VYPR

android-x86

by Android X86

CVEs (1,312)

  • CVE-2018-9542HigNov 14, 2018
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In avrc_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android.…

  • CVE-2018-9540HigNov 14, 2018
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.…

  • CVE-2018-9526HigNov 14, 2018
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In device configuration data, there is an improperly configured setting. This could lead to remote disclosure of device location. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112159033

  • CVE-2018-9489HigNov 6, 2018
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    When wifi is switched, function sendNetworkStateChangeBroadcast of WifiStateMachine.java broadcasts an intent including detailed wifi network information. This could lead to information disclosure with no execution privileges needed. User interaction is not needed for…

  • CVE-2018-9455HigNov 6, 2018
    Google
    Android
    risk 0.49cvss 7.5epss 0.02

    In sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android…

  • CVE-2018-9448HigNov 6, 2018
    Google
    Android
    risk 0.49cvss 7.5epss 0.02

    In avct_bcb_msg_ind of avct_bcb_act.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android…

  • CVE-2018-9436HigNov 6, 2018
    Google
    Android
    risk 0.49cvss 7.5epss 0.02

    In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions:…

  • CVE-2018-9361HigNov 6, 2018
    Google
    Android
    risk 0.49cvss 7.5epss 0.02

    In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions:…

  • CVE-2018-9359HigNov 6, 2018
    Google
    Android
    risk 0.49cvss 7.5epss 0.02

    In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions:…

  • CVE-2018-9358HigNov 6, 2018
    Google
    Android
    risk 0.49cvss 7.5epss 0.02

    In gatts_process_attribute_req of gatt_sc.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth process with no additional execution privileges needed. User interaction is not needed…

  • CVE-2014-10062HigApr 18, 2018
    Qualcomm
    Snapdragon Mobile
    risk 0.49cvss 7.5epss 0.01

    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD…

  • CVE-2014-10058HigApr 18, 2018
    Qualcomm
    Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 800, SD 845, and Snapdragon_High_Med_2016
    risk 0.49cvss 7.5epss 0.01

    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 800, SD 845, and Snapdragon_High_Med_2016, unauthorized users can potentially modify…

  • CVE-2014-10055HigApr 18, 2018
    Qualcomm
    Snapdragon Mobile SD 400 and SD 800
    risk 0.49cvss 7.5epss 0.01

    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400 and SD 800, there could be leakage of protected contents if HLOS doesn't request for security restoration for OCMEM xPU's.

  • CVE-2014-10047HigApr 18, 2018
    Qualcomm
    Snapdragon Mobile SD 400 and SD 800
    risk 0.49cvss 7.5epss 0.01

    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400 and SD 800, when writing the Full Disk Encryption key to crypto engine, information leak could occur.

  • CVE-2014-3164HigOct 18, 2017
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    cmds/servicemanager/service_manager.c in Android before commit 7d42a3c31ba78a418f9bdde0e0ab951469f321b5 allows attackers to cause a denial of service (NULL pointer dereference, or out-of-bounds write) via vectors related to binder passed lengths.

  • CVE-2014-7919HigJun 8, 2017
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    b/libs/gui/ISurfaceComposer.cpp in Android allows attackers to trigger a denial of service (null pointer dereference and process crash).

  • CVE-2026-0112HigMar 10, 2026
    Google
    Android
    risk 0.48cvss 7.4epss 0.00

    In vpu_open_inst of vpu_ioctl.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

  • CVE-2026-0013HigMar 2, 2026
    Google
    Android
    risk 0.48cvss 8.4epss 0.00

    In setupLayout of PickActivity.java, there is a possible way to start any activity as a DocumentsUI app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

  • CVE-2026-0011HigMar 2, 2026
    Google
    Android
    risk 0.48cvss 8.4epss 0.00

    In enableSystemPackageLPw of Settings.java, there is a possible way to prevent location access from working due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…

  • CVE-2025-48633MedKEVDec 8, 2025
    Google
    DevicePolicyManagerService
    risk 0.48cvss 5.5epss 0.00

    In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisioning due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not…

Page 35 of 66