Advisories · Technology

Google Inc. Android.

Every CVE that names Google Inc. Android among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2017-13214 CVE record

In the hardware HEVC decoder, some media files could cause a page fault.
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13213 CVE record

An elevation of privilege vulnerability in the Broadcom bcmdhd driver.
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13212 CVE record

An elevation of privilege vulnerability in the Android system (systemui).
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13211 CVE record

Google Inc. Android: In bta_scan_results_cb_impl of btif_ble_scanner.cc…
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13210 CVE record

Google Inc. Android: In CameraDeviceClient::submitRequestList of CameraDeviceClient.cpp…
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13209 CVE record

Google Inc. Android: In the ServiceManager::add function in the hardware service manager…
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13208 CVE record

Google Inc. Android: In receive_packet of libnetutils/packet.c…
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13207 CVE record

An information disclosure vulnerability in the Android media framework (stagefright mpeg4writer).
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13206 CVE record

An information disclosure vulnerability in the Android media framework (aacdec).
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13205 CVE record

An information disclosure vulnerability in the Android media framework (libmpeg2).
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13204 CVE record

An information disclosure vulnerability in the Android media framework (libavc).
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13203 CVE record

An information disclosure vulnerability in the Android media framework (libavc).
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13202 CVE record

An information disclosure vulnerability in the Android media framework (libeffects).
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13201 CVE record

An information disclosure vulnerability in the Android media framework (mediadrm).
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13200 CVE record

Google Inc. Android: An information disclosure vulnerability in the Android media framework (av) related to…
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13199 CVE record

Google Inc. Android: In Bitmap.ccp if Bitmap.nativeCreate fails an out of memory exception is not thrown…
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13198 CVE record

Google Inc. Android: A vulnerability in the Android media framework (ex) related to composition of frames…
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13197 CVE record

In the ihevcd_parse_slice.c function, slave threads are not joined if there is an error.
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13196 CVE record

Google Inc. Android: In several places in ihevcd_decode.c…
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13195 CVE record

Google Inc. Android: In the ihevcd_parse_sps function of ihevcd_parse_headers.c…
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13194 CVE record

A vulnerability in the Android media framework (libvpx) related to odd frame width.
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13193 CVE record

Google Inc. Android: In ihevcd_decode.c there is a possible infinite loop due to bytes for an sps of…
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13192 CVE record

Google Inc. Android: In the ihevcd_parse_slice_header function of ihevcd_parse_slice_header.c a slice address…
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13191 CVE record

Google Inc. Android: In the ihevcd_decode function of ihevcd_decode.c…
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13190 CVE record

Google Inc. Android: A vulnerability in the Android media framework (libhevc) related to handling ps_codec_obj…
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13189 CVE record

Google Inc. Android: A vulnerability in the Android media framework (libavc) related to handling dec_hdl…
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13188 CVE record

An information disclosure vulnerability in the Android media framework (aac).
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13187 CVE record

An information disclosure vulnerability in the Android media framework (libhevc).
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13186 CVE record

A vulnerability in the Android media framework (libavc) related to incorrect use of mmco parameters.
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13185 CVE record

An information disclosure vulnerability in the Android media framework (libhevc).
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13184 CVE record

Google Inc. Android: In the enableVSyncInjections function of SurfaceFlinger…
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13183 CVE record

Google Inc. Android: In the OMXNodeInstance::useBuffer and IOMX::freeBuffer functions…
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13182 CVE record

Google Inc. Android: In the sendFormatChange function of ACodec…
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13181 CVE record

Google Inc. Android: In the doGetThumb and getThumbnail functions of MtpServer…
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13180 CVE record

Google Inc. Android: In the onQueueFilled function of SoftAVCDec…
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13179 CVE record

Google Inc. Android: In the ihevcd_allocate_static_bufs and ihevcd_create functions of SoftHEVC…
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13178 CVE record

Google Inc. Android: In the initDecoder function of SoftAVCDec…
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13177 CVE record

In several functions of libhevc, NEON registers are not preserved.
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13176 CVE record

In the parseURL function of URLStreamHandler, there is improper input validation of the host field.
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-0855 CVE record

Google Inc. Android: In MPEG4Extractor.cpp, there are several places where functions return early without…
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-0846 CVE record

An information disclosure vulnerability in the Android framework (clipboardservice).
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-0869 CVE record

Google Inc. Android: NVIDIA driver contains an integer overflow vulnerability which could cause a use after…
- Google Inc. Android
Not analysed yet 12 Jan 2018
CVE-2017-13175 CVE record

An information disclosure vulnerability in the NVIDIA libwilhelm.
- Google Inc. Android
Not analysed yet 6 Dec 2017
CVE-2017-13174 CVE record

An elevation of privilege vulnerability in the kernel edl.
- Google Inc. Android
Not analysed yet 6 Dec 2017
CVE-2017-13173 CVE record

An elevation of privilege vulnerability in the MediaTek system server.
- Google Inc. Android
Not analysed yet 6 Dec 2017
CVE-2017-13172 CVE record

An elevation of privilege vulnerability in the MediaTek bluetooth driver.
- Google Inc. Android
Not analysed yet 6 Dec 2017
CVE-2017-13171 CVE record

An elevation of privilege vulnerability in the MediaTek performance service.
- Google Inc. Android
Not analysed yet 6 Dec 2017
CVE-2017-13170 CVE record

An elevation of privilege vulnerability in the MediaTek display driver.
- Google Inc. Android
Not analysed yet 6 Dec 2017
CVE-2017-13169 CVE record

An information disclosure vulnerability in the kernel camera server.
- Google Inc. Android
Not analysed yet 6 Dec 2017
CVE-2017-13168 CVE record

An elevation of privilege vulnerability in the kernel scsi driver.
- Google Inc. Android
Not analysed yet 6 Dec 2017
CVE-2017-13167 CVE record

An elevation of privilege vulnerability in the kernel sound timer.
- Google Inc. Android
Not analysed yet 6 Dec 2017
CVE-2017-13166 CVE record

An elevation of privilege vulnerability in the kernel v4l2 video driver.
- Google Inc. Android
Not analysed yet 6 Dec 2017
CVE-2017-13165 CVE record

CVSS 5.3 Medium

Improper privilege management in Google Inc. Android
- Google Inc. Android
- Privilege escalation
Not analysed yet 6 Dec 2017
CVE-2017-13164 CVE record

An information disclosure vulnerability in the kernel binder driver.
- Google Inc. Android
Not analysed yet 6 Dec 2017
CVE-2017-13163 CVE record

An elevation of privilege vulnerability in the kernel mtp usb driver.
- Google Inc. Android
Not analysed yet 6 Dec 2017
CVE-2017-13162 CVE record

An elevation of privilege vulnerability in the kernel binder.
- Google Inc. Android
Not analysed yet 6 Dec 2017
CVE-2017-13161 CVE record

An elevation of privilege vulnerability in the Broadcom wireless driver.
- Google Inc. Android
Not analysed yet 6 Dec 2017
CVE-2017-13160 CVE record

A remote code execution vulnerability in the Android system (bluetooth).
- Google Inc. Android
Not analysed yet 6 Dec 2017
CVE-2017-13159 CVE record

An information disclosure vulnerability in the Android system (activitymanagerservice).
- Google Inc. Android
Not analysed yet 6 Dec 2017
CVE-2017-13158 CVE record

An information disclosure vulnerability in the Android system (activitymanagerservice).
- Google Inc. Android
Not analysed yet 6 Dec 2017