Android (Google Inc.) - vulnerabilities (CVEs)

960 CVEs, 0 in the last 30 days, 28 known versions, newest CVE from 2018-12-07. Vendor: Google Inc..

CVEs of Android

CVE-2018-9570 - CVSS 7.8 (high), 2018-12-07: In impd_parse_drc_ext_v1 of impd_drc_dynamic_payload.c there is a possible out-of-bound write due to missing bounds check. This could lead to remote code…
CVE-2018-9574 - CVSS 7.8 (high), 2018-12-07: In impd_parse_split_drc_characteristic of impd_drc_static_payload.c there is a possible out of bounds write due to missing bounds check. This could lead to…
CVE-2018-9577 - CVSS 7.8 (high), 2018-12-07: In impd_parametric_drc_parse_gain_set_params of impd_drc_static_payload.c there is a possible out of bounds write due to missing bounds check. This could lead…
CVE-2018-9517 - CVSS 6.7 (medium), 2018-12-07: In pppol2tp_connect, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution…
CVE-2018-9569 - CVSS 8.8 (high), 2018-12-07: In impd_init_drc_decode_post_config of impd_drc_gain_decoder.c there is a possible out-of-bound write due to incorrect bounds check. This could lead to remote…
CVE-2018-9573 - CVSS 7.8 (high), 2018-12-07: In impd_parse_filt_block of impd_drc_dynamic_payload.c there is a possible out of bounds write due to missing bounds check. This could lead to remote code…
CVE-2018-9576 - CVSS 7.8 (high), 2018-12-07: In impd_parse_parametric_drc_instructions of impd_drc_static_payload.c there is a possible out of bounds write due to missing bounds check. This could lead to…
CVE-2018-9519 - CVSS 6.4 (medium), 2018-12-07: In easelcomm_hw_build_scatterlist, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with…
CVE-2018-9571 - CVSS 8.8 (high), 2018-12-07: In impd_parse_loud_eq_instructions of impd_drc_dynamic_payload.c there is a possible out-of-bound write due to missing bounds check. This could lead to remote…
CVE-2018-9575 - CVSS 7.8 (high), 2018-12-07: In impd_parse_dwnmix_instructions of impd_drc_static_payload.c there is a possible out of bounds write due to missing bounds check. This could lead to remote…
CVE-2018-9578 - CVSS 9.8 (critical), 2018-12-07: In ixheaacd_adts_crc_start_reg of ixheaacd_adts_crc_check.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote…
CVE-2018-9518 - CVSS 7.8 (high), 2018-12-07: In nfc_llcp_build_sdreq_tlv of llcp_commands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…
CVE-2018-9554 - CVSS 5.5 (medium), 2018-12-06: In dumpExtractors of IMediaExtractor.cp, there is a possible disclosure of recently accessed media files due to a permissions bypass. This could lead to local…
CVE-2018-9557 - CVSS 7.8 (high), 2018-12-06: In really_install_package of install.cpp, there is a possible free of arbitrary memory due to uninitialized data. This could lead to local escalation of…
CVE-2018-9560 - CVSS 7.8 (high), 2018-12-06: In HID_DevAddRecord of hidd_api.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege in…
CVE-2018-9566 - CVSS 5.7 (medium), 2018-12-06: In process_service_search_rsp of sdp_discovery.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information…
CVE-2018-9547 - CVSS 7.8 (high), 2018-12-06: In unflatten of GraphicBuffer.cpp, there is a possible bad fd close due to improper input validation. This could lead to local escalation of privilege in the…
CVE-2018-9550 - CVSS 7.8 (high), 2018-12-06: In CAacDecoder_Init of aacdecoder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no…
CVE-2018-9553 - CVSS 7.8 (high), 2018-12-06: In MasteringMetadata::Parse of mkvparser.cc there is a possible double free due to an insecure default value. This could lead to remote code execution with no…
CVE-2018-9556 - CVSS 9.8 (critical), 2018-12-06: In ParsePayloadHeader of payload_metadata.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of…
CVE-2018-9559 - CVSS 7.8 (high), 2018-12-06: In persist_set_key and other functions of cryptfs.cpp, there is a possible out-of-bounds write due to an uncaught error. This could lead to local escalation…
CVE-2018-9565 - CVSS 7.5 (high), 2018-12-06: In readBytes of xltdecwbxml.c, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no…
CVE-2018-9568 - CVSS 7.8 (high), 2018-12-06: In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional…
CVE-2018-9549 - CVSS 7.8 (high), 2018-12-06: In lppTransposer of lpp_tran.cpp there is a possible out of bounds write due to missing bounds check. This could lead to remote code execution with no…
CVE-2018-9552 - CVSS 5.5 (medium), 2018-12-06: In ihevcd_sao_shift_ctb of ihevcd_sao.c there is a possible out of bounds write due to missing bounds check. This could lead to information disclosure with no…
CVE-2018-9555 - CVSS 8.8 (high), 2018-12-06: In l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege…
CVE-2018-9558 - CVSS 7.8 (high), 2018-12-06: In rw_t2t_handle_tlv_detect of rw_t2t_ndef.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of…
CVE-2018-9562 - CVSS 7.5 (high), 2018-12-06: In bta_ag_do_disc of bta_ag_sdp.cc, there is a possible out-of-bound read due to an incorrect parameter size. This could lead to remote information disclosure…
CVE-2018-9567 - CVSS 7.8 (high), 2018-12-06: On Pixel devices there is a bug causing verified boot to show the same certificate fingerprint despite using different signing keys. This may lead to local…
CVE-2018-9548 - CVSS 5.5 (medium), 2018-12-06: In multiple functions of ContentProvider.java, there is a possible permission bypass due to a missing URI validation. This could lead to local information…
CVE-2018-9551 - CVSS 7.8 (high), 2018-12-06: In CAacDecoder_Init of aacdecoder.cpp, there is a possible out-of-bound write due to a missing bounds check. This could lead to remote code execution in the…
CVE-2018-9538 - CVSS 7.8 (high), 2018-12-06: In V4L2SliceVideoDecodeAccelerator::Dequeue of v4l2_slice_video_decode_accelerator.cc, there is a possible out of bounds read of a function pointer due to an…
CVE-2018-9542 - CVSS 7.5 (high), 2018-11-14: In avrc_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information…
CVE-2018-9545 - CVSS 7.8 (high), 2018-11-14: In BTA_HdRegisterApp of bta_hd_api.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege…
CVE-2018-9541 - CVSS 7.5 (high), 2018-11-14: In avrc_pars_vendor_rsp of avcr_pars_ct.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote information…
CVE-2018-9544 - CVSS 5.5 (medium), 2018-11-14: In register_app of btif_hd.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure in the…
CVE-2018-9543 - CVSS 5.5 (medium), 2018-11-14: In trim_device of f2fs_format_utils.c, it is possible that the data partition is not wiped during a factory reset. This could lead to local information…
CVE-2018-9580 - CVSS 9.8 (critical), 2018-11-14: A Elevation of privilege vulnerability in the HTC bootloader. Product: Android. Versions: Android kernel. Android ID: A-76222002.
CVE-2018-9522 - CVSS 7.8 (high), 2018-11-14: In the serialization functions of StatsLogEventWrapper.java, there is a possible out-of-bounds write due to unnecessary functionality which may be abused.…
CVE-2018-9539 - CVSS 7 (high), 2018-11-14: In the ClearKey CAS descrambler, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no…
CVE-2018-9525 - CVSS 7.8 (high), 2018-11-14: In the AndroidManifest.xml file defining the SliceBroadcastReceiver handler for com.android.settings.slice.action.WIFI_CHANGED, there is a possible…
CVE-2018-9528 - CVSS 8.8 (high), 2018-11-14: In ixheaacd_over_lap_add1_armv8 of ixheaacd_overlap_add1.s there is a possible out of bounds write due to a missing bounds check. This could lead to remote…
CVE-2018-9531 - CVSS 7.8 (high), 2018-11-14: In AudioSpecificConfig_Parse of tpdec_asc.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution…
CVE-2018-9534 - CVSS 8.8 (high), 2018-11-14: In ixheaacd_mps_getstridemap of ixheaacd_mps_parse.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code…
CVE-2018-9537 - CVSS 8.8 (high), 2018-11-14: In CAacDecoder_DecodeFrame of aacdecode.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution…
CVE-2018-9521 - CVSS 8.8 (high), 2018-11-14: In parseMPEGCCData of NuPlayer2CCDecoder.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code…
CVE-2018-9524 - CVSS 7.8 (high), 2018-11-14: In functionality implemented in System UI, there are insufficient protections implemented around overlay windows. This could lead to local escalation of…
CVE-2018-9527 - CVSS 7.8 (high), 2018-11-14: In vorbis_book_decodev_set of codebook.c there is a possible out of bounds write due to missing bounds check. This could lead to remote code execution with no…
CVE-2018-9530 - CVSS 8.8 (high), 2018-11-14: In ixheaacd_tns_ar_filter_dec of ixheaacd_aac_tns.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code…
CVE-2018-9533 - CVSS 8.8 (high), 2018-11-14: In ixheaacd_dec_data_init of ixheaacd_create.c there is a possible out of write read due to a missing bounds check. This could lead to remote code execution…
CVE-2018-9536 - CVSS 7.8 (high), 2018-11-14: In numerous functions of libFDK, there are possible out of bounds writes due to incorrect bounds checks. This could lead to remote code execution with no…
CVE-2018-9457 - CVSS 5.5 (medium), 2018-11-14: In onCheckedChanged of BluetoothPairingController.java, there is a possible way to retrieve contact information due to a permissions bypass. This could lead…
CVE-2018-9540 - CVSS 7.5 (high), 2018-11-14: In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information…
CVE-2018-9523 - CVSS 7.8 (high), 2018-11-14: In Parcel.writeMapInternal of Parcel.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead…
CVE-2018-9526 - CVSS 7.5 (high), 2018-11-14: In device configuration data, there is an improperly configured setting. This could lead to remote disclosure of device location. User interaction is not…
CVE-2018-9529 - CVSS 8.8 (high), 2018-11-14: In ixheaacd_individual_ch_stream of ixheaacd_channel.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code…
CVE-2018-9532 - CVSS 8.8 (high), 2018-11-14: In ixheaacd_extract_frame_info_ld of ixheaacd_env_extr.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code…
CVE-2018-9535 - CVSS 8.8 (high), 2018-11-14: In ixheaacd_reset_acelp_data_fix of ixheaacd_lpc.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code…
CVE-2018-9347 - CVSS 6.5 (medium), 2018-11-14: In function SMF_ParseMetaEvent of file eas_smf.c there is incorrect input validation causing an infinite loop. This could lead to a remote temporary DoS with…
CVE-2018-9446 - CVSS 9.8 (critical), 2018-11-06: In smp_br_state_machine_event of smp_br_main.cc, there is a possible out of bounds write due to memory corruption. This could lead to remote code execution…
CVE-2018-9451 - CVSS 5.5 (medium), 2018-11-06: In DynamicRefTable::load of ResourceTypes.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…
CVE-2018-9455 - CVSS 7.5 (high), 2018-11-06: In sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service…
CVE-2018-9465 - CVSS 7.8 (high), 2018-11-06: In task_get_unused_fd_flags of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with…
CVE-2018-9516 - CVSS 7.8 (high), 2018-11-06: In hid_debug_events_read of drivers/hid/hid-debug.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local…
CVE-2018-9445 - CVSS 6.8 (medium), 2018-11-06: In readMetadata of Utils.cpp, there is a possible path traversal bug due to a confused deputy. This could lead to local escalation of privilege when mounting…
CVE-2018-9450 - CVSS 8.8 (high), 2018-11-06: In avrc_proc_vendor_command of avrc_api.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution…
CVE-2018-9454 - CVSS 5.5 (medium), 2018-11-06: In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with…
CVE-2018-9459 - CVSS 8.8 (high), 2018-11-06: In Attachment of Attachment.java and getFilePath of EmlAttachmentProvider.java, there is a possible Elevation of Privilege due to a path traversal error. This…
CVE-2018-9489 - CVSS 7.5 (high), 2018-11-06: When wifi is switched, function sendNetworkStateChangeBroadcast of WifiStateMachine.java broadcasts an intent including detailed wifi network information.…
CVE-2018-9448 - CVSS 7.5 (high), 2018-11-06: In avct_bcb_msg_ind of avct_bcb_act.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure…
CVE-2018-9453 - CVSS 5.5 (medium), 2018-11-06: In avdt_msg_prs_cfg of avdt_msg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with…
CVE-2018-9458 - CVSS 7.8 (high), 2018-11-06: In computeFocusedWindow of RootWindowContainer.java, and related functions, there is possible interception of keypresses due to focus being on the wrong…
CVE-2018-9488 - CVSS 7.8 (high), 2018-11-06: In the SELinux permissions of crash_dump.te, there is a permissions bypass due to a missing restriction. This could lead to a local escalation of privilege,…
