Vulnerabilities > Google > Android > High

DATE CVE VULNERABILITY TITLE RISK
2017-08-18 CVE-2017-9685 Use After Free vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a WLAN driver can lead to a Use After Free condition.
network
high complexity
google CWE-416
8.1
2017-08-18 CVE-2017-9684 Use After Free vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a USB driver can lead to a Use After Free condition.
local
high complexity
google CWE-416
7.0
2017-08-18 CVE-2017-9680 Information Exposure vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, if a pointer argument coming from userspace is invalid, a driver may use an uninitialized structure to log an error message.
network
low complexity
google CWE-200
7.5
2017-08-18 CVE-2017-9679 Information Exposure vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, if a userspace string is not NULL-terminated, kernel memory contents can leak to system logs.
network
low complexity
google CWE-200
7.5
2017-08-18 CVE-2017-9678 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, in a video driver, memory corruption can potentially occur due to lack of bounds checking in a memcpy().
local
low complexity
google CWE-119
7.8
2017-08-18 CVE-2017-8272 Out-of-bounds Write vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, in a driver function, a value from userspace is not properly validated potentially leading to an out of bounds heap write.
local
low complexity
google CWE-787
7.8
2017-08-18 CVE-2017-8270 Use After Free vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a driver potentially leading to a use-after-free condition.
local
high complexity
google CWE-416
7.0
2017-08-18 CVE-2017-8268 Out-of-bounds Read vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, the camera application can possibly request frame/command buffer processing with invalid values leading to the driver performing a heap buffer over-read.
local
low complexity
google CWE-125
7.8
2017-08-18 CVE-2017-8267 Integer Overflow or Wraparound vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in an IOCTL handler potentially leading to an integer overflow and then an out-of-bounds write.
local
high complexity
google CWE-190
7.0
2017-08-18 CVE-2017-8266 Use After Free vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to a use-after-free condition.
local
high complexity
google CWE-416
7.0