Android Security Bulletin—May 2018Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2018-05-05 or later address all of these issues. To learn how to check a device's security patch level, see Check & update your Android version. Android partners are...

The vulnerability of the Qualcomm Security Feature component in the Android operating system allows a hacker to trigger buffer overflows.

The vulnerability of the Qualcomm Security Feature component of the Android operating system is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to trigger a buffer overflow...

CVE-2018-0249

A vulnerability when handling incoming 802.11 Association Requests for Cisco Aironet 1800 Series Access Point APs on Qualcomm Atheros QCA based hardware platforms could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected system. A successful explo...

CVE-2018-0249

A vulnerability when handling incoming 802.11 Association Requests for Cisco Aironet 1800 Series Access Point APs on Qualcomm Atheros QCA based hardware platforms could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected system. A successful explo...

Design/Logic Flaw

A vulnerability when handling incoming 802.11 Association Requests for Cisco Aironet 1800 Series Access Point APs on Qualcomm Atheros QCA based hardware platforms could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected system. A successful explo...

CVE-2018-0249

A vulnerability when handling incoming 802.11 Association Requests for Cisco Aironet 1800 Series Access Point APs on Qualcomm Atheros QCA based hardware platforms could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected system. A successful explo...

CVE-2018-0249

CVE-2018-0249 describes a denial-of-service vulnerability in Cisco Aironet 1800 Series APs on Qualcomm Atheros (QCA) hardware. The issue stems from incorrect handling of malformed or invalid 802.11 Association Requests, which could be exploited by an unauthenticated, adjacent attacker to cause a ...

The vulnerability of the video_fmt_mp4r_process_atom_avc1 function in the Qualcomm Video Services component of the Android operating system allows a hacker to trigger buffer overflows.

The vulnerability of the videofmtmp4rprocessatomavc1 function in the Qualcomm Video Services component of the Android operating system is related to insufficient input data validation. Exploiting this vulnerability can allow an attacker to cause buffer overflows or execute arbitrary code...

Google Android has an unspecified vulnerability (CNVD-2018-10039)

Android is a Linux-based open-source operating system jointly developed by Google and the Open Handheld Alliance OHA for short, and Qualcomm MDM9625 and other central processing unit CPU products from Qualcomm are used in different platforms. A security vulnerability exists in the Qualcomm...

Google Android has an unspecified vulnerability (CNVD-2018-10037)

Android is a Linux-based open-source operating system jointly developed by Google and the Open Handheld Alliance OHA for short, and Qualcomm MDM9625 and other central processing unit CPU products from Qualcomm are used in different platforms. A security vulnerability exists in the Qualcomm...

Google Android untrustworthy pointer reference vulnerability

Android is a Linux-based open-source operating system jointly developed by Google and the Open Handheld Alliance OHA for short, and Qualcomm MDM9625 and other central processing unit CPU products from Qualcomm are used in different platforms. A security vulnerability exists in the Qualcomm...

Google Android buffer out-of-bounds read vulnerability (CNVD-2018-09626)

Android is a Linux-based open-source operating system jointly developed by Google and the Open Handheld Alliance OHA for short, and Qualcomm MDM9206 and other central processing unit CPU products from Qualcomm are used in different platforms. A buffer out-of-bounds read vulnerability exists in th...

Google Android Information Disclosure Vulnerability (CNVD-2018-10126)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and the Qualcomm SD 400 and Qualcomm SD 800 are central processing unit CPU products from Qualcomm. A security vulnerability exists in the Qualcomm closed-source component in...

Google Android Buffer Overflow Vulnerability (CNVD-2018-08827)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and the Qualcomm SD 400 and Qualcomm SD 800 are central processing unit CPU products from Qualcomm. A buffer overflow vulnerability exists in the Qualcomm closed-source component ...

Google Android buffer out-of-bounds read vulnerability (CNVD-2018-10042)

Android is a Linux-based open-source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Qualcomm SD 820A and other central processing unit CPU products of Qualcomm for different platforms. A buffer out-of-bounds read vulnerability exists in the Qualcomm...

Google Android buffer out-of-bounds read vulnerability (CNVD-2018-10035)

Android is a Linux-based open-source operating system jointly developed by Google and the Open Handheld Alliance OHA for short, and Qualcomm MDM9206 and other central processing unit CPU products from Qualcomm are used in different platforms. A buffer out-of-bounds read vulnerability exists in th...

Google Android Memory Misreference Vulnerability (CNVD-2018-10125)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Qualcomm MDM9615 and other central processing unit CPU products from Qualcomm. A memory misreference vulnerability exists in the Qualcomm closed-source component in Android...

Google Android has an unspecified vulnerability (CNVD-2018-10129)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and the Qualcomm MDM9625, SD 400, and SD 800 are central processing unit CPU products from Qualcomm. A security vulnerability exists in the Qualcomm closed-source component in...

Google Android buffer out-of-bounds read vulnerability (CNVD-2018-10127)

Android is a Linux-based open-source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Qualcomm MSM8909W is a central processing unit CPU product of Qualcomm. A buffer out-of-bounds read vulnerability exists in the Qualcomm closed-source component in Android...

Google Android Array Index Out-of-Bounds Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Qualcomm MDM9615 and other central processing unit CPU products from Qualcomm. A security vulnerability exists in the Qualcomm closed-source component in versions of Android...