CVSS: 7.1EPSS: 0%CPEs: 5EXPL: 0CVE-2017-0486
https://notcve.org/view.php?id=CVE-2017-0486
08 Mar 2017 — A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33621215. • http://www.securityfocus.com/bid/96733 •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2017-0500
https://notcve.org/view.php?id=CVE-2017-0500
08 Mar 2017 — An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-28429685. • http://www.securityfocus.com/bid/96726 •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2017-0503
https://notcve.org/view.php?id=CVE-2017-0503
08 Mar 2017 — An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-28449045. • http://www.securityfocus.com/bid/96726 •
CVSS: 4.7EPSS: 0%CPEs: 1EXPL: 0CVE-2017-0532
https://notcve.org/view.php?id=CVE-2017-0532
08 Mar 2017 — An information disclosure vulnerability in the MediaTek video codec driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-32370398. • http://www.securityfocus.com/bid/96834 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 9.3EPSS: 0%CPEs: 28EXPL: 0CVE-2017-0479
https://notcve.org/view.php?id=CVE-2017-0479
08 Mar 2017 — An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32707507. • http://www.securityfocus.com/bid/96958 •
CVSS: 7.1EPSS: 0%CPEs: 5EXPL: 0CVE-2017-0484
https://notcve.org/view.php?id=CVE-2017-0484
08 Mar 2017 — A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33298089. • http://www.securityfocus.com/bid/96733 • CWE-20: Improper Input Validation •
CVSS: 5.4EPSS: 0%CPEs: 3EXPL: 0CVE-2017-0497
https://notcve.org/view.php?id=CVE-2017-0497
08 Mar 2017 — A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as Moderate because it requires an uncommon device configuration. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-33300701. • http://www.securityfocus.com/bid/96795 •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 1CVE-2017-0505
https://notcve.org/view.php?id=CVE-2017-0505
08 Mar 2017 — An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-31822282. • https://github.com/R0rt1z2/CVE-2017-0505-mtk •
CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0CVE-2017-0492
https://notcve.org/view.php?id=CVE-2017-0492
08 Mar 2017 — An elevation of privilege vulnerability in the System UI could enable a local malicious application to create a UI overlay covering the entire screen. This issue is rated as Moderate because it is a local bypass of user interaction requirements that would normally require either user initiation or user permission. Product: Android. Versions: 7.1.1. Android ID: A-30150688. • http://www.securityfocus.com/bid/96794 • CWE-1021: Improper Restriction of Rendered UI Layers or Frames •
CVSS: 7.1EPSS: 0%CPEs: 11EXPL: 0CVE-2017-0499
https://notcve.org/view.php?id=CVE-2017-0499
08 Mar 2017 — A denial of service vulnerability in Audioserver could enable a local malicious application to cause a device hang or reboot. This issue is rated as Low due to the possibility of a temporary denial of service. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32095713. • http://www.securityfocus.com/bid/96806 • CWE-20: Improper Input Validation •