Google Inc Android vulnerabilities

CVE-2016-3904 [HIGH] CWE-264 CVE-2016-3904: An elevation of privilege vulnerability in the Qualcomm bus driver in Android before 2016-11-05 coul An elevation of privilege vulnerability in the Qualcomm bus driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Android ID: A-30311977. References: Qualcomm QC-CR#1050455.

CVE-2017-0604 [HIGH] CWE-670 CVE-2017-0604: An elevation of privilege vulnerability in the kernel Qualcomm power driver could enable a local mal An elevation of privilege vulnerability in the kernel Qualcomm power driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product:

CVE-2016-10274 [HIGH] CWE-264 CVE-2016-10274: An elevation of privilege vulnerability in the MediaTek touchscreen driver could enable a local mali An elevation of privilege vulnerability in the MediaTek touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product:

CVE-2018-9458 [HIGH] CWE-1021 CVE-2018-9458: In computeFocusedWindow of RootWindowContainer.java, and related functions, there is possible interc In computeFocusedWindow of RootWindowContainer.java, and related functions, there is possible interception of keypresses due to focus being on the wrong window. This could lead to local escalation of privilege revealing the user's keypresses while the screen was locked with no additional execution privileges needed. User interaction is needed for explo

CVE-2017-13251 [HIGH] CWE-787 CVE-2017-13251: In impeg2d_dec_pic_data_thread of impeg2d_dec_hdr.c, there is a possible out of bounds write due to In impeg2d_dec_pic_data_thread of impeg2d_dec_hdr.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when running multi threaded with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8

CVE-2016-8482 [HIGH] CWE-264 CVE-2016-8482: An elevation of privilege vulnerability in the NVIDIA GPU driver. Product: Android. Versions: Androi An elevation of privilege vulnerability in the NVIDIA GPU driver. Product: Android. Versions: Android kernel. Android ID: A-31799863. References: N-CVE-2016-8482.

CVE-2017-0869 [HIGH] CWE-190 CVE-2017-0869: NVIDIA driver contains an integer overflow vulnerability which could cause a use after free and poss NVIDIA driver contains an integer overflow vulnerability which could cause a use after free and possibly lead to an elevation of privilege enabling code execution as a privileged process. This issue is rated as high. Version: N/A. Android ID: A-37776156. References: N-CVE-2017-0869.

CVE-2017-13167 [HIGH] CVE-2017-13167: An elevation of privilege vulnerability in the kernel sound timer. Product: Android. Versions: Andro An elevation of privilege vulnerability in the kernel sound timer. Product: Android. Versions: Android kernel. Android ID A-37240993.

CVE-2017-13174 [HIGH] CVE-2017-13174: An elevation of privilege vulnerability in the kernel edl. Product: Android. Versions: Android kerne An elevation of privilege vulnerability in the kernel edl. Product: Android. Versions: Android kernel. Android ID A-63100473.

CVE-2017-13231 [HIGH] CWE-787 CVE-2017-13231: In libmediadrm, there is an out-of-bounds write due to improper input validation. This could lead to In libmediadrm, there is an out-of-bounds write due to improper input validation. This could lead to local elevation of privileges with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-67962232.

CVE-2018-9538 [HIGH] CWE-125 CVE-2018-9538: In V4L2SliceVideoDecodeAccelerator::Dequeue of v4l2_slice_video_decode_accelerator.cc, there is a po In V4L2SliceVideoDecodeAccelerator::Dequeue of v4l2_slice_video_decode_accelerator.cc, there is a possible out of bounds read of a function pointer due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:

CVE-2018-9559 [HIGH] CWE-787 CVE-2018-9559: In persist_set_key and other functions of cryptfs.cpp, there is a possible out-of-bounds write due t In persist_set_key and other functions of cryptfs.cpp, there is a possible out-of-bounds write due to an uncaught error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-

CVE-2017-0862 [HIGH] CVE-2017-0862: An elevation of privilege vulnerability in the Upstream kernel kernel. Product: Android. Versions: A An elevation of privilege vulnerability in the Upstream kernel kernel. Product: Android. Versions: Android kernel. Android ID: A-36006779.

CVE-2017-0842 [HIGH] CWE-119 CVE-2017-0842: An elevation of privilege vulnerability in the Android system (bluetooth). Product: Android. Version An elevation of privilege vulnerability in the Android system (bluetooth). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37502513.

CVE-2017-13171 [HIGH] CVE-2017-13171: An elevation of privilege vulnerability in the MediaTek performance service. Product: Android. Versi An elevation of privilege vulnerability in the MediaTek performance service. Product: Android. Versions: Android kernel. Android ID A-64316572. References: M-ALPS03479086.

CVE-2017-13170 [HIGH] CVE-2017-13170: An elevation of privilege vulnerability in the MediaTek display driver. Product: Android. Versions: An elevation of privilege vulnerability in the MediaTek display driver. Product: Android. Versions: Android kernel. Android ID A-36102397. References: M-ALPS03359280.

CVE-2017-13173 [HIGH] CVE-2017-13173: An elevation of privilege vulnerability in the MediaTek system server. Product: Android. Versions: A An elevation of privilege vulnerability in the MediaTek system server. Product: Android. Versions: Android kernel. Android ID A-28067350. References: M-ALPS02672361.

CVE-2017-13163 [HIGH] CVE-2017-13163: An elevation of privilege vulnerability in the kernel mtp usb driver. Product: Android. Versions: An An elevation of privilege vulnerability in the kernel mtp usb driver. Product: Android. Versions: Android kernel. Android ID A-37429972.

CVE-2017-0863 [HIGH] CVE-2017-0863: An elevation of privilege vulnerability in the Upstream kernel video driver. Product: Android. Versi An elevation of privilege vulnerability in the Upstream kernel video driver. Product: Android. Versions: Android kernel. Android ID: A-37950620.

CVE-2017-13213 [HIGH] CVE-2017-13213: An elevation of privilege vulnerability in the Broadcom bcmdhd driver. Product: Android. Versions: A An elevation of privilege vulnerability in the Broadcom bcmdhd driver. Product: Android. Versions: Android kernel. Android ID: A-63374465. References: B-V2017081501.