Page 33 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-9449 | Medium | 5.5 | 2024-12-03 | In process_service_search_attr_rsp of sdp_discovery.cc, there is a possible out of bound read due to a missing bounds check. This could lead to local informati… |
CVE-2018-9441 | Medium | 5.5 | 2024-12-03 | In sdp_copy_raw_data of sdp_discovery.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclos… |
CVE-2018-9435 | Medium | 5.5 | 2024-12-02 | In gatt_process_error_rsp of gatt_cl.cc, there is a possible out of bound read due to a missing bounds check. This could lead to local information disclosure w… |
CVE-2018-9431 | High | 7.8 | 2024-12-02 | In OSUInfo of OSUInfo.java, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with… |
CVE-2018-9430 | Critical | 9.8 | 2024-12-02 | In prop2cfg of btif_storage.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no addi… |
CVE-2018-9429 | Medium | 6.5 | 2024-12-02 | In buildImageItemsIfPossible of ItemTable.cpp there is a possible out of bound read due to uninitialized data. This could lead to information disclosure with n… |
CVE-2018-9426 | High | 7.5 | 2024-12-02 | In RsaKeyPairGenerator::getNumberOfIterations of RSAKeyPairGenerator.java, an incorrect implementation could cause weak RSA key pairs being generated. This co… |
CVE-2018-9423 | Medium | 6.5 | 2024-12-02 | In ihevcd_parse_slice_header of ihevcd_parse_slice_header.c there is a possible out of bound read due to missing bounds check. This could lead to denial of ser… |
CVE-2018-9418 | Critical | 9.8 | 2024-12-02 | In handle_app_cur_val_response of dtif_rc.cc, there is a possible stack buffer overflow due to a missing bounds check. This could lead to remote code execution… |
CVE-2018-9414 | High | 7.8 | 2024-12-02 | In gattServerSendResponseNative of com_android_bluetooth_gatt.cpp, there is a possible out of bounds stack write due to a missing bounds check. This could lead… |
CVE-2018-9413 | High | 8.8 | 2024-12-02 | In handle_notification_response of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution… |
CVE-2018-9376 | Medium | 6.7 | 2024-12-02 | In rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a possible out of bounds write due to an incorrect bounds check. Th… |
CVE-2018-9381 | High | 7.5 | 2024-12-02 | In gatts_process_read_by_type_req of gatt_sr.c, there is a possible information disclosure due to uninitialized data. This could lead to remote information dis… |
CVE-2018-9380 | High | 8.8 | 2024-12-02 | In l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege… |
CVE-2024-20139 | Medium | 6.5 | 2024-12-02 | In Bluetooth firmware, there is a possible firmware asssert due to improper handling of exceptional conditions. This could lead to local denial of service with… |
CVE-2024-20138 | High | 7.5 | 2024-12-02 | In wlan driver, there is a possible out of bound read due to improper input validation. This could lead to remote information disclosure with no additional exe… |
CVE-2024-20136 | Medium | 6.2 | 2024-12-02 | In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privi… |
CVE-2024-20135 | Medium | 6.7 | 2024-12-02 | In soundtrigger, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2024-20134 | Medium | 6.7 | 2024-12-02 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2024-20130 | Medium | 6.7 | 2024-12-02 | In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |
CVE-2024-20129 | High | 7.5 | 2024-12-02 | In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution pr… |
CVE-2024-20128 | High | 7.5 | 2024-12-02 | In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution pr… |
CVE-2024-20127 | High | 7.5 | 2024-12-02 | In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution pr… |
CVE-2024-20125 | Medium | 6.7 | 2024-12-02 | In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alrea… |
CVE-2024-20116 | Medium | 4.4 | 2024-12-02 | In cmdq, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2018-9377 | Medium | 5.5 | 2024-11-28 | In getIntentForIntentSender of ActivityManagerService.java, there is a possible way to access user metadata due to a pending intent. This could lead to local e… |
CVE-2018-9374 | High | 7.8 | 2024-11-28 | In installPackageLI of PackageManagerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege with User execution… |
CVE-2018-9354 | Medium | 6.5 | 2024-11-27 | In VideoFrameScheduler.cpp of VideoFrameScheduler::PLL::fit, there is a possible remote denial of service due to divide by 0. This could lead to remote denial… |
CVE-2018-9353 | Medium | 6.5 | 2024-11-27 | In ihevcd_parse_slice_data of ihevcd_parse_slice.c there is a possible heap buffer out of bound read due to a missing bounds check. This could lead to remote d… |
CVE-2018-9352 | Medium | 6.5 | 2024-11-27 | In ihevcd_allocate_dynamic_bufs of ihevcd_api.c there is a possible resource exhaustion due to integer overflow. This could lead to remote denial of service wi… |
CVE-2018-9351 | Medium | 6.5 | 2024-11-27 | In ih264e_fmt_conv_420p_to_420sp of ih264e_fmt_conv.c there is a possible out of bound read due to missing bounds check. This could lead to remote denial of se… |
CVE-2018-9350 | Medium | 6.5 | 2024-11-27 | In ih264d_assign_pic_num of ih264d_utils.c there is a possible out of bound read due to missing bounds check. This could lead to a denial of service with no ad… |
CVE-2018-9349 | Medium | 6.5 | 2024-11-27 | In mv_err_cost of mcomp.c there is a possible out of bounds read due to missing bounds check. This could lead to denial of service with no additional execution… |
CVE-2017-13323 | High | 7.8 | 2024-11-27 | In String16 of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege in an unprivi… |
CVE-2017-13321 | Medium | 5.5 | 2024-11-27 | In SensorService::isDataInjectionEnabled of frameworks/native/services/sensorservice/SensorService.cpp, there is a possible out of bounds read due to a missing… |
CVE-2017-13320 | Medium | 6.5 | 2024-11-27 | In impeg2d_bit_stream_flush() of libmpeg2dec there is a possible OOB read due to a missing bounds check. This could lead to Remote DoS with no additional execu… |
CVE-2017-13319 | High | 7.5 | 2024-11-27 | In pvmp3_get_main_data_size of pvmp3_get_main_data_size.cpp, there is a possible buffer overread due to a missing bounds check. This could lead to remote infor… |
CVE-2017-13316 | High | 7.8 | 2024-11-27 | In checkPermissions of RecognitionService.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation o… |
CVE-2024-9369 | Critical | 9.6 | 2024-11-27 | Insufficient data validation in Mojo in Google Chrome prior to 129.0.6668.89 allowed a remote attacker who had compromised the renderer process to perform an o… |
CVE-2024-7025 | High | 8.8 | 2024-11-27 | Integer overflow in Layout in Google Chrome prior to 129.0.6668.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (C… |
CVE-2018-9487 | Medium | 5.5 | 2024-11-20 | In setVpnForcedLocked of Vpn.java, there is a possible blocking of internet traffic through vpn due to a bad uid check. This could lead to local denial of serv… |
CVE-2018-9486 | Medium | 6.5 | 2024-11-20 | In hidh_l2cif_data_ind of hidh_conn.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure o… |
CVE-2018-9485 | Medium | 6.5 | 2024-11-20 | In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure… |
CVE-2018-9484 | High | 7.5 | 2024-11-20 | In l2cu_send_peer_config_rej of l2c_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information discl… |
CVE-2018-9483 | Medium | 6.5 | 2024-11-20 | In bta_dm_remove_sec_dev_entry of bta_dm_act.cc, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosu… |
CVE-2018-9482 | Medium | 6.5 | 2024-11-20 | In intr_data_copy_cb of btif_hd.cc, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure in the B… |
CVE-2018-9481 | Medium | 6.5 | 2024-11-20 | In bta_hd_set_report_act of bta_hd_act.cc, there is a possible out-of-bounds read due to an integer overflow. This could lead to remote information disclosure… |
CVE-2018-9480 | Medium | 6.5 | 2024-11-20 | In bta_hd_get_report_act of bta_hd_act.cc, there is a possible out-of-bounds read due to improper input validation. This could lead to remote information discl… |
CVE-2018-9479 | Critical | 9.8 | 2024-11-20 | In process_service_attr_req and process_service_search_attr_req of sdp_server.cc, there is an out of bounds write due to a missing bounds check. This could lea… |
CVE-2018-9478 | Critical | 9.8 | 2024-11-20 | In process_service_attr_req and process_service_search_attr_req of sdp_server.cc, there is an out of bounds write due to a missing bounds check. This could lea… |
CVE-2018-9477 | High | 7.8 | 2024-11-20 | In the development options section of the Settings app, there is a possible authentication bypass due to a missing permission check. This could lead to local e… |
