CVE Vulnerability Catalog

CVE-2017-0872 is a remote code execution vulnerability in the Android media framework (libskia). It affects Android versions 7.0, 7.1.1, 7.1.2, and 8.0.

CVE-2017-0871 is a privilege escalation vulnerability in the Android framework, affecting version 8.0. The issue is related to the core framework of Android.

CVE-2017-0870 is a privilege escalation vulnerability in the Android framework (libminikin). It affects Android versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0.

CVE-2017-0837 is a privilege escalation vulnerability in the Android media framework (libaudiopolicymanager). It affects Android versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0.

ActiveSetupN.exe in Amazon Audible for Windows before November 2017 allows attackers to execute arbitrary DLL code if ActiveSetupN.exe is launched from a directory where an attacker has already created a Trojan horse dwmapi.dll file.

OpenAFS versions 1.x before 1.6.22 do not properly validate Rx ack packets, allowing remote attackers to cause a denial of service (system crash or application crash) via crafted fields.

The bnep_add_connection function in the Linux kernel before version 3.19 does not ensure that an l2cap socket is available, allowing local users to gain privileges via a crafted application.

A potential security vulnerability has been identified in HPE Connected Backup versions 8.6 and 8.8.6, which could be exploited locally to allow escalation of privilege.

In Android for MSM, Firefox OS for MSM, and QRD Android, the qbt1000 driver implements an alternative channel for usermode applications to communicate with QSEE applications. This issue affects all Android releases from CAF using the Linux kernel.

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a crafted binder request can cause an arbitrary unmap in MediaServer.

In Android for MSM, Firefox OS for MSM, and QRD Android, a race condition in the GLink kernel driver may lead to a Use After Free condition.

In Android for MSM, Firefox OS for MSM, and QRD Android, there is a vulnerability related to direct access to a userspace buffer in kernel space while handling the QSEOS_RPMB_CHECK_PROV_STATUS_COMMAND.

In Android for MSM, Firefox OS for MSM, and QRD Android, after a subsystem reset, iwpriv does not provide correct information. This affects all Android releases from CAF using the Linux kernel.

In Android for MSM, Firefox OS for MSM, and QRD Android, in a WiFi driver function, an integer overflow leading to heap buffer overflow may potentially occur.

In Android for MSM, Firefox OS for MSM, and QRD Android, there is a possibility of stack corruption due to buffer overflow of Partition name while converting ascii string to unicode string in function HandleMetaImgFlash.

An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. An authenticated user may repeatedly rebuild an instance with new images, leading to untracked resource consumption on a hypervisor host, resulting in denial of service.

In Android for MSM, Firefox OS for MSM, and QRD Android, a buffer overflow vulnerability occurs when updating custom EDID if edid_size, controlled by userspace, is too large.

In Android for MSM, Firefox OS for MSM, and QRD Android, a race condition in a multimedia driver can potentially lead to a buffer overwrite.

In Android for MSM, Firefox OS for MSM, and QRD Android, the IOCTL interface to send QMI NOTIFY REQ messages can be called from multiple contexts, which can lead to buffer overflow of the msg cache.

In Android for MSM, in the camera driver, the function 'msm_ois_power_down' is called without a mutex, which can lead to race conditions in the variable '*reg_ptr' of the sub function 'msm_camera_config_single_vreg'.