Back to all versions

6.0.1

Graph of vulnerabilities affecting this version

Key to graph

• Black: affecting all manufacturers
• Red: only affecting some manufacturers
• Solid line: at least one unpatched vulnerability
• Dashed line: all vulnerabilities on this path are patched

CVE-2015-6640

(json)

• CVE numbers: CVE-2015-6640 [Bulletin-CVE-2015-6640]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in Kernel
• Details: The prctl_set_vma_anon_name function in kernel/sys.c in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 does not ensure that only one vma is accessed in a certain update action, which allows attackers to gain privileges or cause a denial of service (vma list corruption) via a crafted application, aka internal bug 20017123. [NIST-CVE-2015-6640]
• Discovered by: on: Unknown
• Reported on: 2016-01-01 [Bulletin-CVE-2015-6640]
• Fixed on: 2014-08-05 [ANDROID-20017123]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0, 5.1.1, 6.0 [Bulletin-CVE-2015-6640] regex: (4.4.4)|(5.0.[0-9])|(5.1.1)|(6.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2015-6640]
• Fixed versions: 4.4.4, 5.0, 5.1.1, 6.0 [Bulletin-CVE-2015-6640]
• Submission: by: Daniel Carter, on: 2019-07-29

prctl_set_vma_anon_name

(json)

• CVE numbers: CVE-2015-6640 [prctl-vma-bulletin]
• Coordinated disclosure?: true
• Categories: kernel
• Details: An elevation of privilege vulnerability in the kernel could enable a local malicious application to execute arbitrary code in the kernel [prctl-vma-bulletin]
• Discovered by: Edward Huang [android-paper] on: Unknown
• Reported on: Unknown
• Fixed on: 2014-08-05 [prctl-vma-commit]
• Fix released on: 2014-08-12 [prctl-vma-commit]
• Affected versions: 4.4.4 to 6.0 [prctl-vma-bulletin] regex: (4.[4-9].[4-9])|(5.[0-9].[0-9])|(6.0.[0-9])
• Affected devices: all [citation-needed]
• Affected manufacturers: all [citation-needed]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-09

CVE-2014-9322

(json)

• CVE numbers: CVE-2014-9322 [Bulletin-CVE-2014-9322]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in Kernel
• Details: arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space. [NIST-CVE-2014-9322]
• Discovered by: on: Unknown
• Reported on: 2016-04-02 [Bulletin-CVE-2014-9322]
• Fixed on: 2014-12-04 [11]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1 [Bulletin-CVE-2014-9322] regex: (6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2014-9322]
• Fixed versions: 6.0, 6.0.1 [Bulletin-CVE-2014-9322]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2015-6617

(json)

• CVE numbers: CVE-2015-6617 [Bulletin-CVE-2015-6617]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Skia
• Details: Skia, as used in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23648740. [NIST-CVE-2015-6617]
• Discovered by: on: Unknown
• Reported on: 2015-12-01 [Bulletin-CVE-2015-6617]
• Fixed on: 2015-08-06 [ANDROID-23648740]
• Fix released on: Unknown
• Affected versions: 6.0 and below [Bulletin-CVE-2015-6617] regex: ([1-5].[0-9].[0-9])|(6.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2015-6617]
• Fixed versions: 6.0 and below [Bulletin-CVE-2015-6617]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2015-6609

(json)

• CVE numbers: CVE-2015-6609 [Bulletin-CVE-2015-6609]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in libutils
• Details: libutils in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted audio file, aka internal bug 22953624. [NIST-CVE-2015-6609]
• Discovered by: on: Unknown
• Reported on: 2015-11-01 [Bulletin-CVE-2015-6609]
• Fixed on: 2015-09-02 [ANDROID-22953624]
• Fix released on: Unknown
• Affected versions: 6.0 and below [Bulletin-CVE-2015-6609] regex: ([1-5].[0-9].[0-9])|(6.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2015-6609]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2015-6608

(json)

• CVE numbers: CVE-2015-6608 [Bulletin-CVE-2015-6608]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerabilities in Mediaserver
• Details: mediaserver in Android 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 19779574, 23680780, 23876444, and 23658148, a different vulnerability than CVE-2015-8072 and CVE-2015-8073. [NIST-CVE-2015-6608]
• Discovered by: on: Unknown
• Reported on: 2015-11-01 [Bulletin-CVE-2015-6608]
• Fixed on: 2015-09-08 [ANDROID-23876444]
• Fix released on: Unknown
• Affected versions: 5.0, 5.1, 6.0, 4.4, 5.0, 5.1, 6.0, 4.4 and 5.1, 5.0, 5.1, 6.0 [Bulletin-CVE-2015-6608] regex: (5.0.[0-9])|(5.1.[0-9])|(6.0.[0-9])|(4.4.[0-9])|(5.0.[0-9])|(5.1.[0-9])|(6.0.[0-9])|(4.4.[0-9])|(5.1.[0-9])|(5.0.[0-9])|(5.1.[0-9])|(6.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2015-6608]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2015-6619

(json)

• CVE numbers: CVE-2015-6619 [Bulletin-CVE-2015-6619]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege in Kernel
• Details: The kernel in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to gain privileges via a crafted application, aka internal bug 23520714. [NIST-CVE-2015-6619]
• Discovered by: on: Unknown
• Reported on: 2015-12-01 [Bulletin-CVE-2015-6619]
• Fixed on: 2015-09-22 [ANDROID-23520714]
• Fix released on: Unknown
• Affected versions: 6.0 and below [Bulletin-CVE-2015-6619] regex: ([1-5].[0-9].[0-9])|(6.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2015-6619]
• Fixed versions: 6.0 and below [Bulletin-CVE-2015-6619]
• Submission: by: Daniel Carter, on: 2019-07-29

QSEE privilege escalation

(json)

• CVE numbers: CVE-2015-6639 [qsee-blog][archived]
• Coordinated disclosure?: true
• Categories: system
• Details: A vulnerability in the driver for Qualcomm's Trusted Excecution Environment allows code execution in this environment [qsee-blog][archived]
• Discovered by: Gal Beniamini (laginimaineb) [qsee-blog][archived] on: Unknown
• Reported on: 2015-09-27 [qsee-blog][archived]
• Fixed on: 2015-12-14 [qsee-blog][archived]
• Fix released on: 2015-12-14 [qsee-blog][archived]
• Affected versions: 5.0-5.1.1 and 6.0 [cvedetails-qsee] regex: (5.0.[0-9])|(5.1.[0-1])|(6.0.[0-9])
• Affected devices: Several, including Droid Turbo, Nexus 6 and Moto X 2nd Gen [qsee-blog][archived]
• Affected manufacturers: Qualcomm [qsee-blog][archived]
• Fixed versions: 5.1.1 LMY94F, 6.0 [cvedetails-qsee]
• Submission: by: Daniel Carter, on: 2019-07-09

CVE-2015-6616

(json)

• CVE numbers: CVE-2015-6616 [Bulletin-CVE-2015-6616]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerabilities in Mediaserver
• Details: mediaserver in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 24630158 and 23882800, a different vulnerability than CVE-2015-8505, CVE-2015-8506, and CVE-2015-8507. [NIST-CVE-2015-6616]
• Discovered by: on: Unknown
• Reported on: 2015-12-01 [Bulletin-CVE-2015-6616]
• Fixed on: 2015-10-05 [ANDROID-24630158]
• Fix released on: Unknown
• Affected versions: 6.0 and below, 5.1 and below, 6.0 and below, 6.0 [Bulletin-CVE-2015-6616] regex: ([1-5].[0-9].[0-9])|(6.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2015-6616]
• Fixed versions: 6.0 and below, 5.1 and below, 6.0 and below, 6.0 [Bulletin-CVE-2015-6616]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0804

(json)

• CVE numbers: CVE-2016-0804 [Bulletin-CVE-2016-0804]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Mediaserver
• Details: The NuPlayer::GenericSource::notifyPreparedAndCleanup function in media/libmediaplayerservice/nuplayer/GenericSource.cpp in mediaserver in Android 5.x before 5.1.1 LMY49G and 6.x before 2016-02-01 improperly manages mDrmManagerClient objects, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 25070434. [NIST-CVE-2016-0804]
• Discovered by: on: Unknown
• Reported on: 2016-02-01 [Bulletin-CVE-2016-0804]
• Fixed on: 2015-10-19 [ANDROID-25070434]
• Fix released on: Unknown
• Affected versions: 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0804] regex: (5.0.[0-9])|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0804]
• Fixed versions: 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0804]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0807

(json)

• CVE numbers: CVE-2016-0807 [Bulletin-CVE-2016-0807]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in the Debuggerd
• Details: The get_build_id function in elf_utils.cpp in Debuggerd in Android 6.x before 2016-02-01 allows attackers to gain privileges via a crafted application that mishandles a Desc Size element in an ELF Note, aka internal bug 25187394. [NIST-CVE-2016-0807]
• Discovered by: on: Unknown
• Reported on: 2016-02-01 [Bulletin-CVE-2016-0807]
• Fixed on: 2015-10-22 [ANDROID-25187394]
• Fix released on: Unknown
• Affected versions: 6.0 and 6.0.1 [Bulletin-CVE-2016-0807] regex: (6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0807]
• Fixed versions: 6.0 and 6.0.1 [Bulletin-CVE-2016-0807]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2015-6636

(json)

• CVE numbers: CVE-2015-6636 [Bulletin-CVE-2015-6636]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Mediaserver
• Details: mediaserver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 25070493 and 24686670. [NIST-CVE-2015-6636]
• Discovered by: on: Unknown
• Reported on: 2016-01-01 [Bulletin-CVE-2015-6636]
• Fixed on: 2015-10-27 [ANDROID-25070493]
• Fix released on: Unknown
• Affected versions: 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2015-6636] regex: (5.0.[0-9])|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2015-6636]
• Fixed versions: 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2015-6636]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0803

(json)

• CVE numbers: CVE-2016-0803 [Bulletin-CVE-2016-0803]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Mediaserver
• Details: libstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file that triggers a large memory allocation in the (1) SoftMPEG4Encoder or (2) SoftVPXEncoder component, aka internal bug 25812794. [NIST-CVE-2016-0803]
• Discovered by: on: Unknown
• Reported on: 2016-02-01 [Bulletin-CVE-2016-0803]
• Fixed on: 2015-11-20 [ANDROID-25812794]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0803] regex: (4.4.4)|(5.0.[0-9])|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0803]
• Fixed versions: 4.4.4, 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0803]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0836

(json)

• CVE numbers: CVE-2016-0836 [Bulletin-CVE-2016-0836]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Mediaserver
• Details: Stack-based buffer overflow in decoder/impeg2d_vld.c in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 25812590. [NIST-CVE-2016-0836]
• Discovered by: on: Unknown
• Reported on: 2016-04-02 [Bulletin-CVE-2016-0836]
• Fixed on: 2015-11-24 [ANDROID-25812590]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0836] regex: (6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0836]
• Fixed versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0836]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0801

