Vulnerabilities > Google > Android > Critical

DATE CVE VULNERABILITY TITLE RISK
2017-11-16 CVE-2017-0853 Unspecified vulnerability in Google Android
An information disclosure vulnerability in the Android media framework (n/a).
network
low complexity
google
critical
9.1
2017-11-16 CVE-2017-0854 Out-of-bounds Read vulnerability in Google Android
An information disclosure vulnerability in the Android media framework (n/a).
network
low complexity
google CWE-125
critical
9.1
2017-11-14 CVE-2017-6274 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
An elevation of Privilege vulnerability exists in the Thermal Driver, where a missing bounds checks in the thermal throttle driver can cause an out-of-bounds write in the kernel.
network
low complexity
google CWE-119
critical
9.8
2017-10-04 CVE-2017-0807 Unspecified vulnerability in Google Android
An elevation of privilege vulnerability in the Android framework (ui framework).
network
low complexity
google
critical
9.8
2017-10-04 CVE-2017-0822 Unspecified vulnerability in Google Android
An elevation of privilege vulnerability in the Android system (camera).
network
low complexity
google
critical
9.8
2017-10-04 CVE-2017-0824 Unspecified vulnerability in Google Android
An elevation of privilege vulnerability in the Broadcom wifi driver.
network
low complexity
google
critical
9.8
2017-10-04 CVE-2017-0828 Unspecified vulnerability in Google Android
An elevation of privilege vulnerability in the Huawei bootloader.
network
low complexity
google
critical
9.8
2017-10-04 CVE-2017-0829 Unspecified vulnerability in Google Android
An elevation of privilege vulnerability in the Motorola bootloader.
network
low complexity
google
critical
9.8
2017-08-18 CVE-2017-7364 Use After Free vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_data(), variable ds_data[i].scale may still point to a user-provided address (which could point to arbitrary kernel address), so on an error condition, this user-provided address will be freed (arbitrary free), and continued operation could result in use after free condition.
network
low complexity
google CWE-416
critical
9.8
2017-08-18 CVE-2014-9411 Range Error vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially possible in rollback protection.
network
low complexity
google CWE-118
critical
9.8