cve.bz

google android vulnerabilities, newest first, page 150

Filter
  1. 5.5CVE-2017-0599EPSS 0.7%

    A remote denial of service vulnerability in libhevc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of s…

  2. 5.5CVE-2017-0598EPSS 0.4%

    An information disclosure vulnerability in the Framework APIs could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it c…

  3. 7.8CVE-2017-0597EPSS 0.7%

    An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local acce…

  4. 7.8CVE-2017-0596EPSS 0.8%

    An elevation of privilege vulnerability in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used …

  5. 7.8CVE-2017-0595EPSS 0.8%

    An elevation of privilege vulnerability in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used …

  6. 7.8CVE-2017-0594EPSS 0.8%

    An elevation of privilege vulnerability in codecs/aacenc/SoftAACEncoder2.cpp in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is ra…

  7. 7.8CVE-2017-0593EPSS 0.5%

    An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to obtain access to custom permissions. This issue is rated as High because it is a general bypass for operating system protections th…

  8. 7.8CVE-2017-0592EPSS 1.5%

    A remote code execution vulnerability in FLACExtractor.cpp in libstagefright in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Cr…

  9. 7.8CVE-2017-0591EPSS 1.5%

    A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility…

  10. 7.8CVE-2017-0590EPSS 1.5%

    A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibilit…

  11. 7.8CVE-2017-0589EPSS 1.5%

    A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibilit…

  12. 7.8CVE-2017-0588EPSS 1.5%

    A remote code execution vulnerability in id3/ID3.cpp in libstagefright in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical…

  13. 7.8CVE-2017-0587EPSS 1.5%

    A remote code execution vulnerability in libmpeg2 in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibili…

  14. 5.5CVE-2017-0493EPSS 0.3%

    An information disclosure vulnerability in File-Based Encryption could enable a local malicious attacker to bypass operating system protections for the lock screen. This issue is rated as Moderate due to the possibility of bypassing the lo…

  15. 7.0CVE-2017-0465EPSS 0.6%

    An elevation of privilege vulnerability in the Qualcomm ADSPRPC driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromisin…

  16. 7.0CVE-2016-10282EPSS 0.5%

    An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromisin…

  17. 7.0CVE-2016-10281EPSS 0.5%

    An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromisin…

  18. 7.0CVE-2016-10280EPSS 0.5%

    An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromisin…

  19. 7.8CVE-2016-10276EPSS 0.6%

    An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local per…

  20. 7.8CVE-2016-10275EPSS 0.7%

    An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local per…

  21. 7.8CVE-2016-10274EPSS 0.6%

    An elevation of privilege vulnerability in the MediaTek touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a l…

  22. 7.8CVE-2017-0331EPSS 0.7%

    An elevation of privilege vulnerability in the NVIDIA video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local per…

  23. 7.8CVE-2015-9004EPSS 0.8%

    kernel/events/core.c in the Linux kernel before 3.19 mishandles counter grouping, which allows local users to gain privileges via a crafted application, related to the perf_pmu_register and perf_event_open functions.

  24. 7.0CVE-2014-9940EPSS 1.6%

    The regulator_ena_gpio_free function in drivers/regulator/core.c in the Linux kernel before 3.19 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted application.

  25. 3.7CVE-2017-3544EPSS 1.7%

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult…

  26. 8.8CVE-2016-2433EPSS 0.7%

    The Broadcom Wi-Fi driver for Android, as used by BlackBerry smartphones before Build AAE570, allows remote attackers to execute arbitrary code in the context of the kernel.

  27. 7.5CVE-2016-0833EPSS 0.6%

    Android allows users to cause a denial of service.

  28. 9.8CVE-2016-6727EPSS 2.7%

    The Qualcomm GPS subsystem in Android on Android One devices allows remote attackers to execute arbitrary code.

  29. 9.8CVE-2016-6726EPSS 0.8%

    Unspecified vulnerability in Qualcomm components in Android on Nexus 6 and Android One devices.

  30. 9.8CVE-2016-1155EPSS 1.8%

    HTTP header injection vulnerability in the URLConnection class in Android OS 2.2 through 6.0 allows remote attackers to execute arbitrary scripts or set arbitrary values in cookies.

  31. 9.8CVE-2014-7921EPSS 0.9%

    mediaserver in Android 4.0.3 through 5.x before 5.1 allows attackers to gain privileges. NOTE: This is a different vulnerability than CVE-2014-7920.

  32. 9.8CVE-2014-7920EPSS 1.7%

    mediaserver in Android 2.2 through 5.x before 5.1 allows attackers to gain privileges. NOTE: This is a different vulnerability than CVE-2014-7921.

  33. 7.0CVE-2016-5856EPSS 0.6%

    Drivers/soc/qcom/spcom.c in the Qualcomm SPCom driver in the Android kernel 2017-03-05 allows local users to gain privileges, a different vulnerability than CVE-2016-5857.

  34. 7.0CVE-2017-0578EPSS 0.8%

    An elevation of privilege vulnerability in the DTS sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a pri…

  35. 7.0CVE-2017-0566EPSS 0.8%

    An elevation of privilege vulnerability in the MediaTek camera driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising…

  36. 7.0CVE-2017-0565EPSS 0.8%

    An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromisin…

  37. 7.8CVE-2017-0562EPSS 0.8%

    An elevation of privilege vulnerability in the MediaTek touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a l…

  38. 5.5CVE-2017-0560EPSS 0.5%

    An information disclosure vulnerability in the factory reset process could enable a local malicious attacker to access data from the previous owner. This issue is rated as Moderate due to the possibility of bypassing device protection. Pro…

  39. 5.5CVE-2017-0559EPSS 0.5%

    An information disclosure vulnerability in libskia could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access data without permission. Prod…

  40. 5.5CVE-2017-0558EPSS 0.6%

    An information disclosure vulnerability in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access data without permission. …

  41. 5.5CVE-2017-0557EPSS 0.6%

    An information disclosure vulnerability in libmpeg2 in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access data without …

  42. 5.5CVE-2017-0556EPSS 0.5%

    An information disclosure vulnerability in libmpeg2 in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access data without …

  43. 5.5CVE-2017-0555EPSS 0.5%

    An information disclosure vulnerability in libavc in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access data without pe…

  44. 7.8CVE-2017-0554EPSS 1.0%

    An elevation of privilege vulnerability in the Telephony component could enable a local malicious application to access capabilities outside of its permission levels. This issue is rated as Moderate because it could be used to gain access …

  45. 7.0CVE-2017-0553EPSS 2.3%

    An elevation of privilege vulnerability in libnl could enable a local malicious application to execute arbitrary code within the context of the Wi-Fi service. This issue is rated as Moderate because it first requires compromising a privile…

  46. 5.5CVE-2017-0552EPSS 0.7%

    A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of se…

  47. 5.5CVE-2017-0551EPSS 1.2%

    A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of se…

  48. 5.5CVE-2017-0550EPSS 0.7%

    A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of se…

  49. 5.5CVE-2017-0549EPSS 0.7%

    A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of se…

  50. 5.5CVE-2017-0548EPSS 0.8%

    A remote denial of service vulnerability in libskia could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product…