Vulnerabilities > Google > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2018-01-12 | CVE-2017-13214 | Improper Input Validation vulnerability in Google Android In the hardware HEVC decoder, some media files could cause a page fault. | 7.8 |
| 2018-01-12 | CVE-2017-13211 | Resource Exhaustion vulnerability in Google Android 8.0 In bta_scan_results_cb_impl of btif_ble_scanner.cc, there is possible resource exhaustion if a large number of repeated BLE scan results are received. | 7.8 |
| 2018-01-12 | CVE-2017-13210 | Out-of-bounds Write vulnerability in Google Android In CameraDeviceClient::submitRequestList of CameraDeviceClient.cpp, there is an out-of-bounds write if metadataSize is too small. | 7.2 |
| 2018-01-12 | CVE-2017-13209 | Missing Authorization vulnerability in Google Android 8.0/8.1 In the ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller which could allow an application or service to replace a HAL service with its own service. | 7.2 |
| 2018-01-12 | CVE-2017-13205 | Information Exposure vulnerability in Google Android An information disclosure vulnerability in the Android media framework (libmpeg2). | 8.5 |
| 2018-01-12 | CVE-2017-13204 | Information Exposure vulnerability in Google Android An information disclosure vulnerability in the Android media framework (libavc). | 8.5 |
| 2018-01-12 | CVE-2017-13203 | Information Exposure vulnerability in Google Android An information disclosure vulnerability in the Android media framework (libavc). | 8.5 |
| 2018-01-12 | CVE-2017-13199 | Improper Handling of Exceptional Conditions vulnerability in Google Android 8.0/8.1 In Bitmap.ccp if Bitmap.nativeCreate fails an out of memory exception is not thrown leading to a java.io.IOException later on. | 7.8 |
| 2018-01-12 | CVE-2017-13198 | Improper Input Validation vulnerability in Google Android A vulnerability in the Android media framework (ex) related to composition of frames lacking a color map. | 7.8 |
| 2018-01-12 | CVE-2017-13197 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android In the ihevcd_parse_slice.c function, slave threads are not joined if there is an error. | 7.8 |