Vulnerabilities > Google > High

DATE CVE VULNERABILITY TITLE RISK
2017-12-06 CVE-2017-0837 Unspecified vulnerability in Google Android
An elevation of privilege vulnerability in the Android media framework (libaudiopolicymanager).
local
low complexity
google
7.8
2017-12-05 CVE-2017-9716 Unspecified vulnerability in Google Android
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the qbt1000 driver implements an alternative channel for usermode applications to talk to QSEE applications.
local
low complexity
google
7.8
2017-12-05 CVE-2017-14904 Use After Free vulnerability in Google Android
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a crafted binder request can cause an arbitrary unmap in MediaServer.
local
low complexity
google CWE-416
7.8
2017-12-05 CVE-2017-14902 Use After Free vulnerability in Google Android
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, due to a race condition in the GLink kernel driver, a Use After Free condition can potentially occur.
local
high complexity
google CWE-416
7.0
2017-12-05 CVE-2017-14897 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while handling the QSEOS_RPMB_CHECK_PROV_STATUS_COMMAND, a userspace buffer is directly accessed in kernel space.
local
low complexity
google CWE-119
7.8
2017-12-05 CVE-2017-14895 Operation on a Resource after Expiration or Release vulnerability in Google Android
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, after a subsystem reset, iwpriv is not giving correct information.
local
low complexity
google CWE-672
7.8
2017-12-05 CVE-2017-11043 Integer Overflow or Wraparound vulnerability in Google Android
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a WiFI driver function, an integer overflow leading to heap buffer overflow may potentially occur.
local
low complexity
google CWE-190
7.8
2017-12-05 CVE-2017-11007 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is a possibility of stack corruption due to buffer overflow of Partition name while converting ascii string to unicode string in function HandleMetaImgFlash.
local
low complexity
google CWE-119
7.8
2017-12-05 CVE-2017-9722 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when updating custom EDID (hdmi_tx_sysfs_wta_edid), if edid_size, which is controlled by userspace, is too large, a buffer overflow occurs.
local
low complexity
google CWE-119
7.8
2017-12-05 CVE-2017-9718 Race Condition vulnerability in Google Android
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition in a multimedia driver can potentially lead to a buffer overwrite.
local
high complexity
google CWE-362
7.0