cve.bz

google android vulnerabilities, newest first, page 149

Filter
  1. 7.8CVE-2014-9945EPSS 0.5%

    In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist.

  2. 7.8CVE-2014-9944EPSS 0.6%

    In the Secure File System in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflow vulnerability could potentially exist.

  3. 7.8CVE-2014-9943EPSS 0.5%

    In Core Kernel in all Android releases from CAF using the Linux kernel, a Null Pointer Dereference vulnerability could potentially exist.

  4. 7.8CVE-2014-9942EPSS 0.5%

    In Boot in all Android releases from CAF using the Linux kernel, a Use of Uninitialized Variable vulnerability could potentially exist.

  5. 7.0CVE-2014-9941EPSS 0.4%

    In the Embedded File System in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerability could potentially exist.

  6. 7.8CVE-2014-9930EPSS 0.5%

    In WCDMA in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.

  7. 7.8CVE-2014-9929EPSS 0.5%

    In WCDMA in all Android releases from CAF using the Linux kernel, a Use of Out-of-range Pointer Offset vulnerability could potentially exist.

  8. 7.8CVE-2014-9928EPSS 0.5%

    In GERAN in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist.

  9. 7.8CVE-2014-9927EPSS 0.4%

    In UIM in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist.

  10. 7.8CVE-2014-9926EPSS 0.5%

    In GNSS in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.

  11. 7.8CVE-2014-9925EPSS 0.5%

    In HDR in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist.

  12. 7.8CVE-2014-9924EPSS 0.5%

    In 1x in all Android releases from CAF using the Linux kernel, a Signed to Unsigned Conversion Error could potentially occur.

  13. 7.8CVE-2014-9923EPSS 0.5%

    In NAS in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist.

  14. 7.5CVE-2015-1529EPSS 0.9%

    Integer overflow in soundtrigger/ISoundTriggerHwService.cpp in Android allows attacks to cause a denial of service via unspecified vectors.

  15. 7.0CVE-2016-10242EPSS 0.4%

    A time-of-check time-of-use race condition could potentially exist in the secure file system in all Android releases from CAF using the Linux kernel.

  16. 7.8CVE-2016-10239EPSS 0.7%

    In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel due to improper input validation an integer overflow vulnerability leading to a buffer overflow could potentially occur …

  17. 7.8CVE-2016-10238EPSS 0.6%

    In QSEE in all Android releases from CAF using the Linux kernel access control may potentially be bypassed due to a page alignment issue.

  18. 7.8CVE-2016-10237EPSS 0.6%

    If shared content protection memory were passed as the secure camera memory buffer by the HLOS to a trusted application (TA) in all Android releases from CAF using the Linux kernel, the TA would not detect an issue and it would be treated …

  19. 7.8CVE-2015-9003EPSS 0.6%

    In TrustZone a cryptographic issue can potentially occur in all Android releases from CAF using the Linux kernel.

  20. 7.8CVE-2015-9002EPSS 0.6%

    In TrustZone an out-of-range pointer offset vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.

  21. 5.5CVE-2015-9001EPSS 0.5%

    In TrustZone an information exposure vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.

  22. 7.8CVE-2015-9000EPSS 0.6%

    In TrustZone an untrusted pointer dereference vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.

  23. 7.8CVE-2015-8999EPSS 0.7%

    In TrustZone a buffer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel while loading an ELF file.

  24. 7.8CVE-2015-8998EPSS 0.6%

    In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.

  25. 7.0CVE-2015-8997EPSS 0.4%

    In TrustZone a time-of-check time-of-use race condition could potentially exist in a listener routine in all Android releases from CAF using the Linux kernel.

  26. 7.0CVE-2015-8996EPSS 0.4%

    In TrustZone a time-of-check time-of-use race condition could potentially exist in a QFPROM routine in all Android releases from CAF using the Linux kernel.

  27. 7.8CVE-2015-8995EPSS 0.6%

    In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.

