Google

Android

8379 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2017-15845

  • EPSS 0.15%
  • Veröffentlicht 10.01.2018 22:29:00
  • Zuletzt bearbeitet 21.11.2024 03:15:19

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an invalid input of firmware size (negative value) from user space can potentially lead to the memory leak or buffer overflow during the W...

7

CVE-2017-15847

  • EPSS 0.12%
  • Veröffentlicht 10.01.2018 22:29:00
  • Zuletzt bearbeitet 21.11.2024 03:15:19

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the SPCom kernel driver, a race condition exists when creating a channel.

7.8

CVE-2017-15848

  • EPSS 0.15%
  • Veröffentlicht 10.01.2018 22:29:00
  • Zuletzt bearbeitet 21.11.2024 03:15:19

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the fastrpc kernel driver, a buffer overflow vulnerability from userspace may potentially exist.

7.5

CVE-2017-15850

  • EPSS 0.56%
  • Veröffentlicht 10.01.2018 22:29:00
  • Zuletzt bearbeitet 21.11.2024 03:15:20

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, userspace can read values from audio codec registers.

7.8

CVE-2017-9689

  • EPSS 0.16%
  • Veröffentlicht 10.01.2018 22:29:00
  • Zuletzt bearbeitet 21.11.2024 03:36:39

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a specially-crafted HDMI CEC message can be used to cause stack memory corruption.

7.8

CVE-2017-9705

  • EPSS 0.15%
  • Veröffentlicht 10.01.2018 22:29:00
  • Zuletzt bearbeitet 21.11.2024 03:36:40

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, concurrent rx notifications and read() operations in the G-Link PKT driver can result in a double free condition due to missing locking re...

7.5

CVE-2017-9712

  • EPSS 0.56%
  • Veröffentlicht 10.01.2018 22:29:00
  • Zuletzt bearbeitet 21.11.2024 03:36:41

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, if userspace provides a too-large IE length in wlan_hdd_cfg80211_set_ie, a buffer over-read occurs.

9.3

CVE-2017-11069

  • EPSS 0.62%
  • Veröffentlicht 10.01.2018 19:29:00
  • Zuletzt bearbeitet 21.11.2024 03:07:02

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, manipulation of SafeSwitch Image data can result in Heap overflow.

9.3

CVE-2017-15849

  • EPSS 0.61%
  • Veröffentlicht 10.01.2018 19:29:00
  • Zuletzt bearbeitet 21.11.2024 03:15:20

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a LayerStack can be destroyed in between Validate and Commit by the application resulting in a Use After Free condition.

5.5

CVE-2015-7889

Exploit
  • EPSS 2.26%
  • Veröffentlicht 28.12.2017 02:29:03
  • Zuletzt bearbeitet 13.05.2026 00:24:29

The SecEmailComposer/EmailComposer application in the Samsung S6 Edge before the October 2015 MR uses weak permissions for the com.samsung.android.email.intent.action.QUICK_REPLY_BACKGROUND service action, which might allow remote attackers with know...