Google Inc. - vulnerabilities (CVEs)

960 CVEs in 1 products, 0 in the last 30 days, newest from 2018-12-07.

Products

Android - 960 CVEs

Newest CVEs of Google Inc.

CVE-2018-9570 - CVSS 7.8 (high), 2018-12-07: In impd_parse_drc_ext_v1 of impd_drc_dynamic_payload.c there is a possible out-of-bound write due to missing bounds check. This could lead to remote code…
CVE-2018-9574 - CVSS 7.8 (high), 2018-12-07: In impd_parse_split_drc_characteristic of impd_drc_static_payload.c there is a possible out of bounds write due to missing bounds check. This could lead to…
CVE-2018-9577 - CVSS 7.8 (high), 2018-12-07: In impd_parametric_drc_parse_gain_set_params of impd_drc_static_payload.c there is a possible out of bounds write due to missing bounds check. This could lead…
CVE-2018-9517 - CVSS 6.7 (medium), 2018-12-07: In pppol2tp_connect, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution…
CVE-2018-9569 - CVSS 8.8 (high), 2018-12-07: In impd_init_drc_decode_post_config of impd_drc_gain_decoder.c there is a possible out-of-bound write due to incorrect bounds check. This could lead to remote…
CVE-2018-9573 - CVSS 7.8 (high), 2018-12-07: In impd_parse_filt_block of impd_drc_dynamic_payload.c there is a possible out of bounds write due to missing bounds check. This could lead to remote code…
CVE-2018-9576 - CVSS 7.8 (high), 2018-12-07: In impd_parse_parametric_drc_instructions of impd_drc_static_payload.c there is a possible out of bounds write due to missing bounds check. This could lead to…
CVE-2018-9519 - CVSS 6.4 (medium), 2018-12-07: In easelcomm_hw_build_scatterlist, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with…
CVE-2018-9571 - CVSS 8.8 (high), 2018-12-07: In impd_parse_loud_eq_instructions of impd_drc_dynamic_payload.c there is a possible out-of-bound write due to missing bounds check. This could lead to remote…
CVE-2018-9575 - CVSS 7.8 (high), 2018-12-07: In impd_parse_dwnmix_instructions of impd_drc_static_payload.c there is a possible out of bounds write due to missing bounds check. This could lead to remote…
CVE-2018-9578 - CVSS 9.8 (critical), 2018-12-07: In ixheaacd_adts_crc_start_reg of ixheaacd_adts_crc_check.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote…
CVE-2018-9518 - CVSS 7.8 (high), 2018-12-07: In nfc_llcp_build_sdreq_tlv of llcp_commands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…
CVE-2018-9554 - CVSS 5.5 (medium), 2018-12-06: In dumpExtractors of IMediaExtractor.cp, there is a possible disclosure of recently accessed media files due to a permissions bypass. This could lead to local…
CVE-2018-9557 - CVSS 7.8 (high), 2018-12-06: In really_install_package of install.cpp, there is a possible free of arbitrary memory due to uninitialized data. This could lead to local escalation of…
CVE-2018-9560 - CVSS 7.8 (high), 2018-12-06: In HID_DevAddRecord of hidd_api.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege in…
CVE-2018-9566 - CVSS 5.7 (medium), 2018-12-06: In process_service_search_rsp of sdp_discovery.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information…
CVE-2018-9547 - CVSS 7.8 (high), 2018-12-06: In unflatten of GraphicBuffer.cpp, there is a possible bad fd close due to improper input validation. This could lead to local escalation of privilege in the…
CVE-2018-9550 - CVSS 7.8 (high), 2018-12-06: In CAacDecoder_Init of aacdecoder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no…
CVE-2018-9553 - CVSS 7.8 (high), 2018-12-06: In MasteringMetadata::Parse of mkvparser.cc there is a possible double free due to an insecure default value. This could lead to remote code execution with no…
CVE-2018-9556 - CVSS 9.8 (critical), 2018-12-06: In ParsePayloadHeader of payload_metadata.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of…
CVE-2018-9559 - CVSS 7.8 (high), 2018-12-06: In persist_set_key and other functions of cryptfs.cpp, there is a possible out-of-bounds write due to an uncaught error. This could lead to local escalation…
CVE-2018-9565 - CVSS 7.5 (high), 2018-12-06: In readBytes of xltdecwbxml.c, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no…
CVE-2018-9568 - CVSS 7.8 (high), 2018-12-06: In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional…
CVE-2018-9549 - CVSS 7.8 (high), 2018-12-06: In lppTransposer of lpp_tran.cpp there is a possible out of bounds write due to missing bounds check. This could lead to remote code execution with no…
CVE-2018-9552 - CVSS 5.5 (medium), 2018-12-06: In ihevcd_sao_shift_ctb of ihevcd_sao.c there is a possible out of bounds write due to missing bounds check. This could lead to information disclosure with no…
CVE-2018-9555 - CVSS 8.8 (high), 2018-12-06: In l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege…
CVE-2018-9558 - CVSS 7.8 (high), 2018-12-06: In rw_t2t_handle_tlv_detect of rw_t2t_ndef.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of…
CVE-2018-9562 - CVSS 7.5 (high), 2018-12-06: In bta_ag_do_disc of bta_ag_sdp.cc, there is a possible out-of-bound read due to an incorrect parameter size. This could lead to remote information disclosure…
CVE-2018-9567 - CVSS 7.8 (high), 2018-12-06: On Pixel devices there is a bug causing verified boot to show the same certificate fingerprint despite using different signing keys. This may lead to local…
CVE-2018-9548 - CVSS 5.5 (medium), 2018-12-06: In multiple functions of ContentProvider.java, there is a possible permission bypass due to a missing URI validation. This could lead to local information…