CVE Daily – Amazon Kindle (High+Critical)

CVE Daily – Amazon Kindle (High+Critical) https://cvedaily.com/pages/tags/kindle.html CVE Daily – Amazon Kindle (High+Critical) en Wed, 03 Jun 2026 21:27:11 +0000 [High] CVE-2021-30355 – Amazon Kindle e-reader prior to and including version 5.13.4 improperly manages ... https://nvd.nist.gov/vuln/detail/CVE-2021-30355 https://nvd.nist.gov/vuln/detail/CVE-2021-30355 Wed, 01 Sep 2021 19:15:07 +0000 High CVE-2021-30355

Amazon Kindle e-reader prior to and including version 5.13.4 improperly manages privileges, allowing the framework user to elevate privileges to root.

CVSS: 8.6 · CWE: CWE-269

]]> [High] CVE-2021-30354 – Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer... https://nvd.nist.gov/vuln/detail/CVE-2021-30354 https://nvd.nist.gov/vuln/detail/CVE-2021-30354 Wed, 01 Sep 2021 18:15:09 +0000 High CVE-2021-30354

Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function CJBig2Image::expand() and results in a memory corruption that leads to code execution when parsing a crafted PDF book.

CVSS: 8.6 · CWE: CWE-680

]]> [High] CVE-2018-11025 – kernel/omap/drivers/mfd/twl6030-gpadc.c in the kernel component in Amazon Kindle... https://nvd.nist.gov/vuln/detail/CVE-2018-11025 https://nvd.nist.gov/vuln/detail/CVE-2018-11025 Tue, 16 Oct 2018 22:29:01 +0000 High CVE-2018-11025

kernel/omap/drivers/mfd/twl6030-gpadc.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/twl6030-gpadc with the command 24832 and cause a kernel crash.

CVSS: 7.5 · CWE: CWE-88

]]> [High] CVE-2018-11024 – kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Ki... https://nvd.nist.gov/vuln/detail/CVE-2018-11024 https://nvd.nist.gov/vuln/detail/CVE-2018-11024 Tue, 16 Oct 2018 22:29:01 +0000 High CVE-2018-11024

kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD (3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 1077435789 and cause a kernel crash.

CVSS: 7.5 · CWE: CWE-88

]]> [High] CVE-2018-11023 – kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Ki... https://nvd.nist.gov/vuln/detail/CVE-2018-11023 https://nvd.nist.gov/vuln/detail/CVE-2018-11023 Tue, 16 Oct 2018 22:29:01 +0000 High CVE-2018-11023

kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD (3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 3222560159 and cause a kernel crash.

CVSS: 7.5 · CWE: CWE-88

]]> [High] CVE-2018-11022 – kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Ki... https://nvd.nist.gov/vuln/detail/CVE-2018-11022 https://nvd.nist.gov/vuln/detail/CVE-2018-11022 Tue, 16 Oct 2018 22:29:01 +0000 High CVE-2018-11022

kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 3224132973 and cause a kernel crash.

CVSS: 7.5 · CWE: CWE-88

]]> [High] CVE-2018-11021 – kernel/omap/drivers/video/omap2/dsscomp/device.c in the kernel component in Amaz... https://nvd.nist.gov/vuln/detail/CVE-2018-11021 https://nvd.nist.gov/vuln/detail/CVE-2018-11021 Tue, 16 Oct 2018 22:29:01 +0000 High CVE-2018-11021

kernel/omap/drivers/video/omap2/dsscomp/device.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/dsscomp with the command 1118064517 and cause a kernel crash.

CVSS: 7.5 · CWE: CWE-88

]]> [High] CVE-2018-11019 – kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Ki... https://nvd.nist.gov/vuln/detail/CVE-2018-11019 https://nvd.nist.gov/vuln/detail/CVE-2018-11019 Tue, 16 Oct 2018 22:29:00 +0000 High CVE-2018-11019

kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 3221773726 and cause a kernel crash.

CVSS: 7.5 · CWE: CWE-88

]]> [High] CVE-2017-6189 – Untrusted search path vulnerability in Amazon Kindle for PC before 1.19 allows l... https://nvd.nist.gov/vuln/detail/CVE-2017-6189 https://nvd.nist.gov/vuln/detail/CVE-2017-6189 Wed, 15 Mar 2017 15:59:00 +0000 High CVE-2017-6189

Untrusted search path vulnerability in Amazon Kindle for PC before 1.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in the current working directory of the Kindle Setup installer.

CVSS: 7.3 · CWE: CWE-426

]]> [Critical] CVE-2012-4249 – The Amazon Lab126 com.lab126.system sendEvent implementation on the Kindle Touch... https://nvd.nist.gov/vuln/detail/CVE-2012-4249 https://nvd.nist.gov/vuln/detail/CVE-2012-4249 Sun, 12 Aug 2012 17:55:01 +0000 Critical CVE-2012-4249

The Amazon Lab126 com.lab126.system sendEvent implementation on the Kindle Touch before 5.1.2 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a string, as demonstrated by using lipc-set-prop to set an LIPC property, a different vulnerability than CVE-2012-4248.

CVSS: 10.0 · CWE: CWE-94

]]> [Critical] CVE-2012-4248 – The Amazon Kindle Touch before 5.1.2 does not properly restrict access to the li... https://nvd.nist.gov/vuln/detail/CVE-2012-4248 https://nvd.nist.gov/vuln/detail/CVE-2012-4248 Sun, 12 Aug 2012 17:55:01 +0000 Critical CVE-2012-4248

The Amazon Kindle Touch before 5.1.2 does not properly restrict access to the libkindleplugin.so NPAPI plugin interface, which might allow remote attackers to have an unspecified impact via vectors involving the (1) dev.log, (2) lipc.set, (3) lipc.get, or (4) todo.scheduleItems method, a different vulnerability than CVE-2012-4249.

CVSS: 9.3 · CWE: CWE-264

]]>