Browse CVEs

HIGH 7.8 CVE-2017-11059 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, setting the HMAC key by different thr… Android Mitigation only Fix from $1,9502017-10-10 HIGH 7.8 CVE-2017-11067 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the Athdiag procfs entry does not hav… Android Mitigation only Fix from $1,9502017-10-10 MEDIUM 5.5 CVE-2015-1206 Heap-based buffer overflow in Google Chrome before M40 allows remote attackers to cause a denial of service (unpaged memory write and process crash) … Chrome after 41.0.2251.0 Fix from $1,6002017-10-06 HIGH 7.8 CVE-2017-0809 A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7… Android Patch available Fix from $1,9502017-10-04 HIGH 7.8 CVE-2017-0810 A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Andr… Android Patch available Fix from $1,9502017-10-04 HIGH 7.8 CVE-2017-10997 In all Qualcomm products with Android releases from CAF using the Linux kernel, using a debugfs node, a write to a PCIe register can cause corruption… Android after 8.0 Fix from $1,9502017-09-21 HIGH 7.8 CVE-2017-10998 In all Qualcomm products with Android releases from CAF using the Linux kernel, in audio_aio_ion_lookup_vaddr, the buffer length, which is user input… Android after 8.0 Fix from $1,9502017-09-21 HIGH 7.8 CVE-2017-10999 In all Qualcomm products with Android releases from CAF using the Linux kernel, concurrent calls into ioctl RMNET_IOCTL_ADD_MUX_CHANNEL in ipa wan dr… Android after 8.0 Fix from $1,9502017-09-21 HIGH 7.8 CVE-2017-11000 In all Qualcomm products with Android releases from CAF using the Linux kernel, in an ISP Camera kernel driver function, an incorrect bounds check ma… Android after 8.0 Fix from $1,9502017-09-21 HIGH 7.8 CVE-2017-9677 In all Qualcomm products with Android releases from CAF using the Linux kernel, in function msm_compr_ioctl_shared, variable "ddp->params_length" cou… Android after 8.0 Fix from $1,9502017-09-21 HIGH 7.0 CVE-2017-8280 In all Qualcomm products with Android releases from CAF using the Linux kernel, during the wlan calibration data store and retrieve operation, there … Android after 8.0 Fix from $1,9502017-09-21 HIGH 8.8 CVE-2017-0781EPSS 23% A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1… Android Patch available Fix from $1,9502017-09-14 HIGH 7.8 CVE-2017-0757 A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID:… Android Patch available Fix from $1,9502017-09-08 HIGH 7.8 CVE-2017-0758 A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1… Android Patch available Fix from $1,9502017-09-08 HIGH 7.8 CVE-2017-0761 A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Androi… Android Patch available Fix from $1,9502017-09-08 HIGH 7.8 CVE-2017-9678 In all Qualcomm products with Android releases from CAF using the Linux kernel, in a video driver, memory corruption can potentially occur due to lac… Android Patch available Fix from $1,9502017-08-18 CRITICAL 9.8 CVE-2016-10392 In all Qualcomm products with Android releases from CAF using the Linux kernel, a driver can potentially leak kernel memory. Android No fix yet Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2016-5871 In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow vulnerability exists when load… Android Mitigation only Fix from $2,3002017-08-18 HIGH 7.8 CVE-2016-10389 In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size check for the images being flashed onto the NAND mem… Android Patch available Fix from $1,9502017-08-18 CRITICAL 9.8 CVE-2015-9062 In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow vulnerability exists when load… Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-9063 In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a procedure involving a rem… Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-9066 In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in an Inter-RAT procedure. Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-9070 In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone syscall. Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-9071 In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone syscall. Android No fix yet Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2016-10343 In all Qualcomm products with Android releases from CAF using the Linux kernel, sSL handshake failure with ClientHello rejection results in memory le… Android No fix yet Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-8593 In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in 1x call processing. Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-8594 In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in RFA-1x. Android No fix yet Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-8595 In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in digital television/digital… Android No fix yet Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-8596 In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of buffer lengths is missing in malware protection. Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-9034 In all Qualcomm products with Android releases from CAF using the Linux kernel, a string can fail to be null-terminated in SIP leading to a buffer ov… Android Mitigation only Fix from $2,3002017-08-18