CVSS: 7.6EPSS: 0%CPEs: 3EXPL: 0CVE-2017-0465
https://notcve.org/view.php?id=CVE-2017-0465
An elevation of privilege vulnerability in the Qualcomm ADSPRPC driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34112914. • http://www.securityfocus.com/bid/98184 https://source.android.com/security/bulletin/2017-05-01 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 7.6EPSS: 0%CPEs: 1EXPL: 0CVE-2017-0616
https://notcve.org/view.php?id=CVE-2017-0616
An elevation of privilege vulnerability in the MediaTek system management interrupt driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-34470286. • http://www.securityfocus.com/bid/98189 https://source.android.com/security/bulletin/2017-05-01 •
CVSS: 7.6EPSS: 0%CPEs: 1EXPL: 0CVE-2017-0618
https://notcve.org/view.php?id=CVE-2017-0618
An elevation of privilege vulnerability in the MediaTek command queue driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-35100728. • http://www.securityfocus.com/bid/98191 https://source.android.com/security/bulletin/2017-05-01 •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2017-0625
https://notcve.org/view.php?id=CVE-2017-0625
An information disclosure vulnerability in the MediaTek command queue driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: N/A. Android ID: A-35142799. • http://www.securityfocus.com/bid/98201 https://source.android.com/security/bulletin/2017-05-01 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.6EPSS: 0%CPEs: 1EXPL: 0CVE-2017-0617
https://notcve.org/view.php?id=CVE-2017-0617
An elevation of privilege vulnerability in the MediaTek video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-34471002. • http://www.securityfocus.com/bid/98190 https://source.android.com/security/bulletin/2017-05-01 •