Vulnerabilities (CVE)

Vendor filter

Google Subscribe

Filter

3749 total CVE
CVE Vendors Products Updated CVSS
CVE-2018-9362 1 Google 1 Android 2018-12-12 7.8
In processMessagePart of InboundSmsHandler.java, there is a possible remote denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not...
CVE-2018-9363 3 Canonical, Debian, Google 3 Ubuntu Linux, Debian Linux, Android 2018-12-12 7.2
In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android...
CVE-2018-9385 1 Google 1 Android 2018-12-12 4.6
In driver_override_store of bus.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for...
CVE-2018-9415 2 Canonical, Google 2 Ubuntu Linux, Android 2018-12-12 4.6
In driver_override_store and driver_override_show of bus.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for...
CVE-2018-9436 1 Google 1 Android 2018-12-12 7.8
In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for...
CVE-2018-9437 1 Google 1 Android 2018-12-12 7.1
In getstring of ID3.cpp there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product:...
CVE-2018-9444 1 Google 1 Android 2018-12-12 7.1
In ih264d_video_decode of ih264d_api.c there is a possible resource exhaustion due to an infinite loop. This could lead to remote temporary device denial of service (remote hang or reboot) with no additional execution privileges needed. User...
CVE-2018-9445 1 Google 1 Android 2018-12-12 7.2
In readMetadata of Utils.cpp, there is a possible path traversal bug due to a confused deputy. This could lead to local escalation of privilege when mounting a USB device with no additional execution privileges needed. User interaction is not...
CVE-2018-9446 1 Google 1 Android 2018-12-12 10.0
In smp_br_state_machine_event of smp_br_main.cc, there is a possible out of bounds write due to memory corruption. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for...
CVE-2018-9448 1 Google 1 Android 2018-12-12 7.8
In avct_bcb_msg_ind of avct_bcb_act.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for...
CVE-2018-9450 1 Google 1 Android 2018-12-12 9.0
In avrc_proc_vendor_command of avrc_api.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for...
CVE-2018-9451 1 Google 1 Android 2018-12-12 4.9
In DynamicRefTable::load of ResourceTypes.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed...
CVE-2018-9454 1 Google 1 Android 2018-12-12 4.9
In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...
CVE-2018-9357 1 Google 1 Android 2018-12-12 7.2
In BNEP_Write of bnep_api.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation....
CVE-2018-9422 2 Debian, Google 2 Debian Linux, Android 2018-12-12 7.2
In get_futex_key of futex.c, there is a use-after-free due to improper locking. This could lead to local escalation of privilege with no additional privileges needed. User interaction is not needed for exploitation. Product: Android Versions:...
CVE-2018-9465 1 Google 1 Android 2018-12-12 4.6
In task_get_unused_fd_flags of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2018-9516 2 Debian, Google 2 Debian Linux, Android 2018-12-12 7.2
In hid_debug_events_read of drivers/hid/hid-debug.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed...
CVE-2017-18281 1 Google 1 Android 2018-12-11 2.1
A bool variable in Video function, which gets typecasted to int before being read could result in an out of bound read access in all Android releases from CAF using the linux kernel
CVE-2017-5133 2 Google, Debian 2 Chrome, Debian Linux 2018-12-11 6.8
Off-by-one read/write on the heap in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to corrupt memory and possibly leak information and potentially execute code via a crafted PDF file.
CVE-2017-13166 1 Google 1 Android 2018-11-30 4.6
An elevation of privilege vulnerability in the kernel v4l2 video driver. Product: Android. Versions: Android kernel. Android ID A-34624167.