Google Inc Android vulnerabilities

CVE-2017-0869 [HIGH] CWE-190 CVE-2017-0869: NVIDIA driver contains an integer overflow vulnerability which could cause a use after free and poss NVIDIA driver contains an integer overflow vulnerability which could cause a use after free and possibly lead to an elevation of privilege enabling code execution as a privileged process. This issue is rated as high. Version: N/A. Android ID: A-37776156. References: N-CVE-2017-0869.

CVE-2017-13167 [HIGH] CVE-2017-13167: An elevation of privilege vulnerability in the kernel sound timer. Product: Android. Versions: Andro An elevation of privilege vulnerability in the kernel sound timer. Product: Android. Versions: Android kernel. Android ID A-37240993.

CVE-2017-13174 [HIGH] CVE-2017-13174: An elevation of privilege vulnerability in the kernel edl. Product: Android. Versions: Android kerne An elevation of privilege vulnerability in the kernel edl. Product: Android. Versions: Android kernel. Android ID A-63100473.

CVE-2017-13231 [HIGH] CWE-787 CVE-2017-13231: In libmediadrm, there is an out-of-bounds write due to improper input validation. This could lead to In libmediadrm, there is an out-of-bounds write due to improper input validation. This could lead to local elevation of privileges with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-67962232.

CVE-2018-9538 [HIGH] CWE-125 CVE-2018-9538: In V4L2SliceVideoDecodeAccelerator::Dequeue of v4l2_slice_video_decode_accelerator.cc, there is a po In V4L2SliceVideoDecodeAccelerator::Dequeue of v4l2_slice_video_decode_accelerator.cc, there is a possible out of bounds read of a function pointer due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:

CVE-2018-9559 [HIGH] CWE-787 CVE-2018-9559: In persist_set_key and other functions of cryptfs.cpp, there is a possible out-of-bounds write due t In persist_set_key and other functions of cryptfs.cpp, there is a possible out-of-bounds write due to an uncaught error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-

CVE-2017-0862 [HIGH] CVE-2017-0862: An elevation of privilege vulnerability in the Upstream kernel kernel. Product: Android. Versions: A An elevation of privilege vulnerability in the Upstream kernel kernel. Product: Android. Versions: Android kernel. Android ID: A-36006779.

CVE-2017-0842 [HIGH] CWE-119 CVE-2017-0842: An elevation of privilege vulnerability in the Android system (bluetooth). Product: Android. Version An elevation of privilege vulnerability in the Android system (bluetooth). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37502513.

CVE-2017-13171 [HIGH] CVE-2017-13171: An elevation of privilege vulnerability in the MediaTek performance service. Product: Android. Versi An elevation of privilege vulnerability in the MediaTek performance service. Product: Android. Versions: Android kernel. Android ID A-64316572. References: M-ALPS03479086.

CVE-2017-13170 [HIGH] CVE-2017-13170: An elevation of privilege vulnerability in the MediaTek display driver. Product: Android. Versions: An elevation of privilege vulnerability in the MediaTek display driver. Product: Android. Versions: Android kernel. Android ID A-36102397. References: M-ALPS03359280.

CVE-2017-13173 [HIGH] CVE-2017-13173: An elevation of privilege vulnerability in the MediaTek system server. Product: Android. Versions: A An elevation of privilege vulnerability in the MediaTek system server. Product: Android. Versions: Android kernel. Android ID A-28067350. References: M-ALPS02672361.

CVE-2017-13163 [HIGH] CVE-2017-13163: An elevation of privilege vulnerability in the kernel mtp usb driver. Product: Android. Versions: An An elevation of privilege vulnerability in the kernel mtp usb driver. Product: Android. Versions: Android kernel. Android ID A-37429972.

CVE-2017-0863 [HIGH] CVE-2017-0863: An elevation of privilege vulnerability in the Upstream kernel video driver. Product: Android. Versi An elevation of privilege vulnerability in the Upstream kernel video driver. Product: Android. Versions: Android kernel. Android ID: A-37950620.

CVE-2015-9009 [CRITICAL] CWE-264 CVE-2015-9009: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Vers An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393600.

CVE-2015-9010 [CRITICAL] CWE-264 CVE-2015-9010: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Vers An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393101.

CVE-2015-9011 [CRITICAL] CWE-264 CVE-2015-9011: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Vers An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36714882.

CVE-2015-9013 [CRITICAL] CWE-264 CVE-2015-9013: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Vers An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393251.

CVE-2015-9008 [CRITICAL] CWE-264 CVE-2015-9008: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Vers An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384689.

CVE-2017-13213 [HIGH] CVE-2017-13213: An elevation of privilege vulnerability in the Broadcom bcmdhd driver. Product: Android. Versions: A An elevation of privilege vulnerability in the Broadcom bcmdhd driver. Product: Android. Versions: Android kernel. Android ID: A-63374465. References: B-V2017081501.

CVE-2017-13212 [HIGH] CVE-2017-13212: An elevation of privilege vulnerability in the Android system (systemui). Product: Android. Versions An elevation of privilege vulnerability in the Android system (systemui). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62187985.