Android

DATE	CVE	VULNERABILITY TITLE	RISK
2017-05-12	CVE-2017-0625	Information Exposure vulnerability in Google Android An information disclosure vulnerability in the MediaTek command queue driver could enable a local malicious application to access data outside of its permission levels. local low complexity google CWE-200	5.5
2017-05-12	CVE-2017-0620	Incorrect Calculation of Buffer Size vulnerability in multiple products An elevation of privilege vulnerability in the Qualcomm Secure Channel Manager driver could enable a local malicious application to execute arbitrary code within the context of the kernel. local high complexity linux google CWE-131	7.0
2017-05-12	CVE-2017-0619	An elevation of privilege vulnerability in the Qualcomm pin controller driver could enable a local malicious application to execute arbitrary code within the context of the kernel. local high complexity linux google	7.0
2017-05-12	CVE-2017-0618	Unspecified vulnerability in Google Android An elevation of privilege vulnerability in the MediaTek command queue driver could enable a local malicious application to execute arbitrary code within the context of the kernel. local high complexity google	7.0
2017-05-12	CVE-2017-0617	Unspecified vulnerability in Google Android An elevation of privilege vulnerability in the MediaTek video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. local high complexity google	7.0
2017-05-12	CVE-2017-0616	Unspecified vulnerability in Google Android An elevation of privilege vulnerability in the MediaTek system management interrupt driver could enable a local malicious application to execute arbitrary code within the context of the kernel. local high complexity google	7.0
2017-05-12	CVE-2017-0615	Unspecified vulnerability in Google Android An elevation of privilege vulnerability in the MediaTek power driver could enable a local malicious application to execute arbitrary code within the context of the kernel. local high complexity google	7.0
2017-05-12	CVE-2017-0604	Always-Incorrect Control Flow Implementation vulnerability in Google Android An elevation of privilege vulnerability in the kernel Qualcomm power driver could enable a local malicious application to execute arbitrary code within the context of the kernel. local low complexity google CWE-670	7.8
2017-05-12	CVE-2017-0603	Integer Overflow or Wraparound vulnerability in Google Android A denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. local high complexity google CWE-190	4.7
2017-05-12	CVE-2017-0602	Information Exposure vulnerability in Google Android An information disclosure vulnerability in Bluetooth could allow a local malicious application to bypass operating system protections that isolate application data from other applications. local low complexity google CWE-200	5.5