Google Inc. Android

960 published vulnerabilities name this product. The 200 most recent are listed.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2018-9578Android-9In ixheaacd_adts_crc_start_reg of ixheaacd_adts_crc_check.c, there is a possible out of bounds write due to a missing bounds check. This couCRITICAL 9.80.8 %
CVE-2018-9577Android-9In impd_parametric_drc_parse_gain_set_params of impd_drc_static_payload.c there is a possible out of bounds write due to missing bounds checHIGH 7.80.9 %
CVE-2018-9576Android-9In impd_parse_parametric_drc_instructions of impd_drc_static_payload.c there is a possible out of bounds write due to missing bounds check. HIGH 7.80.9 %
CVE-2018-9575Android-9In impd_parse_dwnmix_instructions of impd_drc_static_payload.c there is a possible out of bounds write due to missing bounds check. This couHIGH 7.80.9 %
CVE-2018-9574Android-9In impd_parse_split_drc_characteristic of impd_drc_static_payload.c there is a possible out of bounds write due to missing bounds check. ThiHIGH 7.80.9 %
CVE-2018-9573Android-9In impd_parse_filt_block of impd_drc_dynamic_payload.c there is a possible out of bounds write due to missing bounds check. This could lead HIGH 7.80.9 %
CVE-2018-9571Android-9In impd_parse_loud_eq_instructions of impd_drc_dynamic_payload.c there is a possible out-of-bound write due to missing bounds check. This coHIGH 8.81.1 %
CVE-2018-9570Android-9In impd_parse_drc_ext_v1 of impd_drc_dynamic_payload.c there is a possible out-of-bound write due to missing bounds check. This could lead tHIGH 7.80.9 %
CVE-2018-9569Android-9In impd_init_drc_decode_post_config of impd_drc_gain_decoder.c there is a possible out-of-bound write due to incorrect bounds check. This coHIGH 8.81.1 %
CVE-2018-9519Android KernelIn easelcomm_hw_build_scatterlist, there is a possible out of bounds write due to a race condition. This could lead to local escalation of pMEDIUM 6.40.1 %
CVE-2018-9518Android KernelIn nfc_llcp_build_sdreq_tlv of llcp_commands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to loHIGH 7.80.3 %
CVE-2018-9517Android KernelIn pppol2tp_connect, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with SystMEDIUM 6.70.4 %
CVE-2018-9568Android kernelIn sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege wiHIGH 7.80.8 %
CVE-2018-9567Android kernelOn Pixel devices there is a bug causing verified boot to show the same certificate fingerprint despite using different signing keys. This maHIGH 7.80.1 %
CVE-2018-9566Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9In process_service_search_rsp of sdp_discovery.c, there is a possible out of bounds read due to a missing bounds check. This could lead to rMEDIUM 5.70.4 %
CVE-2018-9565Android-16680558In readBytes of xltdecwbxml.c, there is a possible out of bounds read due to an integer overflow. This could lead to remote information discHIGH 7.51.1 %
CVE-2018-9562Android-9In bta_ag_do_disc of bta_ag_sdp.cc, there is a possible out-of-bound read due to an incorrect parameter size. This could lead to remote infoHIGH 7.51.1 %
CVE-2018-9560Android-9In HID_DevAddRecord of hidd_api.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalatiHIGH 7.80.2 %
CVE-2018-9559Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9In persist_set_key and other functions of cryptfs.cpp, there is a possible out-of-bounds write due to an uncaught error. This could lead to HIGH 7.80.2 %
CVE-2018-9558Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9In rw_t2t_handle_tlv_detect of rw_t2t_ndef.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to locHIGH 7.80.2 %
CVE-2018-9557Android-7.0 Android-7.1.1 Android-7.1.2In really_install_package of install.cpp, there is a possible free of arbitrary memory due to uninitialized data. This could lead to local eHIGH 7.80.2 %
CVE-2018-9556Android-9In ParsePayloadHeader of payload_metadata.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote CRITICAL 9.82.0 %
CVE-2018-9555Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9In l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalatiHIGH 8.80.7 %
CVE-2018-9554Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1In dumpExtractors of IMediaExtractor.cp, there is a possible disclosure of recently accessed media files due to a permissions bypass. This cMEDIUM 5.50.2 %