CVE-2018-9475 | High | 8.8 | 2024-11-20 | In HeadsetInterface::ClccResponse of btif_hf.cc, there is a possible out of bounds stack write due to a missing bounds check. This could lead to remote escalat… |
CVE-2018-9474 | High | 7.8 | 2024-11-20 | In writeToParcel of MediaPlayer.java, there is a possible serialization/deserialization mismatch due to improper input validation. This could lead to local esc… |
CVE-2018-9472 | High | 8.8 | 2024-11-20 | In xmlMemStrdupLoc of xmlmemory.c, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution in an unprivile… |
CVE-2018-9471 | High | 7.8 | 2024-11-20 | In the deserialization constructor of NanoAppFilter.java, there is a possible loss of data due to type confusion. This could lead to local escalation of privil… |
CVE-2018-9470 | High | 8.8 | 2024-11-20 | In bff_Scanner_addOutPos of Scanner.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote escalation of privil… |
CVE-2018-9469 | High | 7.8 | 2024-11-20 | In multiple functions of ShortcutService.java, there is a possible creation of a spoofed shortcut due to a missing permission check. This could lead to local e… |
CVE-2018-9468 | High | 7.1 | 2024-11-20 | In query of DownloadManager.java, there is a possible read/write of arbitrary files due to a permissions bypass. This could lead to local information disclosur… |
CVE-2024-10382 | High | 7.5 | 2024-11-20 | There exists a code execution vulnerability in the Car App Android Jetpack Library. CarAppService uses deserialization logic that allows construction of arbitr… |
CVE-2018-9467 | Critical | 9.8 | 2024-11-20 | In the getHost() function of UriTest.java, there is the possibility of incorrect web origin determination. This could lead to incorrect security decisions with… |
CVE-2018-9466 | High | 8.8 | 2024-11-19 | In the xmlSnprintfElementContent function of valid.c, there is a possible out of bounds write. This could lead to remote escalation of privilege in an unprivil… |
CVE-2018-9456 | High | 7.5 | 2024-11-19 | In sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service… |
CVE-2018-9440 | Medium | 6.5 | 2024-11-19 | In parse of M3UParser.cpp there is a possible resource exhaustion due to improper input validation. This could lead to denial of service with no additional exe… |
CVE-2018-9433 | High | 8.8 | 2024-11-19 | In ArrayConcatVisitor of builtins-array.cc, there is a possible type confusion due to improper input validation. This could lead to remote code execution with… |
CVE-2018-9432 | High | 7.8 | 2024-11-19 | In createPhonebookDialogView and createMapDialogView of BluetoothPermissionActivity.java, there is a possible permissions bypass. This could lead to local esca… |
CVE-2018-9428 | High | 7.8 | 2024-11-19 | In startDevice of AAudioServiceStreamBase.cpp there is a possible out of bounds write due to a use after free. This could lead to local arbitrary code executio… |
CVE-2018-9424 | High | 7.8 | 2024-11-19 | In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri… |
CVE-2018-9421 | Medium | 5.5 | 2024-11-19 | In writeInplace of Parcel.cpp, there is a possible information leak across processes, using Binder, due to uninitialized data. This could lead to local informa… |
CVE-2018-9420 | Medium | 5.5 | 2024-11-19 | In BnCameraService::onTransact of CameraService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information… |
CVE-2018-9419 | High | 7.5 | 2024-11-19 | In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure… |
CVE-2018-9417 | High | 7.8 | 2024-11-19 | In f_hidg_read and hidg_disable of f_hid.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with n… |
CVE-2018-9412 | Medium | 5.5 | 2024-11-19 | In removeUnsynchronization of ID3.cpp there is a possible resource exhaustion due to improper input validation. This could lead to denial of service with no ad… |
CVE-2018-9411 | High | 8.8 | 2024-11-19 | In decrypt of ClearKeyCasPlugin.cpp there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote arbitrary code execution w… |
CVE-2018-9410 | Medium | 5.5 | 2024-11-19 | In analyzeAxes of FontUtils.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no… |
CVE-2018-9365 | High | 8.8 | 2024-11-19 | In smp_data_received of smp_l2c.cc, there is a possible out of bounds read followed by code execution due to a missing bounds check. This could lead to remote… |
