Google Inc Android vulnerabilities

CVE-2017-13201 [HIGH] CWE-200 CVE-2017-13201: An information disclosure vulnerability in the Android media framework (mediadrm). Product: Android. An information disclosure vulnerability in the Android media framework (mediadrm). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-63982768.

CVE-2017-0518 [HIGH] CVE-2017-0518: An elevation of privilege vulnerability in the Qualcomm fingerprint sensor driver could enable a loc An elevation of privilege vulnerability in the Qualcomm fingerprint sensor driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32370896. References: QC-CR#108653

CVE-2017-0516 [HIGH] CVE-2017-0516: An elevation of privilege vulnerability in the Qualcomm input hardware driver could enable a local m An elevation of privilege vulnerability in the Qualcomm input hardware driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32341680. References: QC-

CVE-2017-0444 [HIGH] CVE-2017-0444: An elevation of privilege vulnerability in the Realtek sound driver could enable a local malicious a An elevation of privilege vulnerability in the Realtek sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-32705232.

CVE-2016-10283 [HIGH] CWE-264 CVE-2016-10283: An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32094986. References: QC-

CVE-2017-0825 [HIGH] CWE-200 CVE-2017-0825: An information disclosure vulnerability in the Broadcom wifi driver. Product: Android. Versions: And An information disclosure vulnerability in the Broadcom wifi driver. Product: Android. Versions: Android kernel. Android ID: A-37305633. References: B-V2017063002.

CVE-2017-13200 [HIGH] CWE-200 CVE-2017-13200: An information disclosure vulnerability in the Android media framework (av) related to id3 unsynchro An information disclosure vulnerability in the Android media framework (av) related to id3 unsynchronization. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-63100526.

CVE-2017-13239 [HIGH] CWE-200 CVE-2017-13239: A information disclosure vulnerability in the Android framework (ui framework). Product: Android. Ve A information disclosure vulnerability in the Android framework (ui framework). Product: Android. Versions: 8.0. ID: A-66244132.

CVE-2017-0846 [HIGH] CWE-200 CVE-2017-0846: An information disclosure vulnerability in the Android framework (clipboardservice). Product: Androi An information disclosure vulnerability in the Android framework (clipboardservice). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64934810.

CVE-2017-13152 [HIGH] CWE-200 CVE-2017-13152: An information disclosure vulnerability in the Android media framework (libmedia drm). Product: Andr An information disclosure vulnerability in the Android media framework (libmedia drm). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-62872384.

CVE-2016-8465 [HIGH] CWE-264 CVE-2016-8465: An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and is mitigated by current platform configurations. Product: Android. Versions: Kernel-3.10

CVE-2017-0458 [HIGH] CWE-20 CVE-2017-0458: An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32588962. References: QC-CR#1089433.

CVE-2017-0613 [HIGH] CWE-20 CVE-2017-0613: An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator dr An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Andro

CVE-2017-0524 [HIGH] CVE-2017-0524: An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local mal An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33002026.

CVE-2017-0456 [HIGH] CVE-2017-0456: An elevation of privilege vulnerability in the Qualcomm IPA driver could enable a local malicious ap An elevation of privilege vulnerability in the Qualcomm IPA driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33106520. References: QC-CR#1099598.

CVE-2017-0519 [HIGH] CVE-2017-0519: An elevation of privilege vulnerability in the Qualcomm fingerprint sensor driver could enable a loc An elevation of privilege vulnerability in the Qualcomm fingerprint sensor driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32372915. References: QC-CR#108653

CVE-2017-0576 [HIGH] CWE-190 CVE-2017-0576: An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local ma An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33544431. Referenc

CVE-2016-8464 [HIGH] CWE-264 CVE-2016-8464: An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and is mitigated by current platform configurations. Product: Android. Versions: Kernel-3.10

CVE-2016-8457 [HIGH] CWE-264 CVE-2016-8457: An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32219453. References: B-RB#

CVE-2016-8456 [HIGH] CWE-264 CVE-2016-8456: An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32219255. References: B-RB#