En He

**Name of the Vulnerable Software and Affected Versions** Android versions 5.0.2 through 7.1.2 **Description** A elevation of privilege issue exists in the Android system, specifically in the NFC component. This issue may allow for unauthorized access to sensitive data or system resources. **Recommendations** For Android versions 5.0.2 through 7.1.2, update to a version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 **Description** An information disclosure issue in the Bluetooth component could allow a local malicious application to access data outside of its permission levels, effectively bypassing operating system protections that isolate application data from other applications. This issue is considered High severity. **Recommendations** For Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, update to a version that includes the fix for Android ID A-35310991 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Android versions 6.0.1, 7.0, 7.1.1, 7.1.2 **Description** An elevation of privilege issue in Bluetooth could allow a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it is a local bypass of user interaction requirements. **Recommendations** For Android versions 6.0.1, 7.0, 7.1.1, 7.1.2, update to a version that includes the fix for this issue, as referenced by Android ID A-35385327.

**Name of the Vulnerable Software and Affected Versions** Android versions 6.0 through 7.1.1 **Description** The issue is related to an elevation of privilege vulnerability in Wi-Fi, which could allow a local malicious application to delete user data. This is a local bypass of user interaction requirements that would normally require either user initiation or user permission. The vulnerability is associated with inadequate access control in the Wi-Fi component of the Android operating system, potentially allowing a remote attacker to delete user data. **Recommendations** For Android versions 6.0 through 7.1.1, update to a version that includes the fix for this issue, as referenced by Android ID: A-33178389. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1 **Description** A denial of service issue in the Telephony component could allow a remote attacker to cause a device hang or reboot. This issue is related to inadequate access control. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited. **Recommendations** For Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.