CVE-2018-9553Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9In MasteringMetadata::Parse of mkvparser.cc there is a possible double free due to an insecure default value. This could lead to remote codeHIGH 7.81.1 %
CVE-2018-9552Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9In ihevcd_sao_shift_ctb of ihevcd_sao.c there is a possible out of bounds write due to missing bounds check. This could lead to information MEDIUM 5.50.5 %
CVE-2018-9551Android-9In CAacDecoder_Init of aacdecoder.cpp, there is a possible out-of-bound write due to a missing bounds check. This could lead to remote code HIGH 7.81.1 %
CVE-2018-9550Android-9In CAacDecoder_Init of aacdecoder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote codeHIGH 7.81.2 %
CVE-2018-9549Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9In lppTransposer of lpp_tran.cpp there is a possible out of bounds write due to missing bounds check. This could lead to remote code executiHIGH 7.81.1 %
CVE-2018-9548Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9In multiple functions of ContentProvider.java, there is a possible permission bypass due to a missing URI validation. This could lead to locMEDIUM 5.50.2 %
CVE-2018-9547Android-8.1 Android-9In unflatten of GraphicBuffer.cpp, there is a possible bad fd close due to improper input validation. This could lead to local escalation ofHIGH 7.80.2 %
CVE-2018-9538Android-8.1 Android-9In V4L2SliceVideoDecodeAccelerator::Dequeue of v4l2_slice_video_decode_accelerator.cc, there is a possible out of bounds read of a function HIGH 7.80.2 %
CVE-2018-9580Android kernelA Elevation of privilege vulnerability in the HTC bootloader. Product: Android. Versions: Android kernel. Android ID: A-76222002.CRITICAL 9.80.5 %
CVE-2018-9545Android-9In BTA_HdRegisterApp of bta_hd_api.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalaHIGH 7.80.2 %
CVE-2018-9544Android-9In register_app of btif_hd.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information diMEDIUM 5.50.2 %
CVE-2018-9543Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9In trim_device of f2fs_format_utils.c, it is possible that the data partition is not wiped during a factory reset. This could lead to local MEDIUM 5.50.2 %
CVE-2018-9542Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9In avrc_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote HIGH 7.51.1 %
CVE-2018-9541Android-9In avrc_pars_vendor_rsp of avcr_pars_ct.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote HIGH 7.51.1 %
CVE-2018-9540Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remHIGH 7.51.1 %
CVE-2018-9539Android-8.0 Android-8.1 Android-9In the ClearKey CAS descrambler, there is a possible use after free due to a race condition. This could lead to local escalation of privilegHIGH 7.00.4 %
CVE-2018-9537Android-9In CAacDecoder_DecodeFrame of aacdecode.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remotHIGH 8.81.5 %
CVE-2018-9536Android-9In numerous functions of libFDK, there are possible out of bounds writes due to incorrect bounds checks. This could lead to remote code execHIGH 7.81.4 %
CVE-2018-9535Android-9In ixheaacd_reset_acelp_data_fix of ixheaacd_lpc.c there is a possible out of bounds write due to a missing bounds check. This could lead toHIGH 8.80.7 %
CVE-2018-9534Android-9In ixheaacd_mps_getstridemap of ixheaacd_mps_parse.c there is a possible out of bounds write due to a missing bounds check. This could lead HIGH 8.80.7 %
CVE-2018-9533Android-9In ixheaacd_dec_data_init of ixheaacd_create.c there is a possible out of write read due to a missing bounds check. This could lead to remotHIGH 8.80.7 %
CVE-2018-9532Android-9In ixheaacd_extract_frame_info_ld of ixheaacd_env_extr.c there is a possible out of bounds write due to a missing bounds check. This could lHIGH 8.80.7 %
CVE-2018-9531Android-9In AudioSpecificConfig_Parse of tpdec_asc.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remHIGH 7.81.1 %
CVE-2018-9530Android-9In ixheaacd_tns_ar_filter_dec of ixheaacd_aac_tns.c there is a possible out of bounds write due to a missing bounds check. This could lead tHIGH 8.80.7 %
