Browse CVEs

HIGH 7.5 CVE-2018-9489 When wifi is switched, function sendNetworkStateChangeBroadcast of WifiStateMachine.java broadcasts an intent including detailed wifi network informa… Android Mitigation only Fix from $1,9502018-11-06 MEDIUM 6.5 CVE-2018-6045 Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user local file dat… Chrome 64.0.3282.119+ Fix from $1,6002018-09-25 MEDIUM 6.5 CVE-2018-6037 Inappropriate implementation in autofill in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to obtain autofill data with insufficient … Chrome 64.0.3282.119+ Fix from $1,6002018-09-25 HIGH 8.8 CVE-2018-6035 Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user local file dat… Chrome 64.0.3282.119+ Fix from $1,9502018-09-25 MEDIUM 5.5 CVE-2018-11275 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, when flashing image using FastbootLib if … Android Patch available Fix from $1,6002018-09-18 HIGH 7.8 CVE-2017-15851 Lack of copy_from_user and information leak in function "msm_ois_subdev_do_ioctl, file msm_ois.c can lead to a camera crash in all Android releases(A… Android Mitigation only Fix from $1,9502018-07-06 MEDIUM 5.3 CVE-2018-6246 In Android before the 2018-05-05 security patch level, NVIDIA Widevine Trustlet contains a vulnerability in Widevine TA where the software reads data… Android after 8.1 Fix from $1,6002018-05-10 MEDIUM 5.3 CVE-2017-0748 An information disclosure vulnerability in the Qualcomm audio driver. Product: Android. Versions: Android Kernel. Android ID: A-35764875. References:… Android Patch available Fix from $1,6002018-04-05 HIGH 7.5 CVE-2016-8485 An information disclosure vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823681. Android No fix yet Fix from $1,9502018-04-04 HIGH 7.5 CVE-2016-8486 An information disclosure vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823691. Android No fix yet Fix from $1,9502018-04-04 MEDIUM 5.5 CVE-2016-10234 An information disclosure vulnerability in the Qualcomm IPA driver. Product: Android. Versions: Android kernel. Android ID: A-34390017. References: Q… Android Mitigation only Fix from $1,6002018-04-04 MEDIUM 5.3 CVE-2017-13294 A information disclosure vulnerability in the Android framework (aosp email application). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, … Android No fix yet Fix from $1,6002018-04-04 MEDIUM 5.3 CVE-2017-13296 A information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. … Android No fix yet Fix from $1,6002018-04-04 MEDIUM 5.3 CVE-2017-13297 A information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1.… Android No fix yet Fix from $1,6002018-04-04 MEDIUM 5.3 CVE-2017-13298 A information disclosure vulnerability in the Android media framework (libhavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1.… Android Mitigation only Fix from $1,6002018-04-04 MEDIUM 5.3 CVE-2017-13303 A information disclosure vulnerability in the Broadcom bcmdhd driver. Product: Android. Versions: Android kernel. Android ID: A-71359108. References:… Android No fix yet Fix from $1,6002018-04-04 MEDIUM 5.3 CVE-2017-13304 A information disclosure vulnerability in the Upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-70576999. Android No fix yet Fix from $1,6002018-04-04 HIGH 7.5 CVE-2018-3598 In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch leve… Android Mitigation only Fix from $1,9502018-04-03 MEDIUM 5.5 CVE-2017-17769 Information leakage in Android for MSM, Firefox OS for MSM, and QRD Android can occur in the audio driver. Android No fix yet Fix from $1,6002018-03-30 HIGH 7.8 CVE-2017-15852 Information leak of the ISPIF base address in Android for MSM, Firefox OS for MSM, and QRD Android can occur in the camera driver. Android Mitigation only Fix from $1,9502018-03-30 HIGH 7.5 CVE-2017-11087 libOmxVenc in Android for MSM, Firefox OS for MSM, and QRD Android copies the output buffer to an application with the "filled length", which is larg… Android Mitigation only Fix from $1,9502018-03-30 HIGH 7.5 CVE-2017-14875 In the handler for the ioctl command VIDIOC_MSM_ISP_DUAL_HW_LPM_MODE in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-05-23, a hea… Android Patch available Fix from $1,9502018-03-30 MEDIUM 5.3 CVE-2017-14891 In the KGSL driver function _gpuobj_map_useraddr() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-12, the contents of the sta… Android Patch available Fix from $1,6002018-03-30 MEDIUM 6.5 CVE-2017-9681 In Android before 2017-08-05 on Qualcomm MSM, Firefox OS for MSM, QRD Android, and all Android releases from CAF using the Linux kernel, if kernel me… Android Mitigation only Fix from $1,6002018-03-30 HIGH 7.8 CVE-2017-15833 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, untrusted pointer dereference in upda… Android Patch available Fix from $1,9502018-03-16 HIGH 7.5 CVE-2017-14882 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing VENDOR specific acti… Android Patch available Fix from $1,9502018-03-15 HIGH 7.5 CVE-2017-6280 NVIDIA driver contains a possible out-of-bounds read vulnerability due to a leak which may lead to information disclosure. This issue is rated as mod… Android Mitigation only Fix from $1,9502018-03-06 HIGH 7.5 CVE-2017-13246 A information disclosure vulnerability in the Upstream kernel network driver. Product: Android. Versions: Android kernel. ID: A-36279469. Android No fix yet Fix from $1,9502018-02-12 HIGH 7.5 CVE-2017-13232 In audioserver, there is an out-of-bounds write due to a log statement using %s with an array that may not be NULL terminated. This could lead to loc… Android Mitigation only Fix from $1,9502018-02-12 HIGH 7.5 CVE-2017-13239 A information disclosure vulnerability in the Android framework (ui framework). Product: Android. Versions: 8.0. ID: A-66244132. Android Mitigation only Fix from $1,9502018-02-12