CVE-2017-0569 – Broadcom Wi-Fi SoC - 'dhd_handle_swc_evt' Heap Overflow
https://notcve.org/view.php?id=CVE-2017-0569
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34198729. • https://www.exploit-db.com/exploits/41808 http://www.securityfocus.com/bid/97331 http://www.securitytracker.com/id/1038201 https://source.android.com/security/bulletin/2017-04-01 • CWE-131: Incorrect Calculation of Buffer Size •
CVE-2017-0575
https://notcve.org/view.php?id=CVE-2017-0575
An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32658595. • http://www.securityfocus.com/bid/97403 http://www.securitytracker.com/id/1038201 https://source.android.com/security/bulletin/2017-04-01 •
CVE-2017-0579
https://notcve.org/view.php?id=CVE-2017-0579
An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34125463. • http://www.securityfocus.com/bid/97339 http://www.securitytracker.com/id/1038201 https://source.android.com/security/bulletin/2017-04-01 •
CVE-2017-0576
https://notcve.org/view.php?id=CVE-2017-0576
An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33544431. • http://www.securityfocus.com/bid/97395 http://www.securitytracker.com/id/1038201 https://github.com/derrekr/android_security/commit/0dd1a733e60cf5239c0a185d4219ba2ef1118a8b https://source.android.com/security/bulletin/2017-04-01 • CWE-190: Integer Overflow or Wraparound •
CVE-2017-0586
https://notcve.org/view.php?id=CVE-2017-0586
An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33649808. • http://www.securityfocus.com/bid/97357 http://www.securitytracker.com/id/1038201 https://source.android.com/security/bulletin/2017-04-01 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •