Peng Xiao

**Name of the Vulnerable Software and Affected Versions** Android (affected versions not specified) **Description** The issue is related to an elevation of privilege vulnerability in the MediaTek power driver, which could allow a local malicious application to execute arbitrary code within the context of the kernel. This problem is rated as High because it first requires compromising a privileged process. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android (affected versions not specified) **Description** The issue is related to an elevation of privilege vulnerability in the MediaTek thermal driver, which could allow a local malicious application to execute arbitrary code within the context of the kernel. This is rated as High because it first requires compromising a privileged process. The vulnerability is associated with inadequate access control in the MediaTek thermal driver, potentially allowing an attacker to execute arbitrary code in the kernel context using a special application. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android versions prior to the fixed version **Description** The issue is related to an elevation of privilege vulnerability in the NVIDIA crypto driver, which could allow a local malicious application to execute arbitrary code within the context of the kernel. This is rated as High because it first requires compromising a privileged process. The vulnerability is also associated with insufficient access control in the NVIDIA crypto driver, potentially allowing a remote attacker to execute arbitrary code. **Recommendations** For Android versions prior to the fixed version, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android (affected versions not specified) **Description** The issue is related to an elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver. This could enable a local malicious application to execute arbitrary code within the context of the kernel, potentially leading to a local permanent device compromise. The vulnerability is rated as Critical and may require reflashing the operating system to repair the device. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android versions prior to 2016-08-05 **Description** The issue concerns a flaw in the video driver within the kernel of the Android operating system. This flaw can be exploited by attackers to gain privileges, potentially through a crafted application. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited. **Recommendations** For Android versions prior to 2016-08-05, update the operating system to a version released after 2016-08-05 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Android versions prior to 2016-07-05 **Description** The issue is related to the MediaTek GPS driver in Android, which has inadequate access control. This allows attackers to gain privileges via a crafted application. **Recommendations** For Android versions prior to 2016-07-05, update to a version released after 2016-07-05 to resolve the issue.