System

CVE-2017-13160

(json)

CVE numbers: CVE-2017-13160 [Bulletin-CVE-2017-13160]
Coordinated disclosure?: unknown
Categories: System
Details: A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-37160362. [NIST-CVE-2017-13160]
Discovered by: Scott Bauer (@ScottyBauer1) [Discovery-CVE-2017-13160] on: Unknown
Reported on: 2017-12-01 [Bulletin-CVE-2017-13160]
Fixed on: 2017-04-06 [A-37160362]
Fix released on: 2017-12-05 [Bulletin-CVE-2017-13160]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-13160] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2017-13160]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-13160]
Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0781

(json)

CVE numbers: CVE-2017-0781 [Bulletin-CVE-2017-0781]
Coordinated disclosure?: unknown
Categories: System
Details: A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63146105. [NIST-CVE-2017-0781]
Discovered by: Gregory Vishnepolsky of Armis, Inc. [Discovery-CVE-2017-0781] on: Unknown
Reported on: 2017-09-01 [Bulletin-CVE-2017-0781]
Fixed on: 2017-07-17 [2]
Fix released on: Unknown
Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0781] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2017-0781]
Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0781]
Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0782

(json)

CVE numbers: CVE-2017-0782 [Bulletin-CVE-2017-0782]
Coordinated disclosure?: unknown
Categories: System
Details: A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63146237. [NIST-CVE-2017-0782]
Discovered by: Gregory Vishnepolsky of Armis, Inc. [Discovery-CVE-2017-0782] on: Unknown
Reported on: 2017-09-01 [Bulletin-CVE-2017-0782]
Fixed on: 2017-07-17 [3]
Fix released on: Unknown
Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0782] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2017-0782]
Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0782]
Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0841

(json)

CVE numbers: CVE-2017-0841 [Bulletin-CVE-2017-0841]
Coordinated disclosure?: unknown
Categories: System
Details: A remote code execution vulnerability in the Android system (libutils). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37723026. [NIST-CVE-2017-0841]
Discovered by: Jose Martinez [Discovery-CVE-2017-0841] on: Unknown
Reported on: 2017-11-01 [Bulletin-CVE-2017-0841]
Fixed on: 2017-08-14 [A-37723026]
Fix released on: 2017-11-06 [Bulletin-CVE-2017-0841]
Affected versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0841] regex: (5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2017-0841]
Fixed versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0841]
Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-13208

(json)

CVE numbers: CVE-2017-13208 [Bulletin-CVE-2017-13208]
Coordinated disclosure?: unknown
Categories: System
Details: In receive_packet of libnetutils/packet.c, there is a possible out-of-bounds write due to a missing bounds check on the DHCP response. This could lead to remote code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67474440. [NIST-CVE-2017-13208]
Discovered by: tintinweb [Discovery-CVE-2017-13208] on: Unknown
Reported on: 2018-01-01 [Bulletin-CVE-2017-13208]
Fixed on: 2017-10-13 [A-67474440]
Fix released on: 2018-01-05 [Bulletin-CVE-2017-13208]
Affected versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13208] regex: (5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2017-13208]
Fixed versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13208]
Submission: by: Daniel Carter, on: 2019-07-25

CVE-2017-13255

(json)

CVE numbers: CVE-2017-13255 [Bulletin-CVE-2017-13255]
Coordinated disclosure?: unknown
Categories: System
Details: In process_service_attr_req of sdp_server.c, there is an out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68776054. [NIST-CVE-2017-13255]
Discovered by: Jianjun Dai (@Jioun_dai) and Guang Gong of Alpha Team, Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2017-13255] on: Unknown
Reported on: 2018-03-01 [Bulletin-CVE-2017-13255]
Fixed on: 2018-01-09 [A-68776054]
Fix released on: 2018-03-05 [Bulletin-CVE-2017-13255]
Affected versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13255] regex: (5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2017-13255]
Fixed versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13255]
Submission: by: Daniel Carter, on: 2019-07-25

CVE-2017-13256

(json)

