Vulnerabilidades em Android

57 resultados
Análise Vexday

O conjunto de vulnerabilidades catalogadas para Android, neste recorte, soma 57 entradas, com nenhuma confirmada em exploração ativa pelo catálogo KEV da CISA — taxa abaixo da média geral do catálogo. A falha de maior atenção é CVE-2018-9583, que registra o maior EPSS do conjunto (0,0226), indicando probabilidade baixa, mas ainda a mais elevada do grupo, de exploração em 30 dias. O tipo de falha mais recorrente é CWE-20 (validação inadequada de entrada), padrão que costuma impactar superfícies amplas como sistemas operacionais móveis e exige atenção no processo de sanitização de dados em integrações de terceiros. A ausência de PoCs públicas e o baixo EPSS máximo sugerem risco imediato reduzido, mas a criticidade de uma CVE e a atividade recente de novas catalogações indicam que o monitoramento contínuo é recomendado.

CVE-2018-9583—In bta_ag_parse_cmer of bta_ag_cmd.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possiEPSS 2.3%CVE-2019-1991—In btif_dm_data_copy of btif_core.cc, there is a possible out of bounds write due to a buffer overflow. This could lead to remote code execuEPSS 2.0%CVE-2019-1988—In sample6 of SkSwizzler.cpp, there is a possible out of bounds write due to improper input validation. This could lead to remote code execuEPSS 1.9%CVE-2019-1986—In SkSwizzler::onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remEPSS 1.5%CVE-2024-7014HIGHImproper multimedia file attachment validation in Telegram for Android appEPSS 1.4%CVE-2018-9591—In bta_hh_ctrl_dat_act of bta_hh_act.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a posEPSS 1.3%CVE-2018-9590—In add_attr of sdp_discovery.c in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible outEPSS 1.3%CVE-2018-9592—In mca_ccb_hdl_rsp of mca_cact.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible EPSS 1.3%CVE-2019-1992—In bta_hl_sdp_query_results of bta_hl_main.cc, there is a possible use-after-free due to a race condition. This could lead to remote code exEPSS 1.3%CVE-2019-2097—In HAliasAnalyzer.Query of hydrogen-alias-analysis.h, there is possible memory corruption due to type confusion. This could lead to remote cEPSS 1.3%CVE-2019-1987—In onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code exeEPSS 1.2%CVE-2019-2027—In floor0_inverse1 of floor0.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code exeEPSS 1.2%CVE-2019-2093—In huff_dec_1D of nlc_dec.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code executiEPSS 1.2%CVE-2019-2028—In numerous hand-crafted functions in libmpeg2, NEON registers are not preserved. This could lead to remote code execution with no additionaEPSS 1.2%CVE-2019-2094—In parseMPEGCCData of NuPlayerCCDecoder.cpp, there is a possible out of bounds write due to missing bounds checks. This could lead to remoteEPSS 1.1%CVE-2019-1994—In refresh of DevelopmentTiles.java, there is the possibility of leaving development settings accessible due to an insecure default value. TEPSS 1.0%CVE-2019-2030—In removeInterfaceAddress of NetworkController.cpp, there is a possible use after free. This could lead to remote code execution with no addEPSS 0.9%CVE-2019-1997—In random_get_bytes of random.c, there is a possible degradation of randomness due to an insecure default value. This could lead to local inEPSS 0.9%CVE-2019-2037—In l2cu_send_peer_config_rej of l2c_utils.cc, there is a possible out-of-bound read due to an incorrect bounds check. This could lead to remEPSS 0.8%CVE-2019-1999—In binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper locking. This could lead to local escalation ofEPSS 0.8%