2018 CVE Vulnerabilities

17,819 CVEs published in 2018.

CVE IDSeverityCVSSDescription
CVE-2018-9377MEDIUM5.5In getIntentForIntentSender of ActivityManagerService.java, there is a possible way to access user metadata due to a pen...
CVE-2018-9374HIGH7.8In installPackageLI of PackageManagerService.java, there is a possible permissions bypass. This could lead to local esca...
CVE-2018-9354MEDIUM6.5In VideoFrameScheduler.cpp of VideoFrameScheduler::PLL::fit, there is a possible remote denial of service due to divide ...
CVE-2018-9353MEDIUM6.5In ihevcd_parse_slice_data of ihevcd_parse_slice.c there is a possible heap buffer out of bound read due to a missing bo...
CVE-2018-9352MEDIUM6.5In ihevcd_allocate_dynamic_bufs of ihevcd_api.c there is a possible resource exhaustion due to integer overflow. This co...
CVE-2018-9351MEDIUM6.5In ih264e_fmt_conv_420p_to_420sp of ih264e_fmt_conv.c there is a possible out of bound read due to missing bounds check....
CVE-2018-9350MEDIUM6.5In ih264d_assign_pic_num of ih264d_utils.c there is a possible out of bound read due to missing bounds check. This could...
CVE-2018-9349MEDIUM6.5In mv_err_cost of mcomp.c there is a possible out of bounds read due to missing bounds check. This could lead to denial ...
CVE-2018-5852HIGH7.8An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using d...
CVE-2018-11816HIGH7.8Crafted Binder Request Causes Heap UAF in MediaServer
CVE-2018-11952HIGH7.8An image with a version lower than the fuse version may potentially be booted lead to improper authentication.
CVE-2018-11922MEDIUM5.5Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user.
CVE-2018-11881——Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.  This CVE ID is u...
CVE-2018-9487MEDIUM5.5In setVpnForcedLocked of Vpn.java, there is a possible blocking of internet traffic through vpn due to a bad uid check. ...
CVE-2018-9486MEDIUM6.5In hidh_l2cif_data_ind of hidh_conn.cc, there is a possible out of bounds read due to a missing bounds check. This could...
CVE-2018-9485MEDIUM6.5In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This coul...
CVE-2018-9484HIGH7.5In l2cu_send_peer_config_rej of l2c_utils.cc, there is a possible out of bounds read due to a missing bounds check. This...
CVE-2018-9483MEDIUM6.5In bta_dm_remove_sec_dev_entry of bta_dm_act.cc, there is a possible out of bounds read due to a use after free. This co...
CVE-2018-9482MEDIUM6.5In intr_data_copy_cb of btif_hd.cc, there is a possible out of bounds read due to an integer overflow. This could lead t...
CVE-2018-9481MEDIUM6.5In bta_hd_set_report_act of bta_hd_act.cc, there is a possible out-of-bounds read due to an integer overflow. This could...
CVE-2018-9480MEDIUM6.5In bta_hd_get_report_act of bta_hd_act.cc, there is a possible out-of-bounds read due to improper input validation. This...
CVE-2018-9479CRITICAL9.8In process_service_attr_req and process_service_search_attr_req of sdp_server.cc, there is an out of bounds write due to...
CVE-2018-9478CRITICAL9.8In process_service_attr_req and process_service_search_attr_req of sdp_server.cc, there is an out of bounds write due to...
CVE-2018-9477HIGH7.8In the development options section of the Settings app, there is a possible authentication bypass due to a missing permi...
CVE-2018-9475HIGH8.8In HeadsetInterface::ClccResponse of btif_hf.cc, there is a possible out of bounds stack write due to a missing bounds c...

Check if your code is affected by 2018 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now