CVE numbers: CVE-2017-13256 [Bulletin-CVE-2017-13256]
Coordinated disclosure?: unknown
Categories: System
Details: In process_service_search_attr_req of sdp_server.cc, there is an out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68817966. [NIST-CVE-2017-13256]
Discovered by: Jianjun Dai (@Jioun_dai) and Guang Gong of Alpha Team, Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2017-13256] on: Unknown
Reported on: 2018-03-01 [Bulletin-CVE-2017-13256]
Fixed on: 2018-01-09 [A-68817966]
Fix released on: 2018-03-05 [Bulletin-CVE-2017-13256]
Affected versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13256] regex: (5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2017-13256]
Fixed versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13256]
Submission: by: Daniel Carter, on: 2019-07-25

CVE-2017-13266

(json)

CVE numbers: CVE-2017-13266 [Bulletin-CVE-2017-13266]
Coordinated disclosure?: unknown
Categories: System
Details: In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible stack corruption due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69478941. [NIST-CVE-2017-13266]
Discovered by: Jianjun Dai (@Jioun_dai) and Guang Gong of Alpha Team, Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2017-13266] on: Unknown
Reported on: 2018-03-01 [Bulletin-CVE-2017-13266]
Fixed on: 2018-01-10 [A-69478941]
Fix released on: 2018-03-05 [Bulletin-CVE-2017-13266]
Affected versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13266] regex: (5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2017-13266]
Fixed versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13266]
Submission: by: Daniel Carter, on: 2019-07-25

CVE-2017-13267

(json)

CVE numbers: CVE-2017-13267 [Bulletin-CVE-2017-13267]
Coordinated disclosure?: unknown
Categories: System
Details: In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible stack corruption due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69479009. [NIST-CVE-2017-13267]
Discovered by: Jianjun Dai (@Jioun_dai) and Guang Gong of Alpha Team, Qihoo 360 Technology Co. Ltd [Discovery-CVE-2017-13267] on: Unknown
Reported on: 2018-04-01 [Bulletin-CVE-2017-13267]
Fixed on: 2018-01-10 [A-69479009]
Fix released on: 2018-04-05 [Bulletin-CVE-2017-13267]
Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13267] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2017-13267]
Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13267]
Submission: by: Daniel Carter, on: 2019-07-25

CVE-2017-13272

(json)

CVE numbers: CVE-2017-13272 [Bulletin-CVE-2017-13272]
Coordinated disclosure?: unknown
Categories: System
Details: In alarm_ready_generic of alarm.cc, there is a possible out of bounds write due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67110137. [NIST-CVE-2017-13272]
Discovered by: Wish Wu (@wish_wu 吴潍浠此彼) of Ant-financial Light-Year Security Lab [Discovery-CVE-2017-13272] on: Unknown
Reported on: 2018-03-01 [Bulletin-CVE-2017-13272]
Fixed on: 2018-01-11 [2]
Fix released on: 2018-03-05 [Bulletin-CVE-2017-13272]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13272] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2017-13272]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13272]
Submission: by: Daniel Carter, on: 2019-07-25

CVE-2017-13282

(json)

CVE numbers: CVE-2017-13282 [Bulletin-CVE-2017-13282]
Coordinated disclosure?: unknown
Categories: System
Details: In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible stack buffer overflow due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71603315. [NIST-CVE-2017-13282]
Discovered by: Jianjun Dai (@Jioun_dai) and Guang Gong of Alpha Team, Qihoo 360 Technology Co. Ltd [Discovery-CVE-2017-13282] on: Unknown
Reported on: 2018-04-01 [Bulletin-CVE-2017-13282]
Fixed on: 2018-02-02 [A-71603315]
Fix released on: 2018-04-05 [Bulletin-CVE-2017-13282]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13282] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2017-13282]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13282]
Submission: by: Daniel Carter, on: 2019-07-25

CVE-2017-13283

(json)

