelper.java, there is a possible way to enable developer options without the lockscreen PIN due to a missing permission check. This could lead to lo…	CWE-862 Missing Authorization	CVE-2023-21234	cpe:2.3:o:google:android:13.0:- cpe:2.3:o:google:android:11.0:-	2024-11-21 16:42 2023-08-15	Show	GitHub Exploit DB Packet Storm

754	7.5 -	HIGH Network	In multiple locations of avrc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User i…	CWE-908 Use of Uninitialized Resource	CVE-2023-21233	cpe:2.3:o:google:android:11.0:-	2024-11-21 16:42 2023-08-15	Show	GitHub Exploit DB Packet Storm

755	3.3 -	LOW Local	In multiple locations, there is a possible way to retrieve sensor data without permissions due to a permissions bypass. This could lead to local information disclosure with no additional execution pr…	NVD-CWE-noinfo	CVE-2023-21232	cpe:2.3:o:google:android:13.0:- cpe:2.3:o:google:android:11.0:-	2024-11-21 16:42 2023-08-15	Show	GitHub Exploit DB Packet Storm

756	7.8 -	HIGH Local	In getIntentForButton of ButtonManager.java, there is a possible way for an unprivileged application to start a non-exported or permission-protected activity due to a missing permission check. This c…	NVD-CWE-noinfo	CVE-2023-21231	cpe:2.3:o:google:android:13.0:-	2024-11-21 16:42 2023-08-15	Show	GitHub Exploit DB Packet Storm

757	5.5 -	MEDIUM Local	In onAccessPointChanged of AccessPointPreference.java, there is a possible way for unprivileged apps to receive a broadcast about WiFi access point change and its BSSID or SSID due to a precondition …	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2023-21230	cpe:2.3:o:google:android:13.0:- cpe:2.3:o:google:android:11.0:-	2024-11-21 16:42 2023-08-15	Show	GitHub Exploit DB Packet Storm

758	7.8 -	HIGH Local	In registerServiceLocked of ManagedServices.java, there is a possible bypass of background activity launch restrictions due to an unsafe PendingIntent. This could lead to local escalation of privileg…	NVD-CWE-noinfo	CVE-2023-21229	cpe:2.3:o:google:android:13.0:- cpe:2.3:o:google:android:11.0:-	2024-11-21 16:42 2023-08-15	Show	GitHub Exploit DB Packet Storm

759	5.5 -	MEDIUM Local	In update of MmsProvider.java, there is a possible way to change directory permissions due to a path traversal error. This could lead to local denial of service of SIM recognition with no additional …	CWE-22 Path Traversal	CVE-2023-21268	cpe:2.3:o:google:android:13.0:- cpe:2.3:o:google:android:12.1:- cpe:2.3:o:google:android:12.0:- cpe:2.3:o:goog…	2024-11-21 16:42 2023-08-15	Show	GitHub Exploit DB Packet Storm

760	7.8 -	HIGH Local	In startActivityInner of ActivityStarter.java, there is a possible way to launch an activity into PiP mode from the background due to BAL bypass. This could lead to local escalation of privilege with…	CWE-269 Improper Privilege Management	CVE-2023-21269	cpe:2.3:o:google:android:13.0:-	2024-11-21 16:42 2023-08-15	Show	GitHub Exploit DB Packet Storm