CVSS: 9.3EPSS: 0%CPEs: 29EXPL: 0CVE-2017-0722
https://notcve.org/view.php?id=CVE-2017-0722
09 Aug 2017 — A remote code execution vulnerability in the Android media framework (h263 decoder). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37660827. Existe una na vulnerabilidad de ejecución remota de código en el media framework de Android (decodificador h263). • http://www.securityfocus.com/bid/100204 •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1CVE-2015-3839
https://notcve.org/view.php?id=CVE-2015-3839
07 Aug 2017 — The updateMessageStatus function in Android 5.1.1 and earlier allows local users to cause a denial of service (NULL pointer exception and process crash). La función updateMessageStatus en Android 5.1.1 y anteriores permite que usuarios locales provoquen una denegación de servicio (excepción de puntero nulo y caída de procesos). • https://github.com/mabin004/cve-2015-3839_PoC • CWE-476: NULL Pointer Dereference •
CVSS: 7.6EPSS: 0%CPEs: 1EXPL: 0CVE-2017-6249
https://notcve.org/view.php?id=CVE-2017-6249
13 Jul 2017 — An elevation of privilege vulnerability in the NVIDIA sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-34373711. • http://www.securityfocus.com/bid/99616 •
CVSS: 6.9EPSS: 0%CPEs: 21EXPL: 0CVE-2017-3750
https://notcve.org/view.php?id=CVE-2017-3750
29 Jun 2017 — On Lenovo VIBE mobile phones, the Lenovo Security Android application allows private data to be backed up and restored via Android Debug Bridge, which allows tampering leading to privilege escalation in conjunction with CVE-2017-3748 and CVE-2017-3749. En los teléfonos móviles Lenovo VIBE, la aplicación de Android Lenovo Security permite que los datos privados se copien y restauren mediante Android Debug Bridge, lo que permite la falsificación que conduce a un escalado de privilegios junto con CVE-2017-3748... • https://support.lenovo.com/us/en/product_security/LEN-15823 •
CVSS: 7.8EPSS: 0%CPEs: 21EXPL: 0CVE-2017-3748
https://notcve.org/view.php?id=CVE-2017-3748
29 Jun 2017 — On Lenovo VIBE mobile phones, improper access controls on the nac_server component can be abused in conjunction with CVE-2017-3749 and CVE-2017-3750 to elevate privileges to the root user (commonly known as 'rooting' or "jail breaking" a device). En los teléfonos móviles Lenovo VIBE, los controles de acceso incorrectos en el componente nac_server puede emplearse junto con CVE-2017-3749 y CVE-2017-3750 para elevar los privilegios a usuario root (conocido comúnmente como "rooting" o "jail breaking" de un disp... • http://www.securityfocus.com/bid/99295 •
CVSS: 6.9EPSS: 0%CPEs: 21EXPL: 0CVE-2017-3749
https://notcve.org/view.php?id=CVE-2017-3749
29 Jun 2017 — On Lenovo VIBE mobile phones, the Idea Friend Android application allows private data to be backed up and restored via Android Debug Bridge, which allows tampering leading to privilege escalation in conjunction with CVE-2017-3748 and CVE-2017-3750. En los teléfonos móviles Lenovo VIBE, la aplicación de Android Idea Friend permite que los datos privados se copien y restauren mediante Android Debug Bridge, lo que permite la falsificación que conduce a un escalado de privilegios junto con CVE-2017-3748 y CVE-2... • https://support.lenovo.com/us/en/product_security/LEN-15823 •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1CVE-2015-3840
https://notcve.org/view.php?id=CVE-2015-3840
27 Jun 2017 — The MessageStatusReceiver service in the AndroidManifest.XML in Android 5.1.1 and earlier allows local users to alter sent/received statuses of SMS and MMS messages without the associated "WRITE_SMS" permission. El servicio MessageStatusReceiver en AndroidManifest.XML en Android 5.1.1 y versiones anteriores permite a usuarios locales alterar los estados de mensajes SMS y MMS enviados / recibidos sin el permiso "WRITE_SMS" asociado. • http://blog.trendmicro.com/trendlabs-security-intelligence/os-x-zero-days-on-the-rise-a-2015-midyear-review-on-advanced-attack-surfaces • CWE-284: Improper Access Control •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2016-10275
https://notcve.org/view.php?id=CVE-2016-10275
12 May 2017 — An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-34514954. • http://www.securityfocus.com/bid/98146 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 9.3EPSS: 0%CPEs: 29EXPL: 0CVE-2017-0596
https://notcve.org/view.php?id=CVE-2017-0596
12 May 2017 — An elevation of privilege vulnerability in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-34749392. • http://www.securityfocus.com/bid/98130 •
CVSS: 9.3EPSS: 0%CPEs: 29EXPL: 0CVE-2017-0594
https://notcve.org/view.php?id=CVE-2017-0594
12 May 2017 — An elevation of privilege vulnerability in codecs/aacenc/SoftAACEncoder2.cpp in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34617444. • http://www.securityfocus.com/bid/98128 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •