Vulnerabilities > Google > High

DATE CVE VULNERABILITY TITLE RISK
2018-01-12 CVE-2017-13211 Resource Exhaustion vulnerability in Google Android 8.0
In bta_scan_results_cb_impl of btif_ble_scanner.cc, there is possible resource exhaustion if a large number of repeated BLE scan results are received.
network
low complexity
google CWE-400
7.5
2018-01-12 CVE-2017-13210 Out-of-bounds Write vulnerability in Google Android
In CameraDeviceClient::submitRequestList of CameraDeviceClient.cpp, there is an out-of-bounds write if metadataSize is too small.
local
low complexity
google CWE-787
7.8
2018-01-12 CVE-2017-13209 Missing Authorization vulnerability in Google Android 8.0/8.1
In the ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller which could allow an application or service to replace a HAL service with its own service.
local
low complexity
google CWE-862
7.8
2018-01-12 CVE-2017-13207 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in the Android media framework (stagefright mpeg4writer).
network
low complexity
google CWE-200
7.5
2018-01-12 CVE-2017-13206 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in the Android media framework (aacdec).
network
low complexity
google CWE-200
7.5
2018-01-12 CVE-2017-13202 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in the Android media framework (libeffects).
network
low complexity
google CWE-200
7.5
2018-01-12 CVE-2017-13201 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in the Android media framework (mediadrm).
network
low complexity
google CWE-200
7.5
2018-01-12 CVE-2017-13200 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in the Android media framework (av) related to id3 unsynchronization.
network
low complexity
google CWE-200
7.5
2018-01-12 CVE-2017-13199 Improper Handling of Exceptional Conditions vulnerability in Google Android 8.0/8.1
In Bitmap.ccp if Bitmap.nativeCreate fails an out of memory exception is not thrown leading to a java.io.IOException later on.
network
low complexity
google CWE-755
7.5
2018-01-12 CVE-2017-13198 Improper Input Validation vulnerability in Google Android
A vulnerability in the Android media framework (ex) related to composition of frames lacking a color map.
network
low complexity
google CWE-20
7.5