CVE-2017-0404
https://notcve.org/view.php?id=CVE-2017-0404
An elevation of privilege vulnerability in the kernel sound subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32510733. • http://www.securityfocus.com/bid/95281 https://source.android.com/security/bulletin/2017-01-01.html •
CVE-2016-8463
https://notcve.org/view.php?id=CVE-2016-8463
A denial of service vulnerability in the Qualcomm FUSE file system could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-30786860. • http://www.securityfocus.com/bid/95245 https://source.android.com/security/bulletin/2017-01-01.html https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=cd0fa86de6ca1d40c0a93d86d1c0f7846e8a9a10 • CWE-399: Resource Management Errors •
CVE-2016-8465
https://notcve.org/view.php?id=CVE-2016-8465
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and is mitigated by current platform configurations. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32474971. • http://www.securityfocus.com/bid/95242 http://www.securitytracker.com/id/1038201 https://source.android.com/security/bulletin/2017-01-01.html • CWE-264: Permissions, Privileges, and Access Controls •
CVE-2016-8441
https://notcve.org/view.php?id=CVE-2016-8441
Possible buffer overflow in the hypervisor. Inappropriate usage of a static array could lead to a buffer overrun. Product: Android. Versions: Kernel 3.18. Android ID: A-31625904. • http://www.securityfocus.com/bid/95227 https://source.android.com/security/bulletin/2017-01-01.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2016-8443
https://notcve.org/view.php?id=CVE-2016-8443
Possible unauthorized memory access in the hypervisor. Incorrect configuration provides access to subsystem page tables. Product: Android. Versions: Kernel 3.18. Android ID: A-32576499. • http://www.securityfocus.com/bid/95227 https://source.android.com/security/bulletin/2017-01-01.html • CWE-285: Improper Authorization •