Home | History | Annotate | Download | only in bulletin
      1 <html devsite><head>
      2     <title>Android  - 2017  4 </title>
      3     <meta name="project_path" value="/_project.yaml"/>
      4     <meta name="book_path" value="/_book.yaml"/>
      5   </head>
      6   <body>
      7   <!--
      8       Copyright 2017 The Android Open Source Project
      9 
     10       Licensed under the Apache License, Version 2.0 (the "License");
     11       you may not use this file except in compliance with the License.
     12       You may obtain a copy of the License at
     13 
     14           http://www.apache.org/licenses/LICENSE-2.0
     15 
     16       Unless required by applicable law or agreed to in writing, software
     17       distributed under the License is distributed on an "AS IS" BASIS,
     18       WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
     19       See the License for the specific language governing permissions and
     20       limitations under the License.
     21   -->
     22 <p><em>2017  4  3  | 2017  4  5 </em></p>
     23 <p>Android  Android  (OTA)  Nexus  <a href="https://developers.google.com/android/nexus/images">Google Developers </a> Google 2017  4  5  <a href="https://support.google.com/pixelphone/answer/4457705#pixel_phones&nexus_devices">Pixel  Nexus </a></p>
     24 <p> 2017  3  6  Android  (AOSP)  AOSP </p>
     25 <p><a href="/security/overview/updates-resources.html#severity"></a></p>
     26 <p> <a href="#mitigations">Android  Google </a> <a href="/security/enhancements/index.html">Android </a> <a href="https://developer.android.com/training/safetynet/index.html">SafetyNet</a> Android </p>
     27 <p></p>
     28 
     29 <h2 id="announcements"></h2>
     30 <ul>
     31 <li> Android  Android <a href="#common-questions-and-answers"></a>
     32  <ul>
     33    <li><strong>2017-04-01</strong> 2017-04-01</li>
     34    <li><strong>2017-04-05</strong> 2017-04-01  2017-04-05</li>
     35  </ul>
     36 </li>
     37 <li> Google  2017  4  5  OTA </li>
     38 </ul>
     39 
     40 <h2 id="mitigations">Android  Google </h2>
     41 <p> <a href="/security/enhancements/index.html">Android </a> SafetyNet Android </p>
     42 <ul>
     43   <li> Android  Android  Android</li>
     44   <li>Android <a href="http://static.googleusercontent.com/media/source.android.com/en//security/reports/Google_Android_Security_2016_Report_Final.pdf"> SafetyNet</a> <a href="http://static.googleusercontent.com/media/source.android.com/en//security/reports/Google_Android_Security_PHA_classifications.pdf"></a> <a href="http://www.android.com/gms">Google </a> Google Play  Google Play  Root  Root </li>
     45   <li> Google  Messenger  mediaserver </li>
     46 </ul>
     47 
     48 <h2 id="acknowledgements"></h2>
     49 <p></p>
     50 <ul>
     51   <li>Shellphish Grill  Aravind Machiry (donfos)CVE-2016-5349</li>
     52   <li> Daxing Guo (<a href="https://twitter.com/freener0">@freener0</a>)CVE-2017-0585CVE-2017-0553</li>
     53   <li><a href="mailto:derrek.haxx (a] gmail.com">Derrek</a> (<a href="https://twitter.com/derrekr6">@derrekr6</a>)  Scott BauerCVE-2017-0576</li>
     54   <li>Project Zero  Gal BeniaminiCVE-2017-0571CVE-2017-0570CVE-2017-0572CVE-2017-0569CVE-2017-0561</li>
     55   <li> 360  IceSword  Gengjia Chen (<a href="https://twitter.com/chengjia4574">@chengjia4574</a>)  <a href="http://weibo.com/jfpan">pjf </a>CVE-2017-6426CVE-2017-0581CVE-2017-0329CVE-2017-0332CVE-2017-0566</li>
     56   <li> 360  Alpha  (<a href="https://twitter.com/oldfresher">@oldfresher</a>)CVE-2017-0547</li>