CVE-2018-9529Android-9In ixheaacd_individual_ch_stream of ixheaacd_channel.c there is a possible out of bounds write due to a missing bounds check. This could leaHIGH 8.80.7 %
CVE-2018-9528Android-9In ixheaacd_over_lap_add1_armv8 of ixheaacd_overlap_add1.s there is a possible out of bounds write due to a missing bounds check. This couldHIGH 8.80.7 %
CVE-2018-9527Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9In vorbis_book_decodev_set of codebook.c there is a possible out of bounds write due to missing bounds check. This could lead to remote codeHIGH 7.81.2 %
CVE-2018-9526Android-9In device configuration data, there is an improperly configured setting. This could lead to remote disclosure of device location. User interHIGH 7.50.9 %
CVE-2018-9525Android-9In the AndroidManifest.xml file defining the SliceBroadcastReceiver handler for com.android.settings.slice.action.WIFI_CHANGED, there is a pHIGH 7.80.2 %
CVE-2018-9524Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1In functionality implemented in System UI, there are insufficient protections implemented around overlay windows. This could lead to local eHIGH 7.80.2 %
CVE-2018-9523Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9In Parcel.writeMapInternal of Parcel.java, there is a possible parcel serialization/deserialization mismatch due to improper input validatioHIGH 7.80.2 %
CVE-2018-9522Android-9In the serialization functions of StatsLogEventWrapper.java, there is a possible out-of-bounds write due to unnecessary functionality which HIGH 7.80.2 %
CVE-2018-9521Android-9In parseMPEGCCData of NuPlayer2CCDecoder.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to rHIGH 8.81.5 %
CVE-2018-9457Android-8.0 Android-8.1 Android-9In onCheckedChanged of BluetoothPairingController.java, there is a possible way to retrieve contact information due to a permissions bypass.MEDIUM 5.50.2 %
CVE-2018-9347Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9In function SMF_ParseMetaEvent of file eas_smf.c there is incorrect input validation causing an infinite loop. This could lead to a remote tMEDIUM 6.50.8 %
CVE-2018-9516Android kernelIn hid_debug_events_read of drivers/hid/hid-debug.c, there is a possible out of bounds write due to a missing bounds check. This could lead HIGH 7.80.4 %
CVE-2018-9489Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0When wifi is switched, function sendNetworkStateChangeBroadcast of WifiStateMachine.java broadcasts an intent including detailed wifi networHIGH 7.51.0 %
CVE-2018-9488Android-8.0 Android-8.1 Android-9.0In the SELinux permissions of crash_dump.te, there is a permissions bypass due to a missing restriction. This could lead to a local escalatiHIGH 7.80.4 %
CVE-2018-9465Android kernelIn task_get_unused_fd_flags of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation HIGH 7.80.2 %
CVE-2018-9459Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1In Attachment of Attachment.java and getFilePath of EmlAttachmentProvider.java, there is a possible Elevation of Privilege due to a path traHIGH 8.81.7 %
CVE-2018-9458Android-8.0 Android-8.1In computeFocusedWindow of RootWindowContainer.java, and related functions, there is possible interception of keypresses due to focus being HIGH 7.80.6 %
CVE-2018-9455Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1In sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remoteHIGH 7.51.6 %
CVE-2018-9454Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local informationMEDIUM 5.50.2 %
CVE-2018-9453Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1In avdt_msg_prs_cfg of avdt_msg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatiMEDIUM 5.50.2 %
CVE-2018-9451Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1In DynamicRefTable::load of ResourceTypes.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to locaMEDIUM 5.50.2 %
CVE-2018-9450Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1In avrc_proc_vendor_command of avrc_api.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remoteHIGH 8.82.7 %
CVE-2018-9448Android-8.0 Android-8.1In avct_bcb_msg_ind of avct_bcb_act.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote infoHIGH 7.51.7 %
