Advisories · Technology

Google Inc. Android.

Every CVE that names Google Inc. Android among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2017-13303 CVE record

A information disclosure vulnerability in the Broadcom bcmdhd driver.
- Google Inc. Android
Not analysed yet 4 Apr 2018
CVE-2017-13302 CVE record

A denial of service vulnerability in the Android system (system ui).
- Google Inc. Android
Not analysed yet 4 Apr 2018
CVE-2017-13301 CVE record

A denial of service vulnerability in the Android system (system ui).
- Google Inc. Android
Not analysed yet 4 Apr 2018
CVE-2017-13300 CVE record

A denial of service vulnerability in the Android media framework (libhevc).
- Google Inc. Android
Not analysed yet 4 Apr 2018
CVE-2017-13299 CVE record

A other vulnerability in the Android media framework (libavc).
- Google Inc. Android
Not analysed yet 4 Apr 2018
CVE-2017-13298 CVE record

A information disclosure vulnerability in the Android media framework (libhavc).
- Google Inc. Android
Not analysed yet 4 Apr 2018
CVE-2017-13297 CVE record

A information disclosure vulnerability in the Android media framework (libhevc).
- Google Inc. Android
Not analysed yet 4 Apr 2018
CVE-2017-13296 CVE record

A information disclosure vulnerability in the Android media framework (libavc).
- Google Inc. Android
Not analysed yet 4 Apr 2018
CVE-2017-13295 CVE record

A denial of service vulnerability in the Android framework (package installer).
- Google Inc. Android
Not analysed yet 4 Apr 2018
CVE-2017-13294 CVE record

A information disclosure vulnerability in the Android framework (aosp email application).
- Google Inc. Android
Not analysed yet 4 Apr 2018
CVE-2017-13293 CVE record

Google Inc. Android: In the nfc_hci_cmd_received() function of core.c…
- Google Inc. Android
Not analysed yet 4 Apr 2018
CVE-2017-13292 CVE record

Google Inc. Android: In wl_get_assoc_ies of wl_cfg80211.c…
- Google Inc. Android
Not analysed yet 4 Apr 2018
CVE-2017-13291 CVE record

Google Inc. Android: In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc…
- Google Inc. Android
Not analysed yet 4 Apr 2018
CVE-2017-13290 CVE record

Google Inc. Android: In sdp_server_handle_client_req of sdp_server.cc…
- Google Inc. Android
Not analysed yet 4 Apr 2018
CVE-2017-13289 CVE record

Google Inc. Android: In writeToParcel and createFromParcel of RttManager.java…
- Google Inc. Android
Not analysed yet 4 Apr 2018
CVE-2017-13288 CVE record

Google Inc. Android: In writeToParcel and readFromParcel of PeriodicAdvertisingReport.java…
- Google Inc. Android
Not analysed yet 4 Apr 2018
CVE-2017-13287 CVE record

Google Inc. Android: In createFromParcel of VerifyCredentialResponse.java…
- Google Inc. Android
Not analysed yet 4 Apr 2018
CVE-2017-13286 CVE record

Google Inc. Android: In writeToParcel and readFromParcel of OutputConfiguration.java…
- Google Inc. Android
Not analysed yet 4 Apr 2018
CVE-2017-13285 CVE record

Google Inc. Android: In SvoxSsmlParser and startElement of svox_ssml_parser.cpp…
- Google Inc. Android
Not analysed yet 4 Apr 2018
CVE-2017-13284 CVE record

Google Inc. Android: In config_set_string of config.cc, it is possible to pair a second BT keyboard without…
- Google Inc. Android
Not analysed yet 4 Apr 2018
CVE-2017-13283 CVE record

Google Inc. Android: In avrc_ctrl_pars_vendor_rsp of bluetooth avrcp_ctrl…
- Google Inc. Android
Not analysed yet 4 Apr 2018
CVE-2017-13282 CVE record

Google Inc. Android: In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc…
- Google Inc. Android
Not analysed yet 4 Apr 2018
CVE-2017-13281 CVE record

Google Inc. Android: In avrc_pars_browsing_cmd of avrc_pars_tg.cc…
- Google Inc. Android
Not analysed yet 4 Apr 2018
CVE-2017-13280 CVE record

Google Inc. Android: In the FrameSequence_gif::FrameSequence_gif function of libframesequence…
- Google Inc. Android
Not analysed yet 4 Apr 2018
CVE-2017-13279 CVE record

Google Inc. Android: In M3UParser::parse of M3UParser.cpp…
- Google Inc. Android
Not analysed yet 4 Apr 2018
CVE-2017-13278 CVE record

In MediaPlayerService::Client::notify of MediaPlayerService.cpp, there is a possible use after free.
- Google Inc. Android
Not analysed yet 4 Apr 2018
CVE-2017-13277 CVE record

Google Inc. Android: In ihevcd_fmt_conv of ihevcd_fmt_conv.c…
- Google Inc. Android
Not analysed yet 4 Apr 2018
CVE-2017-13276 CVE record

Google Inc. Android: In CProgramConfig_ReadHeightExt of tpdec_asc.cpp…
- Google Inc. Android
Not analysed yet 4 Apr 2018
CVE-2017-13275 CVE record

Google Inc. Android: In getVSCoverage of CmapCoverage.cpp…
- Google Inc. Android
Not analysed yet 4 Apr 2018
CVE-2017-13274 CVE record

Google Inc. Android: In the getHost() function of UriTest.java…
- Google Inc. Android
Not analysed yet 4 Apr 2018
CVE-2017-13267 CVE record

Google Inc. Android: In avrc_pars_vendor_cmd of avrc_pars_tg.cc…
- Google Inc. Android
Not analysed yet 4 Apr 2018
CVE-2017-13273 CVE record

In xt_qtaguid.c, there is a race condition due to insufficient locking.
- Google Inc. Android
Not analysed yet 15 Feb 2018
CVE-2017-13247 CVE record

Google Inc. Android: In the Pixel 2 bootloader, there is a missing permission check which bypasses carrier…
- Google Inc. Android
Not analysed yet 12 Feb 2018
CVE-2017-13246 CVE record

A information disclosure vulnerability in the Upstream kernel network driver.
- Google Inc. Android
Not analysed yet 12 Feb 2018
CVE-2017-13245 CVE record

A elevation of privilege vulnerability in the Upstream kernel audio driver.
- Google Inc. Android
Not analysed yet 12 Feb 2018
CVE-2017-13244 CVE record

A elevation of privilege vulnerability in the Upstream kernel easel.
- Google Inc. Android
Not analysed yet 12 Feb 2018
CVE-2017-13243 CVE record

A information disclosure vulnerability in the Android system (ui).
- Google Inc. Android
Not analysed yet 12 Feb 2018
CVE-2017-13242 CVE record

A information disclosure vulnerability in the Android system (bluetooth).
- Google Inc. Android
Not analysed yet 12 Feb 2018
CVE-2017-13241 CVE record

A information disclosure vulnerability in the Android media framework (libstagefright_soft_avcenc).
- Google Inc. Android
Not analysed yet 12 Feb 2018
CVE-2017-13240 CVE record

A information disclosure vulnerability in the Android framework (crypto framework).
- Google Inc. Android
Not analysed yet 12 Feb 2018
CVE-2017-13239 CVE record

A information disclosure vulnerability in the Android framework (ui framework).
- Google Inc. Android
Not analysed yet 12 Feb 2018
CVE-2017-13238 CVE record

Google Inc. Android: In XBLRamDump mode, there is a debug feature that can be used to dump memory contents…
- Google Inc. Android
Not analysed yet 12 Feb 2018
CVE-2017-13236 CVE record

In the KeyStore service, there is a permissions bypass that allows access to protected resources.
- Google Inc. Android
Not analysed yet 12 Feb 2018
CVE-2017-13235 CVE record

A other vulnerability in the Android media framework (n/a).
- Google Inc. Android
Not analysed yet 12 Feb 2018
CVE-2017-13234 CVE record

In DLSParser of the sonivox library, there is possible resource exhaustion due to a memory leak.
- Google Inc. Android
Not analysed yet 12 Feb 2018
CVE-2017-13233 CVE record

In ihevcd_ctb_boundary_strength_pbslice of libhevc, there is possible resource exhaustion.
- Google Inc. Android
Not analysed yet 12 Feb 2018
CVE-2017-13232 CVE record

Google Inc. Android: In audioserver, there is an out-of-bounds write due to a log statement using %s with an…
- Google Inc. Android
Not analysed yet 12 Feb 2018
CVE-2017-13231 CVE record

In libmediadrm, there is an out-of-bounds write due to improper input validation.
- Google Inc. Android
Not analysed yet 12 Feb 2018
CVE-2017-13230 CVE record

Google Inc. Android: In hevc codec, there is an out-of-bounds write due to an incorrect bounds check with the…
- Google Inc. Android
Not analysed yet 12 Feb 2018
CVE-2017-13229 CVE record

A remote code execution vulnerability in the Android media framework (n/a).
- Google Inc. Android
Not analysed yet 12 Feb 2018
CVE-2017-13228 CVE record

Google Inc. Android: In function ih264d_ref_idx_reordering of libavc…
- Google Inc. Android
Not analysed yet 12 Feb 2018
CVE-2017-13226 CVE record

An elevation of privilege vulnerability in the MediaTek mtk.
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13225 CVE record

In libMtkOmxVdec.so there is a possible heap buffer overflow.
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13222 CVE record

An information disclosure vulnerability in the Upstream kernel kernel.
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13221 CVE record

An elevation of privilege vulnerability in the Upstream kernel wifi driver.
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13220 CVE record

An elevation of privilege vulnerability in the Upstream kernel bluez.
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13219 CVE record

A denial of service vulnerability in the Upstream kernel synaptics touchscreen controller.
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13217 CVE record

Google Inc. Android: In DisplayFtmItem in the bootloader, there is an out-of-bounds write due to reading a…
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13216 CVE record

Google Inc. Android: In ashmem_ioctl of ashmem.c, there is an out-of-bounds write due to insufficient locking…
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13215 CVE record

A elevation of privilege vulnerability in the Upstream kernel skcipher.
- Google Inc. Android
Not analysed yet 12 Jan 2018