linux-goldfish (Ubuntu:Pro:16.04:LTS) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Ubuntu:Pro:16.04:LTS package linux-goldfish, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (151)

• CVE-2016-6604 — CVSS 9.8 (critical): NULL pointer dereference in Samsung Exynos fimg2d driver for Android L(5.0/5.1) and M(6.0) allows attackers to have unspecified impact via…
• CVE-2016-2473 — CVSS 9.8 (critical): The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted…
• CVE-2017-0561 — CVSS 9.8 (critical): A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary code within the…
• CVE-2015-0573 — CVSS 9.8 (critical): drivers/media/platform/msm/broadcast/tsc.c in the TSC driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android…
• CVE-2014-9902 — CVSS 9.8 (critical): Buffer overflow in CORE/SYS/legacy/src/utils/src/dot11f.c in the Qualcomm Wi-Fi driver in Android before 2016-08-05 on Nexus 7 (2013)…
• CVE-2014-9410 — CVSS 9.8 (critical): The vfe31_proc_general function in drivers/media/video/msm/vfe/msm_vfe31.c in the MSM-VFE31 driver for the Linux kernel 3.x, as used in…
• CVE-2014-9792 — CVSS 7.8 (high): arch/arm/mach-msm/ipc_router.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices uses an incorrect integer data…
• CVE-2014-9795 — CVSS 7.8 (high): app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices does not properly check for an integer…
• CVE-2014-9884 — CVSS 7.8 (high): drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not validate certain…
• CVE-2013-7457 — CVSS 7.8 (high): Unspecified vulnerability in the Qualcomm components in Android before 2016-07-05 allows attackers to gain privileges via a crafted…
• CVE-2014-9779 — CVSS 7.8 (high): arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to…
• CVE-2014-9780 — CVSS 7.8 (high): drivers/video/msm/mdss/mdp3_ctrl.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5, 5X, and 6P devices does not validate…
• CVE-2014-9788 — CVSS 7.8 (high): Multiple buffer overflows in the voice drivers in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allow attackers…
• CVE-2014-9789 — CVSS 7.8 (high): The (1) alloc and (2) free APIs in arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c in the Qualcomm components in Android before 2016-07-05 on…
• CVE-2016-2493 — CVSS 7.8 (high): The Broadcom Wi-Fi driver in Android before 2016-06-01 on Nexus 5, Nexus 6, Nexus 6P, Nexus 7 (2013), Nexus Player, and Pixel C devices…
• CVE-2016-2501 — CVSS 7.8 (high): The Qualcomm camera driver in Android before 2016-07-05 on Nexus 5X, 6, 6P, and 7 (2013) devices allows attackers to gain privileges via a…
• CVE-2016-2502 — CVSS 7.8 (high): drivers/usb/gadget/f_serial.c in the Qualcomm USB driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain…
• CVE-2016-2503 — CVSS 7.8 (high): The Qualcomm GPU driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted…
• CVE-2016-2504 — CVSS 7.8 (high): The Qualcomm GPU driver in Android before 2016-08-05 on Nexus 5, 5X, 6, 6P, and 7 (2013) devices allows attackers to gain privileges via a…
• CVE-2016-3767 — CVSS 7.8 (high): The MediaTek Wi-Fi driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted…
• CVE-2016-3768 — CVSS 7.8 (high): The Qualcomm performance component in Android before 2016-07-05 on Nexus 5, 6, 5X, 6P, and 7 (2013) devices allows attackers to gain…
• CVE-2016-3769 — CVSS 7.8 (high): The NVIDIA video driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka…
• CVE-2016-3770 — CVSS 7.8 (high): The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka…
• CVE-2016-3771 — CVSS 7.8 (high): The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka…
• CVE-2016-3772 — CVSS 7.8 (high): The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka…
• CVE-2016-3773 — CVSS 7.8 (high): The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka…
• CVE-2016-3774 — CVSS 7.8 (high): The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka…
• CVE-2016-3775 — CVSS 7.8 (high): The kernel filesystem implementation in Android before 2016-07-05 on Nexus 5X, Nexus 6, Nexus 6P, Nexus Player, and Pixel C devices allows…
• CVE-2016-3793 — CVSS 7.8 (high): The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka…
• CVE-2016-3795 — CVSS 7.8 (high): The MediaTek power driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted…
• CVE-2016-3796 — CVSS 7.8 (high): The MediaTek power driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted…
• CVE-2016-3797 — CVSS 7.8 (high): The Qualcomm Wi-Fi driver in Android before 2016-07-05 on Nexus 5X devices allows attackers to gain privileges via a crafted application…
• CVE-2016-3798 — CVSS 7.8 (high): The MediaTek hardware sensor driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted…
• CVE-2016-3799 — CVSS 7.8 (high): The MediaTek video driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted…
• CVE-2016-3800 — CVSS 7.8 (high): The MediaTek video driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted…
• CVE-2016-3801 — CVSS 7.8 (high): The MediaTek GPS driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application…
• CVE-2016-3802 — CVSS 7.8 (high): The kernel filesystem implementation in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted…
• CVE-2016-3803 — CVSS 7.8 (high): The kernel filesystem implementation in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a…
• CVE-2016-3804 — CVSS 7.8 (high): The MediaTek power management driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted…
• CVE-2016-3805 — CVSS 7.8 (high): The MediaTek power management driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted…
• CVE-2016-3806 — CVSS 7.8 (high): The MediaTek display driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted…
• CVE-2016-3807 — CVSS 7.8 (high): The serial peripheral interface driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a…
• CVE-2016-3808 — CVSS 7.8 (high): The serial peripheral interface driver in Android before 2016-07-05 on Pixel C devices allows attackers to gain privileges via a crafted…
• CVE-2016-3811 — CVSS 7.8 (high): The kernel video driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka…
• CVE-2016-3845 — CVSS 7.8 (high): The video driver in the kernel in Android before 2016-08-05 on Nexus 5 devices allows attackers to gain privileges via a crafted…
• CVE-2016-3854 — CVSS 7.8 (high): drivers/media/video/msm/msm_mctl_buf.c in the Qualcomm components in Android before 2016-08-05 does not validate the image mode, which…
• CVE-2016-3855 — CVSS 7.8 (high): drivers/thermal/supply_lm_core.c in the Qualcomm components in Android before 2016-08-05 does not validate a certain count parameter, which…
• CVE-2016-6492 — CVSS 7.8 (high): The MT6573FDVT_SetRegHW function in camera_fdvt.c in the MediaTek driver for Linux allows local users to gain privileges via a crafted…
• CVE-2017-0563 — CVSS 7.8 (high): An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code…
• CVE-2017-0564 — CVSS 7.8 (high): An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code…
• CVE-2017-8061 — CVSS 7.8 (high): drivers/media/usb/dvb-usb/dvb-usb-firmware.c in the Linux kernel 4.9.x and 4.10.x before 4.10.7 interacts incorrectly with the…
• CVE-2017-8066 — CVSS 7.8 (high): drivers/net/can/usb/gs_usb.c in the Linux kernel 4.9.x and 4.10.x before 4.10.2 interacts incorrectly with the CONFIG_VMAP_STACK option…
• CVE-2017-8068 — CVSS 7.8 (high): drivers/net/usb/pegasus.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows…
• CVE-2017-8069 — CVSS 7.8 (high): drivers/net/usb/rtl8150.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows…
• CVE-2017-8070 — CVSS 7.8 (high): drivers/net/usb/catc.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local…
• CVE-2014-9801 — CVSS 7.8 (high): Multiple integer overflows in lib/libfdt/fdt_rw.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allow…
• CVE-2014-9863 — CVSS 7.8 (high): Integer underflow in the diag driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices allows…
• CVE-2014-9864 — CVSS 7.8 (high): drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not validate ioctl…
• CVE-2014-9865 — CVSS 7.8 (high): drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not properly restrict…
• CVE-2014-9866 — CVSS 7.8 (high): drivers/media/platform/msm/camera_v2/sensor/csid/msm_csid.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013)…
• CVE-2014-9867 — CVSS 7.8 (high): drivers/media/platform/msm/camera_v2/isp/msm_isp_axi_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013)…
• CVE-2014-9868 — CVSS 7.8 (high): drivers/media/platform/msm/camera_v2/sensor/csiphy/msm_csiphy.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7…
