Vulnerabilities > Google > Android > 3.2.2

DATE CVE VULNERABILITY TITLE RISK
2017-09-21 CVE-2017-11000 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, in an ISP Camera kernel driver function, an incorrect bounds check may potentially lead to an out-of-bounds write.
network
google CWE-119
6.8
2017-09-21 CVE-2017-10999 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, concurrent calls into ioctl RMNET_IOCTL_ADD_MUX_CHANNEL in ipa wan driver may lead to memory corruption due to missing locks.
network
google CWE-119
6.8
2017-09-21 CVE-2017-10998 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, in audio_aio_ion_lookup_vaddr, the buffer length, which is user input, ends up being used to validate if the buffer is fully within the valid region.
network
google CWE-119
6.8
2017-09-21 CVE-2017-10997 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, using a debugfs node, a write to a PCIe register can cause corruption of kernel memory.
network
google CWE-119
6.8
2017-09-21 CVE-2017-10996 Information Exposure vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, out of bounds access is possible in c_show(), due to compat_hwcap_str[] not being NULL-terminated.
network
google CWE-200
7.1
2017-09-08 CVE-2017-0804 Unspecified vulnerability in Google Android
A elevation of privilege vulnerability in the MediaTek mmc driver.
network
google
6.8
2017-09-08 CVE-2017-0803 Unspecified vulnerability in Google Android
A elevation of privilege vulnerability in the MediaTek accessory detector driver.
network
google
6.8
2017-09-08 CVE-2017-0802 Unspecified vulnerability in Google Android
A elevation of privilege vulnerability in the MediaTek kernel.
network
google
6.8
2017-09-08 CVE-2017-0801 Unspecified vulnerability in Google Android
A elevation of privilege vulnerability in the MediaTek libmtkomxvdec.
network
google
critical
9.3
2017-09-08 CVE-2017-0800 Unspecified vulnerability in Google Android
A elevation of privilege vulnerability in the MediaTek teei.
network
google
critical
9.3