Google Inc Android vulnerabilities

CVE-2017-0826 [HIGH] CVE-2017-0826: An elevation of privilege vulnerability in the HTC bootloader. Product: Android. Versions: Android k An elevation of privilege vulnerability in the HTC bootloader. Product: Android. Versions: Android kernel. Android ID: A-34949781.

CVE-2016-8399 [HIGH] CWE-284 CVE-2016-8399: An elevation of privilege vulnerability in the kernel networking subsystem could enable a local mali An elevation of privilege vulnerability in the kernel networking subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and current compiler optimizations restrict access to the vulnerable code. Product: A

CVE-2016-8443 [HIGH] CWE-285 CVE-2016-8443: Possible unauthorized memory access in the hypervisor. Incorrect configuration provides access to su Possible unauthorized memory access in the hypervisor. Incorrect configuration provides access to subsystem page tables. Product: Android. Versions: Kernel 3.18. Android ID: A-32576499. References: QC-CR#964185.

CVE-2015-9015 [HIGH] CWE-264 CVE-2015-9015: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Vers An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36714120.

CVE-2017-0431 [HIGH] CVE-2017-0431: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Vers An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-32573899.

CVE-2018-9524 [HIGH] CWE-1021 CVE-2018-9524: In functionality implemented in System UI, there are insufficient protections implemented around ove In functionality implemented in System UI, there are insufficient protections implemented around overlay windows. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1. Andro

CVE-2017-13154 [HIGH] CWE-416 CVE-2017-13154: An elevation of privilege vulnerability in the Android media framework (libstagefright). Product: An An elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-63666573.

CVE-2017-0838 [HIGH] CVE-2017-0838: An elevation of privilege vulnerability in the Android media framework (libstagefright). Product: An An elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-63522818.

CVE-2017-0582 [HIGH] CVE-2017-0582: An elevation of privilege vulnerability in the HTC OEM fastboot command could enable a local malicio An elevation of privilege vulnerability in the HTC OEM fastboot command could enable a local malicious application to execute arbitrary code within the context of the sensor hub. This issue is rated as Moderate because it first requires exploitation of separate vulnerabilities. Product: Android. Versions: Kernel-3.10. Android ID: A-33178836.

CVE-2017-0389 [HIGH] CWE-20 CVE-2017-0389: A denial of service vulnerability in core networking could enable a remote attacker to use specially A denial of service vulnerability in core networking could enable a remote attacker to use specially crafted network packet to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1. Android ID: A-31850211.

CVE-2016-8486 [HIGH] CWE-200 CVE-2016-8486: An information disclosure vulnerability in Qualcomm closed source components. Product: Android. Vers An information disclosure vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823691.

CVE-2016-8485 [HIGH] CWE-200 CVE-2016-8485: An information disclosure vulnerability in Qualcomm closed source components. Product: Android. Vers An information disclosure vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823681.

CVE-2017-13222 [HIGH] CWE-200 CVE-2017-13222: An information disclosure vulnerability in the Upstream kernel kernel. Product: Android. Versions: A An information disclosure vulnerability in the Upstream kernel kernel. Product: Android. Versions: Android kernel. Android ID: A-38159576.

CVE-2017-13246 [HIGH] CWE-200 CVE-2017-13246: A information disclosure vulnerability in the Upstream kernel network driver. Product: Android. Vers A information disclosure vulnerability in the Upstream kernel network driver. Product: Android. Versions: Android kernel. ID: A-36279469.

CVE-2017-13164 [HIGH] CWE-200 CVE-2017-13164: An information disclosure vulnerability in the kernel binder driver. Product: Android. Versions: And An information disclosure vulnerability in the kernel binder driver. Product: Android. Versions: Android kernel. Android ID A-36007193.

CVE-2017-13169 [HIGH] CWE-200 CVE-2017-13169: An information disclosure vulnerability in the kernel camera server. Product: Android. Versions: And An information disclosure vulnerability in the kernel camera server. Product: Android. Versions: Android kernel. Android ID A-37512375.

CVE-2017-0403 [HIGH] CVE-2017-0403: An elevation of privilege vulnerability in the kernel performance subsystem could enable a local mal An elevation of privilege vulnerability in the kernel performance subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32402548.

CVE-2017-0404 [HIGH] CVE-2017-0404: An elevation of privilege vulnerability in the kernel sound subsystem could enable a local malicious An elevation of privilege vulnerability in the kernel sound subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32510733.

CVE-2017-13307 [HIGH] CVE-2017-13307: A elevation of privilege vulnerability in the Upstream kernel pci sysfs. Product: Android. Versions: A elevation of privilege vulnerability in the Upstream kernel pci sysfs. Product: Android. Versions: Android kernel. Android ID: A-69128924.

CVE-2017-13265 [HIGH] CVE-2017-13265: A elevation of privilege vulnerability in the Android system (OTA updates). Product: Android. Versio A elevation of privilege vulnerability in the Android system (OTA updates). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-36232423.