Google Inc.
Page 3 of 10 — Google Inc. CVEs from a corpus of 960, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-13283 | Critical | 9.8 | 2018-04-04 | In avrc_ctrl_pars_vendor_rsp of bluetooth avrcp_ctrl, there is a possible out of bounds write on the stack due to a missing bounds check. This could lead to re… |
CVE-2017-13282 | Critical | 9.8 | 2018-04-04 | In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible stack buffer overflow due to a missing bounds check. This could lead to remote code execut… |
CVE-2017-13281 | Critical | 9.8 | 2018-04-04 | In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible stack buffer overflow due to an incorrect bounds check. This could lead to remote code execut… |
CVE-2017-13280 | High | 7.5 | 2018-04-04 | In the FrameSequence_gif::FrameSequence_gif function of libframesequence, there is a out of bounds read due to a missing bounds check. This could lead to a rem… |
CVE-2017-13279 | Medium | 5.5 | 2018-04-04 | In M3UParser::parse of M3UParser.cpp, there is a memory resource exhaustion due to a large loop of pushing items into a vector. This could lead to remote denia… |
CVE-2017-13278 | High | 7.8 | 2018-04-04 | In MediaPlayerService::Client::notify of MediaPlayerService.cpp, there is a possible use after free. This could lead to local escalation of privilege with no a… |
CVE-2017-13277 | High | 7.8 | 2018-04-04 | In ihevcd_fmt_conv of ihevcd_fmt_conv.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with n… |
CVE-2017-13276 | High | 7.8 | 2018-04-04 | In CProgramConfig_ReadHeightExt of tpdec_asc.cpp, there is a possible stack buffer overflow due to a missing bounds check. This could lead to a remote code exe… |
CVE-2017-13275 | Medium | 5.5 | 2018-04-04 | In getVSCoverage of CmapCoverage.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure… |
CVE-2017-13274 | Critical | 9.8 | 2018-04-04 | In the getHost() function of UriTest.java, there is the possibility of incorrect web origin determination. This could lead to incorrect security decisions with… |
CVE-2017-13267 | Critical | 9.8 | 2018-04-04 | In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible stack corruption due to a missing bounds check. This could lead to remote escalation of privile… |
CVE-2017-13273 | High | 7.0 | 2018-02-15 | In xt_qtaguid.c, there is a race condition due to insufficient locking. This could lead to local elevation of privileges with no additional execution privilege… |
CVE-2017-13247 | High | 7.8 | 2018-02-12 | In the Pixel 2 bootloader, there is a missing permission check which bypasses carrier bootloader lock. This could lead to local elevation of privileges with us… |
CVE-2017-13246 | High | 7.5 | 2018-02-12 | A information disclosure vulnerability in the Upstream kernel network driver. Product: Android. Versions: Android kernel. ID: A-36279469. |
CVE-2017-13245 | High | 7.8 | 2018-02-12 | A elevation of privilege vulnerability in the Upstream kernel audio driver. Product: Android. Versions: Android kernel. ID: A-64315347. |
CVE-2017-13244 | High | 7.8 | 2018-02-12 | A elevation of privilege vulnerability in the Upstream kernel easel. Product: Android. Versions: Android kernel. ID: A-62678986. |
CVE-2017-13243 | High | 7.5 | 2018-02-12 | A information disclosure vulnerability in the Android system (ui). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. ID: A-38258991. |
CVE-2017-13242 | High | 7.5 | 2018-02-12 | A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID: A-62672248. |
CVE-2017-13241 | High | 7.5 | 2018-02-12 | A information disclosure vulnerability in the Android media framework (libstagefright_soft_avcenc). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1… |
CVE-2017-13240 | High | 7.5 | 2018-02-12 | A information disclosure vulnerability in the Android framework (crypto framework). Product: Android. Versions: 8.0, 8.1. ID: A-68694819. |
CVE-2017-13239 | High | 7.5 | 2018-02-12 | A information disclosure vulnerability in the Android framework (ui framework). Product: Android. Versions: 8.0. ID: A-66244132. |
CVE-2017-13238 | Medium | 4.2 | 2018-02-12 | In XBLRamDump mode, there is a debug feature that can be used to dump memory contents, if an attacker has physical access to the device. This could lead to loc… |
CVE-2017-13236 | High | 7.8 | 2018-02-12 | In the KeyStore service, there is a permissions bypass that allows access to protected resources. This could lead to local escalation of privilege with system… |
CVE-2017-13235 | Medium | 6.5 | 2018-02-12 | A other vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID: A-68342866. |
CVE-2017-13234 | Medium | 6.5 | 2018-02-12 | In DLSParser of the sonivox library, there is possible resource exhaustion due to a memory leak. This could lead to remote temporary denial of service with no… |
