Browse CVEs

HIGH 7.8 CVE-2018-3580 Stack-based buffer overflow can occur In the WLAN driver if the pmkid_count value is larger than the PMKIDCache size in all Android releases from CAF… Android Patch available Fix from $1,9502018-06-06 HIGH 7.8 CVE-2017-6293 In Android before the 2018-05-05 security patch level, NVIDIA Tegra X1 TZ contains a vulnerability in Widevine TA where the software writes data past… Android Mitigation only Fix from $1,9502018-05-10 HIGH 8.8 CVE-2017-13255 In process_service_attr_req of sdp_server.c, there is an out of bounds write due to a missing bounds check. This could lead to remote code execution … Android Mitigation only Fix from $1,9502018-04-04 HIGH 8.8 CVE-2017-13256 In process_service_search_attr_req of sdp_server.cc, there is an out of bounds write due to a missing bounds check. This could lead to remote code ex… Android Mitigation only Fix from $1,9502018-04-04 HIGH 7.8 CVE-2017-13248 In impeg2_idct_recon_sse42() of impeg2_idct_recon_sse42_intr.c, there is an out of bound write due to a missing bounds check. This could lead to an r… Android Mitigation only Fix from $1,9502018-04-04 HIGH 7.8 CVE-2017-13249 In impeg2d_api_set_display_frame of impeg2d_api_main.c, there is an out of bound write due to a missing bounds check. This could lead to remote code … Android Mitigation only Fix from $1,9502018-04-04 HIGH 7.8 CVE-2017-13250 In ih264d_fmt_conv_420sp_to_420p of ih264d_utils.c, there is an out of bound write due to a missing out of bounds check because of a multiplication e… Android Mitigation only Fix from $1,9502018-04-04 HIGH 7.8 CVE-2017-13251 In impeg2d_dec_pic_data_thread of impeg2d_dec_hdr.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local … Android Mitigation only Fix from $1,9502018-04-04 HIGH 7.8 CVE-2017-13252 In CryptoHal::decrypt of CryptoHal.cpp, there is an out of bounds write due to improper input validation that results in a read from uninitialized me… Android Mitigation only Fix from $1,9502018-04-04 HIGH 7.8 CVE-2017-13253 In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat… Android No fix yet Fix from $1,9502018-04-04 CRITICAL 9.8 CVE-2017-13292 In wl_get_assoc_ies of wl_cfg80211.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execut… Android Mitigation only Fix from $2,3002018-04-04 HIGH 7.8 CVE-2017-13293 In the nfc_hci_cmd_received() function of core.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local esc… Android Mitigation only Fix from $1,9502018-04-04 CRITICAL 9.8 CVE-2017-13283 In avrc_ctrl_pars_vendor_rsp of bluetooth avrcp_ctrl, there is a possible out of bounds write on the stack due to a missing bounds check. This could … Android Mitigation only Fix from $2,3002018-04-04 CRITICAL 9.8 CVE-2017-13285 In SvoxSsmlParser and startElement of svox_ssml_parser.cpp, there is a possible out of bounds write due to an uninitialized buffer. This could lead t… Android Mitigation only Fix from $2,3002018-04-04 HIGH 7.8 CVE-2017-13277 In ihevcd_fmt_conv of ihevcd_fmt_conv.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execut… Android Mitigation only Fix from $1,9502018-04-04 HIGH 7.5 CVE-2017-15859 While processing the QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_SCALE_DECR_DB vendor command, in which attribute QCA_WLAN_VENDOR_ATTR_TXPOWER_SCALE_DECR_D… Android Patch available Fix from $1,9502018-03-30 CRITICAL 9.8 CVE-2017-14876 In msm_ispif_config_stereo() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-06-21, the parameter params->entries[i].vfe_intf com… Android Patch available Fix from $2,3002018-03-30 HIGH 7.8 CVE-2017-6281 NVIDIA libnvomx contains a possible out of bounds write due to a improper input validation which could lead to local escalation of privilege. This is… Android Mitigation only Fix from $1,9502018-03-12 HIGH 7.8 CVE-2017-6286 NVIDIA libnvomx contains a possible out of bounds write due to a missing bounds check which could lead to local escalation of privilege. This issue i… Android Mitigation only Fix from $1,9502018-03-12 HIGH 8.8 CVE-2017-13228 In function ih264d_ref_idx_reordering of libavc, there is an out-of-bounds write due to modCount being defined as an unsigned character. This could l… Android Mitigation only Fix from $1,9502018-02-12 HIGH 8.8 CVE-2017-13230 In hevc codec, there is an out-of-bounds write due to an incorrect bounds check with the i2_pic_width_in_luma_samples value. This could lead to remot… Android Mitigation only Fix from $1,9502018-02-12 HIGH 7.8 CVE-2017-13231 In libmediadrm, there is an out-of-bounds write due to improper input validation. This could lead to local elevation of privileges with no additional… Android Mitigation only Fix from $1,9502018-02-12 HIGH 7.5 CVE-2017-13232 In audioserver, there is an out-of-bounds write due to a log statement using %s with an array that may not be NULL terminated. This could lead to loc… Android Mitigation only Fix from $1,9502018-02-12 HIGH 8.8 CVE-2017-5130 An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attac… Chrome 2.9.5 / 62.0.3202.62+ Fix from $1,9502018-02-07 HIGH 8.8 CVE-2017-5133 Off-by-one read/write on the heap in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to corrupt memory and possibly leak infor… Chrome 62.0.3202.62+ Fix from $1,9502018-02-07 HIGH 7.8 CVE-2017-6258 NVIDIA libnvmmlite_audio.so contains an elevation of privilege vulnerability when running in media server which may cause an out of bounds write and … Android Patch available Fix from $1,9502018-02-06 HIGH 7.8 CVE-2017-6279 NVIDIA libnvmmlite_audio.so contains an elevation of privilege vulnerability when running in media server which may cause an out of bounds write and … Android Patch available Fix from $1,9502018-02-06 HIGH 7.8 CVE-2017-13210 In CameraDeviceClient::submitRequestList of CameraDeviceClient.cpp, there is an out-of-bounds write if metadataSize is too small. This could lead to … Android Patch available Fix from $1,9502018-01-12 HIGH 7.8 CVE-2017-13216 In ashmem_ioctl of ashmem.c, there is an out-of-bounds write due to insufficient locking when accessing asma. This could lead to a local elevation of… Android No fix yet Fix from $1,9502018-01-12 HIGH 7.8 CVE-2017-13217 In DisplayFtmItem in the bootloader, there is an out-of-bounds write due to reading a string without verifying that it's null-terminated. This could … Android Mitigation only Fix from $1,9502018-01-12