Vulnerabilidades em Android
57 resultadosCVE-2017-6249—An elevation of privilege vulnerability in the NVIDIA sound driver could enable a local malicious application to execute arbitrary code withEPSS 0.8%CVE-2019-2029—In btm_proc_smp_cback of tm_ble.cc, there is a possible memory corruption due to a use after free. This could lead to remote code execution EPSS 0.7%CVE-2019-2095—In callGenIDChangeListeners and related functions of SkPixelRef.cpp, there is a possible use after free due to a race condition. This could EPSS 0.7%CVE-2019-2000—In several functions of binder.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilEPSS 0.7%CVE-2019-2099—In nfa_rw_store_ndef_rx_buf of nfa_rw_act.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to localEPSS 0.6%CVE-2018-9588—In avdt_scb_hdl_report of avdt_scb_act.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a pEPSS 0.5%CVE-2019-1996—In avrc_pars_browse_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote EPSS 0.5%CVE-2019-2034—In rw_i93_sm_read_ndef of rw_i93.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalationEPSS 0.5%CVE-2019-2035—In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalaEPSS 0.4%CVE-2019-2038—In rw_i93_process_sys_info of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local inforEPSS 0.4%CVE-2019-2101—In uvc_parse_standard_control of uvc_driver.c, there is a possible out-of-bound read due to improper input validation. This could lead to loEPSS 0.4%CVE-2019-2102—In the Bluetooth Low Energy (BLE) specification, there is a provided example Long Term Key (LTK). If a BLE device were to use this as a hardEPSS 0.3%CVE-2018-9593—In llcp_dlc_proc_i_pdu of llcp_dlc.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possiEPSS 0.3%CVE-2018-9582—In package installer in Android-8.0, Android-8.1 and Android-9, there is a possible bypass of the unknown source warning due to a confused dEPSS 0.2%CVE-2018-9587—In savePhotoFromUriToUri of ContactPhotoUtils.java in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, theEPSS 0.2%CVE-2019-2041—In the configuration of NFC modules on certain devices, there is a possible failure to distinguish individual devices due to an insecure defEPSS 0.2%CVE-2018-9584—In nfc_ncif_set_config_status of nfc_ncif.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is EPSS 0.2%CVE-2018-9585—In nfc_ncif_proc_get_routing of nfc_ncif.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is aEPSS 0.2%CVE-2019-1993—In register_app of btif_hd.cc, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privEPSS 0.2%CVE-2019-2001—The permissions on /proc/iomem were world-readable. This could lead to local information disclosure with no additional execution privileges EPSS 0.2%