Vulnerabilities > Google > Android > Medium

DATE CVE VULNERABILITY TITLE RISK
2017-01-12 CVE-2017-0392 Unspecified vulnerability in Google Android
A denial of service vulnerability in VBRISeeker.cpp in libstagefright in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot.
local
low complexity
google
5.5
2017-01-12 CVE-2017-0391 Unspecified vulnerability in Google Android
A denial of service vulnerability in decoder/ihevcd_decode.c in libhevc in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot.
local
low complexity
google
5.5
2017-01-12 CVE-2017-0390 Unspecified vulnerability in Google Android
A denial of service vulnerability in Tremolo/dpen.s in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot.
local
low complexity
google
5.5
2017-01-12 CVE-2017-0388 Information Exposure vulnerability in Google Android
An elevation of privilege vulnerability in the External Storage Provider could enable a local secondary user to read data from an external storage SD card inserted by the primary user.
local
low complexity
google CWE-200
5.5
2017-01-12 CVE-2016-8472 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels.
local
high complexity
google CWE-200
4.7
2017-01-12 CVE-2016-8471 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels.
local
high complexity
google CWE-200
4.7
2017-01-12 CVE-2016-8470 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels.
local
high complexity
google CWE-200
4.7
2017-01-12 CVE-2016-8462 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level.
local
low complexity
google CWE-200
5.5
2017-01-12 CVE-2016-8396 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in the MediaTek video driver could enable a local malicious application to access data outside of its permission levels.
local
low complexity
google CWE-200
5.5
2017-01-12 CVE-2016-6774 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in Package Manager could enable a local malicious application to bypass operating system protections that isolate application data from other applications.
local
high complexity
google CWE-200
4.7