Browse CVEs

CRITICAL 9.8 CVE-2017-13229 A remote code execution vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID: A-68160703. Android Mitigation only Fix from $2,3002018-02-12 HIGH 8.8 CVE-2017-13228 In function ih264d_ref_idx_reordering of libavc, there is an out-of-bounds write due to modCount being defined as an unsigned character. This could l… Android Mitigation only Fix from $1,9502018-02-12 HIGH 8.8 CVE-2017-13230 In hevc codec, there is an out-of-bounds write due to an incorrect bounds check with the i2_pic_width_in_luma_samples value. This could lead to remot… Android Mitigation only Fix from $1,9502018-02-12 HIGH 7.8 CVE-2017-13231 In libmediadrm, there is an out-of-bounds write due to improper input validation. This could lead to local elevation of privileges with no additional… Android Mitigation only Fix from $1,9502018-02-12 HIGH 7.8 CVE-2017-13236 In the KeyStore service, there is a permissions bypass that allows access to protected resources. This could lead to local escalation of privilege wi… Android No fix yet Fix from $1,9502018-02-12 HIGH 7.8 CVE-2017-13244 A elevation of privilege vulnerability in the Upstream kernel easel. Product: Android. Versions: Android kernel. ID: A-62678986. Android No fix yet Fix from $1,9502018-02-12 HIGH 7.5 CVE-2017-13232 In audioserver, there is an out-of-bounds write due to a log statement using %s with an array that may not be NULL terminated. This could lead to loc… Android Mitigation only Fix from $1,9502018-02-12 HIGH 7.5 CVE-2017-13239 A information disclosure vulnerability in the Android framework (ui framework). Product: Android. Versions: 8.0. ID: A-66244132. Android Mitigation only Fix from $1,9502018-02-12 HIGH 7.5 CVE-2017-13243 A information disclosure vulnerability in the Android system (ui). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. ID: A-38258… Android Mitigation only Fix from $1,9502018-02-12 MEDIUM 6.5 CVE-2017-13233 In ihevcd_ctb_boundary_strength_pbslice of libhevc, there is possible resource exhaustion. This could lead to a remote temporary denial of service wi… Android Mitigation only Fix from $1,6002018-02-12 MEDIUM 6.5 CVE-2017-13234 In DLSParser of the sonivox library, there is possible resource exhaustion due to a memory leak. This could lead to remote temporary denial of servic… Android Mitigation only Fix from $1,6002018-02-12 MEDIUM 6.5 CVE-2017-13235 A other vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID: A-68342866. Android No fix yet Fix from $1,6002018-02-12 MEDIUM 5.7 CVE-2017-17860 In Samsung Gear products, Bluetooth link key is updated to the different key which is same with attacker's link key. It can be attacked without user'… Android No fix yet Fix from $1,6002018-01-18 CRITICAL 9.1 CVE-2017-13203 An information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID:… Android Mitigation only Fix from $2,3002018-01-12 CRITICAL 9.1 CVE-2017-13204 An information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID:… Android Mitigation only Fix from $2,3002018-01-12 CRITICAL 9.1 CVE-2017-13205 An information disclosure vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android I… Android Mitigation only Fix from $2,3002018-01-12 HIGH 7.8 CVE-2017-13209 In the ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller which coul… Android No fix yet Fix from $1,9502018-01-12 HIGH 7.8 CVE-2017-13216 In ashmem_ioctl of ashmem.c, there is an out-of-bounds write due to insufficient locking when accessing asma. This could lead to a local elevation of… Android No fix yet Fix from $1,9502018-01-12 HIGH 7.8 CVE-2017-13217 In DisplayFtmItem in the bootloader, there is an out-of-bounds write due to reading a string without verifying that it's null-terminated. This could … Android Mitigation only Fix from $1,9502018-01-12 HIGH 7.5 CVE-2017-13200 An information disclosure vulnerability in the Android media framework (av) related to id3 unsynchronization. Product: Android. Versions: 7.0, 7.1.1,… Android Mitigation only Fix from $1,9502018-01-12 HIGH 7.5 CVE-2017-13207 An information disclosure vulnerability in the Android media framework (stagefright mpeg4writer). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0.… Android Mitigation only Fix from $1,9502018-01-12 HIGH 7.5 CVE-2017-13211 In bta_scan_results_cb_impl of btif_ble_scanner.cc, there is possible resource exhaustion if a large number of repeated BLE scan results are received… Android Mitigation only Fix from $1,9502018-01-12 HIGH 7.5 CVE-2017-13214 In the hardware HEVC decoder, some media files could cause a page fault. This could lead to a remote denial of service of a critical system process w… Android Mitigation only Fix from $1,9502018-01-12 CRITICAL 9.8 CVE-2017-13177 In several functions of libhevc, NEON registers are not preserved. This could lead to remote code execution as a privileged process with no additiona… Android No fix yet Fix from $2,3002018-01-12 CRITICAL 9.1 CVE-2017-13187 An information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID… Android Mitigation only Fix from $2,3002018-01-12 HIGH 7.8 CVE-2014-7952 The backup mechanism in the adb tool in Android might allow attackers to inject additional applications (APKs) and execute arbitrary code by leveragi… Android No fix yet Fix from $1,9502018-01-12 HIGH 7.8 CVE-2017-6276 NVIDIA mediaserver contains a vulnerability where it is possible a use after free malfunction can occur due to an incorrect bounds check which could … Android Mitigation only Fix from $1,9502017-12-06 HIGH 7.0 CVE-2017-6262 NVIDIA driver contains a vulnerability where it is possible a use after free malfunction can occur due to a race condition which could enable unautho… Android Mitigation only Fix from $1,9502017-12-06 CRITICAL 9.8 CVE-2017-13160 A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-37160362. Android Mitigation only Fix from $2,3002017-12-06 HIGH 7.8 CVE-2017-13161 An elevation of privilege vulnerability in the Broadcom wireless driver. Product: Android. Versions: Android kernel. Android ID A-63930471. Reference… Android No fix yet Fix from $1,9502017-12-06