(json)

• CVE numbers: CVE-2016-0801 [Bulletin-CVE-2016-0801]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Broadcom Wi-Fi Driver
• Details: The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted wireless control message packets, aka internal bug 25662029. [NIST-CVE-2016-0801]
• Discovered by: on: Unknown
• Reported on: 2016-02-01 [Bulletin-CVE-2016-0801]
• Fixed on: 2015-11-30 [ANDROID-25662029]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0801] regex: (4.4.4)|(5.0.[0-9])|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: Broadcom [Bulletin-CVE-2016-0801]
• Fixed versions: 4.4.4, 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0801]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2015-6633

(json)

• CVE numbers: CVE-2015-6633 [Bulletin-CVE-2015-6633]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerabilities in Display Driver
• Details: The display drivers in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23987307. [NIST-CVE-2015-6633]
• Discovered by: on: Unknown
• Reported on: 2015-12-01 [Bulletin-CVE-2015-6633]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: 6.0 and below [Bulletin-CVE-2015-6633] regex: ([1-5].[0-9].[0-9])|(6.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2015-6633]
• Fixed versions: 6.0 and below [Bulletin-CVE-2015-6633]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0839

(json)

• CVE numbers: CVE-2016-0839 [Bulletin-CVE-2016-0839]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Mediaserver
• Details: post_proc/volume_listener.c in mediaserver in Android 6.x before 2016-04-01 mishandles deleted effect context, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 25753245. [NIST-CVE-2016-0839]
• Discovered by: on: Unknown
• Reported on: 2016-04-02 [Bulletin-CVE-2016-0839]
• Fixed on: 2015-12-03 [ANDROID-25753245]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0839] regex: (6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0839]
• Fixed versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0839]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0842

(json)

• CVE numbers: CVE-2016-0842 [Bulletin-CVE-2016-0842]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in libstagefright
• Details: The H.264 decoder in libstagefright in Android 6.x before 2016-04-01 mishandles Memory Management Control Operation (MMCO) data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 25818142. [NIST-CVE-2016-0842]
• Discovered by: on: Unknown
• Reported on: 2016-04-02 [Bulletin-CVE-2016-0842]
• Fixed on: 2015-12-04 [ANDROID-25818142]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0842] regex: (6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0842]
• Fixed versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0842]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0802

(json)

• CVE numbers: CVE-2016-0802 [Bulletin-CVE-2016-0802]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Broadcom Wi-Fi Driver
• Details: The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted wireless control message packets, aka internal bug 25306181. [NIST-CVE-2016-0802]
• Discovered by: on: Unknown
• Reported on: 2016-02-01 [Bulletin-CVE-2016-0802]
• Fixed on: 2015-12-09 [ANDROID-25306181]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0802] regex: (4.4.4)|(5.0.[0-9])|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: Broadcom [Bulletin-CVE-2016-0802]
• Fixed versions: 4.4.4, 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0802]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2017-0470

(json)

• CVE numbers: CVE-2017-0470 [Bulletin-CVE-2017-0470]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33818500. [NIST-CVE-2017-0470]
• Discovered by: V.E.O (@VYSEa) of Mobile Threat Research Team, Trend Micro [Discovery-CVE-2017-0470] on: Unknown
• Reported on: 2017-03-01 [Bulletin-CVE-2017-0470]
• Fixed on: 2015-12-18 [A-33818500]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0470] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0470]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0470]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2016-0818

(json)

• CVE numbers: CVE-2016-0818 [Bulletin-CVE-2016-0818]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege in Conscrypt
• Details: The caching functionality in the TrustManagerImpl class in TrustManagerImpl.java in Conscrypt in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 mishandles the distinction between an intermediate CA and a trusted root CA, which allows man-in-the-middle attackers to spoof servers by leveraging access to an intermediate CA to issue a certificate, aka internal bug 26232830. [NIST-CVE-2016-0818]
• Discovered by: on: Unknown
• Reported on: 2016-03-01 [Bulletin-CVE-2016-0818]
• Fixed on: 2015-12-20 [[2]]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0818] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0818]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0818]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0835

(json)

• CVE numbers: CVE-2016-0835 [Bulletin-CVE-2016-0835]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Mediaserver
• Details: decoder/impeg2d_dec_hdr.c in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file that triggers a certain negative value, aka internal bug 26070014. [NIST-CVE-2016-0835]
• Discovered by: on: Unknown
• Reported on: 2016-04-02 [Bulletin-CVE-2016-0835]
• Fixed on: 2015-12-31 [ANDROID-26070014]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0835] regex: (6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0835]
• Fixed versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0835]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2015-6637

(json)

• CVE numbers: CVE-2015-6637 [Bulletin-CVE-2015-6637]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in misc-sd driver
• Details: The MediaTek misc-sd driver in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application, aka internal bug 25307013. [NIST-CVE-2015-6637]
• Discovered by: on: Unknown
• Reported on: 2016-01-01 [Bulletin-CVE-2015-6637]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2015-6637] regex: (4.4.4)|(5.0.[0-9])|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2015-6637]
• Fixed versions: 4.4.4, 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2015-6637]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2015-6638

(json)

• CVE numbers: CVE-2015-6638 [Bulletin-CVE-2015-6638]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in the Imagination Technologies driver
• Details: The Imagination Technologies driver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application, aka internal bug 24673908. [NIST-CVE-2015-6638]
• Discovered by: on: Unknown
• Reported on: 2016-01-01 [Bulletin-CVE-2015-6638]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2015-6638] regex: (5.0.[0-9])|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2015-6638]
• Fixed versions: 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2015-6638]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2015-6639

(json)

• CVE numbers: CVE-2015-6639 [Bulletin-CVE-2015-6639]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerabilities in Trustzone
• Details: The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application that leverages QSEECOM access, aka internal bug 24446875. [NIST-CVE-2015-6639]
• Discovered by: on: Unknown
• Reported on: 2016-01-01 [Bulletin-CVE-2015-6639]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2015-6639] regex: (5.0.[0-9])|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2015-6639]
• Fixed versions: 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2015-6639]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2015-6647

(json)

• CVE numbers: CVE-2015-6647 [Bulletin-CVE-2015-6647]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerabilities in Trustzone
• Details: The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application that leverages QSEECOM access, aka internal bug 24441554. [NIST-CVE-2015-6647]
• Discovered by: on: Unknown
• Reported on: 2016-01-01 [Bulletin-CVE-2015-6647]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2015-6647] regex: (5.0.[0-9])|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2015-6647]
• Fixed versions: 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2015-6647]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0844

(json)

• CVE numbers: CVE-2016-0844 [Bulletin-CVE-2016-0844]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in Qualcomm RF component
• Details: The Qualcomm RF driver in Android 6.x before 2016-04-01 does not properly restrict access to socket ioctl calls, which allows attackers to gain privileges via a crafted application, aka internal bug 26324307. [NIST-CVE-2016-0844]
• Discovered by: on: Unknown
• Reported on: 2016-04-02 [Bulletin-CVE-2016-0844]
• Fixed on: 2016-01-05 [ANDROID-26324307]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0844] regex: (6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-0844]
• Fixed versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0844]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0816

(json)

• CVE numbers: CVE-2016-0816 [Bulletin-CVE-2016-0816]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Mediaserver
• Details: mediaserver in Android 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, related to decoder/ih264d_parse_islice.c and decoder/ih264d_parse_pslice.c, aka internal bug 25928803. [NIST-CVE-2016-0816]
• Discovered by: on: Unknown
• Reported on: 2016-03-01 [Bulletin-CVE-2016-0816]
• Fixed on: 2016-01-07 [ANDROID-25928803]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0816] regex: (6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0816]
• Fixed versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0816]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2464

(json)

• CVE numbers: CVE-2016-2464 [Bulletin-CVE-2016-2464]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerabilities in libwebm
• Details: libvpx in libwebm in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted mkv file, aka internal bug 23167726. [NIST-CVE-2016-2464]
• Discovered by: on: Unknown
• Reported on: 2016-06-01 [Bulletin-CVE-2016-2464]
• Fixed on: 2016-01-11 [2]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2464] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-2464]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2464]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0815

(json)

• CVE numbers: CVE-2016-0815 [Bulletin-CVE-2016-0815]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Mediaserver
• Details: The MPEG4Source::fragmentedRead function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 26365349. [NIST-CVE-2016-0815]
• Discovered by: on: Unknown
• Reported on: 2016-03-01 [Bulletin-CVE-2016-0815]
• Fixed on: 2016-01-12 [ANDROID-26365349]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0815] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0815]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0815]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0838

(json)

• CVE numbers: CVE-2016-0838 [Bulletin-CVE-2016-0838]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Mediaserver
• Details: Sonivox in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not check for a negative number of samples, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, related to arm-wt-22k/lib_src/eas_wtengine.c and arm-wt-22k/lib_src/eas_wtsynth.c, aka internal bug 26366256. [NIST-CVE-2016-0838]
• Discovered by: on: Unknown
• Reported on: 2016-04-02 [Bulletin-CVE-2016-0838]
• Fixed on: 2016-01-12 [2]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0838] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0838]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0838]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-1621

(json)

• CVE numbers: CVE-2016-1621 [Bulletin-CVE-2016-1621]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerabilities in libvpx
• Details: libvpx in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.0 before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, related to libwebm/mkvparser.cpp and other files, aka internal bug 23452792. [NIST-CVE-2016-1621]
• Discovered by: on: Unknown
• Reported on: 2016-03-01 [Bulletin-CVE-2016-1621]
• Fixed on: 2016-01-19 [[3]]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0 [Bulletin-CVE-2016-1621] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-1621]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0 [Bulletin-CVE-2016-1621]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0805

(json)

• CVE numbers: CVE-2016-0805 [Bulletin-CVE-2016-0805]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in Qualcomm Performance Module
• Details: The performance event manager for Qualcomm ARM processors in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows attackers to gain privileges via a crafted application, aka internal bug 25773204. [NIST-CVE-2016-0805]
• Discovered by: on: Unknown
• Reported on: 2016-02-01 [Bulletin-CVE-2016-0805]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0805] regex: (4.4.4)|(5.0.[0-9])|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-0805]
• Fixed versions: 4.4.4, 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0805]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0806

(json)

• CVE numbers: CVE-2016-0806 [Bulletin-CVE-2016-0806]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in Qualcomm Wi-Fi Driver
• Details: The Qualcomm Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows attackers to gain privileges via a crafted application, aka internal bug 25344453. [NIST-CVE-2016-0806]
• Discovered by: on: Unknown
• Reported on: 2016-02-01 [Bulletin-CVE-2016-0806]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0806] regex: (4.4.4)|(5.0.[0-9])|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-0806]
• Fixed versions: 4.4.4, 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0806]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-1503

