Google Inc Android vulnerabilities

CVE-2017-13190 [HIGH] CWE-770 CVE-2017-13190: A vulnerability in the Android media framework (libhevc) related to handling ps_codec_obj memory all A vulnerability in the Android media framework (libhevc) related to handling ps_codec_obj memory allocation failures. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68299873.

CVE-2017-13184 [HIGH] CWE-416 CVE-2017-13184: In the enableVSyncInjections function of SurfaceFlinger, there is a possible use after free of mVSyn In the enableVSyncInjections function of SurfaceFlinger, there is a possible use after free of mVSyncInjector. This could lead to a local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android I

CVE-2017-13150 [CRITICAL] CWE-200 CVE-2017-13150: An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Vers An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-38328132.

CVE-2017-0879 [CRITICAL] CWE-200 CVE-2017-0879: An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Vers An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-65025028.

CVE-2017-13160 [CRITICAL] CWE-125 CVE-2017-13160: A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-37160362.

CVE-2017-13149 [CRITICAL] CWE-200 CVE-2017-13149: An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Vers An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-65719872.

CVE-2017-13166 [HIGH] CWE-787 CVE-2017-13166: An elevation of privilege vulnerability in the kernel v4l2 video driver. Product: Android. Versions: An elevation of privilege vulnerability in the kernel v4l2 video driver. Product: Android. Versions: Android kernel. Android ID A-34624167.

CVE-2017-13158 [HIGH] CWE-200 CVE-2017-13158: An information disclosure vulnerability in the Android system (activitymanagerservice). Product: And An information disclosure vulnerability in the Android system (activitymanagerservice). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-32879915.

CVE-2017-13174 [HIGH] CVE-2017-13174: An elevation of privilege vulnerability in the kernel edl. Product: Android. Versions: Android kerne An elevation of privilege vulnerability in the kernel edl. Product: Android. Versions: Android kernel. Android ID A-63100473.

CVE-2017-13169 [HIGH] CWE-200 CVE-2017-13169: An information disclosure vulnerability in the kernel camera server. Product: Android. Versions: And An information disclosure vulnerability in the kernel camera server. Product: Android. Versions: Android kernel. Android ID A-37512375.

CVE-2017-13170 [HIGH] CVE-2017-13170: An elevation of privilege vulnerability in the MediaTek display driver. Product: Android. Versions: An elevation of privilege vulnerability in the MediaTek display driver. Product: Android. Versions: Android kernel. Android ID A-36102397. References: M-ALPS03359280.

CVE-2017-13157 [HIGH] CWE-200 CVE-2017-13157: An information disclosure vulnerability in the Android system (activitymanagerservice). Product: And An information disclosure vulnerability in the Android system (activitymanagerservice). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-32990341.

CVE-2017-0871 [HIGH] CVE-2017-0871: An elevation of privilege vulnerability in the Android framework (framework base). Product: Android. An elevation of privilege vulnerability in the Android framework (framework base). Product: Android. Versions: 8.0. Android ID A-65281159.

CVE-2017-13152 [HIGH] CWE-200 CVE-2017-13152: An information disclosure vulnerability in the Android media framework (libmedia drm). Product: Andr An information disclosure vulnerability in the Android media framework (libmedia drm). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-62872384.

CVE-2017-13162 [HIGH] CVE-2017-13162: An elevation of privilege vulnerability in the kernel binder. Product: Android. Versions: Android ke An elevation of privilege vulnerability in the kernel binder. Product: Android. Versions: Android kernel. Android ID A-64216036.

CVE-2017-13154 [HIGH] CWE-416 CVE-2017-13154: An elevation of privilege vulnerability in the Android media framework (libstagefright). Product: An An elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-63666573.

CVE-2017-13171 [HIGH] CVE-2017-13171: An elevation of privilege vulnerability in the MediaTek performance service. Product: Android. Versi An elevation of privilege vulnerability in the MediaTek performance service. Product: Android. Versions: Android kernel. Android ID A-64316572. References: M-ALPS03479086.

CVE-2017-13165 [HIGH] CVE-2017-13165: An elevation of privilege vulnerability in the kernel file system. Product: Android. Versions: Andro An elevation of privilege vulnerability in the kernel file system. Product: Android. Versions: Android kernel. Android ID A-31269937.

CVE-2017-13163 [HIGH] CVE-2017-13163: An elevation of privilege vulnerability in the kernel mtp usb driver. Product: Android. Versions: An An elevation of privilege vulnerability in the kernel mtp usb driver. Product: Android. Versions: Android kernel. Android ID A-37429972.

CVE-2017-0877 [HIGH] CWE-20 CVE-2017-0877: A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Ver A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0. Android ID A-66372937.