CVE-2018-9446Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1In smp_br_state_machine_event of smp_br_main.cc, there is a possible out of bounds write due to memory corruption. This could lead to remoteCRITICAL 9.82.1 %
CVE-2018-9445Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1In readMetadata of Utils.cpp, there is a possible path traversal bug due to a confused deputy. This could lead to local escalation of privilMEDIUM 6.80.8 %
CVE-2018-9444Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2In ih264d_video_decode of ih264d_api.c there is a possible resource exhaustion due to an infinite loop. This could lead to remote temporary MEDIUM 5.50.5 %
CVE-2018-9438Android-8.1When a device connects only over WiFi VPN, the device may not receive security updates due to some incorrect checks. This could lead to a loMEDIUM 5.00.2 %
CVE-2018-9437Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1In getstring of ID3.cpp there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote denial of service wiMEDIUM 5.50.9 %
CVE-2018-9436Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informatioHIGH 7.51.7 %
CVE-2018-9427Android-8.0 Android-8.1In CopyToOMX of OMXNodeInstance.cpp there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote arbiHIGH 7.81.8 %
CVE-2018-9422Android kernelIn get_futex_key of futex.c, there is a use-after-free due to improper locking. This could lead to local escalation of privilege with no addHIGH 7.80.2 %
CVE-2018-9415Android kernelIn driver_override_store and driver_override_show of bus.c, there is a possible double free due to improper locking. This could lead to locaHIGH 7.80.3 %
CVE-2018-9385Android kernelIn driver_override_store of bus.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalaHIGH 7.80.3 %
CVE-2018-9363Android kernelIn the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional executioHIGH 8.40.5 %
CVE-2018-9362Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1In processMessagePart of InboundSmsHandler.java, there is a possible remote denial of service due to improper input validation. This could lHIGH 7.51.6 %
CVE-2018-9361Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informaHIGH 7.51.7 %
CVE-2018-9359Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informaHIGH 7.51.7 %
CVE-2018-9358Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1In gatts_process_attribute_req of gatt_sc.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead HIGH 7.51.7 %
CVE-2018-9357Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1In BNEP_Write of bnep_api.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation HIGH 7.80.2 %
CVE-2018-9356Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1In bnep_data_ind of bnep_main.c, there is a possible remote code execution due to a double free. This could lead to remote code execution wiCRITICAL 9.83.2 %
CVE-2018-9355Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1In bta_dm_sdp_result of bta_dm_act.cc, there is a possible out of bounds stack write due to a missing bounds check. This could lead to remotCRITICAL 9.83.0 %
CVE-2018-9515Android kernelIn sdcardfs_create and sdcardfs_mkdir of inode.c, there is a possible memory corruption due to improper locking. This could lead to local esHIGH 7.80.7 %
CVE-2018-9514Android kernelIn sdcardfs_open of file.c, there is a possible Use After Free due to an unusual root cause. This could lead to local escalation of privilegHIGH 7.80.2 %
CVE-2018-9513Android kernelIn copy_process of fork.c, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with nHIGH 7.80.2 %
CVE-2018-9511Android-9.0In ipSecSetEncapSocketOwner of XfrmController.cpp, there is a possible failure to initialize a security feature due to uninitialized data. TMEDIUM 5.50.2 %
CVE-2018-9510Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0In smp_proc_enc_info of smp_act.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informatMEDIUM 6.50.7 %
CVE-2018-9509Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0In smp_proc_master_id of smp_act.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informaMEDIUM 6.50.7 %
