Google Android vulnerabilities

CVE-2017-0636 [HIGH] CVE-2017-0636: An elevation of privilege vulnerability in the MediaTek command queue driver could enable a local ma An elevation of privilege vulnerability in the MediaTek command queue driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-35310230. References: M-ALPS03162263.

CVE-2017-0649 [HIGH] CVE-2017-0649: An elevation of privilege vulnerability in the MediaTek sound driver could enable a local malicious An elevation of privilege vulnerability in the MediaTek sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and because of vulnerability specific details which limit the impact of the issue. Product: Android.

CVE-2016-6717 [HIGH] CWE-264 CVE-2016-6717: An elevation of privilege vulnerability in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0 An elevation of privilege vulnerability in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as Moderate because it first requires exploitatio

CVE-2017-0465 [HIGH] CWE-120 CVE-2017-0465: An elevation of privilege vulnerability in the Qualcomm ADSPRPC driver could enable a local maliciou An elevation of privilege vulnerability in the Qualcomm ADSPRPC driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34112914. References: QC

CVE-2016-8445 [HIGH] CWE-264 CVE-2016-8445: An elevation of privilege vulnerability in MediaTek components, including the thermal driver and vid An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31747

CVE-2017-0617 [HIGH] CVE-2017-0617: An elevation of privilege vulnerability in the MediaTek video driver could enable a local malicious An elevation of privilege vulnerability in the MediaTek video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-34471002. References: M-ALPS03149173.

CVE-2017-0615 [HIGH] CVE-2017-0615: An elevation of privilege vulnerability in the MediaTek power driver could enable a local malicious An elevation of privilege vulnerability in the MediaTek power driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-34259126. References: M-ALPS03150278.

CVE-2016-6788 [HIGH] CWE-264 CVE-2016-6788: An elevation of privilege vulnerability in the MediaTek I2C driver could enable a local malicious ap An elevation of privilege vulnerability in the MediaTek I2C driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31224428. References: MT-ALPS02943467.

CVE-2017-0619 [HIGH] CVE-2017-0619: An elevation of privilege vulnerability in the Qualcomm pin controller driver could enable a local m An elevation of privilege vulnerability in the Qualcomm pin controller driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-35401152. References: QC-CR#826566.

CVE-2016-8448 [HIGH] CWE-264 CVE-2016-8448: An elevation of privilege vulnerability in MediaTek components, including the thermal driver and vid An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31791

CVE-2016-6783 [HIGH] CWE-284 CVE-2016-6783: An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious applic An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31350044. References: MT-ALPS02943437.

CVE-2016-8447 [HIGH] CWE-264 CVE-2016-8447: An elevation of privilege vulnerability in MediaTek components, including the thermal driver and vid An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31749

CVE-2016-8446 [HIGH] CWE-264 CVE-2016-8446: An elevation of privilege vulnerability in MediaTek components, including the thermal driver and vid An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31747

CVE-2014-9910 [HIGH] CWE-264 CVE-2014-9910: An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31746399. References: B-RB#26710.

CVE-2016-10282 [HIGH] CWE-264 CVE-2016-10282: An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local maliciou An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-33939045. References: M-ALPS03149189.

CVE-2017-0618 [HIGH] CVE-2017-0618: An elevation of privilege vulnerability in the MediaTek command queue driver could enable a local ma An elevation of privilege vulnerability in the MediaTek command queue driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-35100728. References: M-ALPS03161536.

CVE-2016-10281 [HIGH] CWE-264 CVE-2016-10281: An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local maliciou An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-28175647. References: M-ALPS02696475.

CVE-2016-10280 [HIGH] CWE-264 CVE-2016-10280: An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local maliciou An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-28175767. References: M-ALPS02696445.

CVE-2014-9909 [HIGH] CWE-264 CVE-2014-9909: An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31676542. References: B-RB#26684.

CVE-2016-6784 [HIGH] CWE-284 CVE-2016-6784: An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious applic An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31350755. References: MT-ALPS02961424.