PT-2017-1395

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10, Kernel-3.18 Description An information disclosure issue in the Qualcomm Wi-Fi driver could allow a local malicious application to access data outside of its permission levels, requiring a privileged process to be...

PT-2017-1403

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to insufficient access control in the MediaTek APK of the Android operating system. It allows a remote attacker to execute arbitrary code in the context of a privileged...

PT-2017-1390

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10, Kernel-3.18 Description An information disclosure issue in the Synaptics touchscreen driver could allow a local malicious application to access data outside of its permission levels. This issue requires compromisi...

PT-2017-1397

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.18 Description The issue is related to insufficient access control in the Android operating system's kernel security subsystem. It allows a remote attacker, using a local malicious application, to execute code in the...

PT-2017-1393

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.18 Description The issue is related to an information disclosure vulnerability in the Qualcomm video driver, which could allow a local malicious application to access data outside of its permission levels. This could...

PT-2017-1389

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.18 Description An information disclosure issue in the kernel USB gadget driver could allow a local malicious application to access data outside of its permission levels. This issue requires compromising a privileged...

CVE-2016-8405

An information disclosure vulnerability in Linux kernel could enable a local malicious application to access data outside of its permission levels. To exploit the flaw it is first required to compromise a privileged process...

Android Data Access

Vulnerabilities of kernel components, including the ION subsystem, Binder, USB driver, and the network subsystem of the Android operating system, are related to the lack of protection for sensitive data. Exploiting these vulnerabilities can allow a malicious actor to gain access to local maliciou...

Android Code Execution

The vulnerability in the audio driver of the Qualcomm Android operating system is related to access control deficiencies. Exploiting this vulnerability allows a remote attacker to execute arbitrary code of a local malicious application within the kernel context. This issue is considered “high”...

CVE-2017-0451

An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10,...

CVE-2017-0446

An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2017-0447

An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2017-0433

An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the touchscreen chipset. This issue is rated as High because it first requires compromising a privileged process. Product: Android...

CVE-2017-0419

An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally...

CVE-2017-0438

An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2017-0442

An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

UBUNTU-CVE-2017-0443

An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

UBUNTU-CVE-2017-0446

An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

UBUNTU-CVE-2017-0447

An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

Privilege escalation

An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally...