Vulnerabilities > Google > Critical

DATE CVE VULNERABILITY TITLE RISK
2017-10-04 CVE-2017-0806 Deserialization of Untrusted Data vulnerability in Google Android
An elevation of privilege vulnerability in the Android framework (gatekeeperresponse).
network
google CWE-502
critical
9.3
2017-09-28 CVE-2015-1537 Integer Overflow or Wraparound vulnerability in Google Android
Integer overflow in IHDCP.cpp in the media_server component in Android allows remote attackers to execute arbitrary code via a crafted application.
network
google CWE-190
critical
9.3
2017-09-21 CVE-2017-9725 Incorrect Calculation vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed when it should fail.
network
google CWE-682
critical
9.3
2017-09-21 CVE-2017-9724 Improper Privilege Management vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, user-level permissions can be used to gain access to kernel memory, specifically the ION cache maintenance code is writing to a user supplied address.
network
google CWE-269
critical
9.3
2017-09-21 CVE-2017-8278 Classic Buffer Overflow vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, while reading audio data from an unspecified driver, a buffer overflow or integer overflow could occur.
network
google CWE-120
critical
9.3
2017-09-21 CVE-2017-11041 Unspecified vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, an output buffer is accessed in one thread and can be potentially freed in another.
network
google
critical
9.3
2017-09-08 CVE-2017-0801 Unspecified vulnerability in Google Android
A elevation of privilege vulnerability in the MediaTek libmtkomxvdec.
network
google
critical
9.3
2017-09-08 CVE-2017-0800 Unspecified vulnerability in Google Android
A elevation of privilege vulnerability in the MediaTek teei.
network
google
critical
9.3
2017-09-08 CVE-2017-0799 Unspecified vulnerability in Google Android
A elevation of privilege vulnerability in the MediaTek lastbus.
network
google
critical
9.3
2017-09-08 CVE-2017-0798 Unspecified vulnerability in Google Android
A elevation of privilege vulnerability in the MediaTek kernel.
network
google
critical
9.3