(json)

• CVE numbers: CVE-2016-1503 [Bulletin-CVE-2016-1503]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in DHCPCD
• Details: dhcpcd before 6.10.0, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 and other products, mismanages option lengths, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a malformed DHCP response, aka internal bug 26461634. [NIST-CVE-2016-1503]
• Discovered by: on: Unknown
• Reported on: 2016-04-02 [Bulletin-CVE-2016-1503]
• Fixed on: 2016-02-11 [ANDROID-26461634]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-1503] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-1503]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-1503]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0840

(json)

• CVE numbers: CVE-2016-0840 [Bulletin-CVE-2016-0840]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Mediaserver
• Details: Multiple stack-based buffer underflows in decoder/ih264d_parse_cavlc.c in mediaserver in Android 6.x before 2016-04-01 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 26399350. [NIST-CVE-2016-0840]
• Discovered by: on: Unknown
• Reported on: 2016-04-02 [Bulletin-CVE-2016-0840]
• Fixed on: 2016-02-17 [ANDROID-26399350]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0840] regex: (6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0840]
• Fixed versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0840]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0841

(json)

• CVE numbers: CVE-2016-0841 [Bulletin-CVE-2016-0841]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Mediaserver
• Details: media/libmedia/mediametadataretriever.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 mishandles cleared service binders, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 26040840. [NIST-CVE-2016-0841]
• Discovered by: on: Unknown
• Reported on: 2016-04-02 [Bulletin-CVE-2016-0841]
• Fixed on: 2016-02-18 [ANDROID-26040840]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0841] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0841]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0841]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0837

(json)

• CVE numbers: CVE-2016-0837 [Bulletin-CVE-2016-0837]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Mediaserver
• Details: MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read and memory corruption) via a crafted media file, aka internal bug 27208621. [NIST-CVE-2016-0837]
• Discovered by: on: Unknown
• Reported on: 2016-04-02 [Bulletin-CVE-2016-0837]
• Fixed on: 2016-02-23 [ANDROID-27208621]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0837] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0837]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0837]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0728

(json)

• CVE numbers: CVE-2016-0728 [Bulletin-CVE-2016-0728]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in Kernel Keyring Component
• Details: The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object references in a certain error case, which allows local users to gain privileges or cause a denial of service (integer overflow and use-after-free) via crafted keyctl commands. [NIST-CVE-2016-0728]
• Discovered by: on: Unknown
• Reported on: 2016-03-01 [Bulletin-CVE-2016-0728]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0728] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0728]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0728]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0819

(json)

• CVE numbers: CVE-2016-0819 [Bulletin-CVE-2016-0819]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in the Qualcomm Performance Component
• Details: The Qualcomm performance component in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allows attackers to gain privileges via a crafted application, aka internal bug 25364034. [NIST-CVE-2016-0819]
• Discovered by: on: Unknown
• Reported on: 2016-03-01 [Bulletin-CVE-2016-0819]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0819] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-0819]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0819]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0820

(json)

• CVE numbers: CVE-2016-0820 [Bulletin-CVE-2016-0820]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in MediaTek Wi-Fi Kernel Driver
• Details: The MediaTek Wi-Fi kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privileges via a crafted application, aka internal bug 26267358. [NIST-CVE-2016-0820]
• Discovered by: on: Unknown
• Reported on: 2016-03-01 [Bulletin-CVE-2016-0820]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: 6.0.1 [Bulletin-CVE-2016-0820] regex: (6.0.1)
• Affected devices:
• Affected manufacturers: MediaTek [Bulletin-CVE-2016-0820]
• Fixed versions: 6.0.1 [Bulletin-CVE-2016-0820]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2429

(json)

• CVE numbers: CVE-2016-2429 [Bulletin-CVE-2016-2429]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Mediaserver
• Details: libFLAC/stream_decoder.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not prevent free operations on uninitialized memory, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted media file, aka internal bug 27211885. [NIST-CVE-2016-2429]
• Discovered by: on: Unknown
• Reported on: 2016-05-01 [Bulletin-CVE-2016-2429]
• Fixed on: 2016-03-11 [27211885]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2429] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-2429]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2429]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2428

(json)

• CVE numbers: CVE-2016-2428 [Bulletin-CVE-2016-2428]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Mediaserver
• Details: libAACdec/src/aacdec_drc.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not properly limit the number of threads, which allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a crafted media file, aka internal bug 26751339. [NIST-CVE-2016-2428]
• Discovered by: on: Unknown
• Reported on: 2016-05-01 [Bulletin-CVE-2016-2428]
• Fixed on: 2016-03-21 [26751339]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2428] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-2428]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2428]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2430

(json)

• CVE numbers: CVE-2016-2430 [Bulletin-CVE-2016-2430]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in Debuggerd
• Details: libbacktrace/Backtrace.cpp in debuggerd in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows attackers to gain privileges via an application containing a crafted symbol name, aka internal bug 27299236. [NIST-CVE-2016-2430]
• Discovered by: on: Unknown
• Reported on: 2016-05-01 [Bulletin-CVE-2016-2430]
• Fixed on: 2016-03-23 [27299236]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2430] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-2430]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2430]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2015-1805

(json)

• CVE numbers: CVE-2015-1805 [Bulletin-CVE-2015-1805]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in Kernel
• Details: The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an "I/O vector array overrun." [NIST-CVE-2015-1805]
• Discovered by: on: Unknown
• Reported on: 2016-04-02 [Bulletin-CVE-2015-1805]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2015-1805] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2015-1805]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2015-1805]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0834

(json)

• CVE numbers: CVE-2016-0834 [Bulletin-CVE-2016-0834]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Media Codec
• Details: An unspecified media codec in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 26220548. [NIST-CVE-2016-0834]
• Discovered by: on: Unknown
• Reported on: 2016-04-02 [Bulletin-CVE-2016-0834]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0834] regex: (6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0834]
• Fixed versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0834]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0843

(json)

• CVE numbers: CVE-2016-0843 [Bulletin-CVE-2016-0843]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in Qualcomm Performance Module
• Details: The Qualcomm ARM processor performance-event manager in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows attackers to gain privileges via a crafted application, aka internal bug 25801197. [NIST-CVE-2016-0843]
• Discovered by: on: Unknown
• Reported on: 2016-04-02 [Bulletin-CVE-2016-0843]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0843] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-0843]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0843]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2463

(json)

• CVE numbers: CVE-2016-2463 [Bulletin-CVE-2016-2463]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Mediaserver
• Details: Multiple integer overflows in the h264dec component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file that triggers a large memory allocation, aka internal bug 27855419. [NIST-CVE-2016-2463]
• Discovered by: on: Unknown
• Reported on: 2016-06-01 [Bulletin-CVE-2016-2463]
• Fixed on: 2016-04-08 [27855419]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2463] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-2463]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2463]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3742

(json)

• CVE numbers: CVE-2016-3742 [Bulletin-CVE-2016-3742]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: decoder/ih264d_process_intra_mb.c in mediaserver in Android 6.x before 2016-07-01 mishandles intra mode, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28165659. [NIST-CVE-2016-3742]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2016-3742]
• Fixed on: 2016-04-20 [A-28165659]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1 [Bulletin-CVE-2016-3742] regex: (6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-3742]
• Fixed versions: 6.0, 6.0.1 [Bulletin-CVE-2016-3742]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3743

(json)

• CVE numbers: CVE-2016-3743 [Bulletin-CVE-2016-3743]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: decoder/ih264d_api.c in mediaserver in Android 6.x before 2016-07-01 does not initialize certain data structures, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 27907656. [NIST-CVE-2016-3743]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2016-3743]
• Fixed on: 2016-04-21 [A-27907656]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1 [Bulletin-CVE-2016-3743] regex: (6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-3743]
• Fixed versions: 6.0, 6.0.1 [Bulletin-CVE-2016-3743]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2505

(json)

• CVE numbers: CVE-2016-2505 [Bulletin-CVE-2016-2505]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: mpeg2ts/ATSParser.cpp in libstagefright in mediaserver in Android 6.x before 2016-07-01 does not validate a certain section length, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28333006. [NIST-CVE-2016-2505]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2016-2505]
• Fixed on: 2016-04-28 [A-28333006]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1 [Bulletin-CVE-2016-2505] regex: (6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-2505]
• Fixed versions: 6.0, 6.0.1 [Bulletin-CVE-2016-2505]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2507

(json)

• CVE numbers: CVE-2016-2507 [Bulletin-CVE-2016-2507]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: Integer overflow in codecs/on2/h264dec/source/h264bsd_storage.c in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28532266. [NIST-CVE-2016-2507]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2016-2507]
• Fixed on: 2016-05-11 [A-28532266]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2507] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-2507]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2507]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3840

(json)

• CVE numbers: CVE-2016-3840 [Bulletin-CVE-2016-3840]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Conscrypt
• Details: Conscrypt in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-05 does not properly identify session reuse, which allows remote attackers to execute arbitrary code via unspecified vectors, aka internal bug 28751153. [NIST-CVE-2016-3840]
• Discovered by: on: Unknown
• Reported on: 2016-08-01 [Bulletin-CVE-2016-3840]
• Fixed on: 2016-05-12 [A-28751153]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-3840] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-3840]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-3840]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2506

(json)

• CVE numbers: CVE-2016-2506 [Bulletin-CVE-2016-2506]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: DRMExtractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate a certain offset value, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28175045. [NIST-CVE-2016-2506]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2016-2506]
• Fixed on: 2016-05-13 [A-28175045]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2506] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-2506]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2506]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3741

(json)

• CVE numbers: CVE-2016-3741 [Bulletin-CVE-2016-3741]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: The H.264 decoder in mediaserver in Android 6.x before 2016-07-01 does not initialize certain slice data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28165661. [NIST-CVE-2016-3741]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2016-3741]
• Fixed on: 2016-05-24 [2]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1 [Bulletin-CVE-2016-3741] regex: (6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-3741]
• Fixed versions: 6.0, 6.0.1 [Bulletin-CVE-2016-3741]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3820

(json)

• CVE numbers: CVE-2016-3820 [Bulletin-CVE-2016-3820]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 mishandles slice numbers, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28673410. [NIST-CVE-2016-3820]
• Discovered by: on: Unknown
• Reported on: 2016-08-01 [Bulletin-CVE-2016-3820]
• Fixed on: 2016-06-01 [A-28673410]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1 [Bulletin-CVE-2016-3820] regex: (6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-3820]
• Fixed versions: 6.0, 6.0.1 [Bulletin-CVE-2016-3820]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2017-0587

(json)

