Google Inc Android vulnerabilities

CVE-2017-13212 [HIGH] CVE-2017-13212: An elevation of privilege vulnerability in the Android system (systemui). Product: Android. Versions An elevation of privilege vulnerability in the Android system (systemui). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62187985.

CVE-2017-13244 [HIGH] CVE-2017-13244: A elevation of privilege vulnerability in the Upstream kernel easel. Product: Android. Versions: And A elevation of privilege vulnerability in the Upstream kernel easel. Product: Android. Versions: Android kernel. ID: A-62678986.

CVE-2017-13245 [HIGH] CVE-2017-13245: A elevation of privilege vulnerability in the Upstream kernel audio driver. Product: Android. Versio A elevation of privilege vulnerability in the Upstream kernel audio driver. Product: Android. Versions: Android kernel. ID: A-64315347.

CVE-2017-13172 [HIGH] CVE-2017-13172: An elevation of privilege vulnerability in the MediaTek bluetooth driver. Product: Android. Versions An elevation of privilege vulnerability in the MediaTek bluetooth driver. Product: Android. Versions: Android kernel. Android ID A-36493287. References: M-ALPS03495791.

CVE-2017-13161 [HIGH] CVE-2017-13161: An elevation of privilege vulnerability in the Broadcom wireless driver. Product: Android. Versions: An elevation of privilege vulnerability in the Broadcom wireless driver. Product: Android. Versions: Android kernel. Android ID A-63930471. References: BC-V2017092501.

CVE-2017-0865 [HIGH] CVE-2017-0865: An elevation of privilege vulnerability in the MediaTek soc driver. Product: Android. Versions: Andr An elevation of privilege vulnerability in the MediaTek soc driver. Product: Android. Versions: Android kernel. Android ID: A-65025090. References: M-ALPS02973195.

CVE-2016-6731 [HIGH] CWE-264 CVE-2016-6731: An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the

CVE-2016-6733 [HIGH] CWE-264 CVE-2016-6733: An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the

CVE-2016-6732 [HIGH] CWE-264 CVE-2016-6732: An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the

CVE-2016-6730 [HIGH] CWE-264 CVE-2016-6730: An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the

CVE-2017-0750 [HIGH] CWE-787 CVE-2017-0750: A elevation of privilege vulnerability in the Upstream Linux file system. Product: Android. Versions A elevation of privilege vulnerability in the Upstream Linux file system. Product: Android. Versions: Android kernel. Android ID: A-36817013.

CVE-2016-6762 [HIGH] CWE-264 CVE-2016-6762: An elevation of privilege vulnerability in the libziparchive library could enable a local malicious An elevation of privilege vulnerability in the libziparchive library could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: A

CVE-2017-0385 [HIGH] CVE-2017-0385: An elevation of privilege vulnerability in Audioserver could enable a local malicious application to An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4

CVE-2016-10231 [HIGH] CWE-264 CVE-2016-10231: An elevation of privilege vulnerability in the Qualcomm sound codec driver. Product: Android. Versio An elevation of privilege vulnerability in the Qualcomm sound codec driver. Product: Android. Versions: Android kernel. Android ID: A-33966912. References: QC-CR#1096799.

CVE-2017-13252 [HIGH] CWE-787 CVE-2017-13252: In CryptoHal::decrypt of CryptoHal.cpp, there is an out of bounds write due to improper input valida In CryptoHal::decrypt of CryptoHal.cpp, there is an out of bounds write due to improper input validation that results in a read from uninitialized memory. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-7052

CVE-2017-0711 [HIGH] CVE-2017-0711: A elevation of privilege vulnerability in the MediaTek networking driver. Product: Android. Versions A elevation of privilege vulnerability in the MediaTek networking driver. Product: Android. Versions: Android kernel. Android ID: A-36099953. References: M-ALPS03206781.

CVE-2017-0794 [HIGH] CWE-362 CVE-2017-0794: A elevation of privilege vulnerability in the Upstream kernel scsi driver. Product: Android. Version A elevation of privilege vulnerability in the Upstream kernel scsi driver. Product: Android. Versions: Android kernel. Android ID: A-35644812.

CVE-2017-0827 [HIGH] CVE-2017-0827: An elevation of privilege vulnerability in the MediaTek soc driver. Product: Android. Versions: Andr An elevation of privilege vulnerability in the MediaTek soc driver. Product: Android. Versions: Android kernel. Android ID: A-62539960. References: M-ALPS03353876, M-ALPS03353861, M-ALPS03353869, M-ALPS03353867, M-ALPS03353872.

CVE-2017-0796 [HIGH] CVE-2017-0796: A elevation of privilege vulnerability in the MediaTek auxadc driver. Product: Android. Versions: An A elevation of privilege vulnerability in the MediaTek auxadc driver. Product: Android. Versions: Android kernel. Android ID: A-62458865. References: M-ALPS03353884, M-ALPS03353886, M-ALPS03353887.

CVE-2017-0797 [HIGH] CVE-2017-0797: A elevation of privilege vulnerability in the MediaTek accessory detector driver. Product: Android. A elevation of privilege vulnerability in the MediaTek accessory detector driver. Product: Android. Versions: Android kernel. Android ID: A-62459766. References: M-ALPS03353854.