Browse CVEs

MEDIUM 5.5 CVE-2018-9554 In dumpExtractors of IMediaExtractor.cp, there is a possible disclosure of recently accessed media files due to a permissions bypass. This could lead… Android Mitigation only Fix from $1,6002018-12-06 CRITICAL 9.8 CVE-2018-9580 A Elevation of privilege vulnerability in the HTC bootloader. Product: Android. Versions: Android kernel. Android ID: A-76222002. Android No fix yet Fix from $2,3002018-11-14 HIGH 8.8 CVE-2018-9528 In ixheaacd_over_lap_add1_armv8 of ixheaacd_overlap_add1.s there is a possible out of bounds write due to a missing bounds check. This could lead to … Android Mitigation only Fix from $1,9502018-11-14 HIGH 8.8 CVE-2018-9529 In ixheaacd_individual_ch_stream of ixheaacd_channel.c there is a possible out of bounds write due to a missing bounds check. This could lead to remo… Android Mitigation only Fix from $1,9502018-11-14 HIGH 8.8 CVE-2018-9530 In ixheaacd_tns_ar_filter_dec of ixheaacd_aac_tns.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote … Android Mitigation only Fix from $1,9502018-11-14 HIGH 8.8 CVE-2018-9532 In ixheaacd_extract_frame_info_ld of ixheaacd_env_extr.c there is a possible out of bounds write due to a missing bounds check. This could lead to re… Android Mitigation only Fix from $1,9502018-11-14 HIGH 8.8 CVE-2018-9533 In ixheaacd_dec_data_init of ixheaacd_create.c there is a possible out of write read due to a missing bounds check. This could lead to remote code ex… Android Mitigation only Fix from $1,9502018-11-14 HIGH 8.8 CVE-2018-9534 In ixheaacd_mps_getstridemap of ixheaacd_mps_parse.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote… Android Mitigation only Fix from $1,9502018-11-14 HIGH 8.8 CVE-2018-9535 In ixheaacd_reset_acelp_data_fix of ixheaacd_lpc.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote c… Android Mitigation only Fix from $1,9502018-11-14 HIGH 7.8 CVE-2018-9531 In AudioSpecificConfig_Parse of tpdec_asc.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code … Android Mitigation only Fix from $1,9502018-11-14 HIGH 7.8 CVE-2018-9536 In numerous functions of libFDK, there are possible out of bounds writes due to incorrect bounds checks. This could lead to remote code execution wit… Android Mitigation only Fix from $1,9502018-11-14 MEDIUM 5.3 CVE-2018-19111 The Google Cardboard application 1.8 for Android and 1.2 for iOS sends potentially private cleartext information to the Unity 3D Stats web site, as d… Cardboard Mitigation only Fix from $1,6002018-11-08 HIGH 8.8 CVE-2018-9459 In Attachment of Attachment.java and getFilePath of EmlAttachmentProvider.java, there is a possible Elevation of Privilege due to a path traversal er… Android Mitigation only Fix from $1,9502018-11-06 HIGH 7.8 CVE-2018-9458 In computeFocusedWindow of RootWindowContainer.java, and related functions, there is possible interception of keypresses due to focus being on the wr… Android Mitigation only Fix from $1,9502018-11-06 HIGH 7.5 CVE-2018-9489 When wifi is switched, function sendNetworkStateChangeBroadcast of WifiStateMachine.java broadcasts an intent including detailed wifi network informa… Android Mitigation only Fix from $1,9502018-11-06 MEDIUM 5.5 CVE-2018-9454 In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosu… Android Mitigation only Fix from $1,6002018-11-06 CRITICAL 9.8 CVE-2018-9355 In bta_dm_sdp_result of bta_dm_act.cc, there is a possible out of bounds stack write due to a missing bounds check. This could lead to remote code ex… Android Mitigation only Fix from $2,3002018-11-06 MEDIUM 5.5 CVE-2018-9444 In ih264d_video_decode of ih264d_api.c there is a possible resource exhaustion due to an infinite loop. This could lead to remote temporary device de… Android Mitigation only Fix from $1,6002018-11-06 HIGH 7.8 CVE-2018-9514 In sdcardfs_open of file.c, there is a possible Use After Free due to an unusual root cause. This could lead to local escalation of privilege with no… Android Mitigation only Fix from $1,9502018-10-02 HIGH 7.8 CVE-2018-9515 In sdcardfs_create and sdcardfs_mkdir of inode.c, there is a possible memory corruption due to improper locking. This could lead to local escalation … Android No fix yet Fix from $1,9502018-10-02 HIGH 7.8 CVE-2018-9513 In copy_process of fork.c, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additio… Android Mitigation only Fix from $1,9502018-10-02 CRITICAL 9.8 CVE-2018-14981 Certain LG devices based on Android 6.0 through 8.1 have incorrect access control for SystemUI application intents. The LG ID is LVE-SMP-180005. Android Mitigation only Fix from $2,3002018-08-17 CRITICAL 9.8 CVE-2018-14982 Certain LG devices based on Android 6.0 through 8.1 have incorrect access control in the GNSS application. The LG ID is LVE-SMP-180004. Android Mitigation only Fix from $2,3002018-08-17 CRITICAL 9.8 CVE-2018-15482 Certain LG devices based on Android 6.0 through 8.1 have incorrect access control for MLT application intents. The LG ID is LVE-SMP-180006. Android Mitigation only Fix from $2,3002018-08-17 CRITICAL 9.8 CVE-2018-14066 The content://wappush content provider in com.android.provider.telephony, as found in some custom ROMs for Android phones, allows SQL injection. One … Android No fix yet Fix from $2,3002018-07-15 CRITICAL 9.8 CVE-2018-3586 An integer overflow to buffer overflow vulnerability exists in the ADSPRPC heap manager in all Android releases(Android for MSM, Firefox OS for MSM, … Android Mitigation only Fix from $2,3002018-07-06 HIGH 7.8 CVE-2017-15851 Lack of copy_from_user and information leak in function "msm_ois_subdev_do_ioctl, file msm_ois.c can lead to a camera crash in all Android releases(A… Android Mitigation only Fix from $1,9502018-07-06 HIGH 7.8 CVE-2018-5858 In the audio debugfs in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch… Android Mitigation only Fix from $1,9502018-07-06 HIGH 7.0 CVE-2018-5853 A race condition exists in a driver in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before… Android Mitigation only Fix from $1,9502018-07-06 HIGH 7.8 CVE-2018-5898 Integer overflow can occur in msm_pcm_adsp_stream_cmd_put() function if the user supplied data "param_length" goes beyond certain limit in Android re… Android Mitigation only Fix from $1,9502018-07-06