Vulnerabilities > Google > High

DATE CVE VULNERABILITY TITLE RISK
2018-01-10 CVE-2017-11069 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, manipulation of SafeSwitch Image data can result in Heap overflow.
local
low complexity
google CWE-119
7.8
2018-01-09 CVE-2015-1290 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
The Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt before 5.5.1, allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted web site.
network
low complexity
google qt opensuse CWE-119
8.8
2017-12-06 CVE-2017-6276 Use After Free vulnerability in Google Android
NVIDIA mediaserver contains a vulnerability where it is possible a use after free malfunction can occur due to an incorrect bounds check which could enable unauthorized code execution and possibly lead to elevation of privileges.
local
low complexity
google CWE-416
7.8
2017-12-06 CVE-2017-6263 Use After Free vulnerability in Google Android
NVIDIA driver contains a vulnerability where it is possible a use after free malfunction can occur due to improper usage of the list_for_each kernel macro which could enable unauthorized code execution and possibly lead to elevation of privileges.
local
low complexity
google CWE-416
7.8
2017-12-06 CVE-2017-6262 Use After Free vulnerability in Google Android
NVIDIA driver contains a vulnerability where it is possible a use after free malfunction can occur due to a race condition which could enable unauthorized code execution and possibly lead to elevation of privileges.
local
high complexity
google CWE-416
7.0
2017-12-06 CVE-2017-13175 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in the NVIDIA libwilhelm.
network
low complexity
google CWE-200
7.5
2017-12-06 CVE-2017-13174 Unspecified vulnerability in Google Android
An elevation of privilege vulnerability in the kernel edl.
local
low complexity
google
7.8
2017-12-06 CVE-2017-13173 Unspecified vulnerability in Google Android
An elevation of privilege vulnerability in the MediaTek system server.
local
low complexity
google
7.8
2017-12-06 CVE-2017-13172 Unspecified vulnerability in Google Android
An elevation of privilege vulnerability in the MediaTek bluetooth driver.
local
low complexity
google
7.8
2017-12-06 CVE-2017-13171 Unspecified vulnerability in Google Android
An elevation of privilege vulnerability in the MediaTek performance service.
local
low complexity
google
7.8