Google CVEs
9,109 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2017-13292In wl_get_assoc_ies of wl_cfg80211.c, there is a possible out of bounds write due to an incorrect bounds check.
- CVE-2017-13291In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible NULL pointer dereference due to missing bounds checks.
- CVE-2017-13290In sdp_server_handle_client_req of sdp_server.cc, there is an out of bounds read due to a missing bounds check.
- CVE-2017-13289In writeToParcel and createFromParcel of RttManager.java, there is a permission bypass due to a write size mismatch.
- CVE-2017-13288In writeToParcel and readFromParcel of PeriodicAdvertisingReport.java, there is a permission bypass due to a 64/32bit int mismatch.
- CVE-2017-13287In createFromParcel of VerifyCredentialResponse.java, there is a possible invalid parcel read due to improper input validation.
- CVE-2017-13286In writeToParcel and readFromParcel of OutputConfiguration.java, there is a permission bypass due to mismatched serialization.
- CVE-2017-13285In SvoxSsmlParser and startElement of svox_ssml_parser.cpp, there is a possible out of bounds write due to an uninitialized buffer.
- CVE-2017-13284In config_set_string of config.cc, it is possible to pair a second BT keyboard without user approval due to improper input validation.
- CVE-2017-13283In avrc_ctrl_pars_vendor_rsp of bluetooth avrcp_ctrl, there is a possible out of bounds write on the stack due to a missing bounds check.
- CVE-2017-13282In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible stack buffer overflow due to a missing bounds check.
- CVE-2017-13281In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible stack buffer overflow due to an incorrect bounds check.
- CVE-2017-13280In the FrameSequence_gif::FrameSequence_gif function of libframesequence, there is a out of bounds read due to a missing bounds check.
- CVE-2017-13279In M3UParser::parse of M3UParser.cpp, there is a memory resource exhaustion due to a large loop of pushing items into a vector.
- CVE-2017-13278In MediaPlayerService::Client::notify of MediaPlayerService.cpp, there is a possible use after free.
- CVE-2017-13277In ihevcd_fmt_conv of ihevcd_fmt_conv.c, there is a possible out of bounds write due to a missing bounds check.
- CVE-2017-13276In CProgramConfig_ReadHeightExt of tpdec_asc.cpp, there is a possible stack buffer overflow due to a missing bounds check.
- CVE-2017-13275In getVSCoverage of CmapCoverage.cpp, there is a possible out of bounds read due to an incorrect bounds check.
- CVE-2017-13274In the getHost() function of UriTest.java, there is the possibility of incorrect web origin determination.
- CVE-2017-13267In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible stack corruption due to a missing bounds check.
- CVE-2017-13273In xt_qtaguid.c, there is a race condition due to insufficient locking.
- CVE-2017-13247In the Pixel 2 bootloader, there is a missing permission check which bypasses carrier bootloader lock.
- CVE-2017-13246A information disclosure vulnerability in the Upstream kernel network driver.
- CVE-2017-13245A elevation of privilege vulnerability in the Upstream kernel audio driver.
- CVE-2017-13244A elevation of privilege vulnerability in the Upstream kernel easel.
- CVE-2017-13243A information disclosure vulnerability in the Android system (ui).
- CVE-2017-13242A information disclosure vulnerability in the Android system (bluetooth).
- CVE-2017-13241A information disclosure vulnerability in the Android media framework (libstagefright_soft_avcenc).
- CVE-2017-13240A information disclosure vulnerability in the Android framework (crypto framework).
- CVE-2017-13239A information disclosure vulnerability in the Android framework (ui framework).