Vulnerabilities > Google > Android > High

DATE CVE VULNERABILITY TITLE RISK
2018-11-14 CVE-2018-9521 Out-of-bounds Write vulnerability in Google Android 9.0
In parseMPEGCCData of NuPlayer2CCDecoder.cpp, there is a possible out of bounds write due to an incorrect bounds check.
network
low complexity
google CWE-787
8.8
2018-11-06 CVE-2018-9516 Out-of-bounds Write vulnerability in multiple products
In hid_debug_events_read of drivers/hid/hid-debug.c, there is a possible out of bounds write due to a missing bounds check.
local
low complexity
google debian canonical CWE-787
7.8
2018-11-06 CVE-2018-9489 Information Exposure vulnerability in Google Android
When wifi is switched, function sendNetworkStateChangeBroadcast of WifiStateMachine.java broadcasts an intent including detailed wifi network information.
network
low complexity
google CWE-200
7.5
2018-11-06 CVE-2018-9488 Incorrect Authorization vulnerability in Google Android 8.0/8.1/9.0
In the SELinux permissions of crash_dump.te, there is a permissions bypass due to a missing restriction.
local
low complexity
google CWE-863
7.8
2018-11-06 CVE-2018-9465 Use After Free vulnerability in Google Android
In task_get_unused_fd_flags of binder.c, there is a possible memory corruption due to a use after free.
local
low complexity
google CWE-416
7.8
2018-11-06 CVE-2018-9459 Path Traversal vulnerability in Google Android
In Attachment of Attachment.java and getFilePath of EmlAttachmentProvider.java, there is a possible Elevation of Privilege due to a path traversal error.
network
low complexity
google CWE-22
8.8
2018-11-06 CVE-2018-9458 Improper Restriction of Rendered UI Layers or Frames vulnerability in Google Android 8.0/8.1
In computeFocusedWindow of RootWindowContainer.java, and related functions, there is possible interception of keypresses due to focus being on the wrong window.
local
low complexity
google CWE-1021
7.8
2018-11-06 CVE-2018-9455 Out-of-bounds Read vulnerability in Google Android
In sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an incorrect bounds check.
network
low complexity
google CWE-125
7.5
2018-11-06 CVE-2018-9450 Out-of-bounds Write vulnerability in Google Android
In avrc_proc_vendor_command of avrc_api.cc, there is a possible out of bounds write due to a missing bounds check.
network
low complexity
google CWE-787
8.8
2018-11-06 CVE-2018-9448 Out-of-bounds Read vulnerability in Google Android 8.0/8.1
In avct_bcb_msg_ind of avct_bcb_act.cc, there is a possible out of bounds read due to a missing bounds check.
network
low complexity
google CWE-125
7.5