CVE-2018-9356 - CVSS 9.8 (critical), 2018-11-06: In bnep_data_ind of bnep_main.c, there is a possible remote code execution due to a double free. This could lead to remote code execution with no additional…
CVE-2018-9359 - CVSS 7.5 (high), 2018-11-06: In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure…
CVE-2018-9363 - CVSS 8.4 (high), 2018-11-06: In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional execution privileges…
CVE-2018-9422 - CVSS 7.8 (high), 2018-11-06: In get_futex_key of futex.c, there is a use-after-free due to improper locking. This could lead to local escalation of privilege with no additional privileges…
CVE-2018-9437 - CVSS 5.5 (medium), 2018-11-06: In getstring of ID3.cpp there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote denial of service with no additional…
CVE-2018-9355 - CVSS 9.8 (critical), 2018-11-06: In bta_dm_sdp_result of bta_dm_act.cc, there is a possible out of bounds stack write due to a missing bounds check. This could lead to remote code execution…
CVE-2018-9358 - CVSS 7.5 (high), 2018-11-06: In gatts_process_attribute_req of gatt_sc.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote…
CVE-2018-9362 - CVSS 7.5 (high), 2018-11-06: In processMessagePart of InboundSmsHandler.java, there is a possible remote denial of service due to improper input validation. This could lead to remote…
CVE-2018-9415 - CVSS 7.8 (high), 2018-11-06: In driver_override_store and driver_override_show of bus.c, there is a possible double free due to improper locking. This could lead to local escalation of…
CVE-2018-9436 - CVSS 7.5 (high), 2018-11-06: In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with…
CVE-2018-9444 - CVSS 5.5 (medium), 2018-11-06: In ih264d_video_decode of ih264d_api.c there is a possible resource exhaustion due to an infinite loop. This could lead to remote temporary device denial of…
CVE-2018-9357 - CVSS 7.8 (high), 2018-11-06: In BNEP_Write of bnep_api.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with…
CVE-2018-9361 - CVSS 7.5 (high), 2018-11-06: In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure…
CVE-2018-9385 - CVSS 7.8 (high), 2018-11-06: In driver_override_store of bus.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege…
CVE-2018-9427 - CVSS 7.8 (high), 2018-11-06: In CopyToOMX of OMXNodeInstance.cpp there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote arbitrary code…
CVE-2018-9438 - CVSS 5 (medium), 2018-11-06: When a device connects only over WiFi VPN, the device may not receive security updates due to some incorrect checks. This could lead to a local denial of…
CVE-2018-9515 - CVSS 7.8 (high), 2018-10-02: In sdcardfs_create and sdcardfs_mkdir of inode.c, there is a possible memory corruption due to improper locking. This could lead to local escalation of…
CVE-2018-9514 - CVSS 7.8 (high), 2018-10-02: In sdcardfs_open of file.c, there is a possible Use After Free due to an unusual root cause. This could lead to local escalation of privilege with no…
CVE-2018-9513 - CVSS 7.8 (high), 2018-10-02: In copy_process of fork.c, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional…
CVE-2018-9511 - CVSS 5.5 (medium), 2018-10-02: In ipSecSetEncapSocketOwner of XfrmController.cpp, there is a possible failure to initialize a security feature due to uninitialized data. This could lead to…
CVE-2018-9509 - CVSS 6.5 (medium), 2018-10-02: In smp_proc_master_id of smp_act.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure…
CVE-2018-9510 - CVSS 6.5 (medium), 2018-10-02: In smp_proc_enc_info of smp_act.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure…
CVE-2018-9508 - CVSS 6.5 (medium), 2018-10-02: In smp_process_keypress_notification of smp_act.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote…
CVE-2018-9507 - CVSS 6.5 (medium), 2018-10-02: In bta_av_proc_meta_cmd of bta_av_act.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information…
CVE-2018-9506 - CVSS 6.5 (medium), 2018-10-02: In avrc_msg_cback of avrc_api.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to remote information disclosure over…
CVE-2018-9505 - CVSS 6.5 (medium), 2018-10-02: In mca_ccb_hdl_req of mca_cact.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over…
CVE-2018-9504 - CVSS 8.8 (high), 2018-10-02: In sdp_copy_raw_data of sdp_discovery.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution…