AN
Operating System
Android
On CISA KEVExploited in the wild
8,375
CVEs
23
On KEV
10.0
Max CVSS
33
New 30D
Severity mix
Critical 478High 16Medium 6Low 0
Watch
Add Android to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-5872 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, arguments to several QTEE syscalls are not properly validated Affected: All versions, or not specified |
| CVE-2016-5871 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow vulnerability exists when loading an image file Affected: All versions, or not specified |
| CVE-2016-10392 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a driver can potentially leak kernel memory Affected: All versions, or not specified |
| CVE-2016-10391 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for validity Affected: All versions, or not specified |
| CVE-2016-10390 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, when downloading a file, an excessive amount of memory may be consumed Affected: All versions, or not specified |
| CVE-2016-10388 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a configuration vulnerability exists when loading a 3rd-party QTEE application Affected: All versions, or not specified |
| CVE-2016-10387 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a handover scenario Affected: All versions, or not specified |
| CVE-2016-10386 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, an array index out of bounds vulnerability exists in LPP Affected: All versions, or not specified |
| CVE-2016-10385 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a use-after-free vulnerability exists in IMS RCS Affected: All versions, or not specified |
| CVE-2016-10384 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a WLAN driver ioctl Affected: All versions, or not specified |
| CVE-2016-10382 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, access control to the I2C bus is not sufficient Affected: All versions, or not specified |
| CVE-2016-10381 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected MeasurementReports revealing UE location Affected: All versions, or not specified |
| CVE-2016-10380 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected MeasurementReports revealing UE location Affected: All versions, or not specified |
| CVE-2016-10347 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a hypervisor function is not properly validated Affected: All versions, or not specified |
| CVE-2016-10346 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in the hypervisor Affected: All versions, or not specified |
| CVE-2016-10344 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially possible in LTE Affected: All versions, or not specified |
| CVE-2016-10343 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, sSL handshake failure with ClientHello rejection results in memory leak Affected: All versions, or not specified |
| CVE-2015-9073 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occur in a TrustZone syscall Affected: All versions, or not specified |
| CVE-2015-9072 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occur in a TrustZone syscall Affected: All versions, or not specified |
| CVE-2015-9071 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone syscall Affected: All versions, or not specified |
| CVE-2015-9070 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone syscall Affected: All versions, or not specified |
| CVE-2015-9069 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, the Secure File System can become corrupted Affected: All versions, or not specified |
| CVE-2015-9068 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a mink syscall is not properly validated Affected: All versions, or not specified |
| CVE-2015-9067 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a potential compiler optimization of memset() is addressed Affected: All versions, or not specified |
| CVE-2015-9066 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in an Inter-RAT procedure Affected: All versions, or not specified |
| CVE-2015-9065 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a UE can respond to a UEInformationRequest before Access Stratum security is established Affected: All versions, or not specified |
| CVE-2015-9064 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send IMEI or IMEISV to the network on a network request before NAS security has been… Affected: All versions, or not specified |
| CVE-2015-9063 | 9.8 | Aug 18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a procedure involving a remote UIM client Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)