• CVE numbers: CVE-2017-0587 [Bulletin-CVE-2017-0587]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in libmpeg2 in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35219737. [NIST-CVE-2017-0587]
• Discovered by: V.E.O (@VYSEa) of Mobile Threat Research Team, Trend Micro [Discovery-CVE-2017-0587] on: Unknown
• Reported on: 2017-05-01 [Bulletin-CVE-2017-0587]
• Fixed on: 2016-06-01 [A-35219737]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0587] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0587]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0587]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2016-3819

(json)

• CVE numbers: CVE-2016-3819 [Bulletin-CVE-2016-3819]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: Integer overflow in codecs/on2/h264dec/source/h264bsd_dpb.c in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28533562. [NIST-CVE-2016-3819]
• Discovered by: on: Unknown
• Reported on: 2016-08-01 [Bulletin-CVE-2016-3819]
• Fixed on: 2016-06-07 [A-28533562]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-3819] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-3819]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-3819]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3821

(json)

• CVE numbers: CVE-2016-3821 [Bulletin-CVE-2016-3821]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: libmedia in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 has certain incorrect declarations, which allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference or memory corruption) via a crafted media file, aka internal bug 28166152. [NIST-CVE-2016-3821]
• Discovered by: on: Unknown
• Reported on: 2016-08-01 [Bulletin-CVE-2016-3821]
• Fixed on: 2016-06-07 [A-28166152]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-3821] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-3821]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-3821]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2508

(json)

• CVE numbers: CVE-2016-2508 [Bulletin-CVE-2016-2508]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: media/libmediaplayerservice/nuplayer/GenericSource.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate certain track data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28799341. [NIST-CVE-2016-2508]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2016-2508]
• Fixed on: 2016-06-14 [2]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2508] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-2508]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2508]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3861

(json)

• CVE numbers: CVE-2016-3861 [Bulletin-CVE-2016-3861]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in LibUtils
• Details: LibUtils in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 mishandles conversions between Unicode character encodings with different encoding widths, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted file, aka internal bug 29250543. [NIST-CVE-2016-3861]
• Discovered by: on: Unknown
• Reported on: 2016-09-01 [Bulletin-CVE-2016-3861]
• Fixed on: 2016-06-28 [A-29250543]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0 [Bulletin-CVE-2016-3861] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-3861]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0 [Bulletin-CVE-2016-3861]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3862

(json)

• CVE numbers: CVE-2016-3862 [Bulletin-CVE-2016-3862]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: media/ExifInterface.java in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 does not properly interact with the use of static variables in libjhead_jni, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 29270469. [NIST-CVE-2016-3862]
• Discovered by: on: Unknown
• Reported on: 2016-09-01 [Bulletin-CVE-2016-3862]
• Fixed on: 2016-07-13 [A-29270469]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-3862] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-3862]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-3862]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2182

(json)

• CVE numbers: CVE-2016-2182 [Bulletin-CVE-2016-2182]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in OpenSSL & BoringSSL
• Details: The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors. [NIST-CVE-2016-2182]
• Discovered by: on: Unknown
• Reported on: 2017-03-01 [Bulletin-CVE-2016-2182]
• Fixed on: 2016-08-22 [A-32096880]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2016-2182] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-2182]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2016-2182]
• Submission: by: Daniel Carter, on: 2019-07-26

dirtyc0w

(json)

• CVE numbers: CVE-2016-5195 [dirtyc0w-redhat]
• Coordinated disclosure?: false
• Categories: kernel
• Details: A race condition in the Linux kernel's handling of copy-on-write (COW) operations means that users can gain write access to otherwise read-only areas of memory and gain permissions [dirtyc0w-redhat]
• Discovered by: Phil Oester [dirtyc0w-redhat] on: Unknown
• Reported on: 2016-10-13 [dirtyc0w-bugzilla]
• Fixed on: 2016-10-18 [dirtyc0w-github][archived]
• Fix released on: 2016-11-06 [dirtyc0w-bulletin]
• Affected versions: 1.0 to 7.0 [dirtyc0w-arstechnica][archived] regex: ([1-6].[0-9].[0-9])|(7.0.[0-9])
• Affected devices: all [dirtyc0w-arstechnica][archived]
• Affected manufacturers: all [dirtyc0w-arstechnica][archived]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-09

CVE-2017-0592

(json)

• CVE numbers: CVE-2017-0592 [Bulletin-CVE-2017-0592]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in FLACExtractor.cpp in libstagefright in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34970788. [NIST-CVE-2017-0592]
• Discovered by: on: Unknown
• Reported on: 2017-05-01 [Bulletin-CVE-2017-0592]
• Fixed on: 2016-10-24 [A-34970788]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0592] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0592]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0592]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0406

(json)

• CVE numbers: CVE-2017-0406 [Bulletin-CVE-2017-0406]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. This affects the libhevc library. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32915871. [NIST-CVE-2017-0406]
• Discovered by: Zhixin Li of NSFocus [Discovery-CVE-2017-0406] on: Unknown
• Reported on: 2017-02-01 [Bulletin-CVE-2017-0406]
• Fixed on: 2016-11-18 [2]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0406] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0406]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0406]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0407

(json)

• CVE numbers: CVE-2017-0407 [Bulletin-CVE-2017-0407]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. This affects the libhevc library. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32873375. [NIST-CVE-2017-0407]
• Discovered by: Weichao Sun (@sunblate) of Alibaba Inc. [Discovery-CVE-2017-0407] on: Unknown
• Reported on: 2017-02-01 [Bulletin-CVE-2017-0407]
• Fixed on: 2016-11-25 [A-32873375]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0407] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0407]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0407]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0543

(json)

• CVE numbers: CVE-2017-0543 [Bulletin-CVE-2017-0543]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-34097866. [NIST-CVE-2017-0543]
• Discovered by: on: Unknown
• Reported on: 2017-04-01 [Bulletin-CVE-2017-0543]
• Fixed on: 2016-12-15 [A-34097866]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0543] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0543]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0543]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0591

(json)

• CVE numbers: CVE-2017-0591 [Bulletin-CVE-2017-0591]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34097672. [NIST-CVE-2017-0591]
• Discovered by: on: Unknown
• Reported on: 2017-05-01 [Bulletin-CVE-2017-0591]
• Fixed on: 2016-12-15 [A-34097672]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0591] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0591]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0591]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0475

(json)

• CVE numbers: CVE-2017-0475 [Bulletin-CVE-2017-0475]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in recovery verifier
• Details: An elevation of privilege vulnerability in the recovery verifier could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-31914369. [NIST-CVE-2017-0475]
• Discovered by: Zinuo Han from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2017-0475] on: Unknown
• Reported on: 2017-03-01 [Bulletin-CVE-2017-0475]
• Fixed on: 2016-12-16 [A-31914369]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0475] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0475]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0475]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0466

(json)

• CVE numbers: CVE-2017-0466 [Bulletin-CVE-2017-0466]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33139050. [NIST-CVE-2017-0466]
• Discovered by: V.E.O (@VYSEa) of Mobile Threat Research Team, Trend Micro [Discovery-CVE-2017-0466] on: Unknown
• Reported on: 2017-03-01 [Bulletin-CVE-2017-0466]
• Fixed on: 2016-12-20 [A-33139050]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0466] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0466]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0466]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0467

(json)

• CVE numbers: CVE-2017-0467 [Bulletin-CVE-2017-0467]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33250932. [NIST-CVE-2017-0467]
• Discovered by: V.E.O (@VYSEa) of Mobile Threat Research Team, Trend Micro [Discovery-CVE-2017-0467] on: Unknown
• Reported on: 2017-03-01 [Bulletin-CVE-2017-0467]
• Fixed on: 2016-12-20 [A-33250932]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0467] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0467]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0467]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0468

(json)

• CVE numbers: CVE-2017-0468 [Bulletin-CVE-2017-0468]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33351708. [NIST-CVE-2017-0468]
• Discovered by: V.E.O (@VYSEa) of Mobile Threat Research Team, Trend Micro [Discovery-CVE-2017-0468] on: Unknown
• Reported on: 2017-03-01 [Bulletin-CVE-2017-0468]
• Fixed on: 2016-12-20 [A-33351708]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0468] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0468]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0468]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0542

(json)

• CVE numbers: CVE-2017-0542 [Bulletin-CVE-2017-0542]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33934721. [NIST-CVE-2017-0542]
• Discovered by: on: Unknown
• Reported on: 2017-04-01 [Bulletin-CVE-2017-0542]
• Fixed on: 2016-12-23 [A-33934721]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0542] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0542]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0542]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0469

(json)

• CVE numbers: CVE-2017-0469 [Bulletin-CVE-2017-0469]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33450635. [NIST-CVE-2017-0469]
• Discovered by: V.E.O (@VYSEa) of Mobile Threat Research Team, Trend Micro [Discovery-CVE-2017-0469] on: Unknown
• Reported on: 2017-03-01 [Bulletin-CVE-2017-0469]
• Fixed on: 2016-12-27 [A-33450635]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0469] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0469]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0469]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0673

(json)

• CVE numbers: CVE-2017-0673 [Bulletin-CVE-2017-0673]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-33974623. [NIST-CVE-2017-0673]
• Discovered by: on: Unknown
• Reported on: 2017-07-01 [Bulletin-CVE-2017-0673]
• Fixed on: 2016-12-30 [A-33974623]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0673] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0673]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0673]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0538

(json)

• CVE numbers: CVE-2017-0538 [Bulletin-CVE-2017-0538]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33641588. [NIST-CVE-2017-0538]
• Discovered by: V.E.O (@VYSEa) of Mobile Threat Research Team, Trend Micro [Discovery-CVE-2017-0538] on: Unknown
• Reported on: 2017-04-01 [Bulletin-CVE-2017-0538]
• Fixed on: 2017-01-05 [A-33641588]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0538] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0538]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0538]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0471

(json)

• CVE numbers: CVE-2017-0471 [Bulletin-CVE-2017-0471]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33816782. [NIST-CVE-2017-0471]
• Discovered by: V.E.O (@VYSEa) of Mobile Threat Research Team, Trend Micro [Discovery-CVE-2017-0471] on: Unknown
• Reported on: 2017-03-01 [Bulletin-CVE-2017-0471]
• Fixed on: 2017-01-13 [A-33816782]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0471] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0471]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0471]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0472

(json)

• CVE numbers: CVE-2017-0472 [Bulletin-CVE-2017-0472]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33862021. [NIST-CVE-2017-0472]
• Discovered by: V.E.O (@VYSEa) of Mobile Threat Research Team, Trend Micro [Discovery-CVE-2017-0472] on: Unknown
• Reported on: 2017-03-01 [Bulletin-CVE-2017-0472]
• Fixed on: 2017-01-13 [A-33862021]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0472] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0472]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0472]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0539

(json)