CVE-2017-13233 | Medium | 6.5 | 2018-02-12 | In ihevcd_ctb_boundary_strength_pbslice of libhevc, there is possible resource exhaustion. This could lead to a remote temporary denial of service with no addi… |
CVE-2017-13232 | High | 7.5 | 2018-02-12 | In audioserver, there is an out-of-bounds write due to a log statement using %s with an array that may not be NULL terminated. This could lead to local informa… |
CVE-2017-13231 | High | 7.8 | 2018-02-12 | In libmediadrm, there is an out-of-bounds write due to improper input validation. This could lead to local elevation of privileges with no additional execution… |
CVE-2017-13230 | High | 8.8 | 2018-02-12 | In hevc codec, there is an out-of-bounds write due to an incorrect bounds check with the i2_pic_width_in_luma_samples value. This could lead to remote escalati… |
CVE-2017-13229 | Critical | 9.8 | 2018-02-12 | A remote code execution vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID: A-68160703. |
CVE-2017-13228 | High | 8.8 | 2018-02-12 | In function ih264d_ref_idx_reordering of libavc, there is an out-of-bounds write due to modCount being defined as an unsigned character. This could lead to rem… |
CVE-2017-13226 | High | 7.8 | 2018-01-12 | An elevation of privilege vulnerability in the MediaTek mtk. Product: Android. Versions: Android kernel. Android ID: A-32591194. References: M-ALPS03149184. |
CVE-2017-13225 | High | 7.8 | 2018-01-12 | In libMtkOmxVdec.so there is a possible heap buffer overflow. This could lead to a remote elevation of privilege enabling code execution as a privileged proces… |
CVE-2017-13222 | High | 7.5 | 2018-01-12 | An information disclosure vulnerability in the Upstream kernel kernel. Product: Android. Versions: Android kernel. Android ID: A-38159576. |
CVE-2017-13221 | High | 7.8 | 2018-01-12 | An elevation of privilege vulnerability in the Upstream kernel wifi driver. Product: Android. Versions: Android kernel. Android ID: A-64709938. |
CVE-2017-13220 | High | 7.8 | 2018-01-12 | An elevation of privilege vulnerability in the Upstream kernel bluez. Product: Android. Versions: Android kernel. Android ID: A-63527053. |
CVE-2017-13219 | High | 7.5 | 2018-01-12 | A denial of service vulnerability in the Upstream kernel synaptics touchscreen controller. Product: Android. Versions: Android kernel. Android ID: A-62800865. |
CVE-2017-13217 | High | 7.8 | 2018-01-12 | In DisplayFtmItem in the bootloader, there is an out-of-bounds write due to reading a string without verifying that it's null-terminated. This could lead to a… |
CVE-2017-13216 | High | 7.8 | 2018-01-12 | In ashmem_ioctl of ashmem.c, there is an out-of-bounds write due to insufficient locking when accessing asma. This could lead to a local elevation of privilege… |
CVE-2017-13215 | High | 7.8 | 2018-01-12 | A elevation of privilege vulnerability in the Upstream kernel skcipher. Product: Android. Versions: Android kernel. Android ID: A-64386293. References: Upstrea… |
CVE-2017-13214 | High | 7.5 | 2018-01-12 | In the hardware HEVC decoder, some media files could cause a page fault. This could lead to a remote denial of service of a critical system process with no add… |
CVE-2017-13213 | High | 7.8 | 2018-01-12 | An elevation of privilege vulnerability in the Broadcom bcmdhd driver. Product: Android. Versions: Android kernel. Android ID: A-63374465. References: B-V20170… |
CVE-2017-13212 | High | 7.8 | 2018-01-12 | An elevation of privilege vulnerability in the Android system (systemui). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-… |
CVE-2017-13211 | High | 7.5 | 2018-01-12 | In bta_scan_results_cb_impl of btif_ble_scanner.cc, there is possible resource exhaustion if a large number of repeated BLE scan results are received. This cou… |
CVE-2017-13210 | High | 7.8 | 2018-01-12 | In CameraDeviceClient::submitRequestList of CameraDeviceClient.cpp, there is an out-of-bounds write if metadataSize is too small. This could lead to a local el… |
CVE-2017-13209 | High | 7.8 | 2018-01-12 | In the ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller which could allow an… |
CVE-2017-13208 | Critical | 9.8 | 2018-01-12 | In receive_packet of libnetutils/packet.c, there is a possible out-of-bounds write due to a missing bounds check on the DHCP response. This could lead to remot… |
CVE-2017-13207 | High | 7.5 | 2018-01-12 | An information disclosure vulnerability in the Android media framework (stagefright mpeg4writer). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android I… |
CVE-2017-13206 | High | 7.5 | 2018-01-12 | An information disclosure vulnerability in the Android media framework (aacdec). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. An… |
CVE-2017-13205 | Critical | 9.1 | 2018-01-12 | An information disclosure vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64550… |
