FO
Product
Fire OS
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 8Medium 4Low 0
Watch
Add Fire OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-7292 | 9.8 | Apr 10 | Stack-based buffer overflow in the havok_write function in drivers/staging/havok/havok.c in Amazon Fire OS before 2016-01-15 allows attackers to cause a denial of service (panic)… Affected: through 5.0 |
| CVE-2023-1385 | 8.8 | May 3 | Improper JPAKE implementation allows offline PIN brute-forcing due to the initialization of random values to a known value, which leads to unauthorized authentication to… Affected: before 6.2.9.5; before 7.6.3.3 |
| CVE-2018-11025 | 7.5 | Oct 16 | kernel/omap/drivers/mfd/twl6030-gpadc.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an… Affected: 4.5.5.3 |
| CVE-2018-11024 | 7.5 | Oct 16 | kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD (3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument… Affected: 4.5.5.3 |
| CVE-2018-11023 | 7.5 | Oct 16 | kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD (3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument… Affected: 4.5.5.3 |
| CVE-2018-11022 | 7.5 | Oct 16 | kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of… Affected: 4.5.5.3 |
| CVE-2018-11021 | 7.5 | Oct 16 | kernel/omap/drivers/video/omap2/dsscomp/device.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the… Affected: 4.5.5.3 |
| CVE-2018-11019 | 7.5 | Oct 16 | kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of… Affected: 4.5.5.3 |
| CVE-2019-7399 | 7.4 | Feb 17 | Amazon Fire OS before 5.3.6.4 allows a man-in-the-middle attack against HTTP requests for "Terms of Use" and Privacy pages Affected: before 5.3.6.4 |
| CVE-2023-1384 | 6.1 | May 3 | The setMediaSource function on the amzn.thin.pl service does not sanitize the "source" parameter allowing for arbitrary javascript code to be run This issue affects: Amazon Fire… Affected: before 6.2.9.5; before 7.6.3.3 |
| CVE-2024-27350 | 5.9 | Feb 26 | Amazon Fire OS 7 before 7.6.6.9 and 8 before 8.1.0.3 allows Fire TV applications to establish local ADB (Android Debug Bridge) connections Affected: 7 before 7.6.6.9; 8 before 8.1.0.3 |
| CVE-2018-11020 | 4.4 | Oct 16 | kernel/omap/drivers/rpmsg/rpmsg_omx.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an… Affected: 4.5.5.3 |
| CVE-2023-1383 | 4.3 | May 3 | An Improper Enforcement of Behavioral Workflow vulnerability in the exchangeDeviceServices function on the amzn.dmgr service allowed an attacker to register services that are only… Affected: before 6.2.9.5; before 7.6.3.3 |
Showing 13