• CVE numbers: CVE-2017-0539 [Bulletin-CVE-2017-0539]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33864300. [NIST-CVE-2017-0539]
• Discovered by: V.E.O (@VYSEa) of Mobile Threat Research Team, Trend Micro [Discovery-CVE-2017-0539] on: Unknown
• Reported on: 2017-04-01 [Bulletin-CVE-2017-0539]
• Fixed on: 2017-01-13 [A-33864300]
• Fix released on: Unknown
• Affected versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0539] regex: (5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0539]
• Fixed versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0539]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0590

(json)

• CVE numbers: CVE-2017-0590 [Bulletin-CVE-2017-0590]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35039946. [NIST-CVE-2017-0590]
• Discovered by: V.E.O (@VYSEa) of Mobile Threat Research Team, Trend Micro [Discovery-CVE-2017-0590] on: Unknown
• Reported on: 2017-05-01 [Bulletin-CVE-2017-0590]
• Fixed on: 2017-01-13 [A-35039946]
• Fix released on: Unknown
• Affected versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0590] regex: (5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0590]
• Fixed versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0590]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0473

(json)

• CVE numbers: CVE-2017-0473 [Bulletin-CVE-2017-0473]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33982658. [NIST-CVE-2017-0473]
• Discovered by: V.E.O (@VYSEa) of Mobile Threat Research Team, Trend Micro [Discovery-CVE-2017-0473] on: Unknown
• Reported on: 2017-03-01 [Bulletin-CVE-2017-0473]
• Fixed on: 2017-01-16 [A-33982658]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0473] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0473]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0473]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0541

(json)

• CVE numbers: CVE-2017-0541 [Bulletin-CVE-2017-0541]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in sonivox in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-34031018. [NIST-CVE-2017-0541]
• Discovered by: Jianjun Dai (@Jioun_dai) of Qihoo 360 Skyeye Labs [Discovery-CVE-2017-0541] on: Unknown
• Reported on: 2017-04-01 [Bulletin-CVE-2017-0541]
• Fixed on: 2017-02-07 [A-34031018]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0541] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0541]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0541]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0680

(json)

• CVE numbers: CVE-2017-0680 [Bulletin-CVE-2017-0680]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37008096. [NIST-CVE-2017-0680]
• Discovered by: V.E.O (@VYSEa) of Mobile Threat Research Team, Trend Micro [Discovery-CVE-2017-0680] on: Unknown
• Reported on: 2017-07-01 [Bulletin-CVE-2017-0680]
• Fixed on: 2017-02-10 [A-37008096]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0680] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0680]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0680]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0589

(json)

• CVE numbers: CVE-2017-0589 [Bulletin-CVE-2017-0589]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34897036. [NIST-CVE-2017-0589]
• Discovered by: Vasily Vasiliev [Discovery-CVE-2017-0589] on: Unknown
• Reported on: 2017-05-01 [Bulletin-CVE-2017-0589]
• Fixed on: 2017-03-06 [A-34897036]
• Fix released on: Unknown
• Affected versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0589] regex: (5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0589]
• Fixed versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0589]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0588

(json)

• CVE numbers: CVE-2017-0588 [Bulletin-CVE-2017-0588]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in id3/ID3.cpp in libstagefright in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34618607. [NIST-CVE-2017-0588]
• Discovered by: Yong Wang (王勇) (@ThomasKing2014) of Alibaba Inc. [Discovery-CVE-2017-0588] on: Unknown
• Reported on: 2017-05-01 [Bulletin-CVE-2017-0588]
• Fixed on: 2017-03-10 [A-34618607]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0588] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0588]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0588]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0756

(json)

• CVE numbers: CVE-2017-0756 [Bulletin-CVE-2017-0756]
• Coordinated disclosure?: unknown
• Categories: Media Framework
• Details: A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34621073. [NIST-CVE-2017-0756]
• Discovered by: on: Unknown
• Reported on: 2017-09-01 [Bulletin-CVE-2017-0756]
• Fixed on: 2017-03-10 [A-34621073]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0756] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0756]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0756]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2015-7555

(json)

• CVE numbers: CVE-2015-7555 [Bulletin-CVE-2015-7555]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in GIFLIB
• Details: Heap-based buffer overflow in giffix.c in giffix in giflib 5.1.1 allows attackers to cause a denial of service (program crash) via crafted image and logical screen width fields in a GIF file. [NIST-CVE-2015-7555]
• Discovered by: on: Unknown
• Reported on: 2017-05-01 [Bulletin-CVE-2015-7555]
• Fixed on: 2017-03-13 [A-34697653]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2015-7555] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2015-7555]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2015-7555]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0677

(json)

• CVE numbers: CVE-2017-0677 [Bulletin-CVE-2017-0677]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36035074. [NIST-CVE-2017-0677]
• Discovered by: V.E.O (@VYSEa) of Mobile Threat Research Team, Trend Micro [Discovery-CVE-2017-0677] on: Unknown
• Reported on: 2017-07-01 [Bulletin-CVE-2017-0677]
• Fixed on: 2017-03-20 [A-36035074]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0677] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0677]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0677]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0637

(json)

• CVE numbers: CVE-2017-0637 [Bulletin-CVE-2017-0637]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34064500. [NIST-CVE-2017-0637]
• Discovered by: Vasily Vasiliev [Discovery-CVE-2017-0637] on: Unknown
• Reported on: 2017-06-01 [Bulletin-CVE-2017-0637]
• Fixed on: 2017-03-31 [A-34064500]
• Fix released on: Unknown
• Affected versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0637] regex: (5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0637]
• Fixed versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0637]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0674

(json)

• CVE numbers: CVE-2017-0674 [Bulletin-CVE-2017-0674]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34231163. [NIST-CVE-2017-0674]
• Discovered by: V.E.O (@VYSEa) of Mobile Threat Research Team, Trend Micro [Discovery-CVE-2017-0674] on: Unknown
• Reported on: 2017-07-01 [Bulletin-CVE-2017-0674]
• Fixed on: 2017-04-05 [A-34231163]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0674] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0674]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0674]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0675

(json)

• CVE numbers: CVE-2017-0675 [Bulletin-CVE-2017-0675]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34779227. [NIST-CVE-2017-0675]
• Discovered by: Vasily Vasiliev [Discovery-CVE-2017-0675] on: Unknown
• Reported on: 2017-07-01 [Bulletin-CVE-2017-0675]
• Fixed on: 2017-04-05 [2]
• Fix released on: Unknown
• Affected versions: 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0675] regex: (6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0675]
• Fixed versions: 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0675]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0676

(json)

• CVE numbers: CVE-2017-0676 [Bulletin-CVE-2017-0676]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34896431. [NIST-CVE-2017-0676]
• Discovered by: Vasily Vasiliev [Discovery-CVE-2017-0676] on: Unknown
• Reported on: 2017-07-01 [Bulletin-CVE-2017-0676]
• Fixed on: 2017-04-05 [A-34896431]
• Fix released on: Unknown
• Affected versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0676] regex: (5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0676]
• Fixed versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0676]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0759

(json)

• CVE numbers: CVE-2017-0759 [Bulletin-CVE-2017-0759]
• Coordinated disclosure?: unknown
• Categories: Media Framework
• Details: A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36715268. [NIST-CVE-2017-0759]
• Discovered by: Weichao Sun (@sunblate) of Alibaba Inc. [Discovery-CVE-2017-0759] on: Unknown
• Reported on: 2017-09-01 [Bulletin-CVE-2017-0759]
• Fixed on: 2017-04-13 [A-36715268]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0759] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0759]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0759]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0719

(json)

• CVE numbers: CVE-2017-0719 [Bulletin-CVE-2017-0719]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in the Android media framework (mpeg2 decoder). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37273673. [NIST-CVE-2017-0719]
• Discovered by: Zinuo Han from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2017-0719] on: Unknown
• Reported on: 2017-08-01 [Bulletin-CVE-2017-0719]
• Fixed on: 2017-04-20 [A-37273673]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0719] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0719]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0719]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0721

(json)

• CVE numbers: CVE-2017-0721 [Bulletin-CVE-2017-0721]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37561455. [NIST-CVE-2017-0721]
• Discovered by: on: Unknown
• Reported on: 2017-08-01 [Bulletin-CVE-2017-0721]
• Fixed on: 2017-04-21 [A-37561455]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0721] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0721]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0721]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0723

(json)

• CVE numbers: CVE-2017-0723 [Bulletin-CVE-2017-0723]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37968755. [NIST-CVE-2017-0723]
• Discovered by: on: Unknown
• Reported on: 2017-08-01 [Bulletin-CVE-2017-0723]
• Fixed on: 2017-04-21 [A-37968755]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0723] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0723]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0723]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0540

(json)

• CVE numbers: CVE-2017-0540 [Bulletin-CVE-2017-0540]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33966031. [NIST-CVE-2017-0540]
• Discovered by: V.E.O (@VYSEa) of Mobile Threat Research Team, Trend Micro [Discovery-CVE-2017-0540] on: Unknown
• Reported on: 2017-07-01 [Bulletin-CVE-2017-0540]
• Fixed on: 2017-04-22 [A-33966031]
• Fix released on: Unknown
• Affected versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0540] regex: (5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0540]
• Fixed versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0540]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0811

(json)

• CVE numbers: CVE-2017-0811 [Bulletin-CVE-2017-0811]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37930177. [NIST-CVE-2017-0811]
• Discovered by: on: Unknown
• Reported on: 2017-10-01 [Bulletin-CVE-2017-0811]
• Fixed on: 2017-05-03 [A-37930177]
• Fix released on: Unknown
• Affected versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0811] regex: (5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0811]
• Fixed versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0811]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0679

(json)

• CVE numbers: CVE-2017-0679 [Bulletin-CVE-2017-0679]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36996978. [NIST-CVE-2017-0679]
• Discovered by: V.E.O (@VYSEa) of Mobile Threat Research Team, Trend Micro [Discovery-CVE-2017-0679] on: Unknown
• Reported on: 2017-07-01 [Bulletin-CVE-2017-0679]
• Fixed on: 2017-05-08 [A-36996978]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0679] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0679]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0679]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0715

(json)

• CVE numbers: CVE-2017-0715 [Bulletin-CVE-2017-0715]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36998372. [NIST-CVE-2017-0715]
• Discovered by: V.E.O (@VYSEa) of Mobile Threat Research Team, Trend Micro [Discovery-CVE-2017-0715] on: Unknown
• Reported on: 2017-08-01 [Bulletin-CVE-2017-0715]
• Fixed on: 2017-05-08 [A-36998372]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0715] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0715]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0715]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0681

(json)

• CVE numbers: CVE-2017-0681 [Bulletin-CVE-2017-0681]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37208566. [NIST-CVE-2017-0681]
• Discovered by: Xuxian Jiang of C0RE Team [Discovery-CVE-2017-0681] on: Unknown
• Reported on: 2017-07-01 [Bulletin-CVE-2017-0681]
• Fixed on: 2017-05-11 [A-37208566]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0681] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0681]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0681]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0716