CVE numbers: CVE-2017-13283 [Bulletin-CVE-2017-13283]
Coordinated disclosure?: unknown
Categories: System
Details: In avrc_ctrl_pars_vendor_rsp of bluetooth avrcp_ctrl, there is a possible out of bounds write on the stack due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71603410. [NIST-CVE-2017-13283]
Discovered by: Jianjun Dai (@Jioun_dai) and Guang Gong of Alpha Team, Qihoo 360 Technology Co. Ltd [Discovery-CVE-2017-13283] on: Unknown
Reported on: 2018-04-01 [Bulletin-CVE-2017-13283]
Fixed on: 2018-02-02 [A-71603410]
Fix released on: 2018-04-05 [Bulletin-CVE-2017-13283]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13283] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2017-13283]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13283]
Submission: by: Daniel Carter, on: 2019-07-25

CVE-2017-13281

(json)

CVE numbers: CVE-2017-13281 [Bulletin-CVE-2017-13281]
Coordinated disclosure?: unknown
Categories: System
Details: In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible stack buffer overflow due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-71603262. [NIST-CVE-2017-13281]
Discovered by: Jianjun Dai (@Jioun_dai) and Guang Gong of Alpha Team, Qihoo 360 Technology Co. Ltd [Discovery-CVE-2017-13281] on: Unknown
Reported on: 2018-04-01 [Bulletin-CVE-2017-13281]
Fixed on: 2018-02-09 [A-71603262]
Fix released on: 2018-04-05 [Bulletin-CVE-2017-13281]
Affected versions: 8.0, 8.1 [Bulletin-CVE-2017-13281] regex: (8.0.[0-9])|(8.1.[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2017-13281]
Fixed versions: 8.0, 8.1 [Bulletin-CVE-2017-13281]
Submission: by: Daniel Carter, on: 2019-07-25

CVE-2017-13284

(json)

CVE numbers: CVE-2017-13284 [Bulletin-CVE-2017-13284]
Coordinated disclosure?: unknown
Categories: System
Details: In config_set_string of config.cc, it is possible to pair a second BT keyboard without user approval due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70808273. [NIST-CVE-2017-13284]
Discovered by: Jean-Baptiste Cayrou (@jbcayrou) [Discovery-CVE-2017-13284] on: Unknown
Reported on: 2018-04-01 [Bulletin-CVE-2017-13284]
Fixed on: 2018-02-09 [A-70808273]
Fix released on: 2018-04-05 [Bulletin-CVE-2017-13284]
Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13284] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2017-13284]
Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13284]
Submission: by: Daniel Carter, on: 2019-07-25

CVE-2018-9356

(json)

CVE numbers: CVE-2018-9356 [Bulletin-CVE-2018-9356]
Coordinated disclosure?: unknown
Categories: System
Details: In bnep_data_ind of bnep_main.c, there is a possible remote code execution due to a double free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74950468. [NIST-CVE-2018-9356]
Discovered by: Jianjun Dai (@Jioun_dai) and Guang Gong (@oldfresher) of Alpha Team, Qihoo 360 Technology Co. Ltd [Discovery-CVE-2018-9356] on: Unknown
Reported on: 2018-06-01 [Bulletin-CVE-2018-9356]
Fixed on: 2018-03-21 [A-74950468]
Fix released on: 2018-06-05 [Bulletin-CVE-2018-9356]
Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2018-9356] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2018-9356]
Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2018-9356]
Submission: by: Daniel Carter, on: 2019-07-25

CVE-2018-9365

(json)

CVE numbers: CVE-2018-9365 [Bulletin-CVE-2018-9365]
Coordinated disclosure?: unknown
Categories: System
Details:
Discovered by: Jianjun Dai (@Jioun_dai) and Guang Gong (@oldfresher) of Alpha Team, Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2018-9365] on: Unknown
Reported on: 2018-07-01 [Bulletin-CVE-2018-9365]
Fixed on: 2018-03-30 [A-74121126]
Fix released on: 2018-07-05 [Bulletin-CVE-2018-9365]
Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2018-9365] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2018-9365]
Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2018-9365]
Submission: by: Daniel Carter, on: 2019-07-25

CVE-2018-9355

(json)

