Vulnerabilities > Google > Android

DATE CVE VULNERABILITY TITLE RISK
2017-02-07 CVE-2014-9914 Use After Free vulnerability in multiple products
Race condition in the ip4_datagram_release_cb function in net/ipv4/datagram.c in the Linux kernel before 3.15.2 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging incorrect expectations about locking during multithreaded access to internal data structures for IPv4 UDP sockets.
local
low complexity
linux google CWE-416
7.8
2017-01-27 CVE-2016-8411 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
Buffer overflow vulnerability while processing QMI QOS TLVs.
network
low complexity
google CWE-119
critical
9.8
2017-01-18 CVE-2014-9910 Permissions, Privileges, and Access Controls vulnerability in Google Android
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel.
local
high complexity
google CWE-264
7.0
2017-01-18 CVE-2014-9909 Permissions, Privileges, and Access Controls vulnerability in Google Android
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel.
local
high complexity
google CWE-264
7.0
2017-01-13 CVE-2017-0398 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in Audioserver could enable a local malicious application to access data outside of its permission levels.
local
low complexity
google CWE-200
5.5
2017-01-13 CVE-2016-8467 Permissions, Privileges, and Access Controls vulnerability in Google Android
An elevation of privilege vulnerability in the bootloader could enable a local attacker to execute arbitrary modem commands on the device.
local
low complexity
google CWE-264
5.5
2017-01-12 CVE-2016-6492 Permissions, Privileges, and Access Controls vulnerability in Google Android
The MT6573FDVT_SetRegHW function in camera_fdvt.c in the MediaTek driver for Linux allows local users to gain privileges via a crafted application that makes an MT6573FDVTIOC_T_SET_FDCONF_CMD IOCTL call.
local
low complexity
google CWE-264
7.8
2017-01-12 CVE-2017-0402 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable a local malicious application to access data outside of its permission levels.
local
low complexity
google CWE-200
5.5
2017-01-12 CVE-2017-0401 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in the Qualcomm audio post processor could enable a local malicious application to access data outside of its permission levels.
local
low complexity
google CWE-200
5.5
2017-01-12 CVE-2017-0400 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable a local malicious application to access data outside of its permission levels.
local
low complexity
google CWE-200
5.5