https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2011-1001.htmlhttps://patchthecve.com/cve/CVE-2011-1001.htmlTue, 16 Jun 2026 23:28:31 +0000MEDIUM 4.3: dexdump in Android SDK before 2.3 does not properly perform structural verification, which allows user-assisted remote attackers to cause a denial of service (dexdump crash) and possibly execute arbitrary code via a malformed APK or dex file that calls a method using more arguments than the number ohttps://patchthecve.com/cve/CVE-2009-0608.htmlhttps://patchthecve.com/cve/CVE-2009-0608.htmlTue, 16 Jun 2026 23:05:24 +0000HIGH 7.2: Integer overflow in the showLog function in fake_log_device.c in liblog in Open Handset Alliance Android 1.0 allows attackers to trigger a buffer overflow and possibly have unspecified other impact by sending a large number of input lines.https://patchthecve.com/cve/CVE-2009-0607.htmlhttps://patchthecve.com/cve/CVE-2009-0607.htmlTue, 16 Jun 2026 23:05:24 +0000HIGH 7.2: Multiple integer overflows in malloc_leak.c in Bionic in Open Handset Alliance Android 1.0 have unknown impact and attack vectors, related to the (1) chk_calloc and (2) leak_calloc functions.https://patchthecve.com/cve/CVE-2009-0606.htmlhttps://patchthecve.com/cve/CVE-2009-0606.htmlTue, 16 Jun 2026 23:05:24 +0000HIGH 7.2: The link_image function in linker/linker.c in the dynamic linker in Bionic in Open Handset Alliance Android 1.0 on the T-Mobile G1 phone does not properly handle file descriptors 0, 1, and 2 for a setgid program, which allows local users to create arbitrary files owned by certain groups, possibly a