Google Inc.
Page 2 of 10 — Google Inc. CVEs from a corpus of 960, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-9503 | High | 7.5 | 2018-10-02 | In rfc_process_mx_message of rfc_ts_frames.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disc… |
CVE-2018-9502 | Medium | 6.5 | 2018-10-02 | In rfc_process_mx_message of rfc_ts_frames.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote information disc… |
CVE-2018-9501 | High | 7.8 | 2018-10-02 | In the SetupWizard, there is a possible Factory Reset Protection bypass due to a permissions bypass. This could lead to local escalation of privilege with no a… |
CVE-2018-9499 | Medium | 5.5 | 2018-10-02 | In readVector of iCrypto.cpp, there is a possible invalid read due to uninitialized data. This could lead to local information disclosure from the DRM server w… |
CVE-2018-9498 | High | 7.8 | 2018-10-02 | In SkSampler::Fill of SkSampler.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no addit… |
CVE-2018-9497 | High | 7.8 | 2018-10-02 | In impeg2_fmt_conv_yuv420p_to_yuv420sp_uv_av8 of impeg2_format_conv.s there is a possible out of bounds write due to missing bounds check. This could lead to r… |
CVE-2018-9496 | High | 7.8 | 2018-10-02 | In ixheaacd_real_synth_fft_p3 of ixheaacd_esbr_fft.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code exec… |
CVE-2018-9493 | Medium | 5.5 | 2018-10-02 | In the content provider of the download manager, there is a possible SQL injection due to improper input validation. This could lead to local information discl… |
CVE-2018-9492 | High | 7.8 | 2018-10-02 | In checkGrantUriPermissionLocked of ActivityManagerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege with… |
CVE-2018-9491 | High | 7.8 | 2018-10-02 | In AMediaCodecCryptoInfo_new of NdkMediaCodec.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution… |
CVE-2018-9490 | High | 7.8 | 2018-10-02 | In CollectValuesOrEntriesImpl of elements.cc, there is possible remote code execution due to type confusion. This could lead to remote escalation of privilege… |
CVE-2018-9476 | Critical | 9.8 | 2018-10-02 | In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible use-after-free due to improper locking. This could lead to remote escalation of privilege in… |
CVE-2018-9473 | High | 7.8 | 2018-10-02 | In ihevcd_parse_sei_payload of ihevcd_parse_headers.c, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execu… |
CVE-2018-9452 | Medium | 5.5 | 2018-10-02 | In getOffsetForHorizontal of Layout.java, there is a possible application hang due to a slow width calculation. This could lead to remote denial of service if… |
CVE-2017-0751 | Medium | 5.3 | 2018-04-05 | An elevation of privilege vulnerability in the Qualcomm QCE driver. Product: Android. Versions: Android kernel. Android ID: A-36591162. References: QC-CR#20450… |
CVE-2017-0748 | Medium | 5.3 | 2018-04-05 | An information disclosure vulnerability in the Qualcomm audio driver. Product: Android. Versions: Android Kernel. Android ID: A-35764875. References: QC-CR#202… |
CVE-2017-0744 | Medium | 5.3 | 2018-04-05 | An elevation of privilege vulnerability in the NVIDIA firmware processing code. Product: Android. Versions: Android kernel. Android ID: A-34112726. References… |
CVE-2017-0431 | High | 7.8 | 2018-04-05 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-32573899. |
CVE-2016-8482 | High | 7.8 | 2018-04-05 | An elevation of privilege vulnerability in the NVIDIA GPU driver. Product: Android. Versions: Android kernel. Android ID: A-31799863. References: N-CVE-2016-84… |
CVE-2015-9016 | High | 7.0 | 2018-04-05 | In blk_mq_tag_to_rq in blk-mq.c in the upstream kernel, there is a possible use after free due to a race condition when a request has been previously freed by… |
CVE-2017-6426 | Low | 3.3 | 2018-04-04 | An information disclosure vulnerability in the Qualcomm SPMI driver. Product: Android. Versions: Android kernel. Android ID: A-33644474. References: QC-CR#1106… |
CVE-2017-6425 | Low | 3.3 | 2018-04-04 | An information disclosure vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Android ID: A-32577085. References: QC-CR#110… |
CVE-2017-6424 | High | 7.0 | 2018-04-04 | An elevation of privilege vulnerability in the Qualcomm WiFi driver. Product: Android. Versions: Android kernel. Android ID: A-32086742. References: QC-CR#1102… |
CVE-2017-6423 | High | 7.0 | 2018-04-04 | An elevation of privilege vulnerability in the Qualcomm kyro L2 driver. Product: Android. Versions: Android kernel. Android ID: A-32831370. References: QC-CR#1… |
CVE-2016-8488 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-31625756. |
CVE-2016-8486 | High | 7.5 | 2018-04-04 | An information disclosure vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823691. |
CVE-2016-8485 | High | 7.5 | 2018-04-04 | An information disclosure vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823681. |
CVE-2016-8484 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823575. |
CVE-2016-10299 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-32577244. |
CVE-2016-10298 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393252. |
CVE-2016-10236 | Low | 3.3 | 2018-04-04 | An information disclosure vulnerability in the Qualcomm USB driver. Product: Android. Versions: Android kernel. Android ID: A-33280689. References: QC-CR#11024… |