CVE-2017-13204 | Critical | 9.1 | 2018-01-12 | An information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-6438023… |
CVE-2017-13203 | Critical | 9.1 | 2018-01-12 | An information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-6312263… |
CVE-2017-13202 | High | 7.5 | 2018-01-12 | An information disclosure vulnerability in the Android media framework (libeffects). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1… |
CVE-2017-13201 | High | 7.5 | 2018-01-12 | An information disclosure vulnerability in the Android media framework (mediadrm). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1… |
CVE-2017-13200 | High | 7.5 | 2018-01-12 | An information disclosure vulnerability in the Android media framework (av) related to id3 unsynchronization. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8… |
CVE-2017-13199 | High | 7.5 | 2018-01-12 | In Bitmap.ccp if Bitmap.nativeCreate fails an out of memory exception is not thrown leading to a java.io.IOException later on. This could lead to a remote deni… |
CVE-2017-13198 | High | 7.5 | 2018-01-12 | A vulnerability in the Android media framework (ex) related to composition of frames lacking a color map. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8… |
CVE-2017-13197 | High | 7.5 | 2018-01-12 | In the ihevcd_parse_slice.c function, slave threads are not joined if there is an error. This could lead to a remote denial of service of a critical system pro… |
CVE-2017-13196 | High | 7.5 | 2018-01-12 | In several places in ihevcd_decode.c, a dead loop could occur due to incomplete frames which could lead to memory leaks. This could lead to a remote denial of… |
CVE-2017-13195 | High | 7.5 | 2018-01-12 | In the ihevcd_parse_sps function of ihevcd_parse_headers.c, several parameter values could be negative which could lead to negative indexes which could lead to… |
CVE-2017-13194 | High | 7.5 | 2018-01-12 | A vulnerability in the Android media framework (libvpx) related to odd frame width. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-6471… |
CVE-2017-13193 | High | 7.5 | 2018-01-12 | In ihevcd_decode.c there is a possible infinite loop due to bytes for an sps of unsupported resolution resulting in the same sps being fed in over and over. Th… |
CVE-2017-13192 | High | 7.5 | 2018-01-12 | In the ihevcd_parse_slice_header function of ihevcd_parse_slice_header.c a slice address of zero after the first slice could result in an infinite loop. This c… |
CVE-2017-13191 | High | 7.5 | 2018-01-12 | In the ihevcd_decode function of ihevcd_decode.c, there is an infinite loop due to an incomplete frame error. This could lead to a remote denial of service of… |
CVE-2017-13190 | High | 7.5 | 2018-01-12 | A vulnerability in the Android media framework (libhevc) related to handling ps_codec_obj memory allocation failures. Product: Android. Versions: 7.0, 7.1.1, 7… |
CVE-2017-13189 | High | 7.5 | 2018-01-12 | A vulnerability in the Android media framework (libavc) related to handling dec_hdl memory allocation failures. Product: Android. Versions: 7.0, 7.1.1, 7.1.2… |
CVE-2017-13188 | Critical | 9.1 | 2018-01-12 | An information disclosure vulnerability in the Android media framework (aac). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65280786. |
CVE-2017-13187 | Critical | 9.1 | 2018-01-12 | An information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-650341… |
CVE-2017-13186 | High | 7.5 | 2018-01-12 | A vulnerability in the Android media framework (libavc) related to incorrect use of mmco parameters. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. A… |
CVE-2017-13185 | Critical | 9.1 | 2018-01-12 | An information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-65123471. |
CVE-2017-13184 | High | 7.8 | 2018-01-12 | In the enableVSyncInjections function of SurfaceFlinger, there is a possible use after free of mVSyncInjector. This could lead to a local elevation of privileg… |
CVE-2017-13183 | High | 7.0 | 2018-01-12 | In the OMXNodeInstance::useBuffer and IOMX::freeBuffer functions, there is a possible use after free due to a race condition if the user frees the buffer while… |
CVE-2017-13182 | High | 7.8 | 2018-01-12 | In the sendFormatChange function of ACodec, there is a possible integer overflow which could lead to an out-of-bounds write. This could lead to a local elevati… |
CVE-2017-13181 | High | 7.8 | 2018-01-12 | In the doGetThumb and getThumbnail functions of MtpServer, there is a possible double free due to not NULLing out a freed pointer. This could lead to an local… |
CVE-2017-13180 | High | 7.8 | 2018-01-12 | In the onQueueFilled function of SoftAVCDec, there is a possible out-of-bounds write due to a use after free if a bad header causes the decoder to get caught i… |
CVE-2017-13179 | Critical | 9.8 | 2018-01-12 | In the ihevcd_allocate_static_bufs and ihevcd_create functions of SoftHEVC, there is a possible out-of-bounds write due to a use after free. Both ps_codec_obj… |
CVE-2017-13178 | Critical | 9.8 | 2018-01-12 | In the initDecoder function of SoftAVCDec, there is a possible out-of-bounds write to mCodecCtx due to a use after free when buffer allocation fails. This coul… |
CVE-2017-13177 | Critical | 9.8 | 2018-01-12 | In several functions of libhevc, NEON registers are not preserved. This could lead to remote code execution as a privileged process with no additional executio… |
CVE-2017-13176 | High | 8.8 | 2018-01-12 | In the parseURL function of URLStreamHandler, there is improper input validation of the host field. This could lead to a remote elevation of privilege that cou… |
CVE-2017-0855 | High | 7.5 | 2018-01-12 | In MPEG4Extractor.cpp, there are several places where functions return early without cleaning up internal buffers which could lead to memory leaks. This could… |
CVE-2017-0846 | High | 7.5 | 2018-01-12 | An information disclosure vulnerability in the Android framework (clipboardservice). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. And… |
CVE-2017-0869 | High | 7.8 | 2018-01-12 | NVIDIA driver contains an integer overflow vulnerability which could cause a use after free and possibly lead to an elevation of privilege enabling code execut… |
CVE-2017-13175 | High | 7.5 | 2017-12-06 | An information disclosure vulnerability in the NVIDIA libwilhelm. Product: Android. Versions: Android kernel. Android ID A-64339309. References: N-CVE-2017-131… |
CVE-2017-13174 | High | 7.8 | 2017-12-06 | An elevation of privilege vulnerability in the kernel edl. Product: Android. Versions: Android kernel. Android ID A-63100473. |
CVE-2017-13173 | High | 7.8 | 2017-12-06 | An elevation of privilege vulnerability in the MediaTek system server. Product: Android. Versions: Android kernel. Android ID A-28067350. References: M-ALPS026… |
CVE-2017-13172 | High | 7.8 | 2017-12-06 | An elevation of privilege vulnerability in the MediaTek bluetooth driver. Product: Android. Versions: Android kernel. Android ID A-36493287. References: M-ALPS… |
CVE-2017-13171 | High | 7.8 | 2017-12-06 | An elevation of privilege vulnerability in the MediaTek performance service. Product: Android. Versions: Android kernel. Android ID A-64316572. References: M-A… |
CVE-2017-13170 | High | 7.8 | 2017-12-06 | An elevation of privilege vulnerability in the MediaTek display driver. Product: Android. Versions: Android kernel. Android ID A-36102397. References: M-ALPS03… |
CVE-2017-13169 | High | 7.5 | 2017-12-06 | An information disclosure vulnerability in the kernel camera server. Product: Android. Versions: Android kernel. Android ID A-37512375. |
CVE-2017-13168 | High | 7.8 | 2017-12-06 | An elevation of privilege vulnerability in the kernel scsi driver. Product: Android. Versions: Android kernel. Android ID A-65023233. |
CVE-2017-13167 | High | 7.8 | 2017-12-06 | An elevation of privilege vulnerability in the kernel sound timer. Product: Android. Versions: Android kernel. Android ID A-37240993. |
CVE-2017-13166 | High | 7.8 | 2017-12-06 | An elevation of privilege vulnerability in the kernel v4l2 video driver. Product: Android. Versions: Android kernel. Android ID A-34624167. |
CVE-2017-13165 | Medium | 5.3 | 2017-12-06 | An elevation of privilege vulnerability in the kernel file system. Product: Android. Versions: Android kernel. Android ID A-31269937. |
CVE-2017-13164 | High | 7.5 | 2017-12-06 | An information disclosure vulnerability in the kernel binder driver. Product: Android. Versions: Android kernel. Android ID A-36007193. |
CVE-2017-13163 | High | 7.8 | 2017-12-06 | An elevation of privilege vulnerability in the kernel mtp usb driver. Product: Android. Versions: Android kernel. Android ID A-37429972. |
CVE-2017-13162 | High | 7.8 | 2017-12-06 | An elevation of privilege vulnerability in the kernel binder. Product: Android. Versions: Android kernel. Android ID A-64216036. |
CVE-2017-13161 | High | 7.8 | 2017-12-06 | An elevation of privilege vulnerability in the Broadcom wireless driver. Product: Android. Versions: Android kernel. Android ID A-63930471. References: BC-V201… |
CVE-2017-13160 | Critical | 9.8 | 2017-12-06 | A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-37160362. |
CVE-2017-13159 | High | 7.5 | 2017-12-06 | An information disclosure vulnerability in the Android system (activitymanagerservice). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0… |
CVE-2017-13158 | High | 7.5 | 2017-12-06 | An information disclosure vulnerability in the Android system (activitymanagerservice). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0… |