CVE-2018-9508Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1In smp_process_keypress_notification of smp_act.cc, there is a possible out of bounds read due to an incorrect bounds check. This could leadMEDIUM 6.50.7 %
CVE-2018-9507Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0In bta_av_proc_meta_cmd of bta_av_act.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remoteMEDIUM 6.50.6 %
CVE-2018-9506Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0In avrc_msg_cback of avrc_api.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to remote informationMEDIUM 6.50.7 %
CVE-2018-9505Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0In mca_ccb_hdl_req of mca_cact.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informatiMEDIUM 6.50.6 %
CVE-2018-9504Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0In sdp_copy_raw_data of sdp_discovery.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remotHIGH 8.80.9 %
CVE-2018-9503Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0In rfc_process_mx_message of rfc_ts_frames.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remoHIGH 7.52.6 %
CVE-2018-9502Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0In rfc_process_mx_message of rfc_ts_frames.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remoMEDIUM 6.51.2 %
CVE-2018-9501Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0In the SetupWizard, there is a possible Factory Reset Protection bypass due to a permissions bypass. This could lead to local escalation of HIGH 7.80.2 %
CVE-2018-9499Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0In readVector of iCrypto.cpp, there is a possible invalid read due to uninitialized data. This could lead to local information disclosure frMEDIUM 5.50.3 %
CVE-2018-9498Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1In SkSampler::Fill of SkSampler.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execHIGH 7.81.6 %
CVE-2018-9497Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0In impeg2_fmt_conv_yuv420p_to_yuv420sp_uv_av8 of impeg2_format_conv.s there is a possible out of bounds write due to missing bounds check. THIGH 7.81.6 %
CVE-2018-9496Android-9.0In ixheaacd_real_synth_fft_p3 of ixheaacd_esbr_fft.c there is a possible out of bounds write due to a missing bounds check. This could lead HIGH 7.81.8 %
CVE-2018-9493Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0In the content provider of the download manager, there is a possible SQL injection due to improper input validation. This could lead to locaMEDIUM 5.50.9 %
CVE-2018-9492Android-8.0 Android-8.1 Android-9.0In checkGrantUriPermissionLocked of ActivityManagerService.java, there is a possible permissions bypass. This could lead to local escalationHIGH 7.80.2 %
CVE-2018-9491Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0In AMediaCodecCryptoInfo_new of NdkMediaCodec.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to reHIGH 7.81.5 %
CVE-2018-9490Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0In CollectValuesOrEntriesImpl of elements.cc, there is possible remote code execution due to type confusion. This could lead to remote escalHIGH 7.81.4 %
CVE-2018-9476Android-8.0 Android-8.1In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible use-after-free due to improper locking. This could lead to remote escalatiCRITICAL 9.82.5 %
CVE-2018-9473Android-8.0In ihevcd_parse_sei_payload of ihevcd_parse_headers.c, there is a possible out-of-bounds write due to an integer overflow. This could lead tHIGH 7.81.5 %
CVE-2018-9452Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0In getOffsetForHorizontal of Layout.java, there is a possible application hang due to a slow width calculation. This could lead to remote deMEDIUM 5.50.9 %
CVE-2017-0751Android kernelAn elevation of privilege vulnerability in the Qualcomm QCE driver. Product: Android. Versions: Android kernel. Android ID: A-36591162. RefeMEDIUM 5.30.1 %
CVE-2017-0748Android kernelAn information disclosure vulnerability in the Qualcomm audio driver. Product: Android. Versions: Android Kernel. Android ID: A-35764875. ReMEDIUM 5.30.4 %
CVE-2017-0744Android kernelAn elevation of privilege vulnerability in the NVIDIA firmware processing code. Product: Android. Versions: Android kernel. Android ID: A-34MEDIUM 5.30.1 %
CVE-2017-0431Android kernelAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3257HIGH 7.80.2 %
CVE-2016-8482Android kernelAn elevation of privilege vulnerability in the NVIDIA GPU driver. Product: Android. Versions: Android kernel. Android ID: A-31799863. RefereHIGH 7.80.2 %
CVE-2015-9016Android kernelIn blk_mq_tag_to_rq in blk-mq.c in the upstream kernel, there is a possible use after free due to a race condition when a request has been pHIGH 7.00.1 %
CVE-2017-6426Android kernelAn information disclosure vulnerability in the Qualcomm SPMI driver. Product: Android. Versions: Android kernel. Android ID: A-33644474. RefLOW 3.30.4 %
CVE-2017-6425Android kernelAn information disclosure vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Android ID: A-32577085. ReLOW 3.30.4 %
CVE-2017-6424Android kernelAn elevation of privilege vulnerability in the Qualcomm WiFi driver. Product: Android. Versions: Android kernel. Android ID: A-32086742. RefHIGH 7.00.2 %
CVE-2017-6423Android kernelAn elevation of privilege vulnerability in the Qualcomm kyro L2 driver. Product: Android. Versions: Android kernel. Android ID: A-32831370. HIGH 7.00.2 %
CVE-2016-8488Android kernelAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3162CRITICAL 9.81.1 %
CVE-2016-8486Android kernelAn information disclosure vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-2882HIGH 7.50.7 %
CVE-2016-8485Android kernelAn information disclosure vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-2882HIGH 7.50.7 %
CVE-2016-8484Android kernelAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-2882CRITICAL 9.81.1 %
CVE-2016-10299Android kernelAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3257CRITICAL 9.81.1 %
CVE-2016-10298Android kernelAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3639CRITICAL 9.81.1 %
CVE-2016-10236Android kernelAn information disclosure vulnerability in the Qualcomm USB driver. Product: Android. Versions: Android kernel. Android ID: A-33280689. RefeLOW 3.30.4 %
CVE-2016-10235Android kernelA denial of service vulnerability in the Qualcomm WiFi driver. Product: Android. Versions: Android kernel. Android ID: A-34390620. ReferenceHIGH 7.50.8 %
CVE-2016-10234Android kernelAn information disclosure vulnerability in the Qualcomm IPA driver. Product: Android. Versions: Android kernel. Android ID: A-34390017. RefeMEDIUM 5.50.5 %
CVE-2016-10233Android kernelAn elevation of privilege vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Android ID: A-34389926. ReCRITICAL 9.81.1 %
CVE-2016-10232Android kernelAn elevation of privilege vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Android ID: A-34386696. ReHIGH 7.80.5 %
CVE-2016-10231Android kernelAn elevation of privilege vulnerability in the Qualcomm sound codec driver. Product: Android. Versions: Android kernel. Android ID: A-339669HIGH 7.80.6 %
CVE-2016-10230Android kernelA remote code execution vulnerability in the Qualcomm crypto driver. Product: Android. Versions: Android kernel. Android ID: A-34389927. RefCRITICAL 9.82.9 %
CVE-2015-9015Android kernelAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3671HIGH 7.80.2 %
CVE-2015-9014Android kernelAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3639CRITICAL 9.81.3 %
CVE-2015-9013Android kernelAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3639CRITICAL 9.81.1 %
CVE-2015-9012Android kernelAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3638CRITICAL 9.81.1 %
CVE-2015-9011Android kernelAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3671CRITICAL 9.81.1 %
CVE-2015-9010Android kernelAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3639CRITICAL 9.81.1 %
CVE-2015-9009Android kernelAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3639CRITICAL 9.81.1 %
CVE-2015-9008Android kernelAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3638CRITICAL 9.81.1 %
CVE-2014-9959Android kernelAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3638CRITICAL 9.81.1 %
CVE-2014-9958Android kernelAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3638CRITICAL 9.81.1 %
CVE-2014-9957Android kernelAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3638CRITICAL 9.81.1 %