  28. 7.8CVE-2014-9937EPSS 0.7%

    In TrustZone a buffer overflow vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.

  29. 7.0CVE-2014-9936EPSS 0.6%

    In TrustZone a time-of-check time-of-use race condition could potentially exist in an authentication routine in all Android releases from CAF using the Linux kernel.

  30. 7.8CVE-2014-9935EPSS 0.7%

    In TrustZone an integer overflow vulnerability leading to a buffer overflow could potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.

  31. 7.8CVE-2014-9934EPSS 0.4%

    A PKCS#1 v1.5 signature verification routine in all Android releases from CAF using the Linux kernel may not check padding.

  32. 7.8CVE-2014-9933EPSS 0.6%

    Due to missing input validation in all Android releases from CAF using the Linux kernel, HLOS can write to fuses for which it should not have access.

  33. 7.8CVE-2014-9932EPSS 0.6%

    In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel due to an improper address range computation.

  34. 7.8CVE-2014-9931EPSS 0.7%

    A buffer overflow vulnerability in all Android releases from CAF using the Linux kernel can potentially occur if an OEM performs an app region size customization due to a hard-coded value.

  35. 7.8CVE-2017-8246EPSS 0.2%

    In function msm_pcm_playback_close() in all Android releases from CAF using the Linux kernel, prtd is assigned substream->runtime->private_data. Later, prtd is freed. However, prtd is not sanitized and set to NULL, resulting in a dangling …

  36. 7.8CVE-2017-8245EPSS 0.2%

    In all Android releases from CAF using the Linux kernel, while processing a voice SVC request which is nonstandard by specifying a payload size that will overflow its own declared size, an out of bounds memory copy occurs.

  37. 7.0CVE-2017-8244EPSS 0.1%

    In core_info_read and inst_info_read in all Android releases from CAF using the Linux kernel, variable "dbg_buf", "dbg_buf->curr" and "dbg_buf->filled_size" could be modified by different threads at the same time, but they are not protecte…

  38. 5.5CVE-2017-0635EPSS 0.5%

    A remote denial of service vulnerability in HevcUtils.cpp in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as Low due to details specific to the…

  39. 5.5CVE-2017-0625EPSS 0.3%

    An information disclosure vulnerability in the MediaTek command queue driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensiti…

  40. 7.0CVE-2017-0620EPSS 0.7%

    An elevation of privilege vulnerability in the Qualcomm Secure Channel Manager driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requi…

  41. 7.0CVE-2017-0619EPSS 0.6%

    An elevation of privilege vulnerability in the Qualcomm pin controller driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires comp…

  42. 7.0CVE-2017-0618EPSS 0.5%

    An elevation of privilege vulnerability in the MediaTek command queue driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compr…

  43. 7.0CVE-2017-0617EPSS 0.6%

    An elevation of privilege vulnerability in the MediaTek video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising …

  44. 7.0CVE-2017-0616EPSS 0.6%

    An elevation of privilege vulnerability in the MediaTek system management interrupt driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first …

  45. 7.0CVE-2017-0615EPSS 0.6%

    An elevation of privilege vulnerability in the MediaTek power driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising …

  46. 7.8CVE-2017-0604EPSS 0.6%

    An elevation of privilege vulnerability in the kernel Qualcomm power driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a …

  47. 4.7CVE-2017-0603EPSS 0.5%

    A denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as Moderate because it requires an uncommon device configurat…

  48. 5.5CVE-2017-0602EPSS 0.4%

    An information disclosure vulnerability in Bluetooth could allow a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as Moderate due to details spe…

  49. 5.5CVE-2017-0601EPSS 0.4%

    An Elevation of Privilege vulnerability in Bluetooth could potentially enable a local malicious application to accept harmful files shared via bluetooth without user permission. This issue is rated as Moderate due to local bypass of user i…

  50. 5.5CVE-2017-0600EPSS 0.4%

    A remote denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote deni…