Browse CVEs

CRITICAL 9.1 CVE-2017-13185 An information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-6… Android Patch available Fix from $2,3002018-01-12 CRITICAL 9.1 CVE-2017-13187 An information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID… Android Mitigation only Fix from $2,3002018-01-12 CRITICAL 9.1 CVE-2017-13188 An information disclosure vulnerability in the Android media framework (aac). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-… Android Patch available Fix from $2,3002018-01-12 HIGH 8.8 CVE-2017-13176 In the parseURL function of URLStreamHandler, there is improper input validation of the host field. This could lead to a remote elevation of privileg… Android Patch available Fix from $1,9502018-01-12 HIGH 7.8 CVE-2017-13180 In the onQueueFilled function of SoftAVCDec, there is a possible out-of-bounds write due to a use after free if a bad header causes the decoder to ge… Android Patch available Fix from $1,9502018-01-12 HIGH 7.8 CVE-2017-13181 In the doGetThumb and getThumbnail functions of MtpServer, there is a possible double free due to not NULLing out a freed pointer. This could lead to… Android Patch available Fix from $1,9502018-01-12 HIGH 7.8 CVE-2017-13182 In the sendFormatChange function of ACodec, there is a possible integer overflow which could lead to an out-of-bounds write. This could lead to a loc… Android Patch available Fix from $1,9502018-01-12 HIGH 7.8 CVE-2017-13184 In the enableVSyncInjections function of SurfaceFlinger, there is a possible use after free of mVSyncInjector. This could lead to a local elevation o… Android Patch available Fix from $1,9502018-01-12 HIGH 7.5 CVE-2017-0846 An information disclosure vulnerability in the Android framework (clipboardservice). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2… Android Patch available Fix from $1,9502018-01-12 HIGH 7.5 CVE-2017-0855 In MPEG4Extractor.cpp, there are several places where functions return early without cleaning up internal buffers which could lead to memory leaks. T… Android Patch available Fix from $1,9502018-01-12 HIGH 7.5 CVE-2017-13186 A vulnerability in the Android media framework (libavc) related to incorrect use of mmco parameters. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8… Android Patch available Fix from $1,9502018-01-12 HIGH 7.5 CVE-2017-13189 A vulnerability in the Android media framework (libavc) related to handling dec_hdl memory allocation failures. Product: Android. Versions: 7.0, 7.1.… Android Patch available Fix from $1,9502018-01-12 HIGH 7.5 CVE-2017-13190 A vulnerability in the Android media framework (libhevc) related to handling ps_codec_obj memory allocation failures. Product: Android. Versions: 7.0… Android Patch available Fix from $1,9502018-01-12 HIGH 7.5 CVE-2017-13191 In the ihevcd_decode function of ihevcd_decode.c, there is an infinite loop due to an incomplete frame error. This could lead to a remote denial of s… Android Patch available Fix from $1,9502018-01-12 HIGH 7.5 CVE-2017-13192 In the ihevcd_parse_slice_header function of ihevcd_parse_slice_header.c a slice address of zero after the first slice could result in an infinite lo… Android Patch available Fix from $1,9502018-01-12 HIGH 7.5 CVE-2017-13193 In ihevcd_decode.c there is a possible infinite loop due to bytes for an sps of unsupported resolution resulting in the same sps being fed in over an… Android Patch available Fix from $1,9502018-01-12 HIGH 7.0 CVE-2017-13183 In the OMXNodeInstance::useBuffer and IOMX::freeBuffer functions, there is a possible use after free due to a race condition if the user frees the bu… Android Patch available Fix from $1,9502018-01-12 HIGH 7.8 CVE-2014-7952 The backup mechanism in the adb tool in Android might allow attackers to inject additional applications (APKs) and execute arbitrary code by leveragi… Android No fix yet Fix from $1,9502018-01-12 HIGH 7.8 CVE-2017-0869 NVIDIA driver contains an integer overflow vulnerability which could cause a use after free and possibly lead to an elevation of privilege enabling c… Android Patch available Fix from $1,9502018-01-12 CRITICAL 9.8 CVE-2017-11079 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing sparse image, uninit… Android Patch available Fix from $2,3002018-01-10 HIGH 8.8 CVE-2017-14879 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, by calling an IPA ioctl and searching… Android Patch available Fix from $1,9502018-01-10 HIGH 7.8 CVE-2017-11003 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while updating a firmware image, data… Android Patch available Fix from $1,9502018-01-10 HIGH 7.8 CVE-2017-11080 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing a user supplied spar… Android Patch available Fix from $1,9502018-01-10 HIGH 7.8 CVE-2017-11081 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is a potential buffer overflow … Android Patch available Fix from $1,9502018-01-10 HIGH 7.8 CVE-2017-14873 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the pp_pgc_get_config() graphics d… Android Patch available Fix from $1,9502018-01-10 HIGH 7.8 CVE-2017-15845 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an invalid input of firmware size (ne… Android Patch available Fix from $1,9502018-01-10 HIGH 7.8 CVE-2017-15848 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the fastrpc kernel driver, a buffe… Android Patch available Fix from $1,9502018-01-10 HIGH 7.8 CVE-2017-9689 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a specially-crafted HDMI CEC message … Android Patch available Fix from $1,9502018-01-10 HIGH 7.8 CVE-2017-9705 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, concurrent rx notifications and read(… Android Patch available Fix from $1,9502018-01-10 HIGH 7.5 CVE-2017-11066 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while flashing ubi image an uninitial… Android Patch available Fix from $1,9502018-01-10