Android Security Bulletin — April 2018
Monday, 2 April 2018
- Vulnerabilities
- 92
- Critical
- 0
- High
- 0
- Zero-days
- 0
- Public exploit
- 6
Exploited 0
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
None of this release's vulnerabilities is known to be exploited so far.
Public exploit code 6
Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.
-
Unscored
CVE-2017-13253 Public exploit In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri…EPSS 2.8%
-
Unscored
CVE-2017-13258 Public exploit In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with n…EPSS 7.1%
-
Unscored
CVE-2017-13260 Public exploit In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with n…EPSS 7.3%
-
Unscored
CVE-2017-13261 Public exploit In bnep_process_control_packet of bnep_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information di…EPSS 7.1%
-
Unscored
CVE-2017-13262 Public exploit In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing length decrement operation. This could lead to remote information dis…EPSS 8%
- Unscored
All vulnerabilities 92
Unscored92 ShowHide
-
Unscored
CVE-2017-13253 Public exploit In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri…EPSS 2.8%
-
Unscored
CVE-2017-13258 Public exploit In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with n…EPSS 7.1%
-
Unscored
CVE-2017-13260 Public exploit In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with n…EPSS 7.3%
-
Unscored
CVE-2017-13261 Public exploit In bnep_process_control_packet of bnep_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information di…EPSS 7.1%
-
Unscored
CVE-2017-13262 Public exploit In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing length decrement operation. This could lead to remote information dis…EPSS 8%
- Unscored
-
Unscored
CVE-2014-9953 An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36714770.EPSS 1.1%
-
Unscored
CVE-2014-9954 An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36388559.EPSS 1.1%
-
Unscored
CVE-2014-9955 An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384686.EPSS 1.1%
-
Unscored
CVE-2014-9956 An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36389611.EPSS 1.1%
-
Unscored
CVE-2014-9957 An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36387564.EPSS 1.1%
-
Unscored
CVE-2014-9958 An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384774.EPSS 1.1%
-
Unscored
CVE-2014-9959 An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36383694.EPSS 1.1%
-
Unscored
CVE-2015-9008 An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384689.EPSS 1.1%
-
Unscored
CVE-2015-9009 An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393600.EPSS 1.1%
-
Unscored
CVE-2015-9010 An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393101.EPSS 1.1%
-
Unscored
CVE-2015-9011 An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36714882.EPSS 1.1%
-
Unscored
CVE-2015-9012 An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384691.EPSS 1.1%
-
Unscored
CVE-2015-9013 An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393251.EPSS 1.1%
-
Unscored
CVE-2015-9014 An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393750.EPSS 1.3%
- Unscored
-
Unscored
CVE-2016-10230 A remote code execution vulnerability in the Qualcomm crypto driver. Product: Android. Versions: Android kernel. Android ID: A-34389927. References: QC-CR#1091…EPSS 2.9%
- Unscored
- Unscored
-
Unscored
CVE-2016-10233 An elevation of privilege vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Android ID: A-34389926. References: QC-CR#897…EPSS 1.1%
- Unscored
- Unscored
- Unscored
-
Unscored
CVE-2016-10298 An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393252.EPSS 1.1%
-
Unscored
CVE-2016-10299 An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-32577244.EPSS 1.1%
-
Unscored
CVE-2016-8484 An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823575.EPSS 1.1%
- Unscored
- Unscored
-
Unscored
CVE-2016-8487 An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823724.EPSS 1.1%
-
Unscored
CVE-2016-8488 An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-31625756.EPSS 1.1%
-
Unscored
CVE-2017-13248 In impeg2_idct_recon_sse42() of impeg2_idct_recon_sse42_intr.c, there is an out of bound write due to a missing bounds check. This could lead to an remote code…EPSS 1.1%
-
Unscored
CVE-2017-13249 In impeg2d_api_set_display_frame of impeg2d_api_main.c, there is an out of bound write due to a missing bounds check. This could lead to remote code execution …EPSS 1.1%
-
Unscored
CVE-2017-13250 In ih264d_fmt_conv_420sp_to_420p of ih264d_utils.c, there is an out of bound write due to a missing out of bounds check because of a multiplication error. This…EPSS 1.1%
- Unscored
- Unscored
- Unscored
- Unscored
- Unscored
- Unscored
-
Unscored
CVE-2017-13259 In functionality implemented in sdp_discovery.cc, there are possible out of bounds reads due to missing bounds checks. This could lead to remote information di…EPSS 1.3%
- Unscored
- Unscored
- Unscored
-
Unscored
CVE-2017-13266 In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible stack corruption due to a missing bounds check. This could lead to remote code execution with n…EPSS 1.8%
-
Unscored
CVE-2017-13267 In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible stack corruption due to a missing bounds check. This could lead to remote escalation of privile…EPSS 1.6%
- Unscored
- Unscored
- Unscored
- Unscored
-
Unscored
CVE-2017-13272 In alarm_ready_generic of alarm.cc, there is a possible out of bounds write due to a use after free. This could lead to remote escalation of privilege with no …EPSS 1.8%
- Unscored
- Unscored
- Unscored
-
Unscored
CVE-2017-13277 In ihevcd_fmt_conv of ihevcd_fmt_conv.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with n…EPSS 1%
- Unscored
- Unscored
- Unscored
-
Unscored
CVE-2017-13281 In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible stack buffer overflow due to an incorrect bounds check. This could lead to remote code execut…EPSS 1.8%
-
Unscored
CVE-2017-13282 In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible stack buffer overflow due to a missing bounds check. This could lead to remote code execut…EPSS 1.7%
-
Unscored
CVE-2017-13283 In avrc_ctrl_pars_vendor_rsp of bluetooth avrcp_ctrl, there is a possible out of bounds write on the stack due to a missing bounds check. This could lead to re…EPSS 2.1%
-
Unscored
CVE-2017-13284 In config_set_string of config.cc, it is possible to pair a second BT keyboard without user approval due to improper input validation. This could lead to remot…EPSS 1.6%
-
Unscored
CVE-2017-13285 In SvoxSsmlParser and startElement of svox_ssml_parser.cpp, there is a possible out of bounds write due to an uninitialized buffer. This could lead to remote c…EPSS 1.6%
- Unscored
- Unscored
- Unscored
- Unscored
-
Unscored
CVE-2017-13291 In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible NULL pointer dereference due to missing bounds checks. This could lead to remote denial of…EPSS 1.1%
-
Unscored
CVE-2017-13292 In wl_get_assoc_ies of wl_cfg80211.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with n…EPSS 1.6%
- Unscored
- Unscored
- Unscored
- Unscored
- Unscored
- Unscored
- Unscored
- Unscored
- Unscored
- Unscored
- Unscored
- Unscored
- Unscored
- Unscored
- Unscored
- Unscored
- Unscored
- Unscored
- Unscored