Vulnerabilities > Google > Android > High

DATE CVE VULNERABILITY TITLE RISK
2017-05-12 CVE-2017-8244 Race Condition vulnerability in Google Android
In core_info_read and inst_info_read in all Android releases from CAF using the Linux kernel, variable "dbg_buf", "dbg_buf->curr" and "dbg_buf->filled_size" could be modified by different threads at the same time, but they are not protected with mutex or locks.
local
high complexity
google CWE-362
7.0
2017-05-12 CVE-2017-0620 Incorrect Calculation of Buffer Size vulnerability in multiple products
An elevation of privilege vulnerability in the Qualcomm Secure Channel Manager driver could enable a local malicious application to execute arbitrary code within the context of the kernel.
local
high complexity
linux google CWE-131
7.0
2017-05-12 CVE-2017-0619 An elevation of privilege vulnerability in the Qualcomm pin controller driver could enable a local malicious application to execute arbitrary code within the context of the kernel.
local
high complexity
linux google
7.0
2017-05-12 CVE-2017-0618 Unspecified vulnerability in Google Android
An elevation of privilege vulnerability in the MediaTek command queue driver could enable a local malicious application to execute arbitrary code within the context of the kernel.
local
high complexity
google
7.0
2017-05-12 CVE-2017-0617 Unspecified vulnerability in Google Android
An elevation of privilege vulnerability in the MediaTek video driver could enable a local malicious application to execute arbitrary code within the context of the kernel.
local
high complexity
google
7.0
2017-05-12 CVE-2017-0616 Unspecified vulnerability in Google Android
An elevation of privilege vulnerability in the MediaTek system management interrupt driver could enable a local malicious application to execute arbitrary code within the context of the kernel.
local
high complexity
google
7.0
2017-05-12 CVE-2017-0615 Unspecified vulnerability in Google Android
An elevation of privilege vulnerability in the MediaTek power driver could enable a local malicious application to execute arbitrary code within the context of the kernel.
local
high complexity
google
7.0
2017-05-12 CVE-2017-0604 Always-Incorrect Control Flow Implementation vulnerability in Google Android
An elevation of privilege vulnerability in the kernel Qualcomm power driver could enable a local malicious application to execute arbitrary code within the context of the kernel.
local
low complexity
google CWE-670
7.8
2017-05-12 CVE-2017-0597 Integer Overflow or Wraparound vulnerability in Google Android
An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process.
local
low complexity
google CWE-190
7.8
2017-05-12 CVE-2017-0596 Unspecified vulnerability in Google Android
An elevation of privilege vulnerability in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process.
local
low complexity
google
7.8