Dacheng Shao

**Name of the Vulnerable Software and Affected Versions** Android kernel **Description** The issue is related to a component of the Android operating system, specifically the MediaTek libmtkomxvdec, which has a flaw in access control. This flaw can be exploited by a remote attacker to elevate their privileges. **Recommendations** For Android kernel, consider restricting access to the vulnerable component until a patch is available. As a temporary workaround, avoid using the affected libmtkomxvdec library until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 **Description** A information disclosure vulnerability exists in the Android media framework, specifically in libhevc. This issue may allow for the disclosure of sensitive information. **Recommendations** For Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 **Description** The issue is related to insufficient access control in the libmediaplayerservice library of the Android Media Framework. It allows a remote attacker to elevate their privileges. **Recommendations** For versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, update to a version that includes the fix for the elevation of privilege vulnerability in the Android media framework. At the moment, there is no information about a newer version that contains a fix for this vulnerability.