Multiple Vulnerabilities in Google Android OS Could Allow for Remote Code Execution

Multiple security vulnerabilities affecting Google Android OS and numerous associated components (Framework, System, Kernel, Arm, Qualcomm, MediaTek, Imagination Technologies, Unisoc) are disclosed. Several high-severity CVEs could enable remote code execution or elevation of privilege, and many additional flaws could permit information disclosure or denial-of-service; successful exploitation could allow attackers to install programs, access or modify data, or create privileged accounts. The report is an advisory-style listing of CVEs and does not include evidence of active exploitation.