Browse CVEs

MEDIUM 5.5 CVE-2017-6288 NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This issue is r… Android Mitigation only Fix from $1,6002018-03-12 CRITICAL 9.8 CVE-2016-5179 Chrome OS before 53.0.2785.144 allows remote attackers to execute arbitrary commands at boot. Chrome Os 53.0.2785.144+ Fix from $2,3002018-03-07 HIGH 7.5 CVE-2017-6280 NVIDIA driver contains a possible out-of-bounds read vulnerability due to a leak which may lead to information disclosure. This issue is rated as mod… Android Mitigation only Fix from $1,9502018-03-06 HIGH 7.8 CVE-2017-14884 In all Qualcomm products with Android releases from CAF using the Linux kernel, due to lack of bounds checking on the variable "data_len" from the fu… Android Mitigation only Fix from $1,9502018-02-23 HIGH 7.8 CVE-2017-15817 In all Qualcomm products with Android releases from CAF using the Linux kernel, when an access point sends a challenge text greater than 128 bytes, t… Android Mitigation only Fix from $1,9502018-02-23 HIGH 7.8 CVE-2017-15820 In all Qualcomm products with Android releases from CAF using the Linux kernel, in a KGSL IOCTL handler, a Use After Free Condition can potentially o… Android Mitigation only Fix from $1,9502018-02-23 HIGH 7.8 CVE-2017-15860 In all Qualcomm products with Android releases from CAF using the Linux kernel, while processing an encrypted authentication management frame, a stac… Android Mitigation only Fix from $1,9502018-02-23 HIGH 7.8 CVE-2017-15861 In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function wma_roam_synch_event_handler, vdev_id is received fro… Android Mitigation only Fix from $1,9502018-02-23 HIGH 7.8 CVE-2017-15862 In all Qualcomm products with Android releases from CAF using the Linux kernel, in wma_unified_link_radio_stats_event_handler(), the number of radio … Android Mitigation only Fix from $1,9502018-02-23 HIGH 7.8 CVE-2017-17764 In all Qualcomm products with Android releases from CAF using the Linux kernel, the num_failure_info value from firmware is not properly validated in… Android Mitigation only Fix from $1,9502018-02-23 HIGH 7.8 CVE-2017-17765 In all Qualcomm products with Android releases from CAF using the Linux kernel, multiple values received from firmware are not properly validated in … Android Mitigation only Fix from $1,9502018-02-23 HIGH 7.8 CVE-2017-17767 In all Qualcomm products with Android releases from CAF using the Linux kernel, the IL client may free a buffer OMX Video Encoder Component and then … Android Mitigation only Fix from $1,9502018-02-23 HIGH 7.0 CVE-2017-15829 In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a GPU Driver which can potentially lead to… Android Mitigation only Fix from $1,9502018-02-23 HIGH 7.0 CVE-2017-13273 In xt_qtaguid.c, there is a race condition due to insufficient locking. This could lead to local elevation of privileges with no additional execution… Android Mitigation only Fix from $1,9502018-02-15 HIGH 7.8 CVE-2017-13245 A elevation of privilege vulnerability in the Upstream kernel audio driver. Product: Android. Versions: Android kernel. ID: A-64315347. Android Mitigation only Fix from $1,9502018-02-12 HIGH 7.8 CVE-2017-13247 In the Pixel 2 bootloader, there is a missing permission check which bypasses carrier bootloader lock. This could lead to local elevation of privileg… Android Mitigation only Fix from $1,9502018-02-12 HIGH 7.5 CVE-2017-13246 A information disclosure vulnerability in the Upstream kernel network driver. Product: Android. Versions: Android kernel. ID: A-36279469. Android No fix yet Fix from $1,9502018-02-12 CRITICAL 9.8 CVE-2017-13229 A remote code execution vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID: A-68160703. Android Mitigation only Fix from $2,3002018-02-12 HIGH 8.8 CVE-2017-13228 In function ih264d_ref_idx_reordering of libavc, there is an out-of-bounds write due to modCount being defined as an unsigned character. This could l… Android Mitigation only Fix from $1,9502018-02-12 HIGH 8.8 CVE-2017-13230 In hevc codec, there is an out-of-bounds write due to an incorrect bounds check with the i2_pic_width_in_luma_samples value. This could lead to remot… Android Mitigation only Fix from $1,9502018-02-12 HIGH 7.8 CVE-2017-13231 In libmediadrm, there is an out-of-bounds write due to improper input validation. This could lead to local elevation of privileges with no additional… Android Mitigation only Fix from $1,9502018-02-12 HIGH 7.8 CVE-2017-13236 In the KeyStore service, there is a permissions bypass that allows access to protected resources. This could lead to local escalation of privilege wi… Android No fix yet Fix from $1,9502018-02-12 HIGH 7.8 CVE-2017-13244 A elevation of privilege vulnerability in the Upstream kernel easel. Product: Android. Versions: Android kernel. ID: A-62678986. Android No fix yet Fix from $1,9502018-02-12 HIGH 7.5 CVE-2017-13232 In audioserver, there is an out-of-bounds write due to a log statement using %s with an array that may not be NULL terminated. This could lead to loc… Android Mitigation only Fix from $1,9502018-02-12 HIGH 7.5 CVE-2017-13239 A information disclosure vulnerability in the Android framework (ui framework). Product: Android. Versions: 8.0. ID: A-66244132. Android Mitigation only Fix from $1,9502018-02-12 HIGH 7.5 CVE-2017-13240 A information disclosure vulnerability in the Android framework (crypto framework). Product: Android. Versions: 8.0, 8.1. ID: A-68694819. Android Patch available Fix from $1,9502018-02-12 HIGH 7.5 CVE-2017-13241 A information disclosure vulnerability in the Android media framework (libstagefright_soft_avcenc). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.… Android Patch available Fix from $1,9502018-02-12 HIGH 7.5 CVE-2017-13242 A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID: A-… Android Patch available Fix from $1,9502018-02-12 HIGH 7.5 CVE-2017-13243 A information disclosure vulnerability in the Android system (ui). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. ID: A-38258… Android Mitigation only Fix from $1,9502018-02-12 MEDIUM 6.5 CVE-2017-13233 In ihevcd_ctb_boundary_strength_pbslice of libhevc, there is possible resource exhaustion. This could lead to a remote temporary denial of service wi… Android Mitigation only Fix from $1,6002018-02-12