PatchTheCVEandroid sdk vulnerabilities and fixes
Recent CVEs affecting android sdk, with upgrade or downgrade steps. 4 tracked.
Also searched as: androidsdk.
android sdk has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2011-07-08. Highest priority: CVE-2009-0608 (score 33/100).
- CVE-2011-1001 MEDIUM 4.3 UPGRADE dexdump in Android SDK before 2.3 does not properly perform structural verification, which allows user-assiste
- CVE-2009-0608 HIGH 7.2 DOWNGRADE Integer overflow in the showLog function in fake_log_device.c in liblog in Open Handset Alliance Android 1.0 a
- CVE-2009-0607 HIGH 7.2 DOWNGRADE Multiple integer overflows in malloc_leak.c in Bionic in Open Handset Alliance Android 1.0 have unknown impact
- CVE-2009-0606 HIGH 7.2 DOWNGRADE The link_image function in linker/linker.c in the dynamic linker in Bionic in Open Handset Alliance Android 1.
FAQ
How do I fix android sdk vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is android sdk being exploited right now?
None of the tracked android sdk CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which android sdk CVE should I patch first?
CVE-2009-0608 currently ranks highest (33/100): Integer overflow in the showLog function in fake_log_device.c in liblog in Open Handset Alliance Android 1.0 a.