Browse CVEs

HIGH 7.5 CVE-2017-11087 libOmxVenc in Android for MSM, Firefox OS for MSM, and QRD Android copies the output buffer to an application with the "filled length", which is larg… Android Mitigation only Fix from $1,9502018-03-30 CRITICAL 9.8 CVE-2017-11010 In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 625, SD 650/52, SD 835, access … Android No fix yet Fix from $2,3002018-03-30 CRITICAL 9.8 CVE-2017-14906 In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, PKCS7 padding… Android Mitigation only Fix from $2,3002018-03-30 MEDIUM 6.5 CVE-2017-9681 In Android before 2017-08-05 on Qualcomm MSM, Firefox OS for MSM, QRD Android, and all Android releases from CAF using the Linux kernel, if kernel me… Android Mitigation only Fix from $1,6002018-03-30 CRITICAL 9.8 CVE-2014-4959 **DISPUTED** SQL injection vulnerability in SQLiteDatabase.java in the SQLi Api in Android allows remote attackers to execute arbitrary SQL commands … Android No fix yet Fix from $2,3002018-03-27 HIGH 7.8 CVE-2018-3560 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a Double Free vulnerability exists in… Android Mitigation only Fix from $1,9502018-03-16 HIGH 7.0 CVE-2018-3561 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition in diag_ioctl_lsm_de… Android Mitigation only Fix from $1,9502018-03-16 CRITICAL 9.8 CVE-2016-10393 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when processing a clip with large siz… Android Mitigation only Fix from $2,3002018-03-15 HIGH 7.8 CVE-2017-18056 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for vdev_id… Android Mitigation only Fix from $1,9502018-03-15 HIGH 7.5 CVE-2017-18069 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper message length calculation i… Android Mitigation only Fix from $1,9502018-03-15 HIGH 7.8 CVE-2017-6281 NVIDIA libnvomx contains a possible out of bounds write due to a improper input validation which could lead to local escalation of privilege. This is… Android Mitigation only Fix from $1,9502018-03-12 HIGH 7.8 CVE-2017-6286 NVIDIA libnvomx contains a possible out of bounds write due to a missing bounds check which could lead to local escalation of privilege. This issue i… Android Mitigation only Fix from $1,9502018-03-12 MEDIUM 5.5 CVE-2017-6285 NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This issue is r… Android Mitigation only Fix from $1,6002018-03-12 MEDIUM 5.5 CVE-2017-6287 NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This issue is r… Android Mitigation only Fix from $1,6002018-03-12 MEDIUM 5.5 CVE-2017-6288 NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This issue is r… Android Mitigation only Fix from $1,6002018-03-12 HIGH 7.5 CVE-2017-6280 NVIDIA driver contains a possible out-of-bounds read vulnerability due to a leak which may lead to information disclosure. This issue is rated as mod… Android Mitigation only Fix from $1,9502018-03-06 HIGH 7.8 CVE-2017-14884 In all Qualcomm products with Android releases from CAF using the Linux kernel, due to lack of bounds checking on the variable "data_len" from the fu… Android Mitigation only Fix from $1,9502018-02-23 HIGH 7.8 CVE-2017-15817 In all Qualcomm products with Android releases from CAF using the Linux kernel, when an access point sends a challenge text greater than 128 bytes, t… Android Mitigation only Fix from $1,9502018-02-23 HIGH 7.8 CVE-2017-15820 In all Qualcomm products with Android releases from CAF using the Linux kernel, in a KGSL IOCTL handler, a Use After Free Condition can potentially o… Android Mitigation only Fix from $1,9502018-02-23 HIGH 7.8 CVE-2017-15860 In all Qualcomm products with Android releases from CAF using the Linux kernel, while processing an encrypted authentication management frame, a stac… Android Mitigation only Fix from $1,9502018-02-23 HIGH 7.8 CVE-2017-15861 In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function wma_roam_synch_event_handler, vdev_id is received fro… Android Mitigation only Fix from $1,9502018-02-23 HIGH 7.8 CVE-2017-15862 In all Qualcomm products with Android releases from CAF using the Linux kernel, in wma_unified_link_radio_stats_event_handler(), the number of radio … Android Mitigation only Fix from $1,9502018-02-23 HIGH 7.8 CVE-2017-17764 In all Qualcomm products with Android releases from CAF using the Linux kernel, the num_failure_info value from firmware is not properly validated in… Android Mitigation only Fix from $1,9502018-02-23 HIGH 7.8 CVE-2017-17765 In all Qualcomm products with Android releases from CAF using the Linux kernel, multiple values received from firmware are not properly validated in … Android Mitigation only Fix from $1,9502018-02-23 HIGH 7.8 CVE-2017-17767 In all Qualcomm products with Android releases from CAF using the Linux kernel, the IL client may free a buffer OMX Video Encoder Component and then … Android Mitigation only Fix from $1,9502018-02-23 HIGH 7.0 CVE-2017-15829 In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a GPU Driver which can potentially lead to… Android Mitigation only Fix from $1,9502018-02-23 HIGH 7.0 CVE-2017-13273 In xt_qtaguid.c, there is a race condition due to insufficient locking. This could lead to local elevation of privileges with no additional execution… Android Mitigation only Fix from $1,9502018-02-15 HIGH 7.8 CVE-2017-13245 A elevation of privilege vulnerability in the Upstream kernel audio driver. Product: Android. Versions: Android kernel. ID: A-64315347. Android Mitigation only Fix from $1,9502018-02-12 HIGH 7.8 CVE-2017-13247 In the Pixel 2 bootloader, there is a missing permission check which bypasses carrier bootloader lock. This could lead to local elevation of privileg… Android Mitigation only Fix from $1,9502018-02-12 HIGH 7.5 CVE-2017-13246 A information disclosure vulnerability in the Upstream kernel network driver. Product: Android. Versions: Android kernel. ID: A-36279469. Android No fix yet Fix from $1,9502018-02-12