CVE-2018-9578 | Critical | 9.8 | 2018-12-07 | In ixheaacd_adts_crc_start_reg of ixheaacd_adts_crc_check.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote e… |
CVE-2018-9577 | High | 7.8 | 2018-12-07 | In impd_parametric_drc_parse_gain_set_params of impd_drc_static_payload.c there is a possible out of bounds write due to missing bounds check. This could lead… |
CVE-2018-9576 | High | 7.8 | 2018-12-07 | In impd_parse_parametric_drc_instructions of impd_drc_static_payload.c there is a possible out of bounds write due to missing bounds check. This could lead to… |
CVE-2018-9575 | High | 7.8 | 2018-12-07 | In impd_parse_dwnmix_instructions of impd_drc_static_payload.c there is a possible out of bounds write due to missing bounds check. This could lead to remote c… |
CVE-2018-9574 | High | 7.8 | 2018-12-07 | In impd_parse_split_drc_characteristic of impd_drc_static_payload.c there is a possible out of bounds write due to missing bounds check. This could lead to rem… |
CVE-2018-9573 | High | 7.8 | 2018-12-07 | In impd_parse_filt_block of impd_drc_dynamic_payload.c there is a possible out of bounds write due to missing bounds check. This could lead to remote code exec… |
CVE-2018-9571 | High | 8.8 | 2018-12-07 | In impd_parse_loud_eq_instructions of impd_drc_dynamic_payload.c there is a possible out-of-bound write due to missing bounds check. This could lead to remote… |
CVE-2018-9570 | High | 7.8 | 2018-12-07 | In impd_parse_drc_ext_v1 of impd_drc_dynamic_payload.c there is a possible out-of-bound write due to missing bounds check. This could lead to remote code execu… |
CVE-2018-9569 | High | 8.8 | 2018-12-07 | In impd_init_drc_decode_post_config of impd_drc_gain_decoder.c there is a possible out-of-bound write due to incorrect bounds check. This could lead to remote… |
CVE-2018-9519 | Medium | 6.4 | 2018-12-07 | In easelcomm_hw_build_scatterlist, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with Syste… |
CVE-2018-9518 | High | 7.8 | 2018-12-07 | In nfc_llcp_build_sdreq_tlv of llcp_commands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p… |
CVE-2018-9517 | Medium | 6.7 | 2018-12-07 | In pppol2tp_connect, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privil… |
CVE-2018-9568 | High | 7.8 | 2018-12-06 | In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional ex… |
CVE-2018-9567 | High | 7.8 | 2018-12-06 | On Pixel devices there is a bug causing verified boot to show the same certificate fingerprint despite using different signing keys. This may lead to local esc… |
CVE-2018-9566 | Medium | 5.7 | 2018-12-06 | In process_service_search_rsp of sdp_discovery.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information d… |
CVE-2018-9565 | High | 7.5 | 2018-12-06 | In readBytes of xltdecwbxml.c, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no addi… |
CVE-2018-9562 | High | 7.5 | 2018-12-06 | In bta_ag_do_disc of bta_ag_sdp.cc, there is a possible out-of-bound read due to an incorrect parameter size. This could lead to remote information disclosure… |
CVE-2018-9560 | High | 7.8 | 2018-12-06 | In HID_DevAddRecord of hidd_api.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege in… |
CVE-2018-9559 | High | 7.8 | 2018-12-06 | In persist_set_key and other functions of cryptfs.cpp, there is a possible out-of-bounds write due to an uncaught error. This could lead to local escalation of… |
CVE-2018-9558 | High | 7.8 | 2018-12-06 | In rw_t2t_handle_tlv_detect of rw_t2t_ndef.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of pr… |
CVE-2018-9557 | High | 7.8 | 2018-12-06 | In really_install_package of install.cpp, there is a possible free of arbitrary memory due to uninitialized data. This could lead to local escalation of privil… |
CVE-2018-9556 | Critical | 9.8 | 2018-12-06 | In ParsePayloadHeader of payload_metadata.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privi… |
CVE-2018-9555 | High | 8.8 | 2018-12-06 | In l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege ove… |
CVE-2018-9554 | Medium | 5.5 | 2018-12-06 | In dumpExtractors of IMediaExtractor.cp, there is a possible disclosure of recently accessed media files due to a permissions bypass. This could lead to local… |
CVE-2018-9553 | High | 7.8 | 2018-12-06 | In MasteringMetadata::Parse of mkvparser.cc there is a possible double free due to an insecure default value. This could lead to remote code execution with no… |
CVE-2018-9552 | Medium | 5.5 | 2018-12-06 | In ihevcd_sao_shift_ctb of ihevcd_sao.c there is a possible out of bounds write due to missing bounds check. This could lead to information disclosure with no… |
CVE-2018-9551 | High | 7.8 | 2018-12-06 | In CAacDecoder_Init of aacdecoder.cpp, there is a possible out-of-bound write due to a missing bounds check. This could lead to remote code execution in the me… |
CVE-2018-9550 | High | 7.8 | 2018-12-06 | In CAacDecoder_Init of aacdecoder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no… |
CVE-2018-9549 | High | 7.8 | 2018-12-06 | In lppTransposer of lpp_tran.cpp there is a possible out of bounds write due to missing bounds check. This could lead to remote code execution with no addition… |
CVE-2018-9548 | Medium | 5.5 | 2018-12-06 | In multiple functions of ContentProvider.java, there is a possible permission bypass due to a missing URI validation. This could lead to local information disc… |
CVE-2018-9547 | High | 7.8 | 2018-12-06 | In unflatten of GraphicBuffer.cpp, there is a possible bad fd close due to improper input validation. This could lead to local escalation of privilege in the s… |
CVE-2018-9538 | High | 7.8 | 2018-12-06 | In V4L2SliceVideoDecodeAccelerator::Dequeue of v4l2_slice_video_decode_accelerator.cc, there is a possible out of bounds read of a function pointer due to an i… |
CVE-2018-9580 | Critical | 9.8 | 2018-11-14 | A Elevation of privilege vulnerability in the HTC bootloader. Product: Android. Versions: Android kernel. Android ID: A-76222002. |
CVE-2018-9545 | High | 7.8 | 2018-11-14 | In BTA_HdRegisterApp of bta_hd_api.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege w… |
CVE-2018-9544 | Medium | 5.5 | 2018-11-14 | In register_app of btif_hd.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure in the Blu… |
CVE-2018-9543 | Medium | 5.5 | 2018-11-14 | In trim_device of f2fs_format_utils.c, it is possible that the data partition is not wiped during a factory reset. This could lead to local information disclos… |
CVE-2018-9542 | High | 7.5 | 2018-11-14 | In avrc_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclos… |
CVE-2018-9541 | High | 7.5 | 2018-11-14 | In avrc_pars_vendor_rsp of avcr_pars_ct.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote information disclos… |
CVE-2018-9540 | High | 7.5 | 2018-11-14 | In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information dis… |
CVE-2018-9539 | High | 7.0 | 2018-11-14 | In the ClearKey CAS descrambler, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additiona… |
CVE-2018-9537 | High | 8.8 | 2018-11-14 | In CAacDecoder_DecodeFrame of aacdecode.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution in… |
CVE-2018-9536 | High | 7.8 | 2018-11-14 | In numerous functions of libFDK, there are possible out of bounds writes due to incorrect bounds checks. This could lead to remote code execution with no addit… |
CVE-2018-9535 | High | 8.8 | 2018-11-14 | In ixheaacd_reset_acelp_data_fix of ixheaacd_lpc.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execut… |
CVE-2018-9534 | High | 8.8 | 2018-11-14 | In ixheaacd_mps_getstridemap of ixheaacd_mps_parse.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code exec… |
CVE-2018-9533 | High | 8.8 | 2018-11-14 | In ixheaacd_dec_data_init of ixheaacd_create.c there is a possible out of write read due to a missing bounds check. This could lead to remote code execution wi… |
CVE-2018-9532 | High | 8.8 | 2018-11-14 | In ixheaacd_extract_frame_info_ld of ixheaacd_env_extr.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code… |
CVE-2018-9531 | High | 7.8 | 2018-11-14 | In AudioSpecificConfig_Parse of tpdec_asc.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution… |
CVE-2018-9530 | High | 8.8 | 2018-11-14 | In ixheaacd_tns_ar_filter_dec of ixheaacd_aac_tns.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execu… |
CVE-2018-9529 | High | 8.8 | 2018-11-14 | In ixheaacd_individual_ch_stream of ixheaacd_channel.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code ex… |
CVE-2018-9528 | High | 8.8 | 2018-11-14 | In ixheaacd_over_lap_add1_armv8 of ixheaacd_overlap_add1.s there is a possible out of bounds write due to a missing bounds check. This could lead to remote cod… |
CVE-2018-9527 | High | 7.8 | 2018-11-14 | In vorbis_book_decodev_set of codebook.c there is a possible out of bounds write due to missing bounds check. This could lead to remote code execution with no… |
CVE-2018-9526 | High | 7.5 | 2018-11-14 | In device configuration data, there is an improperly configured setting. This could lead to remote disclosure of device location. User interaction is not neede… |
CVE-2018-9525 | High | 7.8 | 2018-11-14 | In the AndroidManifest.xml file defining the SliceBroadcastReceiver handler for com.android.settings.slice.action.WIFI_CHANGED, there is a possible permissions… |
CVE-2018-9524 | High | 7.8 | 2018-11-14 | In functionality implemented in System UI, there are insufficient protections implemented around overlay windows. This could lead to local escalation of privil… |
CVE-2018-9523 | High | 7.8 | 2018-11-14 | In Parcel.writeMapInternal of Parcel.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead… |
CVE-2018-9522 | High | 7.8 | 2018-11-14 | In the serialization functions of StatsLogEventWrapper.java, there is a possible out-of-bounds write due to unnecessary functionality which may be abused. This… |
CVE-2018-9521 | High | 8.8 | 2018-11-14 | In parseMPEGCCData of NuPlayer2CCDecoder.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code executio… |
CVE-2018-9457 | Medium | 5.5 | 2018-11-14 | In onCheckedChanged of BluetoothPairingController.java, there is a possible way to retrieve contact information due to a permissions bypass. This could lead to… |
CVE-2018-9347 | Medium | 6.5 | 2018-11-14 | In function SMF_ParseMetaEvent of file eas_smf.c there is incorrect input validation causing an infinite loop. This could lead to a remote temporary DoS with n… |
CVE-2018-9516 | High | 7.8 | 2018-11-06 | In hid_debug_events_read of drivers/hid/hid-debug.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation… |
CVE-2018-9489 | High | 7.5 | 2018-11-06 | When wifi is switched, function sendNetworkStateChangeBroadcast of WifiStateMachine.java broadcasts an intent including detailed wifi network information. This… |
CVE-2018-9488 | High | 7.8 | 2018-11-06 | In the SELinux permissions of crash_dump.te, there is a permissions bypass due to a missing restriction. This could lead to a local escalation of privilege, wi… |
CVE-2018-9465 | High | 7.8 | 2018-11-06 | In task_get_unused_fd_flags of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with n… |
CVE-2018-9459 | High | 8.8 | 2018-11-06 | In Attachment of Attachment.java and getFilePath of EmlAttachmentProvider.java, there is a possible Elevation of Privilege due to a path traversal error. This… |
CVE-2018-9458 | High | 7.8 | 2018-11-06 | In computeFocusedWindow of RootWindowContainer.java, and related functions, there is possible interception of keypresses due to focus being on the wrong window… |
CVE-2018-9455 | High | 7.5 | 2018-11-06 | In sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service… |
CVE-2018-9454 | Medium | 5.5 | 2018-11-06 | In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no… |
CVE-2018-9453 | Medium | 5.5 | 2018-11-06 | In avdt_msg_prs_cfg of avdt_msg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with… |
CVE-2018-9451 | Medium | 5.5 | 2018-11-06 | In DynamicRefTable::load of ResourceTypes.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl… |
CVE-2018-9450 | High | 8.8 | 2018-11-06 | In avrc_proc_vendor_command of avrc_api.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution wit… |
CVE-2018-9448 | High | 7.5 | 2018-11-06 | In avct_bcb_msg_ind of avct_bcb_act.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure… |
CVE-2018-9446 | Critical | 9.8 | 2018-11-06 | In smp_br_state_machine_event of smp_br_main.cc, there is a possible out of bounds write due to memory corruption. This could lead to remote code execution wit… |
CVE-2018-9445 | Medium | 6.8 | 2018-11-06 | In readMetadata of Utils.cpp, there is a possible path traversal bug due to a confused deputy. This could lead to local escalation of privilege when mounting a… |
CVE-2018-9444 | Medium | 5.5 | 2018-11-06 | In ih264d_video_decode of ih264d_api.c there is a possible resource exhaustion due to an infinite loop. This could lead to remote temporary device denial of se… |
CVE-2018-9438 | Medium | 5.0 | 2018-11-06 | When a device connects only over WiFi VPN, the device may not receive security updates due to some incorrect checks. This could lead to a local denial of servi… |
CVE-2018-9437 | Medium | 5.5 | 2018-11-06 | In getstring of ID3.cpp there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote denial of service with no additional ex… |
CVE-2018-9436 | High | 7.5 | 2018-11-06 | In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with n… |
CVE-2018-9427 | High | 7.8 | 2018-11-06 | In CopyToOMX of OMXNodeInstance.cpp there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote arbitrary code executio… |
CVE-2018-9422 | High | 7.8 | 2018-11-06 | In get_futex_key of futex.c, there is a use-after-free due to improper locking. This could lead to local escalation of privilege with no additional privileges… |
CVE-2018-9415 | High | 7.8 | 2018-11-06 | In driver_override_store and driver_override_show of bus.c, there is a possible double free due to improper locking. This could lead to local escalation of pri… |
CVE-2018-9385 | High | 7.8 | 2018-11-06 | In driver_override_store of bus.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege w… |
CVE-2018-9363 | High | 8.4 | 2018-11-06 | In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional execution privileges needed… |
CVE-2018-9362 | High | 7.5 | 2018-11-06 | In processMessagePart of InboundSmsHandler.java, there is a possible remote denial of service due to improper input validation. This could lead to remote denia… |
CVE-2018-9361 | High | 7.5 | 2018-11-06 | In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure wit… |
CVE-2018-9359 | High | 7.5 | 2018-11-06 | In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure wit… |
CVE-2018-9358 | High | 7.5 | 2018-11-06 | In gatts_process_attribute_req of gatt_sc.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote informati… |
CVE-2018-9357 | High | 7.8 | 2018-11-06 | In BNEP_Write of bnep_api.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with U… |
CVE-2018-9356 | Critical | 9.8 | 2018-11-06 | In bnep_data_ind of bnep_main.c, there is a possible remote code execution due to a double free. This could lead to remote code execution with no additional ex… |
CVE-2018-9355 | Critical | 9.8 | 2018-11-06 | In bta_dm_sdp_result of bta_dm_act.cc, there is a possible out of bounds stack write due to a missing bounds check. This could lead to remote code execution wi… |
CVE-2018-9515 | High | 7.8 | 2018-10-02 | In sdcardfs_create and sdcardfs_mkdir of inode.c, there is a possible memory corruption due to improper locking. This could lead to local escalation of privile… |
CVE-2018-9514 | High | 7.8 | 2018-10-02 | In sdcardfs_open of file.c, there is a possible Use After Free due to an unusual root cause. This could lead to local escalation of privilege with no additiona… |
CVE-2018-9513 | High | 7.8 | 2018-10-02 | In copy_process of fork.c, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execut… |
CVE-2018-9511 | Medium | 5.5 | 2018-10-02 | In ipSecSetEncapSocketOwner of XfrmController.cpp, there is a possible failure to initialize a security feature due to uninitialized data. This could lead to l… |
CVE-2018-9510 | Medium | 6.5 | 2018-10-02 | In smp_proc_enc_info of smp_act.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over… |
CVE-2018-9509 | Medium | 6.5 | 2018-10-02 | In smp_proc_master_id of smp_act.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure ove… |
CVE-2018-9508 | Medium | 6.5 | 2018-10-02 | In smp_process_keypress_notification of smp_act.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote informat… |
CVE-2018-9507 | Medium | 6.5 | 2018-10-02 | In bta_av_proc_meta_cmd of bta_av_act.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclo… |
CVE-2018-9506 | Medium | 6.5 | 2018-10-02 | In avrc_msg_cback of avrc_api.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to remote information disclosure over Bl… |
CVE-2018-9505 | Medium | 6.5 | 2018-10-02 | In mca_ccb_hdl_req of mca_cact.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over… |
CVE-2018-9504 | High | 8.8 | 2018-10-02 | In sdp_copy_raw_data of sdp_discovery.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution ov… |