cve.bz

google android vulnerabilities, newest first, page 148

Filter
  1. 7.0CVE-2017-7368EPSS 0.3%

    In all Android releases from CAF using the Linux kernel, a race condition potentially exists in the ioctl handler of a sound driver.

  2. 7.8CVE-2017-7367EPSS 0.4%

    In all Android releases from CAF using the Linux kernel, an integer underflow vulnerability exists while processing the boot image.

  3. 5.5CVE-2017-7366EPSS 0.3%

    In all Android releases from CAF using the Linux kernel, a KGSL ioctl was not validating all of its parameters.

  4. 7.8CVE-2017-7365EPSS 0.4%

    In all Android releases from CAF using the Linux kernel, a buffer overread can occur if a particular string is not NULL terminated.

  5. 7.8CVE-2016-10342EPSS 0.7%

    In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a syscall handler.

  6. 7.8CVE-2016-10341EPSS 0.6%

    In all Android releases from CAF using the Linux kernel, 3rd party TEEs have more privilege than intended.

  7. 7.8CVE-2016-10340EPSS 0.7%

    In all Android releases from CAF using the Linux kernel, an integer underflow leading to buffer overflow vulnerability exists in a syscall handler.

  8. 7.1CVE-2016-10339EPSS 0.5%

    In all Android releases from CAF using the Linux kernel, HLOS can overwite secure memory or read contents of the keystore.

  9. 7.8CVE-2016-10338EPSS 0.6%

    In all Android releases from CAF using the Linux kernel, there was an issue related to RPMB processing.

  10. 5.5CVE-2016-10337EPSS 0.5%

    In all Android releases from CAF using the Linux kernel, some validation of secure applications was not being performed.

  11. 5.5CVE-2016-10336EPSS 0.5%

    In all Android releases from CAF using the Linux kernel, some regions of memory were not protected during boot.

  12. 5.5CVE-2016-10335EPSS 0.5%

    In all Android releases from CAF using the Linux kernel, libtomcrypt was updated.

  13. 5.5CVE-2016-10334EPSS 0.5%

    In all Android releases from CAF using the Linux kernel, a dynamically-protected DDR region could potentially get overwritten.

  14. 5.5CVE-2016-10333EPSS 0.5%

    In all Android releases from CAF using the Linux kernel, a sensitive system call was allowed to be called by HLOS.

  15. 5.5CVE-2016-10332EPSS 0.5%

    In all Android releases from CAF using the Linux kernel, stack protection was not enabled for secure applications.

  16. 7.8CVE-2015-9033EPSS 0.6%

    In all Android releases from CAF using the Linux kernel, a QTEE system call fails to validate a pointer.

  17. 3.3CVE-2015-9032EPSS 0.5%

    In all Android releases from CAF using the Linux kernel, a DRM key was exposed to QTEE applications.

  18. 3.3CVE-2015-9031EPSS 0.5%

    In all Android releases from CAF using the Linux kernel, a TZ memory address is exposed to HLOS by HDCP.

  19. 7.8CVE-2015-9030EPSS 0.8%

    In all Android releases from CAF using the Linux kernel, the Hypervisor API could be misused to bypass authentication.

  20. 7.8CVE-2015-9029EPSS 0.6%

    In all Android releases from CAF using the Linux kernel, a vulnerability exists in the access control settings of modem memory.

  21. 7.8CVE-2015-9028EPSS 0.7%

    In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a cryptographic routine.

  22. 7.8CVE-2015-9027EPSS 0.6%

    In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM.

  23. 7.8CVE-2015-9026EPSS 0.6%

    In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM.

  24. 7.8CVE-2015-9025EPSS 0.7%

    In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE application.

  25. 5.5CVE-2015-9024EPSS 0.5%

    In all Android releases from CAF using the Linux kernel, some interfaces were improperly exposed to QTEE applications.

  26. 7.8CVE-2015-9023EPSS 0.7%

    In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the PlayReady API.

  27. 7.0CVE-2015-9022EPSS 0.5%

    In all Android releases from CAF using the Linux kernel, time-of-check Time-of-use (TOCTOU) Race Conditions exist in several TZ APIs.

  28. 5.5CVE-2015-9021EPSS 0.5%

    In all Android releases from CAF using the Linux kernel, access control to SMEM memory was not enabled.

  29. 7.8CVE-2015-9020EPSS 0.6%

    In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in the unlocking of memory.

  30. 7.8CVE-2014-9967EPSS 0.6%

    In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM.

  31. 7.0CVE-2014-9966EPSS 0.4%

    In all Android releases from CAF using the Linux kernel, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability exists in Secure Display.

  32. 7.8CVE-2014-9965EPSS 0.6%

    In all Android releases from CAF using the Linux kernel, a vulnerability exists in the parsing of an SCM call.

  33. 7.8CVE-2014-9964EPSS 0.6%

    In all Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in debug functionality.

  34. 7.8CVE-2014-9963EPSS 0.7%

    In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in WideVine DRM.

  35. 7.8CVE-2014-9962EPSS 0.6%

    In all Android releases from CAF using the Linux kernel, a vulnerability exists in the parsing of a DRM provisioning command.

  36. 7.8CVE-2014-9961EPSS 0.6%

    In all Android releases from CAF using the Linux kernel, a vulnerability in eMMC write protection exists that can be used to bypass power-on write protection.

  37. 7.8CVE-2014-9960EPSS 0.7%

    In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the PlayReady API.

  38. 7.5CVE-2014-7919EPSS 0.9%

    b/libs/gui/ISurfaceComposer.cpp in Android allows attackers to trigger a denial of service (null pointer dereference and process crash).

  39. 6.5CVE-2015-3830EPSS 0.5%

    The stock Android browser address bar in all Android operating systems suffers from Address Bar Spoofing, which allows remote attackers to trick a victim by displaying a malicious page for legitimate domain names.

  40. 7.0CVE-2016-10297EPSS 0.3%

    In TrustZone in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerability could potentially exist.

  41. 7.8CVE-2015-9007EPSS 0.5%

    In TrustZone in all Android releases from CAF using the Linux kernel, a Double Free vulnerability could potentially exist.

  42. 7.8CVE-2015-9006EPSS 0.5%

    In Resource Power Manager (RPM) in all Android releases from CAF using the Linux kernel, an Improper Access Control vulnerability could potentially exist.

  43. 7.8CVE-2015-9005EPSS 0.6%

    In TrustZone in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflow vulnerability could potentially exist.

  44. 7.8CVE-2014-9952EPSS 0.5%

    In the Secure File System in all Android releases from CAF using the Linux kernel, a capture-replay vulnerability could potentially exist.

  45. 5.5CVE-2014-9951EPSS 0.4%

    In TrustZone in all Android releases from CAF using the Linux kernel, an Information Exposure Through Timing Discrepancy vulnerability could potentially exist.

  46. 7.8CVE-2014-9950EPSS 0.5%

    In Core Kernel in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist.

  47. 7.8CVE-2014-9949EPSS 0.5%

    In TrustZone in all Android releases from CAF using the Linux kernel, an Untrusted Pointer Dereference vulnerability could potentially exist.

  48. 7.8CVE-2014-9948EPSS 0.5%

    In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Validation of Array Index vulnerability could potentially exist.

  49. 5.5CVE-2014-9947EPSS 0.4%

    In TrustZone in all Android releases from CAF using the Linux kernel, an Information Exposure vulnerability could potentially exist.

  50. 7.8CVE-2014-9946EPSS 0.5%

    In Core Kernel in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.