Page 20 of 1043 results (0.006 seconds)

CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0

CVE-2017-9724

https://notcve.org/view.php?id=CVE-2017-9724

21 Sep 2017 — In all Qualcomm products with Android releases from CAF using the Linux kernel, user-level permissions can be used to gain access to kernel memory, specifically the ION cache maintenance code is writing to a user supplied address. En todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, los permisos de nivel de usuario se pueden emplear para conseguir acceder a la memoria del kernel. Específicamente, el código de mantenimiento de la caché ION está escribiendo a una dir... • http://www.securityfocus.com/bid/100658 • CWE-269: Improper Privilege Management •

CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0

CVE-2017-9725 – kernel: Incorrect type conversion for size during dma allocation

https://notcve.org/view.php?id=CVE-2017-9725

21 Sep 2017 — In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed when it should fail. En todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, durante la asignación de DMA, el tamaño de asignación se trunca, lo que permite que la asignación sea un éxito cuando debería fallar. Esto se debe a un tipo de tamaño de datos erróneo. A flaw was fo... • http://www.securityfocus.com/bid/100658 • CWE-681: Incorrect Conversion between Numeric Types CWE-682: Incorrect Calculation •

CVSS: 8.8EPSS: 41%CPEs: 30EXPL: 9

CVE-2017-0781 – LineageOS 14.1 Blueborne - Remote Code Execution

https://notcve.org/view.php?id=CVE-2017-0781

14 Sep 2017 — A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63146105. Existe una vulnerabilidad de ejecución remota de código en el sistema Android (bluetooth). • https://packetstorm.news/files/id/147076 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 6.5EPSS: 0%CPEs: 30EXPL: 0

CVE-2017-0783

https://notcve.org/view.php?id=CVE-2017-0783

14 Sep 2017 — A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63145701. Existe una vulnerabilidad de divulgación de información en el sistema de Android (bluetooth). • http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 6.5EPSS: 9%CPEs: 30EXPL: 10

CVE-2017-0785 – Android Bluetooth - 'Blueborne' Information Leak

https://notcve.org/view.php?id=CVE-2017-0785

14 Sep 2017 — A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63146698. Existe una vulnerabilidad de divulgación de información en el sistema de Android (bluetooth). • https://www.exploit-db.com/exploits/44555 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 8.8EPSS: 45%CPEs: 30EXPL: 0

CVE-2017-0782

https://notcve.org/view.php?id=CVE-2017-0782

14 Sep 2017 — A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63146237. Existe una vulnerabilidad de ejecución remota de código en el sistema Android (bluetooth). • http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •

CVSS: 9.3EPSS: 0%CPEs: 29EXPL: 0

CVE-2017-0752

https://notcve.org/view.php?id=CVE-2017-0752

08 Sep 2017 — A elevation of privilege vulnerability in the Android framework (windowmanager). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-62196835. Existe una vulnerabilidad de elevación de privilegios en el framework de Android (windowmanager). • http://www.securityfocus.com/bid/100673 • CWE-732: Incorrect Permission Assignment for Critical Resource •

CVSS: 9.3EPSS: 0%CPEs: 29EXPL: 0

CVE-2017-0756

https://notcve.org/view.php?id=CVE-2017-0756

08 Sep 2017 — A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34621073. Existe una vulnerabilidad de ejecución remota de código en el media framework de Android (libstagefright). • http://www.securityfocus.com/bid/100649 • CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition •

CVSS: 9.3EPSS: 0%CPEs: 30EXPL: 0

CVE-2017-0764

https://notcve.org/view.php?id=CVE-2017-0764

08 Sep 2017 — A remote code execution vulnerability in the Android media framework (libvorbis). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62872015. Existe una vulnerabilidad de ejecución remota de código en el media framework de Android (libvorbis). • http://www.securityfocus.com/bid/100649 •

CVSS: 9.3EPSS: 0%CPEs: 29EXPL: 0

CVE-2017-0766

https://notcve.org/view.php?id=CVE-2017-0766

08 Sep 2017 — A remote code execution vulnerability in the Android media framework (libjhead). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37776688. Existe una vulnerabilidad de ejecución remota de código en el media framework de Android (libjhead). • http://www.securityfocus.com/bid/100649 •