Google Inc Android vulnerabilities

CVE-2017-0518 [HIGH] CVE-2017-0518: An elevation of privilege vulnerability in the Qualcomm fingerprint sensor driver could enable a loc An elevation of privilege vulnerability in the Qualcomm fingerprint sensor driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32370896. References: QC-CR#108653

CVE-2017-0516 [HIGH] CVE-2017-0516: An elevation of privilege vulnerability in the Qualcomm input hardware driver could enable a local m An elevation of privilege vulnerability in the Qualcomm input hardware driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32341680. References: QC-

CVE-2017-13189 [HIGH] CWE-770 CVE-2017-13189: A vulnerability in the Android media framework (libavc) related to handling dec_hdl memory allocatio A vulnerability in the Android media framework (libavc) related to handling dec_hdl memory allocation failures. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68300072.

CVE-2017-13190 [HIGH] CWE-770 CVE-2017-13190: A vulnerability in the Android media framework (libhevc) related to handling ps_codec_obj memory all A vulnerability in the Android media framework (libhevc) related to handling ps_codec_obj memory allocation failures. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68299873.

CVE-2016-10283 [HIGH] CWE-264 CVE-2016-10283: An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32094986. References: QC-

CVE-2017-0825 [HIGH] CWE-200 CVE-2017-0825: An information disclosure vulnerability in the Broadcom wifi driver. Product: Android. Versions: And An information disclosure vulnerability in the Broadcom wifi driver. Product: Android. Versions: Android kernel. Android ID: A-37305633. References: B-V2017063002.

CVE-2017-13200 [HIGH] CWE-200 CVE-2017-13200: An information disclosure vulnerability in the Android media framework (av) related to id3 unsynchro An information disclosure vulnerability in the Android media framework (av) related to id3 unsynchronization. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-63100526.

CVE-2017-13239 [HIGH] CWE-200 CVE-2017-13239: A information disclosure vulnerability in the Android framework (ui framework). Product: Android. Ve A information disclosure vulnerability in the Android framework (ui framework). Product: Android. Versions: 8.0. ID: A-66244132.

CVE-2017-0846 [HIGH] CWE-200 CVE-2017-0846: An information disclosure vulnerability in the Android framework (clipboardservice). Product: Androi An information disclosure vulnerability in the Android framework (clipboardservice). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64934810.

CVE-2017-13152 [HIGH] CWE-200 CVE-2017-13152: An information disclosure vulnerability in the Android media framework (libmedia drm). Product: Andr An information disclosure vulnerability in the Android media framework (libmedia drm). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-62872384.

CVE-2017-0403 [HIGH] CVE-2017-0403: An elevation of privilege vulnerability in the kernel performance subsystem could enable a local mal An elevation of privilege vulnerability in the kernel performance subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32402548.

CVE-2017-0404 [HIGH] CVE-2017-0404: An elevation of privilege vulnerability in the kernel sound subsystem could enable a local malicious An elevation of privilege vulnerability in the kernel sound subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32510733.

CVE-2017-0458 [HIGH] CWE-20 CVE-2017-0458: An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32588962. References: QC-CR#1089433.

CVE-2017-0519 [HIGH] CVE-2017-0519: An elevation of privilege vulnerability in the Qualcomm fingerprint sensor driver could enable a loc An elevation of privilege vulnerability in the Qualcomm fingerprint sensor driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32372915. References: QC-CR#108653

CVE-2017-0854 [CRITICAL] CWE-125 CVE-2017-0854: An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Vers An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63873837.

CVE-2017-0853 [CRITICAL] CVE-2017-0853: An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Vers An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63121644.

CVE-2017-13150 [CRITICAL] CWE-200 CVE-2017-13150: An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Vers An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-38328132.

CVE-2017-13149 [CRITICAL] CWE-200 CVE-2017-13149: An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Vers An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-65719872.

CVE-2017-0381 [HIGH] CWE-190 CVE-2017-0381: An information disclosure vulnerability in silk/NLSF_stabilize.c in libopus in Mediaserver could ena An information disclosure vulnerability in silk/NLSF_stabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Androi

CVE-2017-0814 [HIGH] CWE-200 CVE-2017-0814: An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Vers An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62800140.