Yuan-Tsung Lo

**Name of the Vulnerable Software and Affected Versions** Qualcomm products with Android releases from CAF using the Linux kernel (affected versions not specified) **Description** A userspace process can cause a Denial of Service in the camera driver. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NVIDIA Video Driver (affected versions not specified) **Description** An information disclosure issue in the NVIDIA Video Driver exists due to an out-of-bounds read function in the Tegra Display Controller driver, potentially leading to information disclosure. This issue affects the Android product. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android kernel **Description** A information disclosure vulnerability exists in the HTC sensor hub driver, affecting the Android kernel. **Recommendations** For Android kernel, update to a version that includes the fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Android versions Kernel-3.18 **Description** An information disclosure issue in the kernel ION subsystem could allow a local malicious application to access data outside of its permission levels. This issue is considered low-severity because it requires compromising a privileged process first. **Recommendations** For Android version Kernel-3.18, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android (affected versions not specified) **Description** A race condition potentially exists in the ioctl handler of a sound driver in Android, caused by synchronization errors when using a shared resource. This issue may allow a remote attacker to cause a device to hang or deny service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 4.11.1 **Description** The issue is related to the `sanity check raw super` function in the Linux kernel, which does not properly validate the segment count. This allows local users to gain privileges via unspecified vectors. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited. **Recommendations** For Linux kernel versions prior to 4.11.1, update to version 4.11.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the `sanity check raw super` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 4.10.15 **Description** The issue is related to a race condition in the fs/timerfd.c component of the Linux kernel, which can be exploited by local users through simultaneous file-descriptor operations. This can lead to privilege escalation or a denial of service, resulting in list corruption or use-after-free. The vulnerability is associated with improper might cancel queueing. **Recommendations** For Linux kernel versions prior to 4.10.15, update to version 4.10.15 or later to resolve the issue. As a temporary workaround, consider restricting simultaneous file-descriptor operations to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Android versions Kernel-3.10 through Kernel-3.18 **Description** The issue is related to an elevation of privilege vulnerability in the kernel sound subsystem, which could allow a local malicious application to execute arbitrary code within the context of the kernel. This is rated as High because it first requires compromising a privileged process. The vulnerability is also associated with insufficient access control in the sound management subsystem, potentially allowing a remote attacker to execute arbitrary code. **Recommendations** For Android versions Kernel-3.10 through Kernel-3.18, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android versions Kernel-3.10 through Kernel-3.18 **Description** The issue is related to insufficient access control in the Qualcomm sound driver of the Android operating system. It allows a remote attacker to execute arbitrary code within the context of the kernel, but first requires compromising a privileged process. This problem is considered high-risk. **Recommendations** For Android versions Kernel-3.10 through Kernel-3.18, update to a version that includes the fix for this issue, as referenced by Android ID: A-31252384. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android versions Kernel-3.18 **Description** An elevation of privilege issue in the NVIDIA GPU driver could allow a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. The vulnerability is related to insufficient access control in the NVIDIA GPU driver. **Recommendations** For Android version Kernel-3.18, at the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Android versions prior to 2016-11-05 **Description** An elevation of privilege issue in the NVIDIA GPU driver could allow a local malicious application to execute arbitrary code within the context of the kernel. This issue may lead to a local permanent device compromise, requiring reflashing the operating system to repair the device. **Recommendations** For Android versions prior to 2016-11-05, update the operating system to a version released on or after 2016-11-05 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Android versions prior to 2016-11-05 **Description** An elevation of privilege issue in the NVIDIA GPU driver could allow a local malicious application to execute arbitrary code within the context of the kernel. This issue may lead to a local permanent device compromise, requiring reflashing the operating system to repair the device. **Recommendations** For versions prior to 2016-11-05, update the Android operating system to a version released on or after 2016-11-05 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Android versions prior to 2016-11-05 **Description** An elevation of privilege issue in the NVIDIA GPU driver could allow a local malicious application to execute arbitrary code within the context of the kernel. This issue may lead to a local permanent device compromise, requiring reflashing the operating system to repair the device. **Recommendations** For Android versions prior to 2016-11-05, update the operating system to a version released on or after 2016-11-05 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Android versions prior to 2016-11-05 **Description** An issue in the NVIDIA GPU driver could allow a local malicious application to execute arbitrary code within the context of the kernel, potentially leading to a local permanent device compromise. This compromise may require reflashing the operating system to repair the device. **Recommendations** For versions prior to 2016-11-05, update the Android operating system to a version released on or after 2016-11-05 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Android versions prior to 2016-07-05 **Description** The issue is related to insufficient access control in the MediaTek driver of the Android operating system. It can be exploited by a remote attacker using a specially crafted application to gain elevated privileges. **Recommendations** For Android versions prior to 2016-07-05, update the operating system to a version released after 2016-07-05 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Android versions prior to 2016-07-05 **Description** The issue is related to insufficient access control in MediaTek drivers for the Android operating system. It allows a remote attacker to elevate their privileges using a specially crafted application. **Recommendations** For Android versions prior to 2016-07-05, update the operating system to a version released after 2016-07-05 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Android versions prior to 2016-07-05 **Description** The issue is related to the MediaTek drivers in Android, which have insufficient access control. This can be exploited by attackers to gain privileges via a crafted application. **Recommendations** For Android versions prior to 2016-07-05, update to a version released after 2016-07-05 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Android versions prior to 2016-07-05 **Description** The issue is related to the MediaTek drivers in Android, which have inadequate access control. This can be exploited by attackers to gain privileges via a crafted application. **Recommendations** For Android versions prior to 2016-07-05, update to a version released after 2016-07-05 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Android versions 4.x through 4.4.3 Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-07-01 **Description** The issue is caused by multiple buffer overflows in the mediaserver component of the Android operating system. This allows attackers to gain privileges via a crafted application that provides an AudioEffect reply. Attackers may obtain Signature or SignatureOrSystem access. **Recommendations** For Android versions 4.x through 4.4.3, update to version 4.4.4 or later. For Android versions 5.0.x through 5.0.1, update to version 5.0.2 or later. For Android versions 5.1.x through 5.1.0, update to version 5.1.1 or later. For Android versions 6.x before 2016-07-01, update to a version released on or after 2016-07-01.

**Name of the Vulnerable Software and Affected Versions** Android versions prior to 2016-05-01 on Nexus 9 devices **Description** The issue is related to the NVIDIA video driver in Android, which has inadequate access control. This allows an attacker to gain privileges via a crafted application. The estimated number of potentially affected devices is not specified. **Recommendations** For Android versions prior to 2016-05-01 on Nexus 9 devices, update the system to a version released after 2016-05-01 to resolve the issue. As a temporary workaround, consider restricting the installation of applications from unknown sources to minimize the risk of exploitation.