CVE numbers: CVE-2018-9355 [Bulletin-CVE-2018-9355]
Coordinated disclosure?: unknown
Categories: System
Details: In bta_dm_sdp_result of bta_dm_act.cc, there is a possible out of bounds stack write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74016921. [NIST-CVE-2018-9355]
Discovered by: Scott Bauer (@ScottyBauer1) [Discovery-CVE-2018-9355] on: Unknown
Reported on: 2018-06-01 [Bulletin-CVE-2018-9355]
Fixed on: 2018-04-02 [A-74016921]
Fix released on: 2018-06-05 [Bulletin-CVE-2018-9355]
Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2018-9355] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2018-9355]
Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2018-9355]
Submission: by: Daniel Carter, on: 2019-07-25

CVE-2018-9357

(json)

CVE numbers: CVE-2018-9357 [Bulletin-CVE-2018-9357]
Coordinated disclosure?: unknown
Categories: System
Details: In BNEP_Write of bnep_api.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74947856. [NIST-CVE-2018-9357]
Discovered by: Jianjun Dai (@Jioun_dai) and Guang Gong (@oldfresher) of Alpha Team, Qihoo 360 Technology Co. Ltd [Discovery-CVE-2018-9357] on: Unknown
Reported on: 2018-06-01 [Bulletin-CVE-2018-9357]
Fixed on: 2018-04-11 [A-74947856]
Fix released on: 2018-06-05 [Bulletin-CVE-2018-9357]
Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2018-9357] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2018-9357]
Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2018-9357]
Submission: by: Daniel Carter, on: 2019-07-25

CVE-2018-9446

(json)

CVE numbers: CVE-2018-9446 [Bulletin-CVE-2018-9446]
Coordinated disclosure?: unknown
Categories: System
Details: In smp_br_state_machine_event of smp_br_main.cc, there is a possible out of bounds write due to memory corruption. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-80145946. [NIST-CVE-2018-9446]
Discovered by: Zinuo Han of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2018-9446] on: Unknown
Reported on: 2018-08-01 [Bulletin-CVE-2018-9446]
Fixed on: 2018-05-29 [A-80145946]
Fix released on: 2018-08-05 [Bulletin-CVE-2018-9446]
Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2018-9446] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2018-9446]
Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2018-9446]
Submission: by: Daniel Carter, on: 2019-07-25

CVE-2018-9450

(json)

CVE numbers: CVE-2018-9450 [Bulletin-CVE-2018-9450]
Coordinated disclosure?: unknown
Categories: System
Details: In avrc_proc_vendor_command of avrc_api.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-79541338. [NIST-CVE-2018-9450]
Discovered by: Zinuo Han of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2018-9450] on: Unknown
Reported on: 2018-08-01 [Bulletin-CVE-2018-9450]
Fixed on: 2018-06-05 [A-79541338]
Fix released on: 2018-08-05 [Bulletin-CVE-2018-9450]
Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2018-9450] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2018-9450]
Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2018-9450]
Submission: by: Daniel Carter, on: 2019-07-25

CVE-2018-9476

(json)

CVE numbers: CVE-2018-9476 [Bulletin-CVE-2018-9476]
Coordinated disclosure?: unknown
Categories: System
Details: In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible use-after-free due to improper locking. This could lead to remote escalation of privilege in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android ID: A-109699112 [NIST-CVE-2018-9476]
Discovered by: Zinuo Han (weibo.com/ele7enxxh) of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2018-9476] on: Unknown
Reported on: 2018-10-01 [Bulletin-CVE-2018-9476]
Fixed on: 2018-06-13 [A-109699112]
Fix released on: 2018-10-05 [Bulletin-CVE-2018-9476]
Affected versions: 8.0, 8.1 [Bulletin-CVE-2018-9476] regex: (8.0.[0-9])|(8.1.[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2018-9476]
Fixed versions: 8.0, 8.1 [Bulletin-CVE-2018-9476]
Submission: by: Daniel Carter, on: 2019-07-25

CVE-2018-9478

(json)

CVE numbers: CVE-2018-9478 [Bulletin-CVE-2018-9478]
Coordinated disclosure?: unknown
Categories: System
Details:
Discovered by: Jianjun Dai (@jioun_dai) and Guang Gong (@oldfresher) of Alpha Team, Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2018-9478] on: Unknown
Reported on: 2018-09-01 [Bulletin-CVE-2018-9478]
Fixed on: 2018-06-22 [A-79217522]
Fix released on: 2018-09-05 [Bulletin-CVE-2018-9478]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2018-9478] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2018-9478]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2018-9478]
Submission: by: Daniel Carter, on: 2019-07-25

CVE-2018-9479

(json)

CVE numbers: CVE-2018-9479 [Bulletin-CVE-2018-9479]
Coordinated disclosure?: unknown
Categories: System
Details:
Discovered by: Jianjun Dai (@jioun_dai) and Guang Gong (@oldfresher) of Alpha Team, Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2018-9479] on: Unknown
Reported on: 2018-09-01 [Bulletin-CVE-2018-9479]
Fixed on: 2018-06-22 [A-79217770]
Fix released on: 2018-09-05 [Bulletin-CVE-2018-9479]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2018-9479] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2018-9479]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2018-9479]
Submission: by: Daniel Carter, on: 2019-07-25

CVE-2018-9475

(json)

CVE numbers: CVE-2018-9475 [Bulletin-CVE-2018-9475]
Coordinated disclosure?: unknown
Categories: System
Details:
Discovered by: En He (@heeeeen4x) and Bo Liu of MS509Team (ms509.com) [Discovery-CVE-2018-9475] on: Unknown
Reported on: 2018-09-01 [Bulletin-CVE-2018-9475]
Fixed on: 2018-06-27 [A-79266386]
Fix released on: 2018-09-05 [Bulletin-CVE-2018-9475]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2018-9475] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2018-9475]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2018-9475]
Submission: by: Daniel Carter, on: 2019-07-25

CVE-2018-9504

(json)

CVE numbers: CVE-2018-9504 [Bulletin-CVE-2018-9504]
Coordinated disclosure?: unknown
Categories: System
Details: In sdp_copy_raw_data of sdp_discovery.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution over bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-110216176 [NIST-CVE-2018-9504]
Discovered by: Zinuo Han (weibo.com/ele7enxxh) of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2018-9504] on: Unknown
Reported on: 2018-10-01 [Bulletin-CVE-2018-9504]
Fixed on: 2018-07-16 [A-110216176]
Fix released on: 2018-10-05 [Bulletin-CVE-2018-9504]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2018-9504] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2018-9504]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2018-9504]
Submission: by: Daniel Carter, on: 2019-07-25

CVE-2018-9555

(json)

CVE numbers: CVE-2018-9555 [Bulletin-CVE-2018-9555]
Coordinated disclosure?: unknown
Categories: System
Details: In l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-112321180. [NIST-CVE-2018-9555]
Discovered by: Scott Bauer (@ScottyBauer1) [Discovery-CVE-2018-9555] on: Unknown
Reported on: 2018-12-01 [Bulletin-CVE-2018-9555]
Fixed on: 2018-09-17 [A-112321180]
Fix released on: 2018-12-05 [Bulletin-CVE-2018-9555]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2018-9555] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2018-9555]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2018-9555]
Submission: by: Daniel Carter, on: 2019-07-25

CVE-2018-9583

(json)

CVE numbers: CVE-2018-9583 [Bulletin-CVE-2018-9583]
Coordinated disclosure?: unknown
Categories: System
Details: In bta_ag_parse_cmer of bta_ag_cmd.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution in the bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation. Android ID: A-112860487. [NIST-CVE-2018-9583]
Discovered by: Zinuo Han (weibo.com/ele7enxxh) of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2018-9583] on: Unknown
Reported on: 2019-01-01 [Bulletin-CVE-2018-9583]
Fixed on: 2018-09-18 [A-112860487]
Fix released on: 2019-01-05 [Bulletin-CVE-2018-9583]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2018-9583] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2018-9583]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2018-9583]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2018-9556

(json)

CVE numbers: CVE-2018-9556 [Bulletin-CVE-2018-9556]
Coordinated disclosure?: unknown
Categories: System
Details: In ParsePayloadHeader of payload_metadata.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-113118184. [NIST-CVE-2018-9556]
Discovered by: on: Unknown
Reported on: 2018-12-01 [Bulletin-CVE-2018-9556]
Fixed on: 2018-09-19 [A-113118184]
Fix released on: 2018-12-05 [Bulletin-CVE-2018-9556]
Affected versions: 9 [Bulletin-CVE-2018-9556] regex: (9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2018-9556]
Fixed versions: 9 [Bulletin-CVE-2018-9556]
Submission: by: Daniel Carter, on: 2019-07-25

