Google CVEs
9,109 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2017-13238In XBLRamDump mode, there is a debug feature that can be used to dump memory contents, if an attacker has physical access to the device.
- CVE-2017-13236In the KeyStore service, there is a permissions bypass that allows access to protected resources.
- CVE-2017-13235A other vulnerability in the Android media framework (n/a).
- CVE-2017-13234In DLSParser of the sonivox library, there is possible resource exhaustion due to a memory leak.
- CVE-2017-13233In ihevcd_ctb_boundary_strength_pbslice of libhevc, there is possible resource exhaustion.
- CVE-2017-13232In audioserver, there is an out-of-bounds write due to a log statement using %s with an array that may not be NULL terminated.
- CVE-2017-13231In libmediadrm, there is an out-of-bounds write due to improper input validation.
- CVE-2017-13230In hevc codec, there is an out-of-bounds write due to an incorrect bounds check with the i2_pic_width_in_luma_samples value.
- CVE-2017-13229A remote code execution vulnerability in the Android media framework (n/a).
- CVE-2017-13228In function ih264d_ref_idx_reordering of libavc, there is an out-of-bounds write due to modCount being defined as an unsigned character.
- CVE-2017-13226An elevation of privilege vulnerability in the MediaTek mtk.
- CVE-2017-13225In libMtkOmxVdec.so there is a possible heap buffer overflow.
- CVE-2017-13222An information disclosure vulnerability in the Upstream kernel kernel.
- CVE-2017-13221An elevation of privilege vulnerability in the Upstream kernel wifi driver.
- CVE-2017-13220An elevation of privilege vulnerability in the Upstream kernel bluez.
- CVE-2017-13219A denial of service vulnerability in the Upstream kernel synaptics touchscreen controller.
- CVE-2017-13217In DisplayFtmItem in the bootloader, there is an out-of-bounds write due to reading a string without verifying that it's null-terminated.
- CVE-2017-13216In ashmem_ioctl of ashmem.c, there is an out-of-bounds write due to insufficient locking when accessing asma.
- CVE-2017-13215A elevation of privilege vulnerability in the Upstream kernel skcipher.
- CVE-2017-13214In the hardware HEVC decoder, some media files could cause a page fault.
- CVE-2017-13213An elevation of privilege vulnerability in the Broadcom bcmdhd driver.
- CVE-2017-13212An elevation of privilege vulnerability in the Android system (systemui).
- CVE-2017-13211In bta_scan_results_cb_impl of btif_ble_scanner.cc, there is possible resource exhaustion if a large number of repeated BLE scan results…
- CVE-2017-13210In CameraDeviceClient::submitRequestList of CameraDeviceClient.cpp, there is an out-of-bounds write if metadataSize is too small.
- CVE-2017-13209In the ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller…
- CVE-2017-13208In receive_packet of libnetutils/packet.c, there is a possible out-of-bounds write due to a missing bounds check on the DHCP response.
- CVE-2017-13207An information disclosure vulnerability in the Android media framework (stagefright mpeg4writer).
- CVE-2017-13206An information disclosure vulnerability in the Android media framework (aacdec).
- CVE-2017-13205An information disclosure vulnerability in the Android media framework (libmpeg2).
- CVE-2017-13204An information disclosure vulnerability in the Android media framework (libavc).