• CVE-2014-9869 — CVSS 7.8 (high): drivers/media/platform/msm/camera_v2/isp/msm_isp_stats_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7…
• CVE-2014-9871 — CVSS 7.8 (high): Multiple buffer overflows in drivers/media/platform/msm/camera_v2/isp/msm_isp_util.c in the Qualcomm components in Android before…
• CVE-2014-9872 — CVSS 7.8 (high): The diag driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not ensure unique identifiers in a DCI…
• CVE-2014-9873 — CVSS 7.8 (high): Integer underflow in drivers/char/diag/diag_dci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices…
• CVE-2014-9874 — CVSS 7.8 (high): Buffer overflow in the Qualcomm components in Android before 2016-08-05 on Nexus 5, 5X, 6P, and 7 (2013) devices allows attackers to gain…
• CVE-2014-9875 — CVSS 7.8 (high): drivers/char/diag/diag_dci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain…
• CVE-2014-9876 — CVSS 7.8 (high): drivers/char/diag/diagfwd.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5, 5X, 6, 6P, and 7 (2013) devices mishandles…
• CVE-2014-9877 — CVSS 7.8 (high): drivers/media/platform/msm/camera_v2/sensor/actuator/msm_actuator.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and…
• CVE-2014-9878 — CVSS 7.8 (high): drivers/mmc/card/mmc_block_test.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not reject kernel-space…
• CVE-2014-9879 — CVSS 7.8 (high): The mdss mdp3 driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate user-space data, which…
• CVE-2014-9880 — CVSS 7.8 (high): drivers/video/msm/vidc/common/enc/venc.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices does not…
• CVE-2014-9881 — CVSS 7.8 (high): drivers/media/radio/radio-iris.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices uses an incorrect…
• CVE-2014-9882 — CVSS 7.8 (high): Buffer overflow in drivers/media/radio/radio-iris.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices…
• CVE-2014-9883 — CVSS 7.8 (high): Integer overflow in drivers/char/diag/diag_dci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices…
• CVE-2014-9885 — CVSS 7.8 (high): Format string vulnerability in drivers/thermal/qpnp-adc-tm.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices…
• CVE-2014-9886 — CVSS 7.8 (high): arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not…
• CVE-2014-9887 — CVSS 7.8 (high): drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not validate certain…
• CVE-2014-9889 — CVSS 7.8 (high): drivers/media/platform/msm/camera_v2/pproc/cpp/msm_cpp.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does…
• CVE-2014-9890 — CVSS 7.8 (high): Off-by-one error in drivers/media/platform/msm/camera_v2/sensor/cci/msm_cci.c in the Qualcomm components in Android before 2016-08-05 on…
• CVE-2014-9891 — CVSS 7.8 (high): drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate certain buffer…
• CVE-2015-0568 — CVSS 7.8 (high): Use-after-free vulnerability in the msm_set_crop function in drivers/media/video/msm/msm_camera.c in the MSM-Camera driver for the Linux…
• CVE-2015-8889 — CVSS 7.8 (high): The aboot implementation in the Qualcomm components in Android before 2016-07-05 on Nexus 6P devices omits the recovery PIN feature, which…
• CVE-2015-8892 — CVSS 7.8 (high): platform/msm_shared/boot_verifier.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to…
• CVE-2015-8937 — CVSS 7.8 (high): drivers/char/diag/diagchar_core.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5, 6, and 7 (2013) devices mishandles a…
• CVE-2015-8939 — CVSS 7.8 (high): drivers/video/msm/mdp4_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices does not validate r stages…
• CVE-2015-8941 — CVSS 7.8 (high): drivers/media/platform/msm/camera_v2/isp/msm_isp_axi_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 6 and 7 (2013)…
• CVE-2015-8943 — CVSS 7.8 (high): drivers/video/msm/mdss/mdss_mdp_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not verify that a…
• CVE-2016-2061 — CVSS 7.8 (high): Integer signedness error in the MSM V4L2 video driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android…
• CVE-2016-2063 — CVSS 7.8 (high): Stack-based buffer overflow in the supply_lm_input_write function in drivers/thermal/supply_lm_core.c in the MSM Thermal driver for the…
