Android

1,170 results · Clear filters · Feed

• High 8.8
  CVE-2019-11932 Public exploit EPSS 45%

  android-gif-drawable Double Free vulnerability

  A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications, allows remote attackers to execute arb…

  koral-- android-gif-drawable pl.droidsonroids.gif:android-gif-drawable Android Maven
  Oct 3, 2019
• High 7.8
  CVE-2019-9423

  Out-of-bounds Write in OpenCV

  In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Produ…

  opencv opencv-python opencv-contrib-python opencv-python-headless Android Ubuntu PyPI
  Sep 27, 2019
• High 7.5
  CVE-2018-6344

  A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established. The vulne…

  Facebook WhatsApp for Android WhatsApp for iOS WhatsApp for Windows Phone Windows Android iOS
  Dec 31, 2018
• High 8.0
  CVE-2018-5383

  Bluetooth implementations may not sufficiently validate elliptic curve parameters during Diffie-Hellman key exchange

  Bluetooth firmware or operating system software drivers in macOS versions before 10.13, High Sierra and iOS versions before 11.4, and Android versions before the 2018-06-05 patch may not sufficiently validate elliptic curve parameters used to generate public …

  Apple Android Open Source Project macOS iOS Android macOS iOS Debian Ubuntu
  Aug 7, 2018
• High —
  CVE-2016-10641

  Downloads Resources over HTTP in node-bsdiff-android

  node-bsdiff-android downloads resources over HTTP, which leaves it vulnerable to MITM attacks.

  HackerOne node-bsdiff-android node module node-bsdiff-android Android npm
  Jun 4, 2018
• High 8.8
  CVE-2017-5070 Exploited EPSS 32%

  Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, …

  chromium-browser oxide-qt libv8-3.14 Linux Windows Android Browsers Ubuntu
  Oct 27, 2017

  KEV Jun 8, 2022
• High 7.5
  CVE-2016-6799

  Information Exposure in cordova-android

  Product: Apache Cordova Android 5.2.2 and earlier. The application calls methods of the Log class. Messages passed to these methods (Log.v(), Log.d(), Log.i(), Log.w(), and Log.e()) are stored in a series of circular buffers on the device. By default, a maxim…

  Apache Software Foundation Apache Cordova Android cordova-android Android npm
  May 9, 2017
• High 8.8
  CVE-2017-5029

  Nokogiri implementation of libxslt lacks integer overflow checks

  The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a …

  chromium-browser oxide-qt nokogiri libxslt Linux Windows Android Browsers Debian Ubuntu Alpine RubyGems
  Apr 24, 2017
• High 8.8
  CVE-2017-5030 Exploited EPSS 41%

  Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0…

  chromium-browser oxide-qt libv8-3.14 Linux Windows Android Browsers Ubuntu
  Apr 24, 2017

  KEV Jun 8, 2022
• High 8.8
  CVE-2016-5198 Exploited EPSS 34%

  V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac…

  chromium-browser oxide-qt libv8-3.14 Linux Windows Android Browsers Ubuntu
  Jan 19, 2017

  KEV Jun 8, 2022