Google

Android

8158 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2024-43082

  • EPSS 0.1%
  • Veröffentlicht 13.11.2024 18:15:20
  • Zuletzt bearbeitet 17.12.2024 20:03:15

In onActivityResult of EditUserPhotoController.java, there is a possible cross-user media read due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed fo...

7.8

CVE-2023-35659

  • EPSS 0.1%
  • Veröffentlicht 13.11.2024 18:15:19
  • Zuletzt bearbeitet 20.11.2024 17:35:20

In DevmemIntChangeSparse of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interac...

7.8

CVE-2023-35686

  • EPSS 0.1%
  • Veröffentlicht 13.11.2024 18:15:19
  • Zuletzt bearbeitet 20.11.2024 17:35:20

In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not...

9.1

CVE-2024-46962

  • EPSS 0.38%
  • Veröffentlicht 11.11.2024 21:15:06
  • Zuletzt bearbeitet 15.04.2026 00:35:42

The SYQ com.downloader.video.fast (aka Master Video Downloader) application through 2.0 for Android allows an attacker to execute arbitrary JavaScript code via the com.downloader.video.fast.SpeedMainAct component.

8.1

CVE-2024-46963

  • EPSS 0.34%
  • Veröffentlicht 11.11.2024 21:15:06
  • Zuletzt bearbeitet 15.04.2026 00:35:42

The com.superfast.video.downloader (aka Super Unlimited Video Downloader - All in One) application through 5.1.9 for Android allows an attacker to execute arbitrary JavaScript code via the com.bluesky.browser.ui.BrowserMainActivity component.

8.1

CVE-2024-46964

  • EPSS 0.34%
  • Veröffentlicht 11.11.2024 21:15:06
  • Zuletzt bearbeitet 15.04.2026 00:35:42

The com.video.downloader.all (aka All Video Downloader) application through 11.28 for Android allows an attacker to execute arbitrary JavaScript code via the com.video.downloader.all.StartActivity component.

8.1

CVE-2024-46966

  • EPSS 0.34%
  • Veröffentlicht 11.11.2024 21:15:06
  • Zuletzt bearbeitet 15.04.2026 00:35:42

The Ikhgur mn.ikhgur.khotoch (aka Video Downloader Pro & Browser) application through 1.0.42 for Android allows an attacker to execute arbitrary JavaScript code via the mn.ikhgur.khotoch.MainActivity component.

4.4

CVE-2024-20117

  • EPSS 0.08%
  • Veröffentlicht 04.11.2024 02:15:17
  • Zuletzt bearbeitet 22.04.2025 13:52:21

In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09008925; Issue ...

6.7

CVE-2024-20118

  • EPSS 0.08%
  • Veröffentlicht 04.11.2024 02:15:17
  • Zuletzt bearbeitet 22.04.2025 13:51:56

In mms, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09062392; Issue...

6.7

CVE-2024-20119

  • EPSS 0.08%
  • Veröffentlicht 04.11.2024 02:15:17
  • Zuletzt bearbeitet 22.04.2025 13:54:43

In mms, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09062301; Issue...