Vulnerabilities > Google > Android > Medium

DATE CVE VULNERABILITY TITLE RISK
2017-08-09 CVE-2017-0730 Missing Initialization of Resource vulnerability in Google Android
A denial of service vulnerability in the Android media framework (h264 decoder).
local
low complexity
google CWE-909
5.5
2017-08-09 CVE-2017-0726 Missing Release of Resource after Effective Lifetime vulnerability in Google Android
A denial of service vulnerability in the Android media framework (libstagefright).
local
low complexity
google CWE-772
5.5
2017-08-09 CVE-2017-0725 Allocation of Resources Without Limits or Throttling vulnerability in Google Android
A denial of service vulnerability in the Android media framework (libskia).
local
low complexity
google CWE-770
5.5
2017-08-09 CVE-2017-0724 Improper Input Validation vulnerability in Google Android
A denial of service vulnerability in the Android media framework (libmpeg2).
local
low complexity
google CWE-20
5.5
2017-08-07 CVE-2015-3839 NULL Pointer Dereference vulnerability in Google Android
The updateMessageStatus function in Android 5.1.1 and earlier allows local users to cause a denial of service (NULL pointer exception and process crash).
local
low complexity
google CWE-476
5.5
2017-07-17 CVE-2016-10398 Permissions, Privileges, and Access Controls vulnerability in Google Android 6.0
Android 6.0 has an authentication bypass for attackers with root and physical access.
low complexity
google CWE-264
6.2
2017-07-07 CVE-2014-7954 Path Traversal vulnerability in Google Android 4.4.4
Directory traversal vulnerability in the doSendObjectInfo method in frameworks/av/media/mtp/MtpServer.cpp in Android 4.4.4 allows physically proximate attackers with a direct connection to the target Android device to upload files outside of the sdcard via a ..
low complexity
google CWE-22
4.6
2017-07-07 CVE-2017-0326 Information Exposure vulnerability in Google Android 7.1.2
An information disclosure vulnerability in the NVIDIA Video Driver due to an out-of-bounds read function in the Tegra Display Controller driver could result in possible information disclosure.
local
low complexity
google CWE-200
5.5
2017-07-06 CVE-2017-0708 Information Exposure vulnerability in Google Android 7.1.2
A information disclosure vulnerability in the HTC sound driver.
local
low complexity
google CWE-200
5.5
2017-07-06 CVE-2017-0706 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android 7.1.2
A elevation of privilege vulnerability in the Broadcom wi-fi driver.
low complexity
google CWE-119
6.8