Vulnerabilities > Google > Android > 1.0

DATE CVE VULNERABILITY TITLE RISK
2017-04-17 CVE-2016-6727 Permissions, Privileges, and Access Controls vulnerability in Google Android
The Qualcomm GPS subsystem in Android on Android One devices allows remote attackers to execute arbitrary code.
network
low complexity
google CWE-264
critical
10.0
2017-04-17 CVE-2016-6726 Security vulnerability in Google Android 'Qualcomm' components
Unspecified vulnerability in Qualcomm components in Android on Nexus 6 and Android One devices.
network
low complexity
google
critical
10.0
2017-04-12 CVE-2016-5856 Permissions, Privileges, and Access Controls vulnerability in multiple products
Drivers/soc/qcom/spcom.c in the Qualcomm SPCom driver in the Android kernel 2017-03-05 allows local users to gain privileges, a different vulnerability than CVE-2016-5857.
network
high complexity
linux google CWE-264
7.6
2017-04-07 CVE-2017-0578 Privilege Escalation vulnerability in Google Android DTS Sound Driver
An elevation of privilege vulnerability in the DTS sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel.
network
high complexity
google
7.6
2017-04-07 CVE-2017-0566 Privilege Escalation vulnerability in Google Android MediaTek Camera Driver
An elevation of privilege vulnerability in the MediaTek camera driver could enable a local malicious application to execute arbitrary code within the context of the kernel.
network
high complexity
google
7.6
2017-04-07 CVE-2017-0565 Privilege Escalation vulnerability in Google Android MediaTek Thermal Driver
An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within the context of the kernel.
network
high complexity
google
7.6
2017-04-07 CVE-2017-0562 Privilege Escalation vulnerability in Google Android MediaTek Touchscreen Driver
An elevation of privilege vulnerability in the MediaTek touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel.
network
google
critical
9.3
2017-04-06 CVE-2016-5349 Information Exposure vulnerability in Google Android
The high level operating systems (HLOS) was not providing sufficient memory address information to ensure that secure applications inside Qualcomm Secure Execution Environment (QSEE) only write to legitimate memory ranges related to the QSEE secure application's HLOS client.
network
google CWE-200
4.3
2017-04-04 CVE-2016-10229 Improperly Implemented Security Check for Standard vulnerability in multiple products
udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a recv system call with the MSG_PEEK flag.
network
low complexity
linux google CWE-358
critical
9.8
2017-04-04 CVE-2014-9922 Permissions, Privileges, and Access Controls vulnerability in Linux Kernel
The eCryptfs subsystem in the Linux kernel before 3.18 allows local users to gain privileges via a large filesystem stack that includes an overlayfs layer, related to fs/ecryptfs/main.c and fs/overlayfs/super.c.
network
linux google CWE-264
critical
9.3