CVE-2014-9956Android kernelAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3638CRITICAL 9.81.1 %
CVE-2014-9955Android kernelAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3638CRITICAL 9.81.1 %
CVE-2014-9954Android kernelAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3638CRITICAL 9.81.1 %
CVE-2014-9953Android kernelAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3671CRITICAL 9.81.1 %
CVE-2017-132727.0 ; 7.1.1 ; 7.1.2 ; …In alarm_ready_generic of alarm.cc, there is a possible out of bounds write due to a use after free. This could lead to remote escalation ofCRITICAL 9.81.8 %
CVE-2017-13271Android kernelA elevation of privilege vulnerability in the upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-69006HIGH 7.30.3 %
CVE-2017-13270Android kernelA elevation of privilege vulnerability in the upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-69474HIGH 7.30.3 %
CVE-2017-132695.1.1 ; 6.0 ; 6.0.1 ; …A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, MEDIUM 4.30.2 %
CVE-2017-132685.1.1 ; 6.0 ; 6.0.1 ; …A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, MEDIUM 4.30.2 %
CVE-2017-132665.1.1 ; 6.0 ; 6.0.1 ; …In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible stack corruption due to a missing bounds check. This could lead to remote coCRITICAL 9.81.8 %
CVE-2017-132657.0 ; 7.1.1 ; 7.1.2 ; …A elevation of privilege vulnerability in the Android system (OTA updates). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. AndroidHIGH 7.30.3 %
CVE-2017-132646.0 ; 6.0.1 ; 7.0 ; …A other vulnerability in the Android media framework (Avcdec). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android HIGH 7.50.4 %
CVE-2017-132638.0 ; 8.1A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 8.0, 8.1. Android ID: A-69383160.HIGH 7.30.3 %
CVE-2017-132625.1.1 ; 6.0 ; 6.0.1 ; …In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing length decrement operation. This could lead to remMEDIUM 6.58.0 %
CVE-2017-132615.1.1 ; 6.0 ; 6.0.1 ; …In bnep_process_control_packet of bnep_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to reHIGH 7.57.1 %
CVE-2017-132605.1.1 ; 6.0 ; 6.0.1 ; …In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informatioHIGH 7.57.3 %
CVE-2017-132595.1.1 ; 6.0 ; 6.0.1 ; …In functionality implemented in sdp_discovery.cc, there are possible out of bounds reads due to missing bounds checks. This could lead to reHIGH 7.51.3 %
CVE-2017-132585.1.1 ; 6.0 ; 6.0.1 ; …In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informatioHIGH 7.57.1 %
CVE-2017-132575.1.1 ; 6.0 ; 6.0.1 ; …In bta_pan_data_buf_ind_cback of bta_pan_act.cc there is a use after free that can result in an out of bounds read of memory allocated via mMEDIUM 6.50.7 %
CVE-2017-132565.1.1 ; 6.0 ; 6.0.1 ; …In process_service_search_attr_req of sdp_server.cc, there is an out of bounds write due to a missing bounds check. This could lead to remotHIGH 8.80.7 %
CVE-2017-132555.1.1 ; 6.0 ; 6.0.1 ; …In process_service_attr_req of sdp_server.c, there is an out of bounds write due to a missing bounds check. This could lead to remote code eHIGH 8.80.7 %
CVE-2017-132546.0 ; 6.0.1 ; 7.0 ; …A other vulnerability in the Android media framework (AACExtractor). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. AnHIGH 7.50.4 %
CVE-2017-132538.0 ; 8.1In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to locaHIGH 7.82.8 %
CVE-2017-132528.0 ; 8.1In CryptoHal::decrypt of CryptoHal.cpp, there is an out of bounds write due to improper input validation that results in a read from uninitiHIGH 7.80.6 %
CVE-2017-132516.0 ; 6.0.1 ; 7.0 ; …In impeg2d_dec_pic_data_thread of impeg2d_dec_hdr.c, there is a possible out of bounds write due to a missing bounds check. This could lead HIGH 7.80.6 %
CVE-2017-132506.0 ; 6.0.1 ; 7.0 ; …In ih264d_fmt_conv_420sp_to_420p of ih264d_utils.c, there is an out of bound write due to a missing out of bounds check because of a multiplHIGH 7.81.1 %
CVE-2017-132496.0 ; 6.0.1 ; 7.0 ; …In impeg2d_api_set_display_frame of impeg2d_api_main.c, there is an out of bound write due to a missing bounds check. This could lead to remHIGH 7.81.1 %
CVE-2017-132486.0 ; 6.0.1 ; 7.0 ; …In impeg2_idct_recon_sse42() of impeg2_idct_recon_sse42_intr.c, there is an out of bound write due to a missing bounds check. This could leaHIGH 7.81.1 %
CVE-2017-13307Android kernelA elevation of privilege vulnerability in the Upstream kernel pci sysfs. Product: Android. Versions: Android kernel. Android ID: A-69128924.HIGH 7.30.5 %
CVE-2017-13306Android kernelA elevation of privilege vulnerability in the Upstream kernel mnh driver. Product: Android. Versions: Android kernel. Android ID: A-70295063HIGH 7.30.3 %
CVE-2017-13305Android kernelA information disclosure vulnerability in the Upstream kernel encrypted-keys. Product: Android. Versions: Android kernel. Android ID: A-7052HIGH 7.10.3 %
CVE-2017-13304Android kernelA information disclosure vulnerability in the Upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-70576MEDIUM 5.30.4 %
CVE-2017-13303Android kernelA information disclosure vulnerability in the Broadcom bcmdhd driver. Product: Android. Versions: Android kernel. Android ID: A-71359108. ReMEDIUM 5.30.3 %
CVE-2017-133028.0A denial of service vulnerability in the Android system (system ui). Product: Android. Versions: 8.0. Android ID: A-69969749.HIGH 7.50.4 %
CVE-2017-133018.0A denial of service vulnerability in the Android system (system ui). Product: Android. Versions: 8.0. Android ID: A-66498711.HIGH 7.50.4 %
CVE-2017-133006.0 ; 6.0.1A denial of service vulnerability in the Android media framework (libhevc). Product: Android. Versions: 6.0, 6.0.1. Android ID: A-71567394.HIGH 7.50.4 %
CVE-2017-132996.0 ; 6.0.1 ; 7.0 ; …A other vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android HIGH 7.50.4 %
CVE-2017-132986.0 ; 6.0.1 ; 7.0 ; …A information disclosure vulnerability in the Android media framework (libhavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, MEDIUM 5.30.3 %
CVE-2017-132976.0 ; 6.0.1 ; 7.0 ; …A information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, MEDIUM 5.30.3 %
CVE-2017-132966.0 ; 6.0.1 ; 7.0 ; …A information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8MEDIUM 5.30.3 %
CVE-2017-132956.0 ; 6.0.1 ; 7.0 ; …A denial of service vulnerability in the Android framework (package installer). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8MEDIUM 5.30.4 %
CVE-2017-132946.0 ; 6.0.1 ; 7.0 ; …A information disclosure vulnerability in the Android framework (aosp email application). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1MEDIUM 5.30.3 %
CVE-2017-13293Android kernelIn the nfc_hci_cmd_received() function of core.c, there is a possible out of bounds write due to a missing bounds check. This could lead to HIGH 7.80.2 %
CVE-2017-13292Android kernelIn wl_get_assoc_ies of wl_cfg80211.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote coCRITICAL 9.81.6 %
CVE-2017-132917.0 ; 7.1.1 ; 7.1.2 ; …In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible NULL pointer dereference due to missing bounds checks. This could lead HIGH 7.51.1 %
CVE-2017-132906.0 ; 6.0.1 ; 7.0 ; …In sdp_server_handle_client_req of sdp_server.cc, there is an out of bounds read due to a missing bounds check. This could lead to local infMEDIUM 6.20.2 %
CVE-2017-132896.0 ; 6.0.1 ; 7.0 ; …In writeToParcel and createFromParcel of RttManager.java, there is a permission bypass due to a write size mismatch. This could lead to a loHIGH 7.80.2 %
CVE-2017-132888.0 ; 8.1In writeToParcel and readFromParcel of PeriodicAdvertisingReport.java, there is a permission bypass due to a 64/32bit int mismatch. This couHIGH 7.80.2 %
CVE-2017-132876.0.1 ; 7.0 ; 7.1.1 ; …In createFromParcel of VerifyCredentialResponse.java, there is a possible invalid parcel read due to improper input validation. This could lHIGH 7.80.2 %
CVE-2017-132868.0 ; 8.1In writeToParcel and readFromParcel of OutputConfiguration.java, there is a permission bypass due to mismatched serialization. This could leHIGH 7.80.3 %
CVE-2017-132856.0 ; 6.0.1 ; 7.0 ; …In SvoxSsmlParser and startElement of svox_ssml_parser.cpp, there is a possible out of bounds write due to an uninitialized buffer. This couCRITICAL 9.81.6 %
CVE-2017-132846.0 ; 6.0.1 ; 7.0 ; …In config_set_string of config.cc, it is possible to pair a second BT keyboard without user approval due to improper input validation. This CRITICAL 9.81.6 %