Google Android 13 <2025-05-05
productDEA product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
EPSS ≥ 10%
by severity
1critical8high1medium0low
updated 2026-10-27
01
vulnerabilities (45)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2025-0087US | — | Exploit |
| CVE-2024-34739US | high7.8 | Exploit |
| CVE-2025-20666US | high7.5 | — |
| CVE-2025-0072US | high7.8 | — |
| CVE-2025-26438US | — | — |
| CVE-2025-21459US | — | — |
| CVE-2024-49846US | critical9.1 | — |
| CVE-2024-49847US | — | — |
| CVE-2024-52939US | — | — |
| CVE-2025-0427US | high7.8 | — |
| CVE-2024-12577US | — | — |
| CVE-2024-47900US | — | — |
| CVE-2024-47891US | — | — |
| CVE-2024-47896US | — | — |
| CVE-2024-46974US | — | — |
| CVE-2023-21342US | high7.8 | — |
| CVE-2024-46975US | — | — |
| CVE-2024-45580US | — | — |
| CVE-2025-26427US | — | — |
| CVE-2025-21468US | — | — |
| CVE-2025-21467US | — | — |
| CVE-2025-21453US | — | — |
| CVE-2024-49845US | — | — |
| CVE-2024-49841US | — | — |
| CVE-2024-49835US | — | — |
| CVE-2025-26428US | — | — |
| CVE-2024-49739US | — | — |
| CVE-2025-0077US | — | — |
| CVE-2025-26426US | — | — |
| CVE-2025-26421US | — | — |
| CVE-2025-22425US | —OT elevated | — |
| CVE-2025-26424US | — | — |
| CVE-2025-26425US | — | — |
| CVE-2024-49842US | — | — |
| CVE-2023-35657US | — | — |
| CVE-2025-26444US | — | — |
| CVE-2025-26423US | — | — |
| CVE-2025-26422US | — | — |
| CVE-2025-26436US | high7.8OT elevated | — |
| CVE-2025-26440US | —OT elevated | — |
| CVE-2025-26420US | — | — |
| CVE-2025-26435US | high7.8 | — |
| CVE-2025-26430US | high7.8 | — |
| CVE-2025-26442US | medium5.5OT elevated | — |
| CVE-2025-26429US | — | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')9 CVEs
- CWE-416Use After Free5 CVEs
- CWE-787Out-of-bounds Write5 CVEs
- CWE-125Out-of-bounds Read4 CVEs
- CWE-823Use of Out-of-range Pointer Offset4 CVEs
- CWE-126Buffer Over-read3 CVEs
- CWE-20Improper Input Validation3 CVEs
- CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
03
sources (1)
Which sources assert this record, and when.
- DECERT-Bund (BSI CSAF)45 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan