CVSS: 5.5EPSS: 0%CPEs: 27EXPL: 0CVE-2017-0395
https://notcve.org/view.php?id=CVE-2017-0395
An elevation of privilege vulnerability in Contacts could enable a local malicious application to silently create contact information. This issue is rated as Moderate because it is a local bypass of user interaction requirements (access to functionality that would normally require either user initiation or user permission). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32219099. • http://www.securityfocus.com/bid/95261 https://source.android.com/security/bulletin/2017-01-01.html •
CVSS: 9.3EPSS: 0%CPEs: 2EXPL: 0CVE-2016-8436
https://notcve.org/view.php?id=CVE-2016-8436
An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-32450261. • http://www.securityfocus.com/bid/95259 https://source.android.com/security/bulletin/2017-01-01.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 9.3EPSS: 0%CPEs: 2EXPL: 0CVE-2017-0383
https://notcve.org/view.php?id=CVE-2017-0383
An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 7.0, 7.1. Android ID: A-31677614. • http://www.securityfocus.com/bid/95243 https://source.android.com/security/bulletin/2017-01-01.html • CWE-190: Integer Overflow or Wraparound •
CVSS: 9.3EPSS: 0%CPEs: 10EXPL: 0CVE-2017-0387
https://notcve.org/view.php?id=CVE-2017-0387
An elevation of privilege vulnerability in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32660278. • http://www.securityfocus.com/bid/95258 https://source.android.com/security/bulletin/2017-01-01.html •
CVSS: 7.8EPSS: 0%CPEs: 10EXPL: 0CVE-2017-0382
https://notcve.org/view.php?id=CVE-2017-0382
A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses the Framesequence library. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32338390. • http://www.securityfocus.com/bid/95247 https://source.android.com/security/bulletin/2017-01-01.html •