Browse CVEs

HIGH 7.8 CVE-2018-9465 In task_get_unused_fd_flags of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privil… Android Patch available Fix from $1,9502018-11-06 HIGH 7.8 CVE-2018-9488 In the SELinux permissions of crash_dump.te, there is a permissions bypass due to a missing restriction. This could lead to a local escalation of pri… Android Patch available Fix from $1,9502018-11-06 HIGH 7.5 CVE-2018-9448 In avct_bcb_msg_ind of avct_bcb_act.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information d… Android Patch available Fix from $1,9502018-11-06 HIGH 7.5 CVE-2018-9455 In sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial o… Android Patch available Fix from $1,9502018-11-06 HIGH 7.5 CVE-2018-9489 When wifi is switched, function sendNetworkStateChangeBroadcast of WifiStateMachine.java broadcasts an intent including detailed wifi network informa… Android Mitigation only Fix from $1,9502018-11-06 MEDIUM 6.8 CVE-2018-9445 In readMetadata of Utils.cpp, there is a possible path traversal bug due to a confused deputy. This could lead to local escalation of privilege when … Android Patch available Fix from $1,6002018-11-06 MEDIUM 5.5 CVE-2018-9451 In DynamicRefTable::load of ResourceTypes.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local informa… Android Patch available Fix from $1,6002018-11-06 MEDIUM 5.5 CVE-2018-9453 In avdt_msg_prs_cfg of avdt_msg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclo… Android Patch available Fix from $1,6002018-11-06 MEDIUM 5.5 CVE-2018-9454 In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosu… Android Mitigation only Fix from $1,6002018-11-06 CRITICAL 9.8 CVE-2018-9355 In bta_dm_sdp_result of bta_dm_act.cc, there is a possible out of bounds stack write due to a missing bounds check. This could lead to remote code ex… Android Mitigation only Fix from $2,3002018-11-06 CRITICAL 9.8 CVE-2018-9356 In bnep_data_ind of bnep_main.c, there is a possible remote code execution due to a double free. This could lead to remote code execution with no add… Android Patch available Fix from $2,3002018-11-06 HIGH 7.8 CVE-2018-9357 In BNEP_Write of bnep_api.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privil… Android Patch available Fix from $1,9502018-11-06 HIGH 7.8 CVE-2018-9385 In driver_override_store of bus.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of p… Android Patch available Fix from $1,9502018-11-06 HIGH 7.8 CVE-2018-9427 In CopyToOMX of OMXNodeInstance.cpp there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote arbitrary cod… Android Patch available Fix from $1,9502018-11-06 HIGH 7.5 CVE-2018-9358 In gatts_process_attribute_req of gatt_sc.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote… Android Patch available Fix from $1,9502018-11-06 HIGH 7.5 CVE-2018-9359 In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disc… Android Patch available Fix from $1,9502018-11-06 HIGH 7.5 CVE-2018-9360 In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disc… Android Patch available Fix from $1,9502018-11-06 HIGH 7.5 CVE-2018-9361 In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disc… Android Patch available Fix from $1,9502018-11-06 HIGH 7.5 CVE-2018-9362 In processMessagePart of InboundSmsHandler.java, there is a possible remote denial of service due to improper input validation. This could lead to re… Android Patch available Fix from $1,9502018-11-06 HIGH 7.5 CVE-2018-9436 In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclos… Android Patch available Fix from $1,9502018-11-06 MEDIUM 5.5 CVE-2018-9437 In getstring of ID3.cpp there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote denial of service with no add… Android Patch available Fix from $1,6002018-11-06 MEDIUM 5.5 CVE-2018-9444 In ih264d_video_decode of ih264d_api.c there is a possible resource exhaustion due to an infinite loop. This could lead to remote temporary device de… Android Mitigation only Fix from $1,6002018-11-06 MEDIUM 5.0 CVE-2018-9438 When a device connects only over WiFi VPN, the device may not receive security updates due to some incorrect checks. This could lead to a local denia… Android Patch available Fix from $1,6002018-11-06 MEDIUM 5.5 CVE-2017-18281 A bool variable in Video function, which gets typecasted to int before being read could result in an out of bound read access in all Android releases… Android Patch available Fix from $1,6002018-10-29 HIGH 7.8 CVE-2018-9514 In sdcardfs_open of file.c, there is a possible Use After Free due to an unusual root cause. This could lead to local escalation of privilege with no… Android Mitigation only Fix from $1,9502018-10-02 HIGH 7.8 CVE-2018-9515 In sdcardfs_create and sdcardfs_mkdir of inode.c, there is a possible memory corruption due to improper locking. This could lead to local escalation … Android No fix yet Fix from $1,9502018-10-02 HIGH 7.8 CVE-2018-9513 In copy_process of fork.c, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additio… Android Mitigation only Fix from $1,9502018-10-02 MEDIUM 5.5 CVE-2018-9511 In ipSecSetEncapSocketOwner of XfrmController.cpp, there is a possible failure to initialize a security feature due to uninitialized data. This could… Android Patch available Fix from $1,6002018-10-02 MEDIUM 6.5 CVE-2018-9509 In smp_proc_master_id of smp_act.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disc… Android Patch available Fix from $1,6002018-10-02 MEDIUM 6.5 CVE-2018-9510 In smp_proc_enc_info of smp_act.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information discl… Android Patch available Fix from $1,6002018-10-02