CVE-2019-1992

(json)

CVE numbers: CVE-2019-1992 [Bulletin-CVE-2019-1992]
Coordinated disclosure?: unknown
Categories: System
Details: In bta_hl_sdp_query_results of bta_hl_main.cc, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-116222069. [NIST-CVE-2019-1992]
Discovered by: Zinuo Han (weibo.com/ele7enxxh) of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2019-1992] on: Unknown
Reported on: 2019-02-01 [Bulletin-CVE-2019-1992]
Fixed on: 2018-11-20 [A-116222069]
Fix released on: 2019-02-05 [Bulletin-CVE-2019-1992]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-1992] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-1992]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-1992]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-1991

(json)

CVE numbers: CVE-2019-1991 [Bulletin-CVE-2019-1991]
Coordinated disclosure?: unknown
Categories: System
Details: In btif_dm_data_copy of btif_core.cc, there is a possible out of bounds write due to a buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-110166268. [NIST-CVE-2019-1991]
Discovered by: Zinuo Han (weibo.com/ele7enxxh) of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2019-1991] on: Unknown
Reported on: 2019-02-01 [Bulletin-CVE-2019-1991]
Fixed on: 2018-11-27 [A-110166268]
Fix released on: 2019-02-05 [Bulletin-CVE-2019-1991]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-1991] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-1991]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-1991]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2009

(json)

CVE numbers: CVE-2019-2009 [Bulletin-CVE-2019-2009]
Coordinated disclosure?: unknown
Categories: System
Details: In l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-120665616 [NIST-CVE-2019-2009]
Discovered by: Jianjun Dai ( @jioun_dai) and Guang Gong ( @oldfresher) of 360 Alpha Team [Discovery-CVE-2019-2009] on: Unknown
Reported on: 2019-03-01 [Bulletin-CVE-2019-2009]
Fixed on: 2018-12-11 [A-120665616]
Fix released on: 2019-03-05 [Bulletin-CVE-2019-2009]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2009] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-2009]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2009]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2029

(json)

CVE numbers: CVE-2019-2029 [Bulletin-CVE-2019-2029]
Coordinated disclosure?: unknown
Categories: System
Details: In btm_proc_smp_cback of tm_ble.cc, there is a possible memory corruption due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-120612744. [NIST-CVE-2019-2029]
Discovered by: Wenke Dou (email), Chi Zhang (email), and Mingjian Zhou (周明建) (@Mingjian_Zhou) of C0RE Team [Discovery-CVE-2019-2029] on: Unknown
Reported on: 2019-04-01 [Bulletin-CVE-2019-2029]
Fixed on: 2019-01-09 [A-120612744]
Fix released on: 2019-04-05 [Bulletin-CVE-2019-2029]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2029] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-2029]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2029]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2111

(json)

CVE numbers: CVE-2019-2111 [Bulletin-CVE-2019-2111]
Coordinated disclosure?: unknown
Categories: System
Details: In loop of DnsTlsSocket.cpp, there is a possible heap memory corruption due to a use after free. This could lead to remote code execution in the netd server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-122856181. [NIST-CVE-2019-2111]
Discovered by: Alex Abfalter of Google [Discovery-CVE-2019-2111] on: Unknown
Reported on: 2019-07-01 [Bulletin-CVE-2019-2111]
Fixed on: 2019-01-22 [2]
Fix released on: 2019-07-05 [Bulletin-CVE-2019-2111]
Affected versions: 9 [Bulletin-CVE-2019-2111] regex: (9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-2111]
Fixed versions: 9 [Bulletin-CVE-2019-2111]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2045

(json)