CVE-2016-10235 | High | 7.5 | 2018-04-04 | A denial of service vulnerability in the Qualcomm WiFi driver. Product: Android. Versions: Android kernel. Android ID: A-34390620. References: QC-CR#1046409. |
CVE-2016-10234 | Medium | 5.5 | 2018-04-04 | An information disclosure vulnerability in the Qualcomm IPA driver. Product: Android. Versions: Android kernel. Android ID: A-34390017. References: QC-CR#10690… |
CVE-2016-10233 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Android ID: A-34389926. References: QC-CR#897… |
CVE-2016-10232 | High | 7.8 | 2018-04-04 | An elevation of privilege vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Android ID: A-34386696. References: QC-CR#102… |
CVE-2016-10231 | High | 7.8 | 2018-04-04 | An elevation of privilege vulnerability in the Qualcomm sound codec driver. Product: Android. Versions: Android kernel. Android ID: A-33966912. References: QC-… |
CVE-2016-10230 | Critical | 9.8 | 2018-04-04 | A remote code execution vulnerability in the Qualcomm crypto driver. Product: Android. Versions: Android kernel. Android ID: A-34389927. References: QC-CR#1091… |
CVE-2015-9015 | High | 7.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36714120. |
CVE-2015-9014 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393750. |
CVE-2015-9013 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393251. |
CVE-2015-9012 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384691. |
CVE-2015-9011 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36714882. |
CVE-2015-9010 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393101. |
CVE-2015-9009 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393600. |
CVE-2015-9008 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384689. |
CVE-2014-9959 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36383694. |
CVE-2014-9958 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384774. |
CVE-2014-9957 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36387564. |
CVE-2014-9956 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36389611. |
CVE-2014-9955 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384686. |
CVE-2014-9954 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36388559. |
CVE-2014-9953 | Critical | 9.8 | 2018-04-04 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36714770. |
CVE-2017-13272 | Critical | 9.8 | 2018-04-04 | In alarm_ready_generic of alarm.cc, there is a possible out of bounds write due to a use after free. This could lead to remote escalation of privilege with no… |
CVE-2017-13271 | High | 7.3 | 2018-04-04 | A elevation of privilege vulnerability in the upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-69006799. |
CVE-2017-13270 | High | 7.3 | 2018-04-04 | A elevation of privilege vulnerability in the upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-69474744. |
CVE-2017-13269 | Medium | 4.3 | 2018-04-04 | A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android I… |
CVE-2017-13268 | Medium | 4.3 | 2018-04-04 | A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android I… |
CVE-2017-13266 | Critical | 9.8 | 2018-04-04 | In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible stack corruption due to a missing bounds check. This could lead to remote code execution with n… |
CVE-2017-13265 | High | 7.3 | 2018-04-04 | A elevation of privilege vulnerability in the Android system (OTA updates). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-36232423. |
CVE-2017-13264 | High | 7.5 | 2018-04-04 | A other vulnerability in the Android media framework (Avcdec). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70294343. |
CVE-2017-13263 | High | 7.3 | 2018-04-04 | A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 8.0, 8.1. Android ID: A-69383160. |
CVE-2017-13262 | Medium | 6.5 | 2018-04-04 | In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing length decrement operation. This could lead to remote information dis… |
CVE-2017-13261 | High | 7.5 | 2018-04-04 | In bnep_process_control_packet of bnep_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information di… |
CVE-2017-13260 | High | 7.5 | 2018-04-04 | In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with n… |
CVE-2017-13259 | High | 7.5 | 2018-04-04 | In functionality implemented in sdp_discovery.cc, there are possible out of bounds reads due to missing bounds checks. This could lead to remote information di… |
CVE-2017-13258 | High | 7.5 | 2018-04-04 | In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with n… |
CVE-2017-13257 | Medium | 6.5 | 2018-04-04 | In bta_pan_data_buf_ind_cback of bta_pan_act.cc there is a use after free that can result in an out of bounds read of memory allocated via malloc. This could l… |
CVE-2017-13256 | High | 8.8 | 2018-04-04 | In process_service_search_attr_req of sdp_server.cc, there is an out of bounds write due to a missing bounds check. This could lead to remote code execution wi… |
CVE-2017-13255 | High | 8.8 | 2018-04-04 | In process_service_attr_req of sdp_server.c, there is an out of bounds write due to a missing bounds check. This could lead to remote code execution with no ad… |
CVE-2017-13254 | High | 7.5 | 2018-04-04 | A other vulnerability in the Android media framework (AACExtractor). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-7023950… |
CVE-2017-13253 | High | 7.8 | 2018-04-04 | In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri… |
