Browse CVEs

CRITICAL 9.8 CVE-2015-9051 In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reached due t… Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-9052 In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reached while… Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-9053 In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the processing of certain r… Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-9054 In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced during GAL decoding. Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2014-9411 In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially possible in … Android No fix yet Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2014-9968 In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the UIMDIAG interface. Android No fix yet Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2014-9969 In all Qualcomm products with Android releases from CAF using the Linux kernel, the GPS client may use an insecure cryptographic algorithm. Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2014-9971 In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts causes an instruction inside of an assert to not be… Android No fix yet Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2014-9972 In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts can potentially cause a NULL pointer dereference du… Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2014-9973 In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of a buffer length was missing in a PlayReady DRM routine. Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2014-9974 In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of buffer lengths was missing in Keymaster. Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2014-9975 In all Qualcomm products with Android releases from CAF using the Linux kernel, a rollback vulnerability potentially exists in Full Disk Encryption. Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2014-9976 In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in 1x call processing. Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2014-9977 In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in PlayReady DRM. Android No fix yet Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2014-9978 In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE service. Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2014-9979 In all Qualcomm products with Android releases from CAF using the Linux kernel, a variable is uninitialized in a TrustZone system call potentially le… Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2014-9980 In all Qualcomm products with Android releases from CAF using the Linux kernel, a Sample App failed to check a length potentially leading to unauthor… Android No fix yet Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2014-9981 In all Qualcomm products with Android releases from CAF using the Linux kernel, an overflow check in the USB interface was insufficient during boot. Android No fix yet Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-0574 In all Qualcomm products with Android releases from CAF using the Linux kernel, the validation of filesystem access was insufficient. Android No fix yet Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-0575 In all Qualcomm products with Android releases from CAF using the Linux kernel, insecure ciphersuites were included in the default configuration. Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2016-5178 Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers to cause a denial of service or possibly have other… Chrome after 53.0.2785.129 Fix from $2,3002017-05-23 CRITICAL 9.8 CVE-2014-9654 The Regular Expressions package in International Components for Unicode (ICU) for C/C++ before 2014-12-03, as used in Google Chrome before 40.0.2214.… Chrome 55.1+ Fix from $2,3002017-04-24 CRITICAL 9.8 CVE-2016-6726 Unspecified vulnerability in Qualcomm components in Android on Nexus 6 and Android One devices. Android after 7.1.1 Fix from $2,3002017-04-17 CRITICAL 9.8 CVE-2016-6727 The Qualcomm GPS subsystem in Android on Android One devices allows remote attackers to execute arbitrary code. Android after 7.1.1 Fix from $2,3002017-04-17 CRITICAL 9.8 CVE-2016-1155 HTTP header injection vulnerability in the URLConnection class in Android OS 2.2 through 6.0 allows remote attackers to execute arbitrary scripts or … Android Mitigation only Fix from $2,3002017-04-13 CRITICAL 9.8 CVE-2014-7920 mediaserver in Android 2.2 through 5.x before 5.1 allows attackers to gain privileges. NOTE: This is a different vulnerability than CVE-2014-7921. Android Mitigation only Fix from $2,3002017-04-13 CRITICAL 9.8 CVE-2014-7921 mediaserver in Android 4.0.3 through 5.x before 5.1 allows attackers to gain privileges. NOTE: This is a different vulnerability than CVE-2014-7920. Android Mitigation only Fix from $2,3002017-04-13 CRITICAL 9.8 CVE-2013-6647 A use-after-free in AnimationController::endAnimationUpdate in Google Chrome. Chrome Mitigation only Fix from $2,3002017-04-11 CRITICAL 9.8 CVE-2016-8418 A remote code execution vulnerability in the Qualcomm crypto driver could enable a remote attacker to execute arbitrary code within the context of th… Android after 6.0.1 Fix from $2,3002017-02-08 CRITICAL 9.8 CVE-2016-8411 Buffer overflow vulnerability while processing QMI QOS TLVs. Product: Android. Versions: versions that have qmi_qos_srvc.c. Android ID: 31805216. Ref… Android after 7.1.1 Fix from $2,3002017-01-27