Android

CVEs (8,504)

• CVE-2017-0869HigJan 12, 2018
  Google

  Android
  risk 0.51cvss 7.8epss 0.00

  NVIDIA driver contains an integer overflow vulnerability which could cause a use after free and possibly lead to an elevation of privilege enabling code execution as a privileged process. This issue is rated as high. Version: N/A. Android ID: A-37776156. References:…

• CVE-2017-9705HigJan 10, 2018
  Google

  Android
  risk 0.51cvss 7.8epss 0.00

  In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, concurrent rx notifications and read() operations in the G-Link PKT driver can result in a double free condition due to missing locking resulting in list_del() and…

• CVE-2017-9689HigJan 10, 2018
  Google

  Android
  risk 0.51cvss 7.8epss 0.00

  In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a specially-crafted HDMI CEC message can be used to cause stack memory corruption.

• CVE-2017-15848HigJan 10, 2018
  Google

  Android
  risk 0.51cvss 7.8epss 0.00

  In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the fastrpc kernel driver, a buffer overflow vulnerability from userspace may potentially exist.

• CVE-2017-15845HigJan 10, 2018
  Google

  Android
  risk 0.51cvss 7.8epss 0.00

  In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an invalid input of firmware size (negative value) from user space can potentially lead to the memory leak or buffer overflow during the WLAN cal data store operation.

• CVE-2017-14873HigJan 10, 2018
  Google

  Android
  risk 0.51cvss 7.8epss 0.00

  In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the pp_pgc_get_config() graphics driver function, a kernel memory overwrite can potentially occur.

• CVE-2017-11081HigJan 10, 2018
  Google

  Android
  risk 0.51cvss 7.8epss 0.00

  In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is a potential buffer overflow vulnerability in hdd_parse_setrmcenable_command and hdd_parse_setrmcactionperiod_command APIs as buffers defined in this API can…

• CVE-2017-11080HigJan 10, 2018
  Google

  Android
  risk 0.51cvss 7.8epss 0.00

  In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing a user supplied sparse image, a buffer overflow vulnerability could occur if the sparse header block size is equal to 4294967296.

• CVE-2017-11003HigJan 10, 2018
  Google

  Android
  risk 0.51cvss 7.8epss 0.00

  In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while updating a firmware image, data is read from flash into RAM without checking that the data fits into allotted RAM size.

• CVE-2017-15849HigJan 10, 2018
  Linux

  Kernel
  risk 0.51cvss 7.8epss 0.01

  In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a LayerStack can be destroyed in between Validate and Commit by the application resulting in a Use After Free condition.

• CVE-2017-11069HigJan 10, 2018
  Google

  Android
  risk 0.51cvss 7.8epss 0.01

  In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, manipulation of SafeSwitch Image data can result in Heap overflow.

• CVE-2017-6276HigDec 6, 2017
  Nvidia

  mediaserver
  risk 0.51cvss 7.8epss 0.00

  NVIDIA mediaserver contains a vulnerability where it is possible a use after free malfunction can occur due to an incorrect bounds check which could enable unauthorized code execution and possibly lead to elevation of privileges. This issue is rated as high. Product: Android.…

• CVE-2017-6263HigDec 6, 2017
  Google

  Android
  risk 0.51cvss 7.8epss 0.00

  NVIDIA driver contains a vulnerability where it is possible a use after free malfunction can occur due to improper usage of the list_for_each kernel macro which could enable unauthorized code execution and possibly lead to elevation of privileges. This issue is rated as high.…

• CVE-2017-13174HigDec 6, 2017
  Google

  Android
  risk 0.51cvss 7.8epss 0.00

  An elevation of privilege vulnerability in the kernel edl. Product: Android. Versions: Android kernel. Android ID A-63100473.

• CVE-2017-13173HigDec 6, 2017
  Mediatek

  system server
  risk 0.51cvss 7.8epss 0.00

  An elevation of privilege vulnerability in the MediaTek system server. Product: Android. Versions: Android kernel. Android ID A-28067350. References: M-ALPS02672361.

• CVE-2017-13172HigDec 6, 2017
  Mediatek

  bluetooth driver
  risk 0.51cvss 7.8epss 0.00

  An elevation of privilege vulnerability in the MediaTek bluetooth driver. Product: Android. Versions: Android kernel. Android ID A-36493287. References: M-ALPS03495791.

• CVE-2017-13171HigDec 6, 2017
  Mediatek

  performance service
  risk 0.51cvss 7.8epss 0.00

  An elevation of privilege vulnerability in the MediaTek performance service. Product: Android. Versions: Android kernel. Android ID A-64316572. References: M-ALPS03479086.

• CVE-2017-13170HigDec 6, 2017
  Google

  Android
  risk 0.51cvss 7.8epss 0.00

  An elevation of privilege vulnerability in the MediaTek display driver. Product: Android. Versions: Android kernel. Android ID A-36102397. References: M-ALPS03359280.

• CVE-2017-13168HigDec 6, 2017
  Google

  Android
  risk 0.51cvss 7.8epss 0.00

  An elevation of privilege vulnerability in the kernel scsi driver. Product: Android. Versions: Android kernel. Android ID A-65023233.

• CVE-2017-13167HigDec 6, 2017
  Google

  Android
  risk 0.51cvss 7.8epss 0.00

  An elevation of privilege vulnerability in the kernel sound timer. Product: Android. Versions: Android kernel. Android ID A-37240993.