Vulnerabilities > Google > Android > High

DATE CVE VULNERABILITY TITLE RISK
2018-07-06 CVE-2018-3564 Use After Free vulnerability in Google Android
In the FastRPC driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, a Use After Free condition can occur when mapping on the remote processor fails.
local
low complexity
google CWE-416
7.8
2018-07-06 CVE-2017-18159 Out-of-bounds Read vulnerability in Google Android
In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, while processing a StrHwPlatform with length smaller than EFICHIPINFO_MAX_ID_LENGTH, an array out of bounds access may occur.
local
low complexity
google CWE-125
7.8
2018-07-06 CVE-2017-18158 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
Possible buffer overflows and array out of bounds accesses in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05 while flashing images.
local
low complexity
google CWE-119
7.8
2018-07-06 CVE-2017-15856 Double Free vulnerability in Google Android
Due to a race condition while processing the power stats debug file to read status, a double free condition can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
local
high complexity
google CWE-415
7.0
2018-06-15 CVE-2018-5863 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
If userspace provides a too-large WPA RSN IE length in wlan_hdd_cfg80211_set_ie(), a buffer overflow occurs in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel.
local
low complexity
google CWE-119
7.8
2018-06-15 CVE-2018-5857 Use After Free vulnerability in Google Android
In the WCD CPE codec, a Use After Free condition can occur in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel.
local
low complexity
google CWE-416
7.8
2018-06-15 CVE-2018-5854 Out-of-bounds Write vulnerability in Google Android
A stack-based buffer overflow can occur in fastboot from all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel.
local
low complexity
google CWE-787
7.8
2018-06-12 CVE-2018-5851 Improper Validation of Array Index vulnerability in Google Android
Buffer over flow can occur while processing a HTT_T2H_MSG_TYPE_TX_COMPL_IND message with an out-of-range num_msdus value in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
local
low complexity
google CWE-129
7.8
2018-06-12 CVE-2018-5849 Use After Free vulnerability in Google Android
Due to a race condition in the QTEECOM driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, when more than one HLOS client loads the same TA, a Use After Free condition can occur.
local
high complexity
google CWE-416
7.0
2018-06-12 CVE-2018-5848 Integer Overflow or Wraparound vulnerability in multiple products
In the function wmi_set_ie(), the length validation code does not handle unsigned integer overflow properly.
local
low complexity
google redhat debian CWE-190
7.8