(json)

• CVE numbers: CVE-2017-0716 [Bulletin-CVE-2017-0716]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37203196. [NIST-CVE-2017-0716]
• Discovered by: Vasily Vasiliev [Discovery-CVE-2017-0716] on: Unknown
• Reported on: 2017-08-01 [Bulletin-CVE-2017-0716]
• Fixed on: 2017-05-12 [A-37203196]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0716] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0716]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0716]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0762

(json)

• CVE numbers: CVE-2017-0762 [Bulletin-CVE-2017-0762]
• Coordinated disclosure?: unknown
• Categories: Media Framework
• Details: A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-62214264. [NIST-CVE-2017-0762]
• Discovered by: on: Unknown
• Reported on: 2017-09-01 [Bulletin-CVE-2017-0762]
• Fixed on: 2017-05-17 [A-62214264]
• Fix released on: Unknown
• Affected versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0762] regex: (5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0762]
• Fixed versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0762]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0745

(json)

• CVE numbers: CVE-2017-0745 [Bulletin-CVE-2017-0745]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in the Android media framework (avc decoder). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37079296. [NIST-CVE-2017-0745]
• Discovered by: Zinuo Han from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2017-0745] on: Unknown
• Reported on: 2017-08-01 [Bulletin-CVE-2017-0745]
• Fixed on: 2017-05-18 [A-37079296]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0745] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0745]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0745]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0714

(json)

• CVE numbers: CVE-2017-0714 [Bulletin-CVE-2017-0714]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in the Android media framework (h263 decoder). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36492637. [NIST-CVE-2017-0714]
• Discovered by: Zinuo Han from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2017-0714] on: Unknown
• Reported on: 2017-08-01 [Bulletin-CVE-2017-0714]
• Fixed on: 2017-05-19 [A-36492637]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0714] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0714]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0714]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0722

(json)

• CVE numbers: CVE-2017-0722 [Bulletin-CVE-2017-0722]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in the Android media framework (h263 decoder). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37660827. [NIST-CVE-2017-0722]
• Discovered by: Zinuo Han from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2017-0722] on: Unknown
• Reported on: 2017-08-01 [Bulletin-CVE-2017-0722]
• Fixed on: 2017-05-19 [A-37660827]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0722] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0722]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0722]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0720

(json)

• CVE numbers: CVE-2017-0720 [Bulletin-CVE-2017-0720]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37430213. [NIST-CVE-2017-0720]
• Discovered by: Zinuo Han from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2017-0720] on: Unknown
• Reported on: 2017-08-01 [Bulletin-CVE-2017-0720]
• Fixed on: 2017-05-23 [A-37430213]
• Fix released on: Unknown
• Affected versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0720] regex: (5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0720]
• Fixed versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0720]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0718

(json)

• CVE numbers: CVE-2017-0718 [Bulletin-CVE-2017-0718]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in the Android media framework (mpeg2 decoder). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37273547. [NIST-CVE-2017-0718]
• Discovered by: Zinuo Han from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2017-0718] on: Unknown
• Reported on: 2017-08-01 [Bulletin-CVE-2017-0718]
• Fixed on: 2017-05-30 [A-37273547]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0718] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0718]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0718]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0760

(json)

• CVE numbers: CVE-2017-0760 [Bulletin-CVE-2017-0760]
• Coordinated disclosure?: unknown
• Categories: Media Framework
• Details: A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37237396. [NIST-CVE-2017-0760]
• Discovered by: Zinuo Han from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2017-0760] on: Unknown
• Reported on: 2017-09-01 [Bulletin-CVE-2017-0760]
• Fixed on: 2017-05-30 [A-37237396]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0760] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0760]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0760]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0757

(json)

• CVE numbers: CVE-2017-0757 [Bulletin-CVE-2017-0757]
• Coordinated disclosure?: unknown
• Categories: Media Framework
• Details: A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36006815. [NIST-CVE-2017-0757]
• Discovered by: Vasily Vasiliev [Discovery-CVE-2017-0757] on: Unknown
• Reported on: 2017-09-01 [Bulletin-CVE-2017-0757]
• Fixed on: 2017-06-01 [A-36006815]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0757] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0757]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0757]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0758

(json)

• CVE numbers: CVE-2017-0758 [Bulletin-CVE-2017-0758]
• Coordinated disclosure?: unknown
• Categories: Media Framework
• Details: A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36492741. [NIST-CVE-2017-0758]
• Discovered by: Zhe Jin (金哲) of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2017-0758] on: Unknown
• Reported on: 2017-09-01 [Bulletin-CVE-2017-0758]
• Fixed on: 2017-06-02 [A-36492741]
• Fix released on: Unknown
• Affected versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0758] regex: (5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0758]
• Fixed versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0758]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0810

(json)

• CVE numbers: CVE-2017-0810 [Bulletin-CVE-2017-0810]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-38207066. [NIST-CVE-2017-0810]
• Discovered by: on: Unknown
• Reported on: 2017-10-01 [Bulletin-CVE-2017-0810]
• Fixed on: 2017-06-09 [A-38207066]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0810] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0810]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0810]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0832

(json)

• CVE numbers: CVE-2017-0832 [Bulletin-CVE-2017-0832]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62887820. [NIST-CVE-2017-0832]
• Discovered by: on: Unknown
• Reported on: 2017-11-01 [Bulletin-CVE-2017-0832]
• Fixed on: 2017-06-09 [A-62887820]
• Fix released on: 2017-11-06 [Bulletin-CVE-2017-0832]
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0832] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0832]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0832]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0835

(json)

• CVE numbers: CVE-2017-0835 [Bulletin-CVE-2017-0835]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63316832. [NIST-CVE-2017-0835]
• Discovered by: on: Unknown
• Reported on: 2017-11-01 [Bulletin-CVE-2017-0835]
• Fixed on: 2017-06-09 [A-63316832]
• Fix released on: 2017-11-06 [Bulletin-CVE-2017-0835]
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0835] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0835]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0835]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0761

(json)

• CVE numbers: CVE-2017-0761 [Bulletin-CVE-2017-0761]
• Coordinated disclosure?: unknown
• Categories: Media Framework
• Details: A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-38448381. [NIST-CVE-2017-0761]
• Discovered by: Zinuo Han from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2017-0761] on: Unknown
• Reported on: 2017-09-01 [Bulletin-CVE-2017-0761]
• Fixed on: 2017-06-16 [A-38448381]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0761] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0761]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0761]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0763

(json)

• CVE numbers: CVE-2017-0763 [Bulletin-CVE-2017-0763]
• Coordinated disclosure?: unknown
• Categories: Media Framework
• Details: A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62534693. [NIST-CVE-2017-0763]
• Discovered by: on: Unknown
• Reported on: 2017-09-01 [Bulletin-CVE-2017-0763]
• Fixed on: 2017-06-22 [A-62534693]
• Fix released on: Unknown
• Affected versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0763] regex: (5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0763]
• Fixed versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0763]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0833

(json)

• CVE numbers: CVE-2017-0833 [Bulletin-CVE-2017-0833]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62896384. [NIST-CVE-2017-0833]
• Discovered by: on: Unknown
• Reported on: 2017-11-01 [Bulletin-CVE-2017-0833]
• Fixed on: 2017-06-22 [A-62896384]
• Fix released on: 2017-11-06 [Bulletin-CVE-2017-0833]
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0833] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0833]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0833]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0809

(json)

• CVE numbers: CVE-2017-0809 [Bulletin-CVE-2017-0809]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62673128. [NIST-CVE-2017-0809]
• Discovered by: on: Unknown
• Reported on: 2017-10-01 [Bulletin-CVE-2017-0809]
• Fixed on: 2017-06-27 [A-62673128]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0809] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0809]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0809]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0834

(json)

• CVE numbers: CVE-2017-0834 [Bulletin-CVE-2017-0834]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63125953. [NIST-CVE-2017-0834]
• Discovered by: on: Unknown
• Reported on: 2017-11-01 [Bulletin-CVE-2017-0834]
• Fixed on: 2017-06-27 [A-63125953]
• Fix released on: 2017-11-06 [Bulletin-CVE-2017-0834]
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0834] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0834]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0834]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-13230

(json)

• CVE numbers: CVE-2017-13230 [Bulletin-CVE-2017-13230]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: In hevc codec, there is an out-of-bounds write due to an incorrect bounds check with the i2_pic_width_in_luma_samples value. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65483665. [NIST-CVE-2017-13230]
• Discovered by: Niky1235 (@jiych_guru) [Discovery-CVE-2017-13230] on: Unknown
• Reported on: 2018-02-01 [Bulletin-CVE-2017-13230]
• Fixed on: 2017-07-06 [A-65483665]
• Fix released on: 2018-02-05 [Bulletin-CVE-2017-13230]
• Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2017-13230] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-13230]
• Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2017-13230]
• Submission: by: Daniel Carter, on: 2019-07-25

CVE-2017-0765

(json)

• CVE numbers: CVE-2017-0765 [Bulletin-CVE-2017-0765]
• Coordinated disclosure?: unknown
• Categories: Media Framework
• Details: A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62872863. [NIST-CVE-2017-0765]
• Discovered by: Xuxian Jiang of C0RE Team [Discovery-CVE-2017-0765] on: Unknown
• Reported on: 2017-09-01 [Bulletin-CVE-2017-0765]
• Fixed on: 2017-07-10 [A-62872863]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0765] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0765]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0765]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-13151

(json)

• CVE numbers: CVE-2017-13151 [Bulletin-CVE-2017-13151]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-63874456. [NIST-CVE-2017-13151]
• Discovered by: on: Unknown
• Reported on: 2017-12-01 [Bulletin-CVE-2017-13151]
• Fixed on: 2017-07-12 [A-63874456]
• Fix released on: 2017-12-05 [Bulletin-CVE-2017-13151]
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-13151] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-13151]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-13151]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0764

(json)

• CVE numbers: CVE-2017-0764 [Bulletin-CVE-2017-0764]
• Coordinated disclosure?: unknown
• Categories: Media Framework
• Details: A remote code execution vulnerability in the Android media framework (libvorbis). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62872015. [NIST-CVE-2017-0764]
• Discovered by: Zinuo Han from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2017-0764] on: Unknown
• Reported on: 2017-09-01 [Bulletin-CVE-2017-0764]
• Fixed on: 2017-07-13 [A-62872015]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0764] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0764]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0764]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0781

(json)

• CVE numbers: CVE-2017-0781 [Bulletin-CVE-2017-0781]
• Coordinated disclosure?: unknown
• Categories: System
• Details: A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63146105. [NIST-CVE-2017-0781]
• Discovered by: Gregory Vishnepolsky of Armis, Inc. [Discovery-CVE-2017-0781] on: Unknown
• Reported on: 2017-09-01 [Bulletin-CVE-2017-0781]
• Fixed on: 2017-07-17 [2]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0781] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0781]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0781]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0782

