Browse CVEs

HIGH 7.3 CVE-2017-13306 A elevation of privilege vulnerability in the Upstream kernel mnh driver. Product: Android. Versions: Android kernel. Android ID: A-70295063. Android Mitigation only Fix from $1,9502018-04-04 HIGH 7.3 CVE-2017-13307 A elevation of privilege vulnerability in the Upstream kernel pci sysfs. Product: Android. Versions: Android kernel. Android ID: A-69128924. Android No fix yet Fix from $1,9502018-04-04 CRITICAL 9.8 CVE-2017-13292 In wl_get_assoc_ies of wl_cfg80211.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execut… Android Mitigation only Fix from $2,3002018-04-04 HIGH 7.8 CVE-2017-13287 In createFromParcel of VerifyCredentialResponse.java, there is a possible invalid parcel read due to improper input validation. This could lead to lo… Android Mitigation only Fix from $1,9502018-04-04 HIGH 7.8 CVE-2017-13288 In writeToParcel and readFromParcel of PeriodicAdvertisingReport.java, there is a permission bypass due to a 64/32bit int mismatch. This could lead t… Android Mitigation only Fix from $1,9502018-04-04 HIGH 7.8 CVE-2017-13289 In writeToParcel and createFromParcel of RttManager.java, there is a permission bypass due to a write size mismatch. This could lead to a local escal… Android Mitigation only Fix from $1,9502018-04-04 HIGH 7.8 CVE-2017-13293 In the nfc_hci_cmd_received() function of core.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local esc… Android Mitigation only Fix from $1,9502018-04-04 HIGH 7.5 CVE-2017-13291 In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible NULL pointer dereference due to missing bounds checks. This could lead to remote… Android Mitigation only Fix from $1,9502018-04-04 HIGH 7.5 CVE-2017-13299 A other vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-708… Android Mitigation only Fix from $1,9502018-04-04 HIGH 7.5 CVE-2017-13300 A denial of service vulnerability in the Android media framework (libhevc). Product: Android. Versions: 6.0, 6.0.1. Android ID: A-71567394. Android Mitigation only Fix from $1,9502018-04-04 HIGH 7.5 CVE-2017-13301 A denial of service vulnerability in the Android system (system ui). Product: Android. Versions: 8.0. Android ID: A-66498711. Android No fix yet Fix from $1,9502018-04-04 HIGH 7.5 CVE-2017-13302 A denial of service vulnerability in the Android system (system ui). Product: Android. Versions: 8.0. Android ID: A-69969749. Android Mitigation only Fix from $1,9502018-04-04 MEDIUM 6.2 CVE-2017-13290 In sdp_server_handle_client_req of sdp_server.cc, there is an out of bounds read due to a missing bounds check. This could lead to local information … Android Mitigation only Fix from $1,6002018-04-04 MEDIUM 5.3 CVE-2017-13294 A information disclosure vulnerability in the Android framework (aosp email application). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, … Android No fix yet Fix from $1,6002018-04-04 MEDIUM 5.3 CVE-2017-13295 A denial of service vulnerability in the Android framework (package installer). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. … Android Mitigation only Fix from $1,6002018-04-04 MEDIUM 5.3 CVE-2017-13296 A information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. … Android No fix yet Fix from $1,6002018-04-04 MEDIUM 5.3 CVE-2017-13297 A information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1.… Android No fix yet Fix from $1,6002018-04-04 MEDIUM 5.3 CVE-2017-13298 A information disclosure vulnerability in the Android media framework (libhavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1.… Android Mitigation only Fix from $1,6002018-04-04 MEDIUM 5.3 CVE-2017-13303 A information disclosure vulnerability in the Broadcom bcmdhd driver. Product: Android. Versions: Android kernel. Android ID: A-71359108. References:… Android No fix yet Fix from $1,6002018-04-04 MEDIUM 5.3 CVE-2017-13304 A information disclosure vulnerability in the Upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-70576999. Android No fix yet Fix from $1,6002018-04-04 CRITICAL 9.8 CVE-2017-13267 In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible stack corruption due to a missing bounds check. This could lead to remote escalation … Android Mitigation only Fix from $2,3002018-04-04 CRITICAL 9.8 CVE-2017-13274 In the getHost() function of UriTest.java, there is the possibility of incorrect web origin determination. This could lead to incorrect security deci… Android Mitigation only Fix from $2,3002018-04-04 CRITICAL 9.8 CVE-2017-13281 In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible stack buffer overflow due to an incorrect bounds check. This could lead to remote c… Android Mitigation only Fix from $2,3002018-04-04 CRITICAL 9.8 CVE-2017-13282 In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible stack buffer overflow due to a missing bounds check. This could lead to remote c… Android Mitigation only Fix from $2,3002018-04-04 CRITICAL 9.8 CVE-2017-13283 In avrc_ctrl_pars_vendor_rsp of bluetooth avrcp_ctrl, there is a possible out of bounds write on the stack due to a missing bounds check. This could … Android Mitigation only Fix from $2,3002018-04-04 CRITICAL 9.8 CVE-2017-13284 In config_set_string of config.cc, it is possible to pair a second BT keyboard without user approval due to improper input validation. This could lea… Android Mitigation only Fix from $2,3002018-04-04 CRITICAL 9.8 CVE-2017-13285 In SvoxSsmlParser and startElement of svox_ssml_parser.cpp, there is a possible out of bounds write due to an uninitialized buffer. This could lead t… Android Mitigation only Fix from $2,3002018-04-04 HIGH 7.8 CVE-2017-13276 In CProgramConfig_ReadHeightExt of tpdec_asc.cpp, there is a possible stack buffer overflow due to a missing bounds check. This could lead to a remot… Android Mitigation only Fix from $1,9502018-04-04 HIGH 7.8 CVE-2017-13277 In ihevcd_fmt_conv of ihevcd_fmt_conv.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execut… Android Mitigation only Fix from $1,9502018-04-04 HIGH 7.8 CVE-2017-13278 In MediaPlayerService::Client::notify of MediaPlayerService.cpp, there is a possible use after free. This could lead to local escalation of privilege… Android Mitigation only Fix from $1,9502018-04-04