Browse CVEs

MEDIUM 6.7 CVE-2024-20134 In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002024-12-02 MEDIUM 6.7 CVE-2024-20135 In soundtrigger, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System … Android Mitigation only Fix from $1,6002024-12-02 HIGH 7.5 CVE-2024-20127 In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional ex… Android Mitigation only Fix from $1,9502024-12-02 HIGH 7.5 CVE-2024-20128 In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional ex… Android Mitigation only Fix from $1,9502024-12-02 MEDIUM 6.7 CVE-2024-20125 In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor… Android Mitigation only Fix from $1,6002024-12-02 MEDIUM 5.5 CVE-2018-9377 In getIntentForIntentSender of ActivityManagerService.java, there is a possible way to access user metadata due to a pending intent. This could lead … Android Mitigation only Fix from $1,6002024-11-28 CRITICAL 9.8 CVE-2018-9467 In the getHost() function of UriTest.java, there is the possibility of incorrect web origin determination. This could lead to incorrect security deci… Android Mitigation only Fix from $2,3002024-11-20 HIGH 8.8 CVE-2018-9466 In the xmlSnprintfElementContent function of valid.c, there is a possible out of bounds write. This could lead to remote escalation of privilege in a… Android Mitigation only Fix from $1,9502024-11-19 HIGH 7.5 CVE-2018-9456 In sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial o… Android Mitigation only Fix from $1,9502024-11-19 MEDIUM 6.5 CVE-2018-9440 In parse of M3UParser.cpp there is a possible resource exhaustion due to improper input validation. This could lead to denial of service with no addi… Android Mitigation only Fix from $1,6002024-11-19 HIGH 8.8 CVE-2018-9433 In ArrayConcatVisitor of builtins-array.cc, there is a possible type confusion due to improper input validation. This could lead to remote code execu… Android Mitigation only Fix from $1,9502024-11-19 HIGH 7.8 CVE-2018-9424 In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat… Android Mitigation only Fix from $1,9502024-11-19 HIGH 7.8 CVE-2018-9428 In startDevice of AAudioServiceStreamBase.cpp there is a possible out of bounds write due to a use after free. This could lead to local arbitrary cod… Android Mitigation only Fix from $1,9502024-11-19 HIGH 7.8 CVE-2018-9432 In createPhonebookDialogView and createMapDialogView of BluetoothPermissionActivity.java, there is a possible permissions bypass. This could lead to … Android Mitigation only Fix from $1,9502024-11-19 HIGH 7.8 CVE-2018-9366 In IMSA_Recv_Thread and VT_IMCB_Thread of ImsaClient.cpp and VideoTelephony.c, there is a possible out of bounds write due to an integer overflow. Th… Android Mitigation only Fix from $1,9502024-11-19 HIGH 7.8 CVE-2018-9367 In FT_ACDK_CCT_V2_OP_ISP_SET_TUNING_PARAS of Meta_CCAP_Para.cpp, there is a possible out of bounds write due to improper input validation. This could… Android Mitigation only Fix from $1,9502024-11-19 HIGH 7.8 CVE-2018-9368 In mtkscoaudio debugfs there is a possible arbitrary kernel memory write due to missing bounds check and weakened SELinux policies. This could lead t… Android Mitigation only Fix from $1,9502024-11-19 HIGH 7.8 CVE-2018-9372 In cmd_flash_mmc_sparse_img of dl_commands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to a local escal… Android Mitigation only Fix from $1,9502024-11-19 HIGH 7.8 CVE-2018-9409 In HWCSession::SetColorModeById of hwc_session.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local e… Android Mitigation only Fix from $1,9502024-11-19 HIGH 7.5 CVE-2018-9364 In the LG LAF component, there is a special command that allowed modification of certain partitions. This could lead to bypass of secure boot. User i… Android Mitigation only Fix from $1,9502024-11-19 HIGH 7.3 CVE-2018-9369 In bootloader there is fastboot command allowing user specified kernel command line arguments. This could lead to local escalation of privilege with … Android Mitigation only Fix from $1,9502024-11-19 HIGH 7.3 CVE-2018-9370 In download.c there is a special mode allowing user to download data into memory and causing possible memory corruptions due to missing bounds check.… Android Mitigation only Fix from $1,9502024-11-19 MEDIUM 6.5 CVE-2018-9348 In SMF_ParseMetaEvent of eas_smf.c, there is a possible integer overflow. This could lead to remote denial of service due to resource exhaustion with… Android Mitigation only Fix from $1,6002024-11-19 MEDIUM 6.4 CVE-2018-9371 In the Mediatek Preloader, there are out of bounds reads and writes due to an exposed interface that allows arbitrary peripheral memory mapping with … Android Mitigation only Fix from $1,6002024-11-19 HIGH 7.8 CVE-2018-9338 In ResStringPool::setTo of ResourceTypes.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat… Android Mitigation only Fix from $1,9502024-11-19 HIGH 7.8 CVE-2017-13310 In createFromParcel of ViewPager.java, there is a possible read/write serialization issue leading to a permissions bypass. This could lead to local e… Android Mitigation only Fix from $1,9502024-11-15 HIGH 7.8 CVE-2017-13312 In createFromParcel of MediaCas.java, there is a possible parcel read/write mismatch due to improper input validation. This could lead to local escal… Android Mitigation only Fix from $1,9502024-11-15 MEDIUM 6.7 CVE-2017-13311 In the read() function of ProcessStats.java, there is a possible read/write serialization issue leading to a permissions bypass. This could lead to l… Android Mitigation only Fix from $1,6002024-11-15 MEDIUM 5.5 CVE-2017-13309 In readEncryptedData of ConscryptEngine.java, there is a possible plaintext leak due to improperly used crypto. This could lead to local information … Android Mitigation only Fix from $1,6002024-11-15 MEDIUM 5.0 CVE-2024-43090 In multiple locations, there is a possible cross-user image read due to a missing permission check. This could lead to local information disclosure w… Android No fix yet Fix from $1,6002024-11-13