     57   <li> 360  Alpha  Hao Chen  Guang GongCVE-2017-6424CVE-2017-0584CVE-2017-0454CVE-2017-0575CVE-2017-0567</li>
     58   <li>Ian Foster (<a href="https://twitter.com/lanrat">@lanrat</a>)CVE-2017-0554</li>
     59   <li> Jack TangCVE-2017-0579</li>
     60   <li><a href="https://skyeye.360safe.com"> 360 </a> Jianjun Dai (<a href="https://twitter.com/Jioun_dai">@Jioun_dai</a>)CVE-2017-0559CVE-2017-0541</li>
     61   <li> 360 IceSword  Jianqiang Zhao (<a href="https://twitter.com/jianqiangzhao">@jianqiangzhao</a>)  <a href="http://weibo.com/jfpan">pjf</a>CVE-2017-6425CVE-2016-5346</li>
     62   <li> 360  <a href="http://c0reteam.org">C0RE </a> Lubo Zhang (<a href="mailto:zlbzlb815 (a] 163.com">zlbzlb815 (a] 163.com</a>)  IceSword  Yonggang Guo (<a href="https://twitter.com/guoygang">@guoygang</a>)CVE-2017-0564</li>
     63   <li>Google  <a href="mailto:salyzyn (a] android.com">Mark Salyzyn</a>CVE-2017-0558</li>
     64   <li> Mike Anderson (<a href="https://twitter.com/manderbot">@manderbot</a>)  Nathan Crandall (<a href="https://twitter.com/natecray">@natecray</a>)CVE-2017-0327CVE-2017-0328</li>
     65   <li> Peng XiaoChengming YangNing YouChao Yang Yang songCVE-2017-0565</li>
     66   <li>CVE-2016-10236</li>
     67   <li> (<a href="https://twitter.com/flanker_hqd">@flanker_hqd</a>)CVE-2017-0544CVE-2016-10231CVE-2017-0325</li>
     68   <li>HCL  Aleph  Roee Hay (<a href="https://twitter.com/roeehay">@roeehay</a>)CVE-2017-0582CVE-2017-0563</li>
     69   <li><a href="mailto:sbauer (a] plzdonthack.me">Scott Bauer</a> (<a href="https://twitter.com/ScottyBauer1">@ScottyBauer1</a>)CVE-2017-0562CVE-2017-0339</li>
     70   <li> Seven Shen (<a href="https://twitter.com/lingtongshen">@lingtongshen</a>)CVE-2017-0578</li>
     71   <li>Tim BeckerCVE-2017-0546</li>
     72   <li>Uma Sankar Pradhan (<a href="https://twitter.com/umasankar_iitd">@umasankar_iitd</a>)CVE-2017-0560</li>
     73   <li><a href="http://www.trendmicro.com"></a><a href="http://blog.trendmicro.com/trendlabs-security-intelligence/category/mobile"></a> V.E.O (<a href="https://twitter.com/vysea">@VYSEa</a>)CVE-2017-0555CVE-2017-0538CVE-2017-0539CVE-2017-0540CVE-2017-0557CVE-2017-0556</li>
     74   <li> Weichao Sun (<a href="https://twitter.com/sunblate">@sunblate</a>)CVE-2017-0549</li>
     75   <li> 360  Alpha  Wenlin Yang (<a href="https://twitter.com/wenlin_yang">@wenlin_yang</a>)Guang Gong (<a href="https://twitter.com/oldfresher">@oldfresher</a>)  Hao ChenCVE-2017-0580CVE-2017-0577</li>
     76   <li> 360  IceSword  Yonggang Guo (<a href="https://twitter.com/guoygang">@guoygang</a>)CVE-2017-0586</li>
     77   <li> 360  <a href="http://weibo.com/ele7enxxh">Zinuo Han</a>CVE-2017-0548</li>
     78   <li>Google  Zubin MithraCVE-2017-0462</li>
     79 </ul>
     80 
     81 <h2 id="2017-04-01-details">2017-04-01  - </h2>
     82 <p> 2017-04-01  CVE Google  AOSP  Bug ID  AOSP  Bug  Bug ID </p>
     83 
     84 <h3 id="rce-in-mediaserver">Mediaserver </h3>
     85 <p>Mediaserver  Mediaserver </p>
     86 
     87 <table>
     88   <colgroup><col width="18%" />
     89   <col width="17%" />
     90   <col width="10%" />
     91   <col width="19%" />
     92   <col width="18%" />
     93   <col width="17%" />
     94   </colgroup><tbody><tr>
     95     <th>CVE</th>
     96     <th></th>
     97     <th></th>
     98     <th> Google </th>
     99     <th> AOSP </th>
    100     <th></th>
    101   </tr>
    102   <tr>
    103     <td>CVE-2017-0538</td>
    104     <td><a href="https://android.googlesource.com/platform/external/libavc/+/494561291a503840f385fbcd11d9bc5f4dc502b8">A-33641588</a></td>
    105     <td></td>
    106     <td></td>
    107     <td>6.06.0.17.07.1.1</td>
