Bo Liu

**Name of the Vulnerable Software and Affected Versions** Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 **Description** An information disclosure issue in the Bluetooth component could allow a local malicious application to access data outside of its permission levels, effectively bypassing operating system protections that isolate application data from other applications. This issue is considered High severity. **Recommendations** For Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, update to a version that includes the fix for Android ID A-35310991 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Android versions 6.0.1, 7.0, 7.1.1, 7.1.2 **Description** An elevation of privilege issue in Bluetooth could allow a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it is a local bypass of user interaction requirements. **Recommendations** For Android versions 6.0.1, 7.0, 7.1.1, 7.1.2, update to a version that includes the fix for this issue, as referenced by Android ID A-35385327.

**Name of the Vulnerable Software and Affected Versions** Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 **Description** An elevation of privilege issue in Audioserver could allow a local malicious application to execute arbitrary code within the context of a privileged process. This issue could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. The vulnerability is related to insufficient access control. **Recommendations** For Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android versions 6.0 through 7.1.1 **Description** The issue is related to an elevation of privilege vulnerability in Wi-Fi, which could allow a local malicious application to delete user data. This is a local bypass of user interaction requirements that would normally require either user initiation or user permission. The vulnerability is associated with inadequate access control in the Wi-Fi component of the Android operating system, potentially allowing a remote attacker to delete user data. **Recommendations** For Android versions 6.0 through 7.1.1, update to a version that includes the fix for this issue, as referenced by Android ID: A-33178389. At the moment, there is no information about a newer version that contains a fix for this vulnerability.