CVE numbers: CVE-2019-2045 [Bulletin-CVE-2019-2045]
Coordinated disclosure?: unknown
Categories: System
Details: In JSCallTyper of typer.cc, there is an out of bounds write due to an incorrect bounds check. This could lead to remote code execution in the proxy auto-config with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.1 Android-9 Android ID: A-117554758 [NIST-CVE-2019-2045]
Discovered by: Wei Liu (刘炜) and Yongke Wang (王永科) (@Rudykewang) of Tencent Security Xuanwu Lab (腾讯安全玄武实验室) [Discovery-CVE-2019-2045] on: Unknown
Reported on: 2019-05-01 [Bulletin-CVE-2019-2045]
Fixed on: 2019-03-05 [A-117554758]
Fix released on: 2019-05-05 [Bulletin-CVE-2019-2045]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.1, 9 [Bulletin-CVE-2019-2045] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-2045]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.1, 9 [Bulletin-CVE-2019-2045]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2046

(json)

CVE numbers: CVE-2019-2046 [Bulletin-CVE-2019-2046]
Coordinated disclosure?: unknown
Categories: System
Details: In CalculateInstanceSizeForDerivedClass of objects.cc, there is possible memory corruption due to an integer overflow. This could lead to remote code execution in the proxy auto-config with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9 Android ID: A-117556220 [NIST-CVE-2019-2046]
Discovered by: Wei Liu (刘炜) and Yongke Wang (王永科) (@Rudykewang) of Tencent Security Xuanwu Lab (腾讯安全玄武实验室) [Discovery-CVE-2019-2046] on: Unknown
Reported on: 2019-05-01 [Bulletin-CVE-2019-2046]
Fixed on: 2019-03-05 [A-117556220]
Fix released on: 2019-05-05 [Bulletin-CVE-2019-2046]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2046] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-2046]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2046]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2047

(json)

CVE numbers: CVE-2019-2047 [Bulletin-CVE-2019-2047]
Coordinated disclosure?: unknown
Categories: System
Details: In UpdateLoadElement of ic.cc, there is a possible out-of-bounds write due to type confusion. This could lead to remote code execution in the proxy auto-config with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9 Android ID: A-117607414 [NIST-CVE-2019-2047]
Discovered by: Wei Liu (刘炜) and Yongke Wang (王永科) (@Rudykewang) of Tencent Security Xuanwu Lab (腾讯安全玄武实验室) [Discovery-CVE-2019-2047] on: Unknown
Reported on: 2019-05-01 [Bulletin-CVE-2019-2047]
Fixed on: 2019-03-05 [A-117607414]
Fix released on: 2019-05-05 [Bulletin-CVE-2019-2047]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2047] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-2047]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2047]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2097

(json)

CVE numbers: CVE-2019-2097 [Bulletin-CVE-2019-2097]
Coordinated disclosure?: unknown
Categories: System
Details: In HAliasAnalyzer.Query of hydrogen-alias-analysis.h, there is possible memory corruption due to type confusion. This could lead to remote code execution from a malicious proxy configuration, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-117606285. [NIST-CVE-2019-2097]
Discovered by: Wei Liu (刘炜), Yongke Wang (王永科) (@Rudykewang) of Tencent Security Xuanwu Lab (腾讯安全玄武实验室) [Discovery-CVE-2019-2097] on: Unknown
Reported on: 2019-06-01 [Bulletin-CVE-2019-2097]
Fixed on: 2019-03-08 [A-117606285]
Fix released on: 2019-06-05 [Bulletin-CVE-2019-2097]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2097] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-2097]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2097]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2130

(json)

CVE numbers: CVE-2019-2130 [Bulletin-CVE-2019-2130]
Coordinated disclosure?: unknown
Categories: System
Details:
Discovered by: Wei Liu (刘炜), Yongke Wang (王永科) (@Rudykewang) of Tencent Security Xuanwu Lab (腾讯安全玄武实验室) [Discovery-CVE-2019-2130] on: Unknown
Reported on: 2019-08-01 [Bulletin-CVE-2019-2130]
Fixed on: 2019-06-03 [A-132073833]
Fix released on: 2019-08-05 [Bulletin-CVE-2019-2130]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2130] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-2130]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2130]
Submission: by: Daniel Carter, on: 2019-08-12