Skip to content
OpenAdvisories

Product · Google

Android

2,760 known vulnerabilities.

2,760 results · Feed

  • Unscored —

    An information disclosure vulnerability in the Android media framework (av) related to id3 unsynchronization. Product: …

  • Unscored —

    An information disclosure vulnerability in the Android media framework (mediadrm). Product: Android. Versions: 5.1.1, 6…

  • Unscored —

    An elevation of privilege vulnerability in the Upstream kernel wifi driver. Product: Android. Versions: Android kernel.…

  • Unscored —

    An information disclosure vulnerability in the Upstream kernel kernel. Product: Android. Versions: Android kernel. Andr…

  • Unscored —

    In the ihevcd_decode function of ihevcd_decode.c, there is an infinite loop due to an incomplete frame error. This coul…

  • Unscored —

    In the enableVSyncInjections function of SurfaceFlinger, there is a possible use after free of mVSyncInjector. This cou…

  • Unscored —

    In the ihevcd_parse_slice.c function, slave threads are not joined if there is an error. This could lead to a remote de…

  • Unscored —

    An information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 7.0, 7.1.1…

  • Unscored —

    In several places in ihevcd_decode.c, a dead loop could occur due to incomplete frames which could lead to memory leaks…

  • Unscored —

    An information disclosure vulnerability in the Android media framework (aacdec). Product: Android. Versions: 5.1.1, 6.0…

  • Unscored —

    An information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 7.0, 7.1.1…

  • Unscored —

    In CameraDeviceClient::submitRequestList of CameraDeviceClient.cpp, there is an out-of-bounds write if metadataSize is …

  • Unscored —

    In the hardware HEVC decoder, some media files could cause a page fault. This could lead to a remote denial of service …

  • Unscored —

    An information disclosure vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 7.0, 7.1…

  • Unscored —

    An information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 7.0, 7.1.…

  • Unscored —

    An elevation of privilege vulnerability in the MediaTek mtk. Product: Android. Versions: Android kernel. Android ID: A-…

  • Unscored —

    An information disclosure vulnerability in the Android media framework (stagefright mpeg4writer). Product: Android. Ver…

  • Unscored —

    In Bitmap.ccp if Bitmap.nativeCreate fails an out of memory exception is not thrown leading to a java.io.IOException la…

  • Unscored —

    An information disclosure vulnerability in the Android media framework (libeffects). Product: Android. Versions: 5.1.1,…

  • Unscored —

    In the onQueueFilled function of SoftAVCDec, there is a possible out-of-bounds write due to a use after free if a bad h…

  • Unscored —

    In ihevcd_decode.c there is a possible infinite loop due to bytes for an sps of unsupported resolution resulting in the…

  • Unscored —

    A vulnerability in the Android media framework (libavc) related to incorrect use of mmco parameters. Product: Android. …

  • Unscored —

    In DisplayFtmItem in the bootloader, there is an out-of-bounds write due to reading a string without verifying that it'…

  • Unscored —

    An elevation of privilege vulnerability in the Android system (systemui). Product: Android. Versions: 5.1.1, 6.0, 6.0.1…

  • Unscored —

    In the initDecoder function of SoftAVCDec, there is a possible out-of-bounds write to mCodecCtx due to a use after free…

  • Unscored —

    An elevation of privilege vulnerability in the Upstream kernel bluez. Product: Android. Versions: Android kernel. Andro…

  • Unscored —
    CVE-2017-13208 Public exploit

    In receive_packet of libnetutils/packet.c, there is a possible out-of-bounds write due to a missing bounds check on the…

  • Unscored —

    In libMtkOmxVdec.so there is a possible heap buffer overflow. This could lead to a remote elevation of privilege enabli…

  • Unscored —

    In the doGetThumb and getThumbnail functions of MtpServer, there is a possible double free due to not NULLing out a fre…

  • Unscored —

    In the ihevcd_parse_sps function of ihevcd_parse_headers.c, several parameter values could be negative which could lead…

  • Unscored —

    An information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 7.0, 7.1.…

  • Unscored —

    An information disclosure vulnerability in the Android media framework (aac). Product: Android. Versions: 7.0, 7.1.1, 7…

  • Unscored —

    In bta_scan_results_cb_impl of btif_ble_scanner.cc, there is possible resource exhaustion if a large number of repeated…

  • Unscored —
    CVE-2017-13209 Public exploit

    In the ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on th…

  • Unscored —

    In several functions of libhevc, NEON registers are not preserved. This could lead to remote code execution as a privil…

  • Unscored —
    CVE-2017-13216 Public exploit

    In ashmem_ioctl of ashmem.c, there is an out-of-bounds write due to insufficient locking when accessing asma. This coul…

  • Unscored —

    In the ihevcd_parse_slice_header function of ihevcd_parse_slice_header.c a slice address of zero after the first slice …

  • Unscored —

    In the OMXNodeInstance::useBuffer and IOMX::freeBuffer functions, there is a possible use after free due to a race cond…

  • Unscored —

    A elevation of privilege vulnerability in the Upstream kernel skcipher. Product: Android. Versions: Android kernel. And…

  • Unscored —

    A vulnerability in the Android media framework (ex) related to composition of frames lacking a color map. Product: Andr…