Google Inc Android vulnerabilities

CVE-2016-6780 [HIGH] CWE-284 CVE-2016-6780: An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31251496.

CVE-2016-6778 [HIGH] CWE-284 CVE-2016-6778: An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31384646.

CVE-2016-8412 [HIGH] CWE-284 CVE-2016-8412: An elevation of privilege vulnerability in the Qualcomm camera could enable a local malicious applic An elevation of privilege vulnerability in the Qualcomm camera could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31225246. References: QC-CR#1071

CVE-2016-8435 [HIGH] CWE-284 CVE-2016-8435: An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious appl An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Ve

CVE-2016-8434 [HIGH] CWE-284 CVE-2016-8434: An elevation of privilege vulnerability in the Qualcomm GPU driver could enable a local malicious ap An elevation of privilege vulnerability in the Qualcomm GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android.

CVE-2017-0813 [HIGH] CWE-772 CVE-2017-0813: A denial of service vulnerability in the Android media framework (libstagefright). Product: Android. A denial of service vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36531046.

CVE-2016-10235 [HIGH] CWE-20 CVE-2016-10235: A denial of service vulnerability in the Qualcomm WiFi driver. Product: Android. Versions: Android k A denial of service vulnerability in the Qualcomm WiFi driver. Product: Android. Versions: Android kernel. Android ID: A-34390620. References: QC-CR#1046409.

CVE-2017-0858 [HIGH] CWE-20 CVE-2017-0858: Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64836894.

CVE-2017-13186 [HIGH] CWE-20 CVE-2017-13186: A vulnerability in the Android media framework (libavc) related to incorrect use of mmco parameters. A vulnerability in the Android media framework (libavc) related to incorrect use of mmco parameters. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65735716.

CVE-2017-0857 [HIGH] CWE-369 CVE-2017-0857: Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-65122447.

CVE-2017-13254 [HIGH] CVE-2017-13254: A other vulnerability in the Android media framework (AACExtractor). Product: Android. Versions: 6.0 A other vulnerability in the Android media framework (AACExtractor). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70239507.

CVE-2017-0859 [HIGH] CVE-2017-0859: Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36075131.

CVE-2017-13264 [HIGH] CVE-2017-13264: A other vulnerability in the Android media framework (Avcdec). Product: Android. Versions: 6.0, 6.0. A other vulnerability in the Android media framework (Avcdec). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70294343.

CVE-2017-13299 [HIGH] CVE-2017-13299: A other vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0. A other vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70897394.

CVE-2017-13175 [HIGH] CWE-200 CVE-2017-13175: An information disclosure vulnerability in the NVIDIA libwilhelm. Product: Android. Versions: Androi An information disclosure vulnerability in the NVIDIA libwilhelm. Product: Android. Versions: Android kernel. Android ID A-64339309. References: N-CVE-2017-13175.

CVE-2016-6785 [HIGH] CWE-284 CVE-2016-6785: An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious applic An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31748056. References: MT-ALPS02961400.

CVE-2016-6782 [HIGH] CWE-284 CVE-2016-6782: An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious applic An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31224389. References: MT-ALPS02943506.

CVE-2016-6781 [HIGH] CWE-284 CVE-2016-6781: An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious applic An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31095175. References: MT-ALPS02943455.

CVE-2016-8452 [HIGH] CWE-264 CVE-2016-8452: An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32506396. References: QC-CR

CVE-2016-8450 [HIGH] CWE-264 CVE-2016-8450: An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-32450563. References: QC-CR#880388.