CVE-2017-13252 | High | 7.8 | 2018-04-04 | In CryptoHal::decrypt of CryptoHal.cpp, there is an out of bounds write due to improper input validation that results in a read from uninitialized memory. This… |
CVE-2017-13251 | High | 7.8 | 2018-04-04 | In impeg2d_dec_pic_data_thread of impeg2d_dec_hdr.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation… |
CVE-2017-13250 | High | 7.8 | 2018-04-04 | In ih264d_fmt_conv_420sp_to_420p of ih264d_utils.c, there is an out of bound write due to a missing out of bounds check because of a multiplication error. This… |
CVE-2017-13249 | High | 7.8 | 2018-04-04 | In impeg2d_api_set_display_frame of impeg2d_api_main.c, there is an out of bound write due to a missing bounds check. This could lead to remote code execution… |
CVE-2017-13248 | High | 7.8 | 2018-04-04 | In impeg2_idct_recon_sse42() of impeg2_idct_recon_sse42_intr.c, there is an out of bound write due to a missing bounds check. This could lead to an remote code… |
CVE-2017-13307 | High | 7.3 | 2018-04-04 | A elevation of privilege vulnerability in the Upstream kernel pci sysfs. Product: Android. Versions: Android kernel. Android ID: A-69128924. |
CVE-2017-13306 | High | 7.3 | 2018-04-04 | A elevation of privilege vulnerability in the Upstream kernel mnh driver. Product: Android. Versions: Android kernel. Android ID: A-70295063. |
CVE-2017-13305 | High | 7.1 | 2018-04-04 | A information disclosure vulnerability in the Upstream kernel encrypted-keys. Product: Android. Versions: Android kernel. Android ID: A-70526974. |
CVE-2017-13304 | Medium | 5.3 | 2018-04-04 | A information disclosure vulnerability in the Upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-70576999. |
CVE-2017-13303 | Medium | 5.3 | 2018-04-04 | A information disclosure vulnerability in the Broadcom bcmdhd driver. Product: Android. Versions: Android kernel. Android ID: A-71359108. References: B-V201801… |
CVE-2017-13302 | High | 7.5 | 2018-04-04 | A denial of service vulnerability in the Android system (system ui). Product: Android. Versions: 8.0. Android ID: A-69969749. |
CVE-2017-13301 | High | 7.5 | 2018-04-04 | A denial of service vulnerability in the Android system (system ui). Product: Android. Versions: 8.0. Android ID: A-66498711. |
CVE-2017-13300 | High | 7.5 | 2018-04-04 | A denial of service vulnerability in the Android media framework (libhevc). Product: Android. Versions: 6.0, 6.0.1. Android ID: A-71567394. |
CVE-2017-13299 | High | 7.5 | 2018-04-04 | A other vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70897394. |
CVE-2017-13298 | Medium | 5.3 | 2018-04-04 | A information disclosure vulnerability in the Android media framework (libhavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android I… |
CVE-2017-13297 | Medium | 5.3 | 2018-04-04 | A information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android I… |
CVE-2017-13296 | Medium | 5.3 | 2018-04-04 | A information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID… |
CVE-2017-13295 | Medium | 5.3 | 2018-04-04 | A denial of service vulnerability in the Android framework (package installer). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID… |
CVE-2017-13294 | Medium | 5.3 | 2018-04-04 | A information disclosure vulnerability in the Android framework (aosp email application). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1… |
CVE-2017-13293 | High | 7.8 | 2018-04-04 | In the nfc_hci_cmd_received() function of core.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of… |
CVE-2017-13292 | Critical | 9.8 | 2018-04-04 | In wl_get_assoc_ies of wl_cfg80211.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with n… |
CVE-2017-13291 | High | 7.5 | 2018-04-04 | In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible NULL pointer dereference due to missing bounds checks. This could lead to remote denial of… |
CVE-2017-13290 | Medium | 6.2 | 2018-04-04 | In sdp_server_handle_client_req of sdp_server.cc, there is an out of bounds read due to a missing bounds check. This could lead to local information disclosure… |
CVE-2017-13289 | High | 7.8 | 2018-04-04 | In writeToParcel and createFromParcel of RttManager.java, there is a permission bypass due to a write size mismatch. This could lead to a local escalation of p… |
CVE-2017-13288 | High | 7.8 | 2018-04-04 | In writeToParcel and readFromParcel of PeriodicAdvertisingReport.java, there is a permission bypass due to a 64/32bit int mismatch. This could lead to a local… |
CVE-2017-13287 | High | 7.8 | 2018-04-04 | In createFromParcel of VerifyCredentialResponse.java, there is a possible invalid parcel read due to improper input validation. This could lead to local escala… |
CVE-2017-13286 | High | 7.8 | 2018-04-04 | In writeToParcel and readFromParcel of OutputConfiguration.java, there is a permission bypass due to mismatched serialization. This could lead to a local escal… |
CVE-2017-13285 | Critical | 9.8 | 2018-04-04 | In SvoxSsmlParser and startElement of svox_ssml_parser.cpp, there is a possible out of bounds write due to an uninitialized buffer. This could lead to remote c… |
CVE-2017-13284 | Critical | 9.8 | 2018-04-04 | In config_set_string of config.cc, it is possible to pair a second BT keyboard without user approval due to improper input validation. This could lead to remot… |