Oldfresher

**Name of the Vulnerable Software and Affected Versions** Snapdragon Connectivity (affected versions not specified) Snapdragon Industrial IOT (affected versions not specified) Snapdragon Mobile (affected versions not specified) **Description** The issue is related to a use after free in the synx driver, which occurs during multiple invocations of synx release calls while performing other functions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Qualcomm embedded platform software (affected versions not specified) **Description** The issue is related to a possible buffer overflow due to the lack of a parameter length check during the MBSSID scan IE parse. This can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of protected information. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android Kernel **Description** The issue is related to an information disclosure vulnerability in the Qualcomm audio driver. It affects Android products. **Recommendations** For Android Kernel, apply the fix referenced by Android ID: A-35764875 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Huawei H60 (Honor 6) versions earlier than H60-L02 6.12.16 Huawei P9 Plus versions earlier than VIE-AL10BC00B356 **Description** The issue is related to a stack overflow in the touchscreen drive. An attacker can exploit this by tricking a user into installing a malicious application on the smartphone and sending a specific parameter to the touchscreen drive, which can cause the system to crash or escalate privileges. **Recommendations** For Huawei H60 (Honor 6) versions earlier than H60-L02 6.12.16, update to version H60-L02 6.12.16 or later. For Huawei P9 Plus versions earlier than VIE-AL10BC00B356, update to version VIE-AL10BC00B356 or later.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 61.0.3163.79 Google Chrome for Android version prior to 61.0.3163.81 Opera (affected versions not specified) **Description** The issue allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. This is due to type confusion in V8. **Recommendations** For Google Chrome versions prior to 61.0.3163.79, update to version 61.0.3163.79 or later. For Google Chrome for Android version prior to 61.0.3163.81, update to version 61.0.3163.81 or later. For Opera, at the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Android versions 7.0, 7.1.1, 7.1.2 **Description** The issue is caused by synchronization errors when using a shared resource in the libgui library of the Android operating system. This allows a remote attacker to potentially elevate their privileges. **Recommendations** For Android versions 7.0, 7.1.1, 7.1.2, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android versions Kernel-3.10, Kernel-3.18 **Description** The issue is related to an elevation of privilege vulnerability in the Broadcom Wi-Fi driver, which could allow a local malicious application to execute arbitrary code within the context of the kernel. This vulnerability is rated as High because it first requires compromising a privileged process. The vulnerability is associated with insufficient access control in the Wi-Fi driver, potentially allowing a remote attacker to execute arbitrary code in the kernel context using a special application. **Recommendations** For Android versions Kernel-3.10, Kernel-3.18, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android versions Kernel-3.18 **Description** An elevation of privilege issue in the Synaptics Touchscreen driver could allow a local malicious application to execute arbitrary code within the context of the kernel. This issue requires compromising a privileged process and is related to insufficient access control to certain functions. **Recommendations** For Android version Kernel-3.18, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Huawei P9 phones versions prior to EVA-AL10C00B192 Huawei Honor 6 phones versions prior to H60-L02 6.10.1 **Description** The touchscreen driver has a heap overflow issue, allowing attackers to crash the system or escalate user privileges. **Recommendations** For Huawei P9 phones versions prior to EVA-AL10C00B192, update to version EVA-AL10C00B192 or later to resolve the issue. For Huawei Honor 6 phones versions prior to H60-L02 6.10.1, update to version H60-L02 6.10.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Android versions 4.x through 4.4.3 Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-04-01 **Description** The issue is related to the mishandling of certain crashes in the Skia library, specifically in the include/core/SkPostConfig.h file, as used in the System server component of Android. This allows attackers to gain privileges via a crafted application, potentially obtaining Signature or SignatureOrSystem access. The vulnerability is associated with inadequate access control, which can be exploited by a remote attacker to elevate their privileges, leading to a denial of service. **Recommendations** For Android versions 4.x through 4.4.3, update to version 4.4.4 or later. For Android versions 5.0.x through 5.0.1, update to version 5.0.2 or later. For Android versions 5.1.x through 5.1.0, update to version 5.1.1 or later. For Android versions 6.x before 2016-04-01, update to a version released after 2016-04-01.