CVE-2024-11395 | High | 8.8 | 2024-11-19 | Type Confusion in V8 in Google Chrome prior to 131.0.6778.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2018-9409 | High | 7.8 | 2024-11-19 | In HWCSession::SetColorModeById of hwc_session.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation… |
CVE-2018-9372 | High | 7.8 | 2024-11-19 | In cmd_flash_mmc_sparse_img of dl_commands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to a local escalation of p… |
CVE-2018-9371 | Medium | 6.4 | 2024-11-19 | In the Mediatek Preloader, there are out of bounds reads and writes due to an exposed interface that allows arbitrary peripheral memory mapping with insufficie… |
CVE-2018-9370 | High | 7.3 | 2024-11-19 | In download.c there is a special mode allowing user to download data into memory and causing possible memory corruptions due to missing bounds check. This coul… |
CVE-2018-9369 | High | 7.3 | 2024-11-19 | In bootloader there is fastboot command allowing user specified kernel command line arguments. This could lead to local escalation of privilege with no additio… |
CVE-2018-9368 | High | 7.8 | 2024-11-19 | In mtkscoaudio debugfs there is a possible arbitrary kernel memory write due to missing bounds check and weakened SELinux policies. This could lead to local es… |
CVE-2018-9367 | High | 7.8 | 2024-11-19 | In FT_ACDK_CCT_V2_OP_ISP_SET_TUNING_PARAS of Meta_CCAP_Para.cpp, there is a possible out of bounds write due to improper input validation. This could lead to l… |
CVE-2018-9366 | High | 7.8 | 2024-11-19 | In IMSA_Recv_Thread and VT_IMCB_Thread of ImsaClient.cpp and VideoTelephony.c, there is a possible out of bounds write due to an integer overflow. This could l… |
CVE-2018-9364 | High | 7.5 | 2024-11-19 | In the LG LAF component, there is a special command that allowed modification of certain partitions. This could lead to bypass of secure boot. User interaction… |
CVE-2018-9348 | Medium | 6.5 | 2024-11-19 | In SMF_ParseMetaEvent of eas_smf.c, there is a possible integer overflow. This could lead to remote denial of service due to resource exhaustion with no additi… |
CVE-2018-9346 | Medium | 5.5 | 2024-11-19 | In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local i… |
CVE-2018-9345 | Medium | 5.5 | 2024-11-19 | In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local i… |
CVE-2018-9344 | High | 7.8 | 2024-11-19 | In several functions of DescramblerImpl.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with… |
CVE-2018-9341 | High | 7.8 | 2024-11-19 | In impeg2d_mc_fullx_fully of impeg2d_mc.c there is a possible out of bound write due to missing bounds check. This could lead to remote arbitrary code executio… |
CVE-2018-9340 | Medium | 5.5 | 2024-11-19 | In ResStringPool::setTo of ResourceTypes.cpp, it's possible for an attacker to control the value of mStringPoolSize to be out of bounds, causing information di… |
CVE-2018-9339 | High | 7.8 | 2024-11-19 | In writeTypedArrayList and readTypedArrayList of Parcel.java, there is a possible escalation of privilege due to type confusion. This could lead to local escal… |
CVE-2023-21270 | High | 7.8 | 2024-11-19 | In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way for an app to keep permissions that should be revoked due to incorrect… |
CVE-2018-9338 | High | 7.8 | 2024-11-19 | In ResStringPool::setTo of ResourceTypes.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri… |
CVE-2017-13315 | High | 7.8 | 2024-11-19 | In writeToParcel and createFromParcel of DcParamObject.java, there is a permission bypass due to a write size mismatch. This could lead to an elevation of priv… |
CVE-2024-50302 | Medium | 5.5 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds… |
CVE-2024-11023 | Medium | 6.1 | 2024-11-18 | Firebase JavaScript SDK utilizes a "FIREBASE_DEFAULTS" cookie to store configuration data, including an "_authTokenSyncURL" field used for session synchronizat… |
CVE-2017-13314 | High | 7.8 | 2024-11-15 | In setAllowOnlyVpnForUids of NetworkManagementService.java, there is a possible security settings bypass due to a missing permission check. This could lead to… |
CVE-2017-13313 | Medium | 6.5 | 2024-11-15 | In ElementaryStreamQueue::dequeueAccessUnitMPEG4Video of ESQueue.cpp, there is a possible infinite loop leading to resource exhaustion due to an incorrect boun… |
CVE-2017-13312 | High | 7.8 | 2024-11-15 | In createFromParcel of MediaCas.java, there is a possible parcel read/write mismatch due to improper input validation. This could lead to local escalation of p… |