Google

Android

8158 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2017-15853

  • EPSS 0.36%
  • Veröffentlicht 03.04.2018 17:29:00
  • Zuletzt bearbeitet 21.11.2024 03:15:20

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, while processing PTT commands, ptt_sock_send_msg_to_app() is invoked without validating...

9.3

CVE-2017-17770

  • EPSS 0.44%
  • Veröffentlicht 03.04.2018 17:29:00
  • Zuletzt bearbeitet 21.11.2024 03:18:37

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in a power driver ioctl handler, an Untrusted Pointer Dereference may potentially occur...

9.8

CVE-2017-18147

  • EPSS 0.65%
  • Veröffentlicht 03.04.2018 17:29:00
  • Zuletzt bearbeitet 21.11.2024 03:19:27

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in MMCP, a downlink message is not being properly validated.

7.8

CVE-2018-3563

  • EPSS 0.49%
  • Veröffentlicht 03.04.2018 17:29:00
  • Zuletzt bearbeitet 21.11.2024 04:05:40

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, untrusted pointer dereference in apr_cb_func can lead to an arbitrary code execution.

7.8

CVE-2018-3566

  • EPSS 0.37%
  • Veröffentlicht 03.04.2018 17:29:00
  • Zuletzt bearbeitet 21.11.2024 04:05:40

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, a buffer overwrite may occur in ProcSetReqInternal() due to missing length check.

7.5

CVE-2018-3584

  • EPSS 0.44%
  • Veröffentlicht 03.04.2018 17:29:00
  • Zuletzt bearbeitet 21.11.2024 04:05:42

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, a Use After Free condition can occur in the function rmnet_usb_ctrl_init().

9.8

CVE-2018-3596

  • EPSS 0.48%
  • Veröffentlicht 03.04.2018 17:29:00
  • Zuletzt bearbeitet 21.11.2024 04:05:44

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, legacy code vulnerable after migration has been removed.

7.5

CVE-2018-3598

  • EPSS 0.44%
  • Veröffentlicht 03.04.2018 17:29:00
  • Zuletzt bearbeitet 21.11.2024 04:05:44

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, insufficient validation of parameters from userspace in the camera driver can lead to i...

7.5

CVE-2017-15859

  • EPSS 0.54%
  • Veröffentlicht 30.03.2018 21:29:01
  • Zuletzt bearbeitet 21.11.2024 03:15:21

While processing the QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_SCALE_DECR_DB vendor command, in which attribute QCA_WLAN_VENDOR_ATTR_TXPOWER_SCALE_DECR_DB contains fewer than 1 byte, in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-08-...

9.8

CVE-2017-17766

  • EPSS 0.66%
  • Veröffentlicht 30.03.2018 21:29:01
  • Zuletzt bearbeitet 21.11.2024 03:18:37

In wma_peer_info_event_handler() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-03, the value of num_peers received from firmware is not properly validated so that an integer overflow vulnerability in the size of a buffer allo...