Vulnerabilities > Google > Android > 8.1

DATE CVE VULNERABILITY TITLE RISK
2018-02-12 CVE-2017-13236 Incorrect Permission Assignment for Critical Resource vulnerability in Google Android 8.0/8.1
In the KeyStore service, there is a permissions bypass that allows access to protected resources.
local
low complexity
google CWE-732
4.6
2018-02-12 CVE-2017-13235 NULL Pointer Dereference vulnerability in Google Android
A other vulnerability in the Android media framework (n/a).
network
google CWE-476
4.3
2018-02-12 CVE-2017-13234 Missing Release of Resource after Effective Lifetime vulnerability in Google Android
In DLSParser of the sonivox library, there is possible resource exhaustion due to a memory leak.
network
google CWE-772
7.1
2018-02-12 CVE-2017-13233 Resource Exhaustion vulnerability in Google Android
In ihevcd_ctb_boundary_strength_pbslice of libhevc, there is possible resource exhaustion.
network
google CWE-400
7.1
2018-02-12 CVE-2017-13232 Information Exposure vulnerability in Google Android
In audioserver, there is an out-of-bounds write due to a log statement using %s with an array that may not be NULL terminated.
network
low complexity
google CWE-200
7.8
2018-02-12 CVE-2017-13231 Out-of-bounds Write vulnerability in Google Android 8.0/8.1
In libmediadrm, there is an out-of-bounds write due to improper input validation.
local
low complexity
google CWE-787
7.2
2018-02-12 CVE-2017-13230 Out-of-bounds Write vulnerability in Google Android
In hevc codec, there is an out-of-bounds write due to an incorrect bounds check with the i2_pic_width_in_luma_samples value.
network
google CWE-787
critical
9.3
2018-02-12 CVE-2017-13229 Improper Input Validation vulnerability in Google Android
A remote code execution vulnerability in the Android media framework (n/a).
network
low complexity
google CWE-20
critical
10.0
2018-02-12 CVE-2017-13228 Out-of-bounds Write vulnerability in Google Android
In function ih264d_ref_idx_reordering of libavc, there is an out-of-bounds write due to modCount being defined as an unsigned character.
network
google CWE-787
critical
9.3
2018-01-12 CVE-2017-13210 Out-of-bounds Write vulnerability in Google Android
In CameraDeviceClient::submitRequestList of CameraDeviceClient.cpp, there is an out-of-bounds write if metadataSize is too small.
local
low complexity
google CWE-787
7.2