| Max CVSS | 10.0 | Min CVSS | 7.2 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2016-8442 | 7.2 |
Possible unauthorized memory access in the hypervisor. Lack of input validation could allow hypervisor memory to be accessed by the HLOS. Product: Android. Versions: Kernel 3.18. Android ID: A-31625910. QC-CR#1038173.
|
24-01-2017 - 00:02 | 12-01-2017 - 20:59 | |
| CVE-2016-8443 | 7.2 |
Possible unauthorized memory access in the hypervisor. Incorrect configuration provides access to subsystem page tables. Product: Android. Versions: Kernel 3.18. Android ID: A-32576499. References: QC-CR#964185.
|
24-01-2017 - 00:02 | 12-01-2017 - 20:59 | |
| CVE-2016-8441 | 7.2 |
Possible buffer overflow in the hypervisor. Inappropriate usage of a static array could lead to a buffer overrun. Product: Android. Versions: Kernel 3.18. Android ID: A-31625904. References: QC-CR#1027769.
|
24-01-2017 - 00:00 | 12-01-2017 - 20:59 | |
| CVE-2016-8440 | 10.0 |
Possible buffer overflow in SMMU system call. Improper input validation in ADSP SID2CB system call may result in hypervisor memory overwrite. Product: Android. Versions: Kernel 3.18. Android ID: A-31625306. References: QC-CR#1036747.
|
23-01-2017 - 23:59 | 12-01-2017 - 20:59 | |
| CVE-2016-8459 | 10.0 |
Possible buffer overflow in storage subsystem. Bad parameters as part of listener responses to RPMB commands could lead to buffer overflow. Product: Android. Versions: Kernel 3.18. Android ID: A-32577972. References: QC-CR#988462.
|
18-01-2017 - 02:59 | 12-01-2017 - 20:59 | |
| CVE-2016-8437 | 10.0 |
Improper input validation in Access Control APIs. Access control API may return memory range checking incorrectly. Product: Android. Versions: Kernel 3.18. Android ID: A-31623057. References: QC-CR#1009695.
|
18-01-2017 - 02:59 | 12-01-2017 - 20:59 | |
| CVE-2016-8438 | 10.0 |
Integer overflow leading to a TOCTOU condition in hypervisor PIL. An integer overflow exposes a race condition that may be used to bypass (Peripheral Image Loader) PIL authentication. Product: Android. Versions: Kernel 3.18. Android ID: A-31624565. R
|
18-01-2017 - 02:59 | 12-01-2017 - 20:59 | |
| CVE-2016-8398 | 10.0 |
Unauthenticated messages processed by the UE. Certain NAS messages are processed when no EPS security context exists in the UE. Product: Android. Versions: Kernel 3.18. Android ID: A-31548486. References: QC-CR#877705.
|
18-01-2017 - 02:59 | 12-01-2017 - 20:59 | |
| CVE-2016-8439 | 10.0 |
Possible buffer overflow in trust zone access control API. Buffer overflow may occur due to lack of buffer size checking. Product: Android. Versions: Kernel 3.18. Android ID: A-31625204. References: QC-CR#1027804.
|
18-01-2017 - 02:59 | 12-01-2017 - 20:59 |