(json)

• CVE numbers: CVE-2017-0782 [Bulletin-CVE-2017-0782]
• Coordinated disclosure?: unknown
• Categories: System
• Details: A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63146237. [NIST-CVE-2017-0782]
• Discovered by: Gregory Vishnepolsky of Armis, Inc. [Discovery-CVE-2017-0782] on: Unknown
• Reported on: 2017-09-01 [Bulletin-CVE-2017-0782]
• Fixed on: 2017-07-17 [3]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0782] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0782]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0782]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-13249

(json)

• CVE numbers: CVE-2017-13249 [Bulletin-CVE-2017-13249]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: In impeg2d_api_set_display_frame of impeg2d_api_main.c, there is an out of bound write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70399408. [NIST-CVE-2017-13249]
• Discovered by: Vasily Vasiliev [Discovery-CVE-2017-13249] on: Unknown
• Reported on: 2018-03-01 [Bulletin-CVE-2017-13249]
• Fixed on: 2017-08-09 [A-70399408]
• Fix released on: 2018-03-05 [Bulletin-CVE-2017-13249]
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13249] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-13249]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13249]
• Submission: by: Daniel Carter, on: 2019-07-25

CVE-2017-0841

(json)

• CVE numbers: CVE-2017-0841 [Bulletin-CVE-2017-0841]
• Coordinated disclosure?: unknown
• Categories: System
• Details: A remote code execution vulnerability in the Android system (libutils). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37723026. [NIST-CVE-2017-0841]
• Discovered by: Jose Martinez [Discovery-CVE-2017-0841] on: Unknown
• Reported on: 2017-11-01 [Bulletin-CVE-2017-0841]
• Fixed on: 2017-08-14 [A-37723026]
• Fix released on: 2017-11-06 [Bulletin-CVE-2017-0841]
• Affected versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0841] regex: (5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0841]
• Fixed versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0841]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0836

(json)

• CVE numbers: CVE-2017-0836 [Bulletin-CVE-2017-0836]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64893226. [NIST-CVE-2017-0836]
• Discovered by: Mingjian Zhou (@Mingjian_Zhou) of C0RE Team [Discovery-CVE-2017-0836] on: Unknown
• Reported on: 2017-11-01 [Bulletin-CVE-2017-0836]
• Fixed on: 2017-08-31 [A-64893226]
• Fix released on: 2017-11-06 [Bulletin-CVE-2017-0836]
• Affected versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0836] regex: (5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0836]
• Fixed versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 [Bulletin-CVE-2017-0836]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-13178

(json)

• CVE numbers: CVE-2017-13178 [Bulletin-CVE-2017-13178]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: In the initDecoder function of SoftAVCDec, there is a possible out-of-bounds write to mCodecCtx due to a use after free when buffer allocation fails. This could lead to remote code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-66969281. [NIST-CVE-2017-13178]
• Discovered by: Chi Zhang and Mingjian Zhou (@Mingjian_Zhou) of C0RE Team [Discovery-CVE-2017-13178] on: Unknown
• Reported on: 2018-01-01 [Bulletin-CVE-2017-13178]
• Fixed on: 2017-10-04 [A-66969281]
• Fix released on: 2018-01-05 [Bulletin-CVE-2017-13178]
• Affected versions: 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13178] regex: (6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-13178]
• Fixed versions: 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13178]
• Submission: by: Daniel Carter, on: 2019-07-25

CVE-2017-13179

(json)

• CVE numbers: CVE-2017-13179 [Bulletin-CVE-2017-13179]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: In the ihevcd_allocate_static_bufs and ihevcd_create functions of SoftHEVC, there is a possible out-of-bounds write due to a use after free. Both ps_codec_obj and ps_create_op->s_ivd_create_op_t.pv_handle point to the same memory and ps_codec_obj could be freed without clearing ps_create_op->s_ivd_create_op_t.pv_handle. This could lead to remote code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-66969193. [NIST-CVE-2017-13179]
• Discovered by: Chi Zhang and Mingjian Zhou (@Mingjian_Zhou) of C0RE Team [Discovery-CVE-2017-13179] on: Unknown
• Reported on: 2018-01-01 [Bulletin-CVE-2017-13179]
• Fixed on: 2017-10-04 [A-66969193]
• Fix released on: 2018-01-05 [Bulletin-CVE-2017-13179]
• Affected versions: 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13179] regex: (6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-13179]
• Fixed versions: 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13179]
• Submission: by: Daniel Carter, on: 2019-07-25

CVE-2017-13177

(json)

• CVE numbers: CVE-2017-13177 [Bulletin-CVE-2017-13177]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: In several functions of libhevc, NEON registers are not preserved. This could lead to remote code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68320413. [NIST-CVE-2017-13177]
• Discovered by: on: Unknown
• Reported on: 2018-01-01 [Bulletin-CVE-2017-13177]
• Fixed on: 2017-10-09 [A-68320413]
• Fix released on: 2018-01-05 [Bulletin-CVE-2017-13177]
• Affected versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13177] regex: (5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-13177]
• Fixed versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13177]
• Submission: by: Daniel Carter, on: 2019-07-24

CVE-2017-13208

(json)

• CVE numbers: CVE-2017-13208 [Bulletin-CVE-2017-13208]
• Coordinated disclosure?: unknown
• Categories: System
• Details: In receive_packet of libnetutils/packet.c, there is a possible out-of-bounds write due to a missing bounds check on the DHCP response. This could lead to remote code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67474440. [NIST-CVE-2017-13208]
• Discovered by: tintinweb [Discovery-CVE-2017-13208] on: Unknown
• Reported on: 2018-01-01 [Bulletin-CVE-2017-13208]
• Fixed on: 2017-10-13 [A-67474440]
• Fix released on: 2018-01-05 [Bulletin-CVE-2017-13208]
• Affected versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13208] regex: (5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-13208]
• Fixed versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13208]
• Submission: by: Daniel Carter, on: 2019-07-25

CVE-2017-13228

(json)

• CVE numbers: CVE-2017-13228 [Bulletin-CVE-2017-13228]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: In function ih264d_ref_idx_reordering of libavc, there is an out-of-bounds write due to modCount being defined as an unsigned character. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69478425. [NIST-CVE-2017-13228]
• Discovered by: on: Unknown
• Reported on: 2018-02-01 [Bulletin-CVE-2017-13228]
• Fixed on: 2017-11-28 [A-69478425]
• Fix released on: 2018-02-05 [Bulletin-CVE-2017-13228]
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13228] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-13228]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13228]
• Submission: by: Daniel Carter, on: 2019-07-25

CVE-2017-0876

(json)

• CVE numbers: CVE-2017-0876 [Bulletin-CVE-2017-0876]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0. Android ID A-64964675. [NIST-CVE-2017-0876]
• Discovered by: on: Unknown
• Reported on: 2017-12-01 [Bulletin-CVE-2017-0876]
• Fixed on: Unknown
• Fix released on: 2017-12-05 [Bulletin-CVE-2017-0876]
• Affected versions: 6.0 [Bulletin-CVE-2017-0876] regex: (6.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0876]
• Fixed versions: 6.0 [Bulletin-CVE-2017-0876]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0877

(json)

• CVE numbers: CVE-2017-0877 [Bulletin-CVE-2017-0877]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0. Android ID A-66372937. [NIST-CVE-2017-0877]
• Discovered by: on: Unknown
• Reported on: 2017-12-01 [Bulletin-CVE-2017-0877]
• Fixed on: Unknown
• Fix released on: 2017-12-05 [Bulletin-CVE-2017-0877]
• Affected versions: 6.0 [Bulletin-CVE-2017-0877] regex: (6.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0877]
• Fixed versions: 6.0 [Bulletin-CVE-2017-0877]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-13248

(json)

• CVE numbers: CVE-2017-13248 [Bulletin-CVE-2017-13248]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: In impeg2_idct_recon_sse42() of impeg2_idct_recon_sse42_intr.c, there is an out of bound write due to a missing bounds check. This could lead to an remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70349612. [NIST-CVE-2017-13248]
• Discovered by: Vasily Vasiliev [Discovery-CVE-2017-13248] on: Unknown
• Reported on: 2018-03-01 [Bulletin-CVE-2017-13248]
• Fixed on: 2017-12-18 [A-70349612]
• Fix released on: 2018-03-05 [Bulletin-CVE-2017-13248]
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13248] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-13248]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13248]
• Submission: by: Daniel Carter, on: 2019-07-25

CVE-2017-13250

(json)

• CVE numbers: CVE-2017-13250 [Bulletin-CVE-2017-13250]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: In ih264d_fmt_conv_420sp_to_420p of ih264d_utils.c, there is an out of bound write due to a missing out of bounds check because of a multiplication error. This could lead to an remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71375536. [NIST-CVE-2017-13250]
• Discovered by: on: Unknown
• Reported on: 2018-03-01 [Bulletin-CVE-2017-13250]
• Fixed on: 2017-12-27 [A-71375536]
• Fix released on: 2018-03-05 [Bulletin-CVE-2017-13250]
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13250] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-13250]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13250]
• Submission: by: Daniel Carter, on: 2019-07-25

CVE-2017-13251

(json)

• CVE numbers: CVE-2017-13251 [Bulletin-CVE-2017-13251]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: In impeg2d_dec_pic_data_thread of impeg2d_dec_hdr.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when running multi threaded with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69269702. [NIST-CVE-2017-13251]
• Discovered by: Zinuo Han from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2017-13251] on: Unknown
• Reported on: 2018-03-01 [Bulletin-CVE-2017-13251]
• Fixed on: 2017-12-28 [A-69269702]
• Fix released on: 2018-03-05 [Bulletin-CVE-2017-13251]
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13251] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-13251]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13251]
• Submission: by: Daniel Carter, on: 2019-07-25

CVE-2017-13255

(json)

• CVE numbers: CVE-2017-13255 [Bulletin-CVE-2017-13255]
• Coordinated disclosure?: unknown
• Categories: System
• Details: In process_service_attr_req of sdp_server.c, there is an out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68776054. [NIST-CVE-2017-13255]
• Discovered by: Jianjun Dai (@Jioun_dai) and Guang Gong of Alpha Team, Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2017-13255] on: Unknown
• Reported on: 2018-03-01 [Bulletin-CVE-2017-13255]
• Fixed on: 2018-01-09 [A-68776054]
• Fix released on: 2018-03-05 [Bulletin-CVE-2017-13255]
• Affected versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13255] regex: (5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-13255]
• Fixed versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13255]
• Submission: by: Daniel Carter, on: 2019-07-25

CVE-2017-13256

(json)

