AN
Operating System
Android
On CISA KEVExploited in the wild
8,375
CVEs
23
On KEV
10.0
Max CVSS
33
New 30D
Severity mix
Critical 478High 16Medium 6Low 0
Watch
Add Android to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-11079 | 9.8 | Jan 10 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing sparse image, uninitialized heap memory can… Affected: All versions, or not specified |
| CVE-2017-13160 | 9.8 | Dec 6 | A remote code execution vulnerability in the Android system (bluetooth) Affected: 7.0; 7.1.1; 7.1.2; 8.0 |
| CVE-2017-6211 | 9.8 | Dec 5 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the processing of a downlink supplementary services message, a… Affected: All versions, or not specified |
| CVE-2017-14918 | 9.8 | Dec 5 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the GPS location wireless interface, a Use After Free condition… Affected: All versions, or not specified |
| CVE-2017-14917 | 9.8 | Dec 5 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer sizes in the message passing interface are not properly… Affected: All versions, or not specified |
| CVE-2017-14916 | 9.8 | Dec 5 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer sizes in the message passing interface are not properly… Affected: All versions, or not specified |
| CVE-2017-14914 | 9.8 | Dec 5 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, handles in the global client structure can become stale Affected: All versions, or not specified |
| CVE-2017-14909 | 9.8 | Dec 5 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a count value that is read from a file is not properly validated Affected: All versions, or not specified |
| CVE-2017-14908 | 9.8 | Dec 5 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the SafeSwitch test application does not properly validate the… Affected: All versions, or not specified |
| CVE-2017-11006 | 9.8 | Dec 5 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a Use After Free condition can occur during positioning Affected: All versions, or not specified |
| CVE-2017-11005 | 9.8 | Dec 5 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a Use After Free condition can occur during a deinitialization path Affected: All versions, or not specified |
| CVE-2017-9709 | 9.8 | Dec 5 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a privilege escalation vulnerability exists in telephony Affected: All versions, or not specified |
| CVE-2017-15813 | 9.8 | Dec 5 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a buffer overflow can occur while reading firmware logs Affected: All versions, or not specified |
| CVE-2017-14907 | 9.8 | Dec 5 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, cryptographic strength is reduced while deriving disk encryption… Affected: All versions, or not specified |
| CVE-2017-0847 | 9.8 | Nov 16 | An elevation of privilege vulnerability in the Android media framework (mediaanalytics) Affected: 8.0 |
| CVE-2017-6274 | 9.8 | Nov 14 | An elevation of Privilege vulnerability exists in the Thermal Driver, where a missing bounds checks in the thermal throttle driver can cause an out-of-bounds write in the kernel Affected: All versions, or not specified |
| CVE-2017-0829 | 9.8 | Oct 4 | An elevation of privilege vulnerability in the Motorola bootloader Affected: through 8.0 |
| CVE-2017-0828 | 9.8 | Oct 4 | An elevation of privilege vulnerability in the Huawei bootloader Affected: through 8.0 |
| CVE-2017-0824 | 9.8 | Oct 4 | An elevation of privilege vulnerability in the Broadcom wifi driver Affected: through 8.0 |
| CVE-2017-0822 | 9.8 | Oct 4 | An elevation of privilege vulnerability in the Android system (camera) Affected: 6.0; 6.0.1; 7.0; 7.1.0; 7.1.1; 7.1.2; +1 more |
| CVE-2017-0807 | 9.8 | Oct 4 | An elevation of privilege vulnerability in the Android framework (ui framework) Affected: 4.4.4; 5.0.2; 5.1.1; 6.0; 6.0.1; 7.0; +2 more |
| CVE-2017-7364 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_data(), variable ds_data[i].scale may still point to a… Affected: All versions, or not specified |
| CVE-2016-5872 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, arguments to several QTEE syscalls are not properly validated Affected: All versions, or not specified |
| CVE-2016-5871 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow vulnerability exists when loading an image file Affected: All versions, or not specified |
| CVE-2016-10392 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a driver can potentially leak kernel memory Affected: All versions, or not specified |
| CVE-2016-10391 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for validity Affected: All versions, or not specified |
| CVE-2016-10390 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, when downloading a file, an excessive amount of memory may be consumed Affected: All versions, or not specified |
| CVE-2016-10388 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a configuration vulnerability exists when loading a 3rd-party QTEE application Affected: All versions, or not specified |
| CVE-2016-10387 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a handover scenario Affected: All versions, or not specified |
| CVE-2016-10386 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, an array index out of bounds vulnerability exists in LPP Affected: All versions, or not specified |
| CVE-2016-10385 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a use-after-free vulnerability exists in IMS RCS Affected: All versions, or not specified |
| CVE-2016-10384 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a WLAN driver ioctl Affected: All versions, or not specified |
| CVE-2016-10382 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, access control to the I2C bus is not sufficient Affected: All versions, or not specified |
| CVE-2016-10381 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected MeasurementReports revealing UE location Affected: All versions, or not specified |
| CVE-2016-10380 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected MeasurementReports revealing UE location Affected: All versions, or not specified |
| CVE-2016-10347 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a hypervisor function is not properly validated Affected: All versions, or not specified |
| CVE-2016-10346 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in the hypervisor Affected: All versions, or not specified |
| CVE-2016-10344 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially possible in LTE Affected: All versions, or not specified |
| CVE-2016-10343 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, sSL handshake failure with ClientHello rejection results in memory leak Affected: All versions, or not specified |
| CVE-2015-9073 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occur in a TrustZone syscall Affected: All versions, or not specified |
| CVE-2015-9072 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occur in a TrustZone syscall Affected: All versions, or not specified |
| CVE-2015-9071 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone syscall Affected: All versions, or not specified |
| CVE-2015-9070 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone syscall Affected: All versions, or not specified |
| CVE-2015-9069 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, the Secure File System can become corrupted Affected: All versions, or not specified |
| CVE-2015-9068 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a mink syscall is not properly validated Affected: All versions, or not specified |
| CVE-2015-9067 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a potential compiler optimization of memset() is addressed Affected: All versions, or not specified |
| CVE-2015-9066 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in an Inter-RAT procedure Affected: All versions, or not specified |
| CVE-2015-9065 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a UE can respond to a UEInformationRequest before Access Stratum security is established Affected: All versions, or not specified |
| CVE-2015-9064 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send IMEI or IMEISV to the network on a network request before NAS security has been… Affected: All versions, or not specified |
| CVE-2015-9063 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a procedure involving a remote UIM client Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)
