Hongli Han

**Name of the Vulnerable Software and Affected Versions** Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 **Description** A elevation of privilege vulnerability exists in the Android media framework, specifically in the mpeg4 encoder. **Recommendations** For versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 **Description** A information disclosure vulnerability exists in the Android media framework, specifically in libhevc. This issue may allow for the disclosure of sensitive information. **Recommendations** For Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android (affected versions not specified) **Description** The issue is related to an elevation of privilege vulnerability in the Audioserver component of the Android operating system, which is associated with insufficient access control. This vulnerability could allow a local malicious application to execute arbitrary code within the context of a privileged process. The issue is rated as Moderate due to mitigation by current platform configurations. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1 **Description** An information disclosure issue in Audioserver could allow a local malicious application to access data outside of its permission levels, potentially accessing sensitive data without permission. **Recommendations** For Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1 **Description** An information disclosure issue in the Audioserver component of the Android operating system could allow a local malicious application to access data outside of its permission levels. This could be used to access sensitive data without permission. The issue is related to the lack of protection of internal data in the libeffects subcomponent. **Recommendations** For versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1, at the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Android versions 5.0.2 through 7.1 **Description** An information disclosure issue in the Qualcomm audio post processor's libeffects component could allow a local malicious application to access data outside of its permission levels. This could be used to access sensitive data without permission. The issue is related to the lack of protection for internal data. **Recommendations** For Android versions 5.0.2 through 7.1, update to a version that includes the fix for this issue, as indicated by Android ID A-32588016.

**Name of the Vulnerable Software and Affected Versions** Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1 **Description** An information disclosure issue in the Audioserver component of the Android operating system, specifically in the libeffects subcomponent, could allow a local malicious application to access data outside of its permission levels. This could be used to access sensitive data without permission. The issue is related to a lack of protection for internal data. **Recommendations** For versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1, at the moment, there is no information about a newer version that contains a fix for this issue.