• CVE numbers: CVE-2017-13256 [Bulletin-CVE-2017-13256]
• Coordinated disclosure?: unknown
• Categories: System
• Details: In process_service_search_attr_req of sdp_server.cc, there is an out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68817966. [NIST-CVE-2017-13256]
• Discovered by: Jianjun Dai (@Jioun_dai) and Guang Gong of Alpha Team, Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2017-13256] on: Unknown
• Reported on: 2018-03-01 [Bulletin-CVE-2017-13256]
• Fixed on: 2018-01-09 [A-68817966]
• Fix released on: 2018-03-05 [Bulletin-CVE-2017-13256]
• Affected versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13256] regex: (5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-13256]
• Fixed versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13256]
• Submission: by: Daniel Carter, on: 2019-07-25

CVE-2017-13266

(json)

• CVE numbers: CVE-2017-13266 [Bulletin-CVE-2017-13266]
• Coordinated disclosure?: unknown
• Categories: System
• Details: In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible stack corruption due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69478941. [NIST-CVE-2017-13266]
• Discovered by: Jianjun Dai (@Jioun_dai) and Guang Gong of Alpha Team, Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2017-13266] on: Unknown
• Reported on: 2018-03-01 [Bulletin-CVE-2017-13266]
• Fixed on: 2018-01-10 [A-69478941]
• Fix released on: 2018-03-05 [Bulletin-CVE-2017-13266]
• Affected versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13266] regex: (5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-13266]
• Fixed versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13266]
• Submission: by: Daniel Carter, on: 2019-07-25

CVE-2017-13267

(json)

• CVE numbers: CVE-2017-13267 [Bulletin-CVE-2017-13267]
• Coordinated disclosure?: unknown
• Categories: System
• Details: In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible stack corruption due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69479009. [NIST-CVE-2017-13267]
• Discovered by: Jianjun Dai (@Jioun_dai) and Guang Gong of Alpha Team, Qihoo 360 Technology Co. Ltd [Discovery-CVE-2017-13267] on: Unknown
• Reported on: 2018-04-01 [Bulletin-CVE-2017-13267]
• Fixed on: 2018-01-10 [A-69479009]
• Fix released on: 2018-04-05 [Bulletin-CVE-2017-13267]
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13267] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-13267]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13267]
• Submission: by: Daniel Carter, on: 2019-07-25

CVE-2017-13276

(json)

• CVE numbers: CVE-2017-13276 [Bulletin-CVE-2017-13276]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: In CProgramConfig_ReadHeightExt of tpdec_asc.cpp, there is a possible stack buffer overflow due to a missing bounds check. This could lead to a remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70637599. [NIST-CVE-2017-13276]
• Discovered by: Elphet and Gong Guang of Alpha Team, Qihoo 360 Technology Co. Ltd [Discovery-CVE-2017-13276] on: Unknown
• Reported on: 2018-04-01 [Bulletin-CVE-2017-13276]
• Fixed on: 2018-01-12 [A-70637599]
• Fix released on: 2018-04-05 [Bulletin-CVE-2017-13276]
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13276] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-13276]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13276]
• Submission: by: Daniel Carter, on: 2019-07-25

CVE-2017-13277

(json)

• CVE numbers: CVE-2017-13277 [Bulletin-CVE-2017-13277]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: In ihevcd_fmt_conv of ihevcd_fmt_conv.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-72165027. [NIST-CVE-2017-13277]
• Discovered by: Weichao Sun of Alibaba Inc (@sunblate) [Discovery-CVE-2017-13277] on: Unknown
• Reported on: 2018-04-01 [Bulletin-CVE-2017-13277]
• Fixed on: 2018-01-23 [A-72165027]
• Fix released on: 2018-04-05 [Bulletin-CVE-2017-13277]
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13277] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-13277]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13277]
• Submission: by: Daniel Carter, on: 2019-07-25

CVE-2017-13284

(json)

• CVE numbers: CVE-2017-13284 [Bulletin-CVE-2017-13284]
• Coordinated disclosure?: unknown
• Categories: System
• Details: In config_set_string of config.cc, it is possible to pair a second BT keyboard without user approval due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70808273. [NIST-CVE-2017-13284]
• Discovered by: Jean-Baptiste Cayrou (@jbcayrou) [Discovery-CVE-2017-13284] on: Unknown
• Reported on: 2018-04-01 [Bulletin-CVE-2017-13284]
• Fixed on: 2018-02-09 [A-70808273]
• Fix released on: 2018-04-05 [Bulletin-CVE-2017-13284]
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13284] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-13284]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2017-13284]
• Submission: by: Daniel Carter, on: 2019-07-25

CVE-2018-9341

(json)

• CVE numbers: CVE-2018-9341 [Bulletin-CVE-2018-9341]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details:
• Discovered by: Stephan Zeisberg of Security Research Labs [Discovery-CVE-2018-9341] on: Unknown
• Reported on: 2018-06-01 [Bulletin-CVE-2018-9341]
• Fixed on: 2018-03-15 [A-74016277]
• Fix released on: 2018-06-05 [Bulletin-CVE-2018-9341]
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2018-9341] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2018-9341]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2018-9341]
• Submission: by: Daniel Carter, on: 2019-07-25

CVE-2018-9356

(json)

• CVE numbers: CVE-2018-9356 [Bulletin-CVE-2018-9356]
• Coordinated disclosure?: unknown
• Categories: System
• Details: In bnep_data_ind of bnep_main.c, there is a possible remote code execution due to a double free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74950468. [NIST-CVE-2018-9356]
• Discovered by: Jianjun Dai (@Jioun_dai) and Guang Gong (@oldfresher) of Alpha Team, Qihoo 360 Technology Co. Ltd [Discovery-CVE-2018-9356] on: Unknown
• Reported on: 2018-06-01 [Bulletin-CVE-2018-9356]
• Fixed on: 2018-03-21 [A-74950468]
• Fix released on: 2018-06-05 [Bulletin-CVE-2018-9356]
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2018-9356] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2018-9356]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2018-9356]
• Submission: by: Daniel Carter, on: 2019-07-25

CVE-2018-9365

(json)

• CVE numbers: CVE-2018-9365 [Bulletin-CVE-2018-9365]
• Coordinated disclosure?: unknown
• Categories: System
• Details:
• Discovered by: Jianjun Dai (@Jioun_dai) and Guang Gong (@oldfresher) of Alpha Team, Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2018-9365] on: Unknown
• Reported on: 2018-07-01 [Bulletin-CVE-2018-9365]
• Fixed on: 2018-03-30 [A-74121126]
• Fix released on: 2018-07-05 [Bulletin-CVE-2018-9365]
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2018-9365] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2018-9365]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2018-9365]
• Submission: by: Daniel Carter, on: 2019-07-25

CVE-2018-9355

(json)

• CVE numbers: CVE-2018-9355 [Bulletin-CVE-2018-9355]
• Coordinated disclosure?: unknown
• Categories: System
• Details: In bta_dm_sdp_result of bta_dm_act.cc, there is a possible out of bounds stack write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74016921. [NIST-CVE-2018-9355]
• Discovered by: Scott Bauer (@ScottyBauer1) [Discovery-CVE-2018-9355] on: Unknown
• Reported on: 2018-06-01 [Bulletin-CVE-2018-9355]
• Fixed on: 2018-04-02 [A-74016921]
• Fix released on: 2018-06-05 [Bulletin-CVE-2018-9355]
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2018-9355] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2018-9355]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2018-9355]
• Submission: by: Daniel Carter, on: 2019-07-25

CVE-2018-9357

(json)

• CVE numbers: CVE-2018-9357 [Bulletin-CVE-2018-9357]
• Coordinated disclosure?: unknown
• Categories: System
• Details: In BNEP_Write of bnep_api.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74947856. [NIST-CVE-2018-9357]
• Discovered by: Jianjun Dai (@Jioun_dai) and Guang Gong (@oldfresher) of Alpha Team, Qihoo 360 Technology Co. Ltd [Discovery-CVE-2018-9357] on: Unknown
• Reported on: 2018-06-01 [Bulletin-CVE-2018-9357]
• Fixed on: 2018-04-11 [A-74947856]
• Fix released on: 2018-06-05 [Bulletin-CVE-2018-9357]
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2018-9357] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2018-9357]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2018-9357]
• Submission: by: Daniel Carter, on: 2019-07-25

CVE-2018-9446

(json)

• CVE numbers: CVE-2018-9446 [Bulletin-CVE-2018-9446]
• Coordinated disclosure?: unknown
• Categories: System
• Details: In smp_br_state_machine_event of smp_br_main.cc, there is a possible out of bounds write due to memory corruption. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-80145946. [NIST-CVE-2018-9446]
• Discovered by: Zinuo Han of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2018-9446] on: Unknown
• Reported on: 2018-08-01 [Bulletin-CVE-2018-9446]
• Fixed on: 2018-05-29 [A-80145946]
• Fix released on: 2018-08-05 [Bulletin-CVE-2018-9446]
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2018-9446] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2018-9446]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2018-9446]
• Submission: by: Daniel Carter, on: 2019-07-25

CVE-2018-5146

(json)

• CVE numbers: CVE-2018-5146 [Bulletin-CVE-2018-5146]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox < 59.0.1, Firefox ESR < 52.7.2, and Thunderbird < 52.7. [NIST-CVE-2018-5146]
• Discovered by: Jose Martinez [Discovery-CVE-2018-5146] on: Unknown
• Reported on: 2018-06-01 [Bulletin-CVE-2018-5146]
• Fixed on: Unknown
• Fix released on: 2018-06-05 [Bulletin-CVE-2018-5146]
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2018-5146] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2018-5146]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2018-5146]
• Submission: by: Daniel Carter, on: 2019-07-25

CVE-2018-9450

(json)

• CVE numbers: CVE-2018-9450 [Bulletin-CVE-2018-9450]
• Coordinated disclosure?: unknown
• Categories: System
• Details: In avrc_proc_vendor_command of avrc_api.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-79541338. [NIST-CVE-2018-9450]
• Discovered by: Zinuo Han of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2018-9450] on: Unknown
• Reported on: 2018-08-01 [Bulletin-CVE-2018-9450]
• Fixed on: 2018-06-05 [A-79541338]
• Fix released on: 2018-08-05 [Bulletin-CVE-2018-9450]
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2018-9450] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2018-9450]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2018-9450]
• Submission: by: Daniel Carter, on: 2019-07-25

CVE-2018-9433

(json)

• CVE numbers: CVE-2018-9433 [Bulletin-CVE-2018-9433]
• Coordinated disclosure?: unknown
• Categories: Framework
• Details:
• Discovered by: Guang Gong of Alpha Team, Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2018-9433] on: Unknown
• Reported on: 2018-07-01 [Bulletin-CVE-2018-9433]
• Fixed on: Unknown
• Fix released on: 2018-07-05 [Bulletin-CVE-2018-9433]
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2018-9433] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2018-9433]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2018-9433]
• Submission: by: Daniel Carter, on: 2019-07-25