Browse CVEs

HIGH 7.8 CVE-2017-13225 In libMtkOmxVdec.so there is a possible heap buffer overflow. This could lead to a remote elevation of privilege enabling code execution as a privile… Android Patch available Fix from $1,9502018-01-12 HIGH 7.8 CVE-2017-13226 An elevation of privilege vulnerability in the MediaTek mtk. Product: Android. Versions: Android kernel. Android ID: A-32591194. References: M-ALPS03… Android Patch available Fix from $1,9502018-01-12 HIGH 7.5 CVE-2017-13219 A denial of service vulnerability in the Upstream kernel synaptics touchscreen controller. Product: Android. Versions: Android kernel. Android ID: A-… Android Patch available Fix from $1,9502018-01-12 HIGH 7.5 CVE-2017-13222 An information disclosure vulnerability in the Upstream kernel kernel. Product: Android. Versions: Android kernel. Android ID: A-38159576. Android Patch available Fix from $1,9502018-01-12 CRITICAL 9.8 CVE-2017-13208EPSS 9% In receive_packet of libnetutils/packet.c, there is a possible out-of-bounds write due to a missing bounds check on the DHCP response. This could lea… Android Patch available Fix from $2,3002018-01-12 CRITICAL 9.1 CVE-2017-13203 An information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID:… Android Mitigation only Fix from $2,3002018-01-12 CRITICAL 9.1 CVE-2017-13204 An information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID:… Android Mitigation only Fix from $2,3002018-01-12 CRITICAL 9.1 CVE-2017-13205 An information disclosure vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android I… Android Mitigation only Fix from $2,3002018-01-12 HIGH 7.8 CVE-2017-13209 In the ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller which coul… Android No fix yet Fix from $1,9502018-01-12 HIGH 7.8 CVE-2017-13210 In CameraDeviceClient::submitRequestList of CameraDeviceClient.cpp, there is an out-of-bounds write if metadataSize is too small. This could lead to … Android Patch available Fix from $1,9502018-01-12 HIGH 7.8 CVE-2017-13212 An elevation of privilege vulnerability in the Android system (systemui). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Andr… Android Patch available Fix from $1,9502018-01-12 HIGH 7.8 CVE-2017-13213 An elevation of privilege vulnerability in the Broadcom bcmdhd driver. Product: Android. Versions: Android kernel. Android ID: A-63374465. References… Android Patch available Fix from $1,9502018-01-12 HIGH 7.8 CVE-2017-13215 A elevation of privilege vulnerability in the Upstream kernel skcipher. Product: Android. Versions: Android kernel. Android ID: A-64386293. Reference… Android Patch available Fix from $1,9502018-01-12 HIGH 7.8 CVE-2017-13216 In ashmem_ioctl of ashmem.c, there is an out-of-bounds write due to insufficient locking when accessing asma. This could lead to a local elevation of… Android No fix yet Fix from $1,9502018-01-12 HIGH 7.8 CVE-2017-13217 In DisplayFtmItem in the bootloader, there is an out-of-bounds write due to reading a string without verifying that it's null-terminated. This could … Android Mitigation only Fix from $1,9502018-01-12 HIGH 7.5 CVE-2017-13195 In the ihevcd_parse_sps function of ihevcd_parse_headers.c, several parameter values could be negative which could lead to negative indexes which cou… Android Patch available Fix from $1,9502018-01-12 HIGH 7.5 CVE-2017-13196 In several places in ihevcd_decode.c, a dead loop could occur due to incomplete frames which could lead to memory leaks. This could lead to a remote … Android Patch available Fix from $1,9502018-01-12 HIGH 7.5 CVE-2017-13197 In the ihevcd_parse_slice.c function, slave threads are not joined if there is an error. This could lead to a remote denial of service of a critical … Android Patch available Fix from $1,9502018-01-12 HIGH 7.5 CVE-2017-13198 A vulnerability in the Android media framework (ex) related to composition of frames lacking a color map. Product: Android. Versions: 7.0, 7.1.1, 7.1… Android Patch available Fix from $1,9502018-01-12 HIGH 7.5 CVE-2017-13199 In Bitmap.ccp if Bitmap.nativeCreate fails an out of memory exception is not thrown leading to a java.io.IOException later on. This could lead to a r… Android Patch available Fix from $1,9502018-01-12 HIGH 7.5 CVE-2017-13200 An information disclosure vulnerability in the Android media framework (av) related to id3 unsynchronization. Product: Android. Versions: 7.0, 7.1.1,… Android Mitigation only Fix from $1,9502018-01-12 HIGH 7.5 CVE-2017-13201 An information disclosure vulnerability in the Android media framework (mediadrm). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, … Android Patch available Fix from $1,9502018-01-12 HIGH 7.5 CVE-2017-13202 An information disclosure vulnerability in the Android media framework (libeffects). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2… Android Patch available Fix from $1,9502018-01-12 HIGH 7.5 CVE-2017-13206 An information disclosure vulnerability in the Android media framework (aacdec). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.… Android Patch available Fix from $1,9502018-01-12 HIGH 7.5 CVE-2017-13207 An information disclosure vulnerability in the Android media framework (stagefright mpeg4writer). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0.… Android Mitigation only Fix from $1,9502018-01-12 HIGH 7.5 CVE-2017-13211 In bta_scan_results_cb_impl of btif_ble_scanner.cc, there is possible resource exhaustion if a large number of repeated BLE scan results are received… Android Mitigation only Fix from $1,9502018-01-12 HIGH 7.5 CVE-2017-13214 In the hardware HEVC decoder, some media files could cause a page fault. This could lead to a remote denial of service of a critical system process w… Android Mitigation only Fix from $1,9502018-01-12 CRITICAL 9.8 CVE-2017-13177 In several functions of libhevc, NEON registers are not preserved. This could lead to remote code execution as a privileged process with no additiona… Android No fix yet Fix from $2,3002018-01-12 CRITICAL 9.8 CVE-2017-13178 In the initDecoder function of SoftAVCDec, there is a possible out-of-bounds write to mCodecCtx due to a use after free when buffer allocation fails.… Android Patch available Fix from $2,3002018-01-12 CRITICAL 9.8 CVE-2017-13179 In the ihevcd_allocate_static_bufs and ihevcd_create functions of SoftHEVC, there is a possible out-of-bounds write due to a use after free. Both ps_… Android Patch available Fix from $2,3002018-01-12