Browse CVEs

HIGH 7.8 CVE-2018-3570 In the cpuidle driver in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, the list_for_each ma… Android Patch available Fix from $1,9502018-07-06 HIGH 7.5 CVE-2017-13291 In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible NULL pointer dereference due to missing bounds checks. This could lead to remote… Android Mitigation only Fix from $1,9502018-04-04 HIGH 7.8 CVE-2017-17770 In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch leve… Android Mitigation only Fix from $1,9502018-04-03 HIGH 7.8 CVE-2018-3563 In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch leve… Android Mitigation only Fix from $1,9502018-04-03 HIGH 7.8 CVE-2017-9692 When an atomic commit is issued on a writeback panel with a NULL output_layer parameter in Android for MSM, Firefox OS for MSM, and QRD Android befor… Android Patch available Fix from $1,9502018-03-30 HIGH 7.8 CVE-2017-15846 In the video_ioctl2() function in the camera driver in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-09-16, an untrusted pointer d… Android Patch available Fix from $1,9502018-03-30 HIGH 7.8 CVE-2017-15833 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, untrusted pointer dereference in upda… Android Patch available Fix from $1,9502018-03-16 MEDIUM 6.5 CVE-2017-13235 A other vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID: A-68342866. Android No fix yet Fix from $1,6002018-02-12 MEDIUM 6.5 CVE-2017-1000460 In line libavcodec/h264dec.c:500 in libav(v13_dev0), ffmpeg(n3.4), chromium(56 prior Feb 13, 2017), the return value of init_get_bits is ignored and … Chrome after 56.0.2924 Fix from $1,6002018-01-03 HIGH 7.5 CVE-2014-3164 cmds/servicemanager/service_manager.c in Android before commit 7d42a3c31ba78a418f9bdde0e0ab951469f321b5 allows attackers to cause a denial of service… Android after 4.4.4 Fix from $1,9502017-10-18 MEDIUM 5.9 CVE-2017-11063 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, as a result of a race condition betwe… Android Mitigation only Fix from $1,6002017-10-10 CRITICAL 9.8 CVE-2015-9072 In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occur in a TrustZone syscall. Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-9073 In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occur in a TrustZone syscall. Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2016-10344 In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially possible in … Android No fix yet Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-8592 In all Qualcomm products with Android releases from CAF using the Linux kernel, a pointer is not validated prior to being dereferenced potentially re… Android No fix yet Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-9038 In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer may be dereferenced in the front end. Android No fix yet Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-9043 In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced upon the expiry of a timer. Android No fix yet Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-9054 In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced during GAL decoding. Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2014-9972 In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts can potentially cause a NULL pointer dereference du… Android Mitigation only Fix from $2,3002017-08-18 MEDIUM 5.5 CVE-2015-3839 The updateMessageStatus function in Android 5.1.1 and earlier allows local users to cause a denial of service (NULL pointer exception and process cra… Android after 5.1.1 Fix from $1,6002017-08-07 MEDIUM 5.5 CVE-2017-0686 A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34231231. Android Mitigation only Fix from $1,6002017-07-06 HIGH 7.8 CVE-2014-9967 In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM. Android No fix yet Fix from $1,9502017-06-13 HIGH 7.8 CVE-2015-9020 In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in the unlocking of memory. Android Mitigation only Fix from $1,9502017-06-13 HIGH 7.8 CVE-2015-9026 In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM. Android Mitigation only Fix from $1,9502017-06-13 HIGH 7.8 CVE-2015-9027 In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM. Android Mitigation only Fix from $1,9502017-06-13 HIGH 7.5 CVE-2014-7919 b/libs/gui/ISurfaceComposer.cpp in Android allows attackers to trigger a denial of service (null pointer dereference and process crash). Android Mitigation only Fix from $1,9502017-06-08 HIGH 7.8 CVE-2014-9943 In Core Kernel in all Android releases from CAF using the Linux kernel, a Null Pointer Dereference vulnerability could potentially exist. Android Patch available Fix from $1,9502017-06-06 HIGH 7.8 CVE-2014-9949 In TrustZone in all Android releases from CAF using the Linux kernel, an Untrusted Pointer Dereference vulnerability could potentially exist. Android Patch available Fix from $1,9502017-06-06 HIGH 7.8 CVE-2015-9000 In TrustZone an untrusted pointer dereference vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux k… Android Patch available Fix from $1,9502017-05-16 MEDIUM 5.5 CVE-2017-0635 A remote denial of service vulnerability in HevcUtils.cpp in libstagefright in Mediaserver could enable an attacker to use a specially crafted file t… Android Patch available Fix from $1,6002017-05-12