CVE-2016-10293

CVE-2016-10293 is an information-disclosure flaw in the Qualcomm video driver on Android (Kernel-3.10). A local malicious app could access data beyond its permissions by exploiting the driver when a privileged process is compromised. The vulnerability is listed for Nexus 5X, Nexus 6P, and Android...

CVE-2016-10281

An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A...

CVE-2017-0634

An information disclosure vulnerability in the Synaptics touchscreen driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2016-10284

An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2016-10286

An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2016-10282

CVE-2016-10282 is an elevation of privilege in the MediaTek thermal driver on Android. A local malicious application could execute arbitrary code in the kernel context by exploiting this driver after compromising a privileged process. Affected component: MediaTek thermal driver (Android). The pro...

CVE-2017-0617

An elevation of privilege vulnerability in the MediaTek video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A...

PT-2017-7847

Name of the Vulnerable Software and Affected Versions Android versions prior to the version that includes the fix for this issue Description An information disclosure issue in the Qualcomm LED driver could allow a local malicious application to access data outside of its permission levels. This...

PT-2017-10573

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description An information disclosure issue in the MediaTek command queue driver could allow a local malicious application to access data outside of its permission levels. This could be used to access...

CVE-2016-10287: Undefined Security Weakness

An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2017-0634: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in the Synaptics touchscreen driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2017-0624: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android...

CVE-2017-0623: Undefined Security Weakness

An elevation of privilege vulnerability in the HTC bootloader could enable a local malicious application to execute arbitrary code within the context of the bootloader. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18...

CVE-2017-0629: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10,...

PT-2017-10568

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 Description An information disclosure issue in the Framework APIs could allow a local malicious application to bypass operating system protections, potentially gaining access ...

Google Android kernel UVC driver information disclosure vulnerability

Androidon Nexus5X, etc. are the United States Google Google and the Open Handheld Alliance OHA jointly developed a set of running in the Nexus5X smartphone and Linux-based open source operating system. kernel UVC Driver one of the kernel USB Video Capture Driver. An information disclosure...

Google Android Kernel Trace Subsystem Information Disclosure Vulnerability

Android on Nexus 5X is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for the Nexus 5X and other smart devices. kernel trace subsystem is a component of the kernel trace system that is used in it. An information disclosure vulnerability exists in...

Android Code Execution

The vulnerability of MediaTek’s sensor display driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code within the kernel context, through a local malicious...

Android Data Compromise

The vulnerability of the Android operating system’s Wi-Fi driver is related to the lack of protection for service data. Exploiting this vulnerability allows a remote attacker to compromise data confidentiality through a local malicious application...

Gynoii Privilege Acquisition Vulnerability

Gynoii is a video monitoring device for babies. A privilege acquisition vulnerability exists in Gynoii. An attacker could use this vulnerability to gain access to a local application...