• CVE-2016-2064 — CVSS 7.8 (high): sound/soc/msm/qdsp6v2/msm-audio-effects-q6-v2.c in the MSM QDSP6 audio driver for the Linux kernel 3.x, as used in Qualcomm Innovation…
• CVE-2016-2065 — CVSS 7.8 (high): sound/soc/msm/qdsp6v2/msm-audio-effects-q6-v2.c in the MSM QDSP6 audio driver for the Linux kernel 3.x, as used in Qualcomm Innovation…
• CVE-2016-2066 — CVSS 7.8 (high): Integer signedness error in the MSM QDSP6 audio driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android…
• CVE-2016-2067 — CVSS 7.8 (high): drivers/gpu/msm/kgsl.c in the MSM graphics driver (aka GPU driver) for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC)…
• CVE-2016-2068 — CVSS 7.8 (high): The MSM QDSP6 audio driver (aka sound driver) for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions…
• CVE-2016-2465 — CVSS 7.8 (high): The Qualcomm video driver in Android before 2016-06-01 on Nexus 5, 5X, 6, and 6P devices allows attackers to gain privileges via a crafted…
• CVE-2016-2466 — CVSS 7.8 (high): The Qualcomm sound driver in Android before 2016-06-01 on Nexus 6 devices allows attackers to gain privileges via a crafted application…
• CVE-2016-2467 — CVSS 7.8 (high): The Qualcomm sound driver in Android before 2016-06-01 on Nexus 5 devices allows attackers to gain privileges via a crafted application…
• CVE-2016-2468 — CVSS 7.8 (high): The Qualcomm GPU driver in Android before 2016-06-01 on Nexus 5, 5X, 6, 6P, and 7 devices allows attackers to gain privileges via a crafted…
• CVE-2016-2469 — CVSS 7.8 (high): The Qualcomm sound driver in Android before 2016-06-01 on Nexus 5, 6, and 6P devices allows attackers to gain privileges via a crafted…
• CVE-2016-2470 — CVSS 7.8 (high): The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted…
• CVE-2016-2471 — CVSS 7.8 (high): The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted…
• CVE-2016-2472 — CVSS 7.8 (high): The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted…
• CVE-2016-2474 — CVSS 7.8 (high): The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 5X devices allows attackers to gain privileges via a crafted application…
• CVE-2016-2488 — CVSS 7.8 (high): The Qualcomm camera driver in Android before 2016-06-01 on Nexus 5, 5X, 6, 6P, and 7 (2013) devices allows attackers to gain privileges via…
• CVE-2016-2489 — CVSS 7.8 (high): The Qualcomm video driver in Android before 2016-06-01 on Nexus 5, 5X, 6, and 6P devices allows attackers to gain privileges via a crafted…
• CVE-2016-2490 — CVSS 7.8 (high): The NVIDIA camera driver in Android before 2016-06-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka…
• CVE-2016-2491 — CVSS 7.8 (high): The NVIDIA camera driver in Android before 2016-06-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka…
• CVE-2016-2492 — CVSS 7.8 (high): The MediaTek power-management driver in Android before 2016-06-01 on Android One devices allows attackers to gain privileges via a crafted…
• CVE-2014-9901 — CVSS 7.5 (high): The Qualcomm Wi-Fi driver in Android before 2016-08-05 on Nexus 7 (2013) devices makes incorrect snprintf calls, which allows remote…
• CVE-2011-1149 — CVSS 7.2 (high): Android before 2.3 does not properly restrict access to the system property space, which allows local applications to bypass the…
• CVE-2013-4738 — CVSS 7.2 (high): Multiple stack-based buffer overflows in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC)…
• CVE-2014-4322 — CVSS 7.2 (high): drivers/misc/qseecom.c in the QSEECOM driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions…
• CVE-2011-1350 — CVSS 7.1 (high): The PowerVR SGX driver in Android before 2.3.6 allows attackers to obtain potentially sensitive information from kernel stack memory via an…
• CVE-2017-0577 — CVSS 7.0 (high): An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code…
• CVE-2017-0578 — CVSS 7.0 (high): An elevation of privilege vulnerability in the DTS sound driver could enable a local malicious application to execute arbitrary code within…
• CVE-2017-0580 — CVSS 7.0 (high): An elevation of privilege vulnerability in the Synaptics Touchscreen driver could enable a local malicious application to execute arbitrary…
• CVE-2017-0571 — CVSS 7.0 (high): An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code…
• CVE-2017-0572 — CVSS 7.0 (high): An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code…
• CVE-2017-0573 — CVSS 7.0 (high): An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code…
• CVE-2017-0574 — CVSS 7.0 (high): An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code…
• CVE-2017-0576 — CVSS 7.0 (high): An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to execute…
• CVE-2017-0568 — CVSS 7.0 (high): An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code…
• CVE-2017-0569 — CVSS 7.0 (high): An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code…
• CVE-2017-0570 — CVSS 7.0 (high): An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code…
• CVE-2018-14656 — CVSS 7.0 (high): A missing address check in the callers of the show_opcodes() in the Linux kernel allows an attacker to dump the kernel memory at an…
• CVE-2017-0581 — CVSS 7.0 (high): An elevation of privilege vulnerability in the Synaptics Touchscreen driver could enable a local malicious application to execute arbitrary…
• CVE-2017-0567 — CVSS 7.0 (high): An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code…
• CVE-2011-1352 — CVSS 6.9 (medium): The PowerVR SGX driver in Android before 2.3.6 allows attackers to gain root privileges via an application that triggers kernel memory…
• CVE-2014-5332 — CVSS 6.9 (medium): Race condition in NVMap in NVIDIA Tegra Linux Kernel 3.10 allows local users to gain privileges via a crafted NVMAP_IOC_CREATE IOCTL call…
• CVE-2018-14641 — CVSS 6.5 (medium): A security flaw was found in the ip_frag_reasm() function in net/ipv4/ip_fragment.c in the Linux kernel from 4.19-rc1 to 4.19-rc3…
• CVE-2016-3810 — CVSS 5.5 (medium): The MediaTek Wi-Fi driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitive information via a…
• CVE-2016-3812 — CVSS 5.5 (medium): The MediaTek video codec driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitive information via a…
• CVE-2016-3813 — CVSS 5.5 (medium): The Qualcomm USB driver in Android before 2016-07-05 on Nexus 5, 5X, 6, and 6P devices allows attackers to obtain sensitive information via…
• CVE-2016-3814 — CVSS 5.5 (medium): The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted…
• CVE-2016-3815 — CVSS 5.5 (medium): The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted…
• CVE-2016-3816 — CVSS 5.5 (medium): The MediaTek display driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitive information via a…
• CVE-2016-7118 — CVSS 5.5 (medium): fs/fcntl.c in the "aufs 3.2.x+setfl-debian" patch in the linux-image package 3.2.0-4 (kernel 3.2.81-1) in Debian wheezy mishandles F_SETFL…
• CVE-2018-10074 — CVSS 5.5 (medium): The hi3660_stub_clk_probe function in drivers/clk/hisilicon/clk-hi3660-stub.c in the Linux kernel before 4.16 allows local users to cause a…
• CVE-2014-9893 — CVSS 5.5 (medium): drivers/video/msm/mdss/mdss_mdp_pp.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not properly determine…
• CVE-2014-9894 — CVSS 5.5 (medium): drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices does not ensure that certain name…
• CVE-2014-9896 — CVSS 5.5 (medium): drivers/char/adsprpc.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not properly validate…
• CVE-2014-9897 — CVSS 5.5 (medium): sound/soc/msm/qdsp6v2/msm-lsm-client.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate certain…
• CVE-2014-9898 — CVSS 5.5 (medium): arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not…
• CVE-2014-9899 — CVSS 5.5 (medium): drivers/usb/host/ehci-msm2.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices omits certain minimum calculations…
• CVE-2016-3809 — CVSS 5.5 (medium): The networking component in Android before 2016-07-05 on Android One, Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, Nexus 7 (2013), Nexus 9, Nexus…
• CVE-2014-9798 — CVSS 5.5 (medium): platform/msm_shared/dev_tree.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 devices does not check the relationship…
• CVE-2016-2498 — CVSS 5.5 (medium): The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to bypass intended data-access…
• CVE-2017-0630 — CVSS 4.7 (medium): An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of…
• CVE-2017-0585 — CVSS 4.7 (medium): An information disclosure vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to access data outside of…