    108     <td>2016  12  13 </td>
    109   </tr>
    110   <tr>
    111     <td>CVE-2017-0539</td>
    112     <td><a href="https://android.googlesource.com/platform/external/libhevc/+/1ab5ce7e42feccd49e49752e6f58f9097ac5d254">A-33864300</a></td>
    113     <td></td>
    114     <td></td>
    115     <td>5.0.25.1.16.06.0.17.07.1.1</td>
    116     <td>2016  12  23 </td>
    117   </tr>
    118   <tr>
    119     <td>CVE-2017-0540</td>
    120     <td><a href="https://android.googlesource.com/platform/external/libhevc/+/01ca88bb6c5bdd44e071f8effebe12f1d7da9853">A-33966031</a></td>
    121     <td></td>
    122     <td></td>
    123     <td>5.0.25.1.16.06.0.17.07.1.1</td>
    124     <td>2016  12  29 </td>
    125   </tr>
    126   <tr>
    127     <td>CVE-2017-0541</td>
    128     <td><a href="https://android.googlesource.com/platform/external/sonivox/+/56d153259cc3e16a6a0014199a2317dde333c978">A-34031018</a></td>
    129     <td></td>
    130     <td></td>
    131     <td>4.4.45.0.25.1.16.06.0.17.07.1.1</td>
    132     <td>2017  1  1 </td>
    133   </tr>
    134   <tr>
    135     <td>CVE-2017-0542</td>
    136     <td><a href="https://android.googlesource.com/platform/external/libavc/+/33ef7de9ddc8ea7eb9cbc440d1cf89957a0c267b">A-33934721</a></td>
    137     <td></td>
    138     <td></td>
    139     <td>6.06.0.17.07.1.1</td>
    140     <td>Google </td>
    141   </tr>
    142   <tr>
    143     <td>CVE-2017-0543</td>
    144     <td><a href="https://android.googlesource.com/platform/external/libavc/+/f634481e940421020e52f511c1fb34aac1db4b2f">A-34097866</a></td>
    145     <td></td>
    146     <td></td>
    147     <td>6.06.0.17.07.1.1</td>
    148     <td>Google </td>
    149   </tr>
    150 </tbody></table>
    151 
    152 <h3 id="eop-in-camerabase">CameraBase </h3>
    153 <p>CameraBase </p>
    154 
    155 <table>
    156   <colgroup><col width="18%" />
    157   <col width="17%" />
    158   <col width="10%" />
    159   <col width="19%" />
    160   <col width="18%" />
    161   <col width="17%" />
    162   </colgroup><tbody><tr>
    163     <th>CVE</th>
    164     <th></th>
    165     <th></th>
    166     <th> Google </th>
    167     <th> AOSP </th>
    168     <th></th>
    169   </tr>
    170   <tr>
    171     <td>CVE-2017-0544</td>
    172     <td><a href="https://android.googlesource.com/platform/frameworks/av/+/4b49489c12e6862e9a320ebcb53872e809ed20ec">A-31992879</a></td>
    173     <td></td>
    174     <td></td>
    175     <td>4.4.45.0.25.1.16.06.0.17.07.1.1</td>
    176     <td>2016  10  6 </td>
    177   </tr>
    178 </tbody></table>
    179 
    180 <h3 id="eop-in-audioserver">Audioserver </h3>
    181 <p>Audioserver </p>
    182 
    183 <table>
    184   <colgroup><col width="18%" />
    185   <col width="17%" />
    186   <col width="10%" />
    187   <col width="19%" />
    188   <col width="18%" />
    189   <col width="17%" />
    190   </colgroup><tbody><tr>
    191     <th>CVE</th>
    192     <th></th>
    193     <th></th>
    194     <th> Google </th>
    195     <th> AOSP </th>
    196     <th></th>
    197   </tr>
    198   <tr>
    199     <td>CVE-2017-0545</td>
    200     <td><a href="https://android.googlesource.com/platform/frameworks/av/+/e5a54485e08400a976092cd5b1c6d909d0e1a4ab">A-32591350</a></td>
    201     <td></td>
    202     <td></td>
    203     <td>5.0.25.1.16.06.0.17.07.1.1</td>
    204     <td>2016  10  31 </td>
    205   </tr>
    206 </tbody></table>
    207 
    208 <h3 id="eop-in-surfaceflinger">SurfaceFlinger </h3>
    209 <p>SurfaceFlinger </p>
    210 
    211 <table>
    212   <colgroup><col width="18%" />
    213   <col width="17%" />