CVSS: 7.8EPSS: 0%CPEs: 10EXPL: 0CVE-2017-0394
https://notcve.org/view.php?id=CVE-2017-0394
12 Jan 2017 — A denial of service vulnerability in Telephony could enable a remote attacker to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-31752213. • http://www.securityfocus.com/bid/95255 •
CVSS: 4.7EPSS: 0%CPEs: 1EXPL: 0CVE-2016-8470
https://notcve.org/view.php?id=CVE-2016-8470
12 Jan 2017 — An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31528889. • http://www.securityfocus.com/bid/95235 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 9.3EPSS: 0%CPEs: 10EXPL: 0CVE-2017-0386
https://notcve.org/view.php?id=CVE-2017-0386
12 Jan 2017 — An elevation of privilege vulnerability in the libnl library could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32255299. • http://www.securityfocus.com/bid/95256 •
CVSS: 7.1EPSS: 0%CPEs: 27EXPL: 0CVE-2017-0393 – libvpx: Denial of service in mediaserver
https://notcve.org/view.php?id=CVE-2017-0393
12 Jan 2017 — A denial of service vulnerability in libvpx in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-30436808. • http://www.securityfocus.com/bid/95230 • CWE-400: Uncontrolled Resource Consumption •
CVSS: 5.5EPSS: 0%CPEs: 24EXPL: 0CVE-2017-0400
https://notcve.org/view.php?id=CVE-2017-0400
12 Jan 2017 — An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32584034. • http://www.securityfocus.com/bid/95226 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.5EPSS: 0%CPEs: 27EXPL: 0CVE-2017-0397
https://notcve.org/view.php?id=CVE-2017-0397
12 Jan 2017 — An information disclosure vulnerability in id3/ID3.cpp in libstagefright in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32377688. • http://www.securityfocus.com/bid/95232 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 9.3EPSS: 0%CPEs: 2EXPL: 0CVE-2016-8436
https://notcve.org/view.php?id=CVE-2016-8436
12 Jan 2017 — An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-32450261. • http://www.securityfocus.com/bid/95259 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 4.7EPSS: 0%CPEs: 1EXPL: 0CVE-2016-8472
https://notcve.org/view.php?id=CVE-2016-8472
12 Jan 2017 — An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31531758. • http://www.securityfocus.com/bid/95235 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 9.3EPSS: 0%CPEs: 27EXPL: 0CVE-2017-0385
https://notcve.org/view.php?id=CVE-2017-0385
12 Jan 2017 — An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32585400. • http://www.securityfocus.com/bid/95239 •
CVSS: 7.1EPSS: 0%CPEs: 27EXPL: 0CVE-2017-0392
https://notcve.org/view.php?id=CVE-2017-0392
12 Jan 2017 — A denial of service vulnerability in VBRISeeker.cpp in libstagefright in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32577290. • http://www.securityfocus.com/bid/95230 •