Google

Android

7895 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2018-11914

  • EPSS 0.02%
  • Veröffentlicht 27.11.2018 16:29:01
  • Zuletzt bearbeitet 21.11.2024 03:44:15

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper access control can lead to device node and executable to be run from /systemrw/ which presents a potential security.

7.8

CVE-2018-11918

  • EPSS 0.02%
  • Veröffentlicht 27.11.2018 16:29:01
  • Zuletzt bearbeitet 21.11.2024 03:44:15

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, memory allocated is automatically released by the kernel if the 'probe' function fails with an error code.

7.8

CVE-2018-11919

  • EPSS 0.04%
  • Veröffentlicht 27.11.2018 16:29:01
  • Zuletzt bearbeitet 21.11.2024 03:44:15

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, there is a potential heap overflow and memory corruption due to improper error handling in SOC infrastructure.

7.8

CVE-2018-11943

  • EPSS 0.02%
  • Veröffentlicht 27.11.2018 16:29:01
  • Zuletzt bearbeitet 21.11.2024 03:44:18

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing fastboot flash command, memory leak or unexpected behavior may occur due to processing of unintialized data buffers.

6.5

CVE-2018-11946

  • EPSS 0.04%
  • Veröffentlicht 27.11.2018 16:29:01
  • Zuletzt bearbeitet 21.11.2024 03:44:18

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, the UPnP daemon should not be running out of box because it enables port forwarding without authentication.

7.8

CVE-2018-11956

  • EPSS 0.02%
  • Veröffentlicht 27.11.2018 16:29:01
  • Zuletzt bearbeitet 21.11.2024 03:44:19

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper mounting lead to device node and executable to be run from /dsp/ which presents a potential security issue.

7.8

CVE-2018-11995

  • EPSS 0.03%
  • Veröffentlicht 27.11.2018 16:29:01
  • Zuletzt bearbeitet 21.11.2024 03:44:23

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, a partition name-check variable is not reset for every iteration which may cause improper termination in the META image.

7.8

CVE-2018-5856

  • EPSS 0.06%
  • Veröffentlicht 27.11.2018 16:29:01
  • Zuletzt bearbeitet 21.11.2024 04:09:33

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, due to a race condition, a Use After Free condition can occur in Audio.

7.8

CVE-2018-5861

  • EPSS 0.02%
  • Veröffentlicht 27.11.2018 16:29:01
  • Zuletzt bearbeitet 21.11.2024 04:09:33

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, existing checks in place on partition size are incomplete and can lead to heap overwrite vulnerabilities while loading a secure application fro...

7.8

CVE-2018-5904

  • EPSS 0.04%
  • Veröffentlicht 27.11.2018 16:29:01
  • Zuletzt bearbeitet 21.11.2024 04:09:40

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while list traversal in LPM status driver for clean up, use after free vulnerability may occur.