Approved changes feed: RSS · Atom

cpe:2.3:o:google:android:1.0:*:*:*:*:*:*:*

part: o version: 1.0 update: *

VendorGoogle (f181d1eb-7269-5bae-b76e-e66ceb214562)
ProductAndroid (e58fd905-14d0-5c08-b14d-4d3138d61b03)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/aosp-mirror purl2cpe 2026-06-01 10:16:38.562388
pkg:googlesource/android purl2cpe 2026-06-01 10:16:38.562390

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-25381 not_vulnerable 2026-06-08 05:30:40.885168 Details available
MEDIUM (5.5)
Using unsafe PendingIntent in Samsung Account in versions 10.8.0.4 in Android P(9.0) and below, and 12.1.1.3 in Android Q(10.0) and above allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent.
Published: 2021-04-09T17:40:41.000Z
Updated: 2024-08-03T20:03:05.642Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25343 not_vulnerable 2026-06-08 05:30:40.796487 Details available
MEDIUM (4)
Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00.13 (in Android P(9.0) and above) allows unauthorized actions including denial of service attack by hijacking the provider.
Published: 2021-03-04T21:03:38.000Z
Updated: 2024-08-03T20:03:05.469Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25342 not_vulnerable 2026-06-08 05:30:40.746218 Details available
MEDIUM (4)
Calling of non-existent provider in SMP sdk prior to version 3.0.9 allows unauthorized actions including denial of service attack by hijacking the provider.
Published: 2021-03-04T21:03:01.000Z
Updated: 2024-08-03T20:03:05.300Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8610 vulnerable 2026-06-08 05:06:09.707146 Details available
AndroidManifest.xml in Android before 5.0.0 does not require the SEND_SMS permission for the SmsReceiver receiver, which allows attackers to send stored SMS messages, and consequently transmit arbitrary new draft SMS messages or trigger additional per-message charges from a network operator for old messages, via a crafted application that broadcasts an intent with the com.android.mms.transaction.MESSAGE_SENT action, aka Bug 17671795.
Published: 2014-12-15T17:27:00.000Z
Updated: 2024-08-06T13:26:02.365Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8507 vulnerable 2026-06-08 05:06:09.021048 Details available
Multiple SQL injection vulnerabilities in the queryLastApp method in packages/WAPPushManager/src/com/android/smspush/WapPushManager.java in the WAPPushManager module in Android before 5.0.0 allow remote attackers to execute arbitrary SQL commands, and consequently launch an activity or service, via the (1) wapAppId or (2) contentType field of a PDU for a malformed WAPPush message, aka Bug 17969135.
Published: 2014-12-15T17:27:00.000Z
Updated: 2024-08-06T13:18:48.574Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-7911 vulnerable 2026-06-08 05:06:00.401466 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7373 vulnerable 2026-06-08 05:05:10.167619 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6775 not_vulnerable 2026-06-08 05:05:06.927759 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6774 not_vulnerable 2026-06-08 05:05:06.922305 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6768 not_vulnerable 2026-06-08 05:05:06.891874 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3918 vulnerable 2026-06-08 04:59:28.277054 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1352 vulnerable 2026-06-08 04:57:58.494332 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1350 vulnerable 2026-06-08 04:57:58.484716 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4832 vulnerable 2026-06-08 04:56:31.237994 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1807 vulnerable 2026-06-08 04:54:10.631542 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2656 vulnerable 2026-06-08 04:51:29.683511 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.