Google Inc Android vulnerabilities

CVE-2017-0669 [MEDIUM] CWE-200 CVE-2017-0669: A information disclosure vulnerability in the Android framework. Product: Android. Versions: 6.0, 6. A information disclosure vulnerability in the Android framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34114752.

CVE-2017-0668 [MEDIUM] CWE-200 CVE-2017-0668: A information disclosure vulnerability in the Android framework. Product: Android. Versions: 4.4.4, A information disclosure vulnerability in the Android framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-22011579.

CVE-2017-0779 [MEDIUM] CWE-200 CVE-2017-0779: A information disclosure vulnerability in the Android media framework (audioflinger). Product: Andro A information disclosure vulnerability in the Android media framework (audioflinger). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-38340117.

CVE-2017-0698 [MEDIUM] CWE-200 CVE-2017-0698: A information disclosure vulnerability in the Android media framework. Product: Android. Versions: 6 A information disclosure vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35467458.

CVE-2017-0699 [MEDIUM] CWE-200 CVE-2017-0699: A information disclosure vulnerability in the Android media framework. Product: Android. Versions: 6 A information disclosure vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36490809.

CVE-2017-0498 [MEDIUM] CVE-2017-0498: A denial of service vulnerability in Setup Wizard could allow a local attacker to require Google acc A denial of service vulnerability in Setup Wizard could allow a local attacker to require Google account sign-in after a factory reset. This issue is rated as Moderate because it may require a factory reset to repair the device. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-30352311.

CVE-2017-0584 [MEDIUM] CWE-200 CVE-2017-0584: An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32074353. References: QC-CR#1104

CVE-2017-0586 [MEDIUM] CWE-200 CVE-2017-0586: An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33649808. References: QC-CR#1097

CVE-2017-0537 [MEDIUM] CWE-200 CVE-2017-0537: An information disclosure vulnerability in the kernel USB gadget driver could enable a local malicio An information disclosure vulnerability in the kernel USB gadget driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-31614969.

CVE-2016-8407 [MEDIUM] CWE-200 CVE-2016-8407: An information disclosure vulnerability in kernel components including the ION subsystem, Binder, US An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel

CVE-2016-8403 [MEDIUM] CWE-200 CVE-2016-8403: An information disclosure vulnerability in kernel components including the ION subsystem, Binder, US An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel

CVE-2016-8402 [MEDIUM] CWE-200 CVE-2016-8402: An information disclosure vulnerability in kernel components including the ION subsystem, Binder, US An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel

CVE-2016-8401 [MEDIUM] CWE-200 CVE-2016-8401: An information disclosure vulnerability in kernel components including the ION subsystem, Binder, US An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel

CVE-2016-8406 [MEDIUM] CWE-200 CVE-2016-8406: An information disclosure vulnerability in kernel components including the ION subsystem, Binder, US An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel

CVE-2016-8416 [MEDIUM] CWE-200 CVE-2016-8416: An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32510746. References: QC-CR#1088206.

CVE-2016-8478 [MEDIUM] CWE-200 CVE-2016-8478: An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32511270. References: QC-CR#1088206.

CVE-2017-0452 [MEDIUM] CWE-200 CVE-2017-0452: An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Low because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-32873615. References: QC-CR#1093693.

CVE-2017-0651 [MEDIUM] CWE-200 CVE-2017-0651: An information disclosure vulnerability in the kernel ION subsystem could enable a local malicious a An information disclosure vulnerability in the kernel ION subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Low because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-35644815.

CVE-2018-9438 [MEDIUM] CVE-2018-9438: When a device connects only over WiFi VPN, the device may not receive security updates due to some i When a device connects only over WiFi VPN, the device may not receive security updates due to some incorrect checks. This could lead to a local denial of service of security updates with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.1 Android ID: A-78644887.

CVE-2016-10295 [MEDIUM] CWE-200 CVE-2016-10295: An information disclosure vulnerability in the Qualcomm LED driver could enable a local malicious ap An information disclosure vulnerability in the Qualcomm LED driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-33781694. References: QC-CR#1109326.