Vulnerabilities > Google > Critical

DATE CVE VULNERABILITY TITLE RISK
2017-05-16 CVE-2015-8999 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
In TrustZone a buffer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel while loading an ELF file.
network
google CWE-119
critical
9.3
2017-05-16 CVE-2015-8998 Integer Overflow or Wraparound vulnerability in Google Android
In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.
network
google CWE-190
critical
9.3
2017-05-16 CVE-2015-8995 Integer Overflow or Wraparound vulnerability in Google Android
In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.
network
google CWE-190
critical
9.3
2017-05-16 CVE-2014-9937 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
In TrustZone a buffer overflow vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.
network
google CWE-119
critical
9.3
2017-05-16 CVE-2014-9935 Integer Overflow or Wraparound vulnerability in Google Android
In TrustZone an integer overflow vulnerability leading to a buffer overflow could potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.
network
google CWE-190
critical
9.3
2017-05-16 CVE-2014-9934 Improper Verification of Cryptographic Signature vulnerability in Google Android
A PKCS#1 v1.5 signature verification routine in all Android releases from CAF using the Linux kernel may not check padding.
network
google CWE-347
critical
9.3
2017-05-16 CVE-2014-9933 Improper Input Validation vulnerability in Google Android
Due to missing input validation in all Android releases from CAF using the Linux kernel, HLOS can write to fuses for which it should not have access.
network
google CWE-20
critical
9.3
2017-05-16 CVE-2014-9932 Integer Overflow or Wraparound vulnerability in Google Android
In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel due to an improper address range computation.
network
google CWE-190
critical
9.3
2017-05-16 CVE-2014-9931 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
A buffer overflow vulnerability in all Android releases from CAF using the Linux kernel can potentially occur if an OEM performs an app region size customization due to a hard-coded value.
network
google CWE-119
critical
9.3
2017-05-12 CVE-2017-0604 Always-Incorrect Control Flow Implementation vulnerability in Google Android
An elevation of privilege vulnerability in the kernel Qualcomm power driver could enable a local malicious application to execute arbitrary code within the context of the kernel.
network
google CWE-670
critical
9.3