Back to all categorys

Elevation of privilege vulnerability in MediaTek components

CVE-2017-0500

(json)

• CVE numbers: CVE-2017-0500 [Bulletin-CVE-2017-0500]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in MediaTek components
• Details: An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-28429685. References: M-ALPS02710006. [NIST-CVE-2017-0500]
• Discovered by: pjf of IceSword Lab, Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2017-0500] on: Unknown
• Reported on: 2017-03-01 [Bulletin-CVE-2017-0500]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: MediaTek [Bulletin-CVE-2017-0500]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0501

(json)

• CVE numbers: CVE-2017-0501 [Bulletin-CVE-2017-0501]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in MediaTek components
• Details: An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-28430015. References: M-ALPS02708983. [NIST-CVE-2017-0501]
• Discovered by: pjf of IceSword Lab, Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2017-0501] on: Unknown
• Reported on: 2017-03-01 [Bulletin-CVE-2017-0501]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: MediaTek [Bulletin-CVE-2017-0501]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0502

(json)

• CVE numbers: CVE-2017-0502 [Bulletin-CVE-2017-0502]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in MediaTek components
• Details: An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-28430164. References: M-ALPS02710027. [NIST-CVE-2017-0502]
• Discovered by: pjf of IceSword Lab, Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2017-0502] on: Unknown
• Reported on: 2017-03-01 [Bulletin-CVE-2017-0502]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: MediaTek [Bulletin-CVE-2017-0502]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0503

(json)

• CVE numbers: CVE-2017-0503 [Bulletin-CVE-2017-0503]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in MediaTek components
• Details: An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-28449045. References: M-ALPS02710075. [NIST-CVE-2017-0503]
• Discovered by: pjf of IceSword Lab, Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2017-0503] on: Unknown
• Reported on: 2017-03-01 [Bulletin-CVE-2017-0503]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: MediaTek [Bulletin-CVE-2017-0503]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0504

(json)

• CVE numbers: CVE-2017-0504 [Bulletin-CVE-2017-0504]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in MediaTek components
• Details: An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-30074628. References: M-ALPS02829371. [NIST-CVE-2017-0504]
• Discovered by: Scott Bauer (@ScottyBauer1) [Discovery-CVE-2017-0504] on: Unknown
• Reported on: 2017-03-01 [Bulletin-CVE-2017-0504]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: MediaTek [Bulletin-CVE-2017-0504]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0505

(json)

• CVE numbers: CVE-2017-0505 [Bulletin-CVE-2017-0505]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in MediaTek components
• Details: An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-31822282. References: M-ALPS02992041. [NIST-CVE-2017-0505]
• Discovered by: salls (@chris_salls) of Shellphish Grill Team, UC Santa Barbara [Discovery-CVE-2017-0505] on: Unknown
• Reported on: 2017-03-01 [Bulletin-CVE-2017-0505]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: MediaTek [Bulletin-CVE-2017-0505]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0506

(json)

• CVE numbers: CVE-2017-0506 [Bulletin-CVE-2017-0506]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in MediaTek components
• Details: An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-32276718. References: M-ALPS03006904. [NIST-CVE-2017-0506]
• Discovered by: Yang Song of Alibaba Mobile Security Group [Discovery-CVE-2017-0506] on: Unknown
• Reported on: 2017-03-01 [Bulletin-CVE-2017-0506]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: MediaTek [Bulletin-CVE-2017-0506]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26