Vulnerabilities > Google > Android > High

DATE CVE VULNERABILITY TITLE RISK
2019-02-13 CVE-2018-6271 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
NVIDIA Tegra OpenMax driver (libnvomx) contains a vulnerability in which the software delivers extra data with the buffer and does not properly validated the extra data, which may lead to denial of service or escalation of privileges.
local
low complexity
google CWE-119
7.8
2019-02-13 CVE-2018-6268 Use After Free vulnerability in Google Android
NVIDIA Tegra library contains a vulnerability in libnvmmlite_video.so, where referencing memory after it has been freed may lead to denial of service or possible escalation of privileges.
local
low complexity
google CWE-416
7.8
2019-02-13 CVE-2018-6267 Improper Input Validation vulnerability in Google Android
NVIDIA Tegra OpenMax driver (libnvomx) contains a vulnerability in which the software does not validate or incorrectly validates input that can affect the control flow or data flow of a program, which may lead to denial of service or escalation of privileges.
local
low complexity
google CWE-20
7.8
2019-02-11 CVE-2018-9592 Out-of-bounds Read vulnerability in Google Android
In mca_ccb_hdl_rsp of mca_cact.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to a missing bounds check.
network
low complexity
google CWE-125
7.5
2019-02-11 CVE-2018-9591 Out-of-bounds Read vulnerability in Google Android
In bta_hh_ctrl_dat_act of bta_hh_act.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to a missing bounds check.
network
low complexity
google CWE-125
7.5
2019-02-11 CVE-2018-9590 Out-of-bounds Read vulnerability in Google Android
In add_attr of sdp_discovery.c in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to a missing bounds check.
network
low complexity
google CWE-125
7.5
2019-02-11 CVE-2018-9587 Files or Directories Accessible to External Parties vulnerability in Google Android
In savePhotoFromUriToUri of ContactPhotoUtils.java in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is possible unauthorized access to files within the contact app due to a confused deputy scenario.
local
low complexity
google CWE-552
7.3
2019-02-11 CVE-2018-9586 Race Condition vulnerability in Google Android
In run of InstallPackageTask.java in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, it is possible that package verification is turned off and remains off due to a race condition.
local
high complexity
google CWE-362
7.0
2019-02-11 CVE-2018-9585 Out-of-bounds Write vulnerability in Google Android
In nfc_ncif_proc_get_routing of nfc_ncif.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds write due to a missing bounds check.
local
low complexity
google CWE-787
7.8
2019-02-11 CVE-2018-9584 Out-of-bounds Write vulnerability in Google Android
In nfc_ncif_set_config_status of nfc_ncif.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds write due to a missing bounds check.
local
low complexity
google CWE-787
7.8