Vulnerabilities (CVE)

Filtered by vendor Google Subscribe
Total 12449 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-10338 1 Google 1 Android 2024-11-21 9.3 HIGH 7.8 HIGH
In all Android releases from CAF using the Linux kernel, there was an issue related to RPMB processing.
CVE-2016-10337 1 Google 1 Android 2024-11-21 4.3 MEDIUM 5.5 MEDIUM
In all Android releases from CAF using the Linux kernel, some validation of secure applications was not being performed.
CVE-2016-10336 1 Google 1 Android 2024-11-21 4.3 MEDIUM 5.5 MEDIUM
In all Android releases from CAF using the Linux kernel, some regions of memory were not protected during boot.
CVE-2016-10335 1 Google 1 Android 2024-11-21 4.3 MEDIUM 5.5 MEDIUM
In all Android releases from CAF using the Linux kernel, libtomcrypt was updated.
CVE-2016-10334 1 Google 1 Android 2024-11-21 4.3 MEDIUM 5.5 MEDIUM
In all Android releases from CAF using the Linux kernel, a dynamically-protected DDR region could potentially get overwritten.
CVE-2016-10333 1 Google 1 Android 2024-11-21 4.3 MEDIUM 5.5 MEDIUM
In all Android releases from CAF using the Linux kernel, a sensitive system call was allowed to be called by HLOS.
CVE-2016-10332 1 Google 1 Android 2024-11-21 4.3 MEDIUM 5.5 MEDIUM
In all Android releases from CAF using the Linux kernel, stack protection was not enabled for secure applications.
CVE-2016-10299 1 Google 1 Android 2024-11-21 10.0 HIGH 9.8 CRITICAL
An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-32577244.
CVE-2016-10298 1 Google 1 Android 2024-11-21 10.0 HIGH 9.8 CRITICAL
An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393252.
CVE-2016-10297 1 Google 1 Android 2024-11-21 9.3 HIGH 7.0 HIGH
In TrustZone in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerability could potentially exist.
CVE-2016-10282 1 Google 1 Android 2024-11-21 7.6 HIGH 7.0 HIGH
An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-33939045. References: M-ALPS03149189.
CVE-2016-10281 1 Google 1 Android 2024-11-21 7.6 HIGH 7.0 HIGH
An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-28175647. References: M-ALPS02696475.
CVE-2016-10280 1 Google 1 Android 2024-11-21 7.6 HIGH 7.0 HIGH
An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-28175767. References: M-ALPS02696445.
CVE-2016-10276 1 Google 1 Android 2024-11-21 9.3 HIGH 7.8 HIGH
An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-32952839. References: QC-CR#1094105.
CVE-2016-10275 1 Google 1 Android 2024-11-21 9.3 HIGH 7.8 HIGH
An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-34514954. References: QC-CR#1009111.
CVE-2016-10274 1 Google 1 Android 2024-11-21 9.3 HIGH 7.8 HIGH
An elevation of privilege vulnerability in the MediaTek touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-30202412. References: M-ALPS02897901.
CVE-2016-10242 1 Google 1 Android 2024-11-21 7.6 HIGH 7.0 HIGH
A time-of-check time-of-use race condition could potentially exist in the secure file system in all Android releases from CAF using the Linux kernel.
CVE-2016-10239 1 Google 1 Android 2024-11-21 9.3 HIGH 7.8 HIGH
In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel due to improper input validation an integer overflow vulnerability leading to a buffer overflow could potentially occur and a buffer over-read vulnerability could potentially occur.
CVE-2016-10238 1 Google 1 Android 2024-11-21 9.3 HIGH 7.8 HIGH
In QSEE in all Android releases from CAF using the Linux kernel access control may potentially be bypassed due to a page alignment issue.
CVE-2016-10237 1 Google 1 Android 2024-11-21 9.3 HIGH 7.8 HIGH
If shared content protection memory were passed as the secure camera memory buffer by the HLOS to a trusted application (TA) in all Android releases from CAF using the Linux kernel, the TA would not detect an issue and it would be treated as secure memory.