Approved changes feed: RSS · Atom

cpe:2.3:o:google:android:4.1.1:*:*:*:*:*:*:*

part: o version: 4.1.1 update: *

VendorGoogle (f181d1eb-7269-5bae-b76e-e66ceb214562)
ProductAndroid (e58fd905-14d0-5c08-b14d-4d3138d61b03)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/aosp-mirror purl2cpe 2026-06-01 10:16:38.588786
pkg:googlesource/android purl2cpe 2026-06-01 10:16:38.588788

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-25381 not_vulnerable 2026-06-08 05:30:40.886983 Details available
MEDIUM (5.5)
Using unsafe PendingIntent in Samsung Account in versions 10.8.0.4 in Android P(9.0) and below, and 12.1.1.3 in Android Q(10.0) and above allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent.
Published: 2021-04-09T17:40:41.000Z
Updated: 2024-08-03T20:03:05.642Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25343 not_vulnerable 2026-06-08 05:30:40.798465 Details available
MEDIUM (4)
Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00.13 (in Android P(9.0) and above) allows unauthorized actions including denial of service attack by hijacking the provider.
Published: 2021-03-04T21:03:38.000Z
Updated: 2024-08-03T20:03:05.469Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25342 not_vulnerable 2026-06-08 05:30:40.773745 Details available
MEDIUM (4)
Calling of non-existent provider in SMP sdk prior to version 3.0.9 allows unauthorized actions including denial of service attack by hijacking the provider.
Published: 2021-03-04T21:03:01.000Z
Updated: 2024-08-03T20:03:05.300Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2487 vulnerable 2026-06-08 05:07:42.321938 Details available
libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27833616.
Published: 2016-06-13T01:00:00.000Z
Updated: 2024-08-05T23:32:20.438Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2486 vulnerable 2026-06-08 05:07:42.321252 Details available
mp3dec/SoftMP3.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate the relationship between allocated memory and the frame size, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27793371.
Published: 2016-06-13T01:00:00.000Z
Updated: 2024-08-05T23:32:20.224Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2485 vulnerable 2026-06-08 05:07:42.320334 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2484 vulnerable 2026-06-08 05:07:42.319582 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2483 vulnerable 2026-06-08 05:07:42.318818 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2482 vulnerable 2026-06-08 05:07:42.318046 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2481 vulnerable 2026-06-08 05:07:42.317223 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2480 vulnerable 2026-06-08 05:07:42.316398 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2479 vulnerable 2026-06-08 05:07:42.315749 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2478 vulnerable 2026-06-08 05:07:42.314958 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2477 vulnerable 2026-06-08 05:07:42.314238 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2476 vulnerable 2026-06-08 05:07:42.313587 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2464 vulnerable 2026-06-08 05:07:42.309837 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2459 vulnerable 2026-06-08 05:07:42.303240 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.