CVE-2016-8473
https://notcve.org/view.php?id=CVE-2016-8473
An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31795790. • http://www.securityfocus.com/bid/95233 https://source.android.com/security/bulletin/2017-01-01.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVE-2016-8456
https://notcve.org/view.php?id=CVE-2016-8456
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32219255. • http://www.securityfocus.com/bid/95240 https://source.android.com/security/bulletin/2017-01-01.html • CWE-264: Permissions, Privileges, and Access Controls •
CVE-2016-8434
https://notcve.org/view.php?id=CVE-2016-8434
An elevation of privilege vulnerability in the Qualcomm GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-32125137. • http://www.securityfocus.com/bid/95257 https://source.android.com/security/bulletin/2017-01-01.html • CWE-284: Improper Access Control •
CVE-2016-8394
https://notcve.org/view.php?id=CVE-2016-8394
An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31913197. • http://www.securityfocus.com/bid/94682 https://source.android.com/security/bulletin/2016-12-01.html • CWE-284: Improper Access Control •
CVE-2016-8409
https://notcve.org/view.php?id=CVE-2016-8409
An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31495687. • http://www.securityfocus.com/bid/94691 https://source.android.com/security/bulletin/2016-12-01.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •