Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
Android Number Of NVD 6838 CRITICAL 484 HIGH 2986 MEDIUM 3124 LOW 236
URL https://www.android.com/
Explanation It is an operating system installed on smartphones provided by Google.
Since it is open source, many manufacturers use it in their smartphones, tablets, and wearable devices.

The support period differs for each development vendor.
After Google provides a security patch, it is up to the vendor to provide the patch to the target devices.
Tag
  • GPL v2
  • LGPL 2.1+
  • Mobile
  • Google
  • Apache License v2.0

Add Information URL
No Type Name URL
1 https://en.wikipedia.org/wiki/Android_version_history
2 https://source.android.com/setup/start/licenses
3 https://source.android.com/security/bulletin/
4 https://developer.android.com/
5 https://developer.android.com/about/versions/
6 https://android-developers.googleblog.com/

List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support
Extended
for a fee
Critical High Medium Low
6631 Android 14 14.1 Nov. 6, 2024 Aug. 7, 2024 0 3 1 0
6632 Android 13 13.4 Aug. 7, 2023 Aug. 15, 2022 15 311 812 67
6633 Android 12 12.4 Oct. 17, 2022 Oct. 4, 2020 43 479 1193 106
6634 Android 11 11 Sept. 8, 2020 Sept. 8, 2020 58 636 1364 107
6635 Android 10 10 Sept. 3, 2019 Sept. 3, 2019 103 680 1055 110
6636 Android 9 9 Aug. 6, 2018 Aug. 6, 2018 112 463 331 35
6637 Android 8 8.1.0 Dec. 5, 2017 Aug. 21, 2017 144 529 318 25
6638 Android 7 7.1.2 April 4, 2017 Aug. 22, 2016 116 627 380 20
6639 Android 6 6.0.1 Dec. 7, 2015 Oct. 5, 2015 109 734 397 20
6640 Android 5 5.1.1 April 21, 2015 Nov. 12, 2014 67 661 317 16
6641 Android 4 4.4.4 June 19, 2014 Oct. 18, 2011 53 577 271 16
6642 Android 3 3.2.6 Feb. 1, 2012 Feb. 22, 2011 25 420 174 10
6643 Android 2 2.2.3 Nov. 21, 2011 Oct. 26, 2009 25 424 181 12
6644 Android 1 1.6 Sept. 15, 2009 Sept. 23, 2008 150 1558 2312 204
6645 Android 9.0 9.0 109 441 323 34
6646 Android 7.2 7.2 16 61 79 9
6647 Android 12.1 12.1 15 229 224 23
6648 Android 12.0l 12.0l 0 28 68 9
6649 Android 12.0 12.0 43 447 1159 104
6650 Android 11.0 11.0 58 636 1364 107
6651 Android 10.0 10.0 103 680 1055 110
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2
Level
Attach Vector
Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date
Show Affected Exploit
PoC
Search
6631 9.8
10.0
CRITICAL
Network
libs/gui/BufferQueueConsumer.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not check for the android.permission.DUMP permissio… CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-2416 cpe:2.3:o:google:android:6.0:*
cpe:2.3:o:google:android:6.0.1:*
cpe:2.3:o:google:android:5.1:*
cpe:2.3:o:googl…
2024-11-21 11:48
2016-04-18
Show GitHub Exploit DB Packet Storm
6632 5.5
7.1
MEDIUM
Local
exchange/eas/EasAutoDiscover.java in the Autodiscover implementation in Exchange ActiveSync in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows attackers to obtain sen… CWE-200
Information Exposure
CVE-2016-2415 cpe:2.3:o:google:android:6.0:*
cpe:2.3:o:google:android:6.0.1:*
cpe:2.3:o:google:android:5.1:*
cpe:2.3:o:googl…
2024-11-21 11:48
2016-04-18
Show GitHub Exploit DB Packet Storm
6633 6.2
4.9
MEDIUM
Local
The Minikin library in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not properly consider negative size values in font data, which allows remote attackers to cause a… CWE-20
 Improper Input Validation 
CVE-2016-2414 cpe:2.3:o:google:android:6.0:*
cpe:2.3:o:google:android:6.0.1:*
cpe:2.3:o:google:android:5.1:*
cpe:2.3:o:googl…
2024-11-21 11:48
2016-04-18
Show GitHub Exploit DB Packet Storm
6634 7.8
9.3
HIGH
Local
media/libmedia/IOMX.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not initialize a handle pointer, which allows attackers to gain privileges via… CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-2413 cpe:2.3:o:google:android:6.0:*
cpe:2.3:o:google:android:6.0.1:*
cpe:2.3:o:google:android:5.1:*
cpe:2.3:o:googl…
2024-11-21 11:48
2016-04-18
Show GitHub Exploit DB Packet Storm
6635 7.8
9.3
HIGH
Local
include/core/SkPostConfig.h in Skia, as used in System_server in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01, mishandles certain crashes, which allows … CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-2412 cpe:2.3:o:google:android:6.0:*
cpe:2.3:o:google:android:6.0.1:*
cpe:2.3:o:google:android:5.1:*
cpe:2.3:o:googl…
2024-11-21 11:48
2016-04-18
Show GitHub Exploit DB Packet Storm
6636 6.5
9.3
MEDIUM
Local
A Qualcomm Power Management kernel driver in Android 6.x before 2016-04-01 allows attackers to gain privileges via a crafted application that leverages root access, aka internal bug 26866053. CWE-20
 Improper Input Validation 
CVE-2016-2411 cpe:2.3:o:google:android:6.0:*
cpe:2.3:o:google:android:6.0.1:*
2024-11-21 11:48
2016-04-18
Show GitHub Exploit DB Packet Storm
6637 7.4
6.9
HIGH
Local
A Qualcomm video kernel driver in Android 6.x before 2016-04-01 allows attackers to gain privileges via a crafted application that leverages control over a service that can call this driver, aka inte… CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-2410 cpe:2.3:o:google:android:6.0:*
cpe:2.3:o:google:android:6.0.1:*
2024-11-21 11:48
2016-04-18
Show GitHub Exploit DB Packet Storm
6638 8.1
9.3
HIGH
Network
A Texas Instruments (TI) haptic kernel driver in Android 6.x before 2016-04-01 allows attackers to gain privileges via a crafted application that leverages control over a service that can call this d… CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-2409 cpe:2.3:o:google:android:6.0:*
cpe:2.3:o:google:android:6.0.1:*
2024-11-21 11:48
2016-04-18
Show GitHub Exploit DB Packet Storm
6639 9.8
10.0
CRITICAL
Network
dhcpcd before 6.10.0, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 and other products, mismanages option lengths, which allows remote attacke… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-1503 cpe:2.3:o:google:android:6.0:*
cpe:2.3:o:google:android:6.0.1:*
cpe:2.3:o:google:android:5.1:*
cpe:2.3:o:googl…
2024-11-21 11:46
2016-04-18
Show GitHub Exploit DB Packet Storm
6640 8.8
5.8
HIGH
Adjacent
The PORCHE_PAIRING_CONFLICT feature in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows remote attackers to bypass intended pairing rest… CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-0850 cpe:2.3:o:google:android:6.0:*
cpe:2.3:o:google:android:6.0.1:*
cpe:2.3:o:google:android:5.1:*
cpe:2.3:o:googl…
2024-11-21 11:42
2016-04-18
Show GitHub Exploit DB Packet Storm