Vulnerabilities > Google > High

DATE CVE VULNERABILITY TITLE RISK
2017-08-18 CVE-2017-8257 Race Condition vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, when accessing the sde_rotator debug interface for register reading with multiple processes, one process can free the debug buffer while another process still has the debug buffer in use.
local
low complexity
google CWE-362
7.8
2017-08-18 CVE-2017-8256 Out-of-bounds Read vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, array out of bounds access can occur if userspace sends more than 16 multicast addresses.
local
low complexity
google CWE-125
7.8
2017-08-18 CVE-2017-8255 Integer Overflow or Wraparound vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in boot.
local
low complexity
google CWE-190
7.8
2017-08-18 CVE-2017-8253 Allocation of Resources Without Limits or Throttling vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel memory can potentially be overwritten if an invalid master is sent from userspace.
local
low complexity
google CWE-770
7.8
2017-08-18 CVE-2016-10389 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size check for the images being flashed onto the NAND memory in their respective partitions, so there is a possibility of writing beyond the intended partition.
local
low complexity
google CWE-119
7.8
2017-08-18 CVE-2016-10383 Race Condition vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, there is a TOCTOU race condition in Secure UI.
network
high complexity
google CWE-362
8.1
2017-08-18 CVE-2015-0576 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in HSDPA.
local
high complexity
google CWE-119
7.0
2017-08-16 CVE-2017-8243 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
A buffer overflow can occur in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android when processing a firmware image file.
local
low complexity
google CWE-119
7.8
2017-08-16 CVE-2017-6421 Classic Buffer Overflow vulnerability in Google Android
In the touch controller function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a variable may be controlled by the user and can lead to a buffer overflow.
low complexity
google CWE-120
8.8
2017-08-16 CVE-2016-5867 Permissions, Privileges, and Access Controls vulnerability in Google Android
In a sound driver in Android for MSM, Firefox OS for MSM, QRD Android, some variables are from userspace and values can be chosen that could result in stack overflow.
local
high complexity
google CWE-264
7.0