Archive
12 January 2018
Vulnerabilities first published on this day (UTC), newest first.
118 results · Feed
-
Unscored —
An information disclosure vulnerability in the Android framework (clipboardservice). Product: Android. Versions: 5.1.1,…
-
Unscored —
In MPEG4Extractor.cpp, there are several places where functions return early without cleaning up internal buffers which…
-
Unscored —
In the parseURL function of URLStreamHandler, there is improper input validation of the host field. This could lead to …
-
Unscored —
A vulnerability in the Android media framework (libavc) related to handling dec_hdl memory allocation failures. Product…
-
Unscored —
An elevation of privilege vulnerability in the Broadcom bcmdhd driver. Product: Android. Versions: Android kernel. Andr…
-
Unscored —
In the sendFormatChange function of ACodec, there is a possible integer overflow which could lead to an out-of-bounds w…
-
Unscored —
In the ihevcd_allocate_static_bufs and ihevcd_create functions of SoftHEVC, there is a possible out-of-bounds write due…
-
Unscored —
A vulnerability in the Android media framework (libhevc) related to handling ps_codec_obj memory allocation failures. P…
-
Unscored —
A vulnerability in the Android media framework (libvpx) related to odd frame width. Product: Android. Versions: 7.0, 7.…
-
Unscored —
An information disclosure vulnerability in the Android media framework (av) related to id3 unsynchronization. Product: …
-
Unscored —
An information disclosure vulnerability in the Android media framework (mediadrm). Product: Android. Versions: 5.1.1, 6…
-
Unscored —
An elevation of privilege vulnerability in the Upstream kernel wifi driver. Product: Android. Versions: Android kernel.…
-
Unscored —
An information disclosure vulnerability in the Upstream kernel kernel. Product: Android. Versions: Android kernel. Andr…
-
Unscored —
In the ihevcd_decode function of ihevcd_decode.c, there is an infinite loop due to an incomplete frame error. This coul…
-
Unscored —
In the enableVSyncInjections function of SurfaceFlinger, there is a possible use after free of mVSyncInjector. This cou…
-
Unscored —
In the ihevcd_parse_slice.c function, slave threads are not joined if there is an error. This could lead to a remote de…
-
Unscored —
An information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 7.0, 7.1.1…
-
Unscored —
In several places in ihevcd_decode.c, a dead loop could occur due to incomplete frames which could lead to memory leaks…
-
Unscored —
Access to CNTVCT_EL0 in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear could be used for …
-
Unscored —
An information disclosure vulnerability in the Android media framework (aacdec). Product: Android. Versions: 5.1.1, 6.0…
-
Unscored —
An information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 7.0, 7.1.1…
-
Unscored —
In CameraDeviceClient::submitRequestList of CameraDeviceClient.cpp, there is an out-of-bounds write if metadataSize is …
-
Unscored —
In the hardware HEVC decoder, some media files could cause a page fault. This could lead to a remote denial of service …
-
Unscored —
An information disclosure vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 7.0, 7.1…
-
Unscored —
An information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 7.0, 7.1.…
-
Unscored —
An elevation of privilege vulnerability in the MediaTek mtk. Product: Android. Versions: Android kernel. Android ID: A-…
-
Unscored —
An information disclosure vulnerability in the Android media framework (stagefright mpeg4writer). Product: Android. Ver…
-
Unscored —
In Bitmap.ccp if Bitmap.nativeCreate fails an out of memory exception is not thrown leading to a java.io.IOException la…
-
Unscored —
An information disclosure vulnerability in the Android media framework (libeffects). Product: Android. Versions: 5.1.1,…
-
Unscored —
In the onQueueFilled function of SoftAVCDec, there is a possible out-of-bounds write due to a use after free if a bad h…
-
Unscored —
In ihevcd_decode.c there is a possible infinite loop due to bytes for an sps of unsupported resolution resulting in the…
-
Unscored —
A vulnerability in the Android media framework (libavc) related to incorrect use of mmco parameters. Product: Android. …
-
Unscored —
In DisplayFtmItem in the bootloader, there is an out-of-bounds write due to reading a string without verifying that it'…
-
Unscored —
An elevation of privilege vulnerability in the Android system (systemui). Product: Android. Versions: 5.1.1, 6.0, 6.0.1…
-
Unscored —
In the initDecoder function of SoftAVCDec, there is a possible out-of-bounds write to mCodecCtx due to a use after free…
-
Unscored —
An elevation of privilege vulnerability in the Upstream kernel bluez. Product: Android. Versions: Android kernel. Andro…
-
Unscored —CVE-2017-13208 Public exploit
In receive_packet of libnetutils/packet.c, there is a possible out-of-bounds write due to a missing bounds check on the…
-
Unscored —
In libMtkOmxVdec.so there is a possible heap buffer overflow. This could lead to a remote elevation of privilege enabli…
-
Unscored —
In the doGetThumb and getThumbnail functions of MtpServer, there is a possible double free due to not NULLing out a fre…
-
Unscored —
In the ihevcd_parse_sps function of ihevcd_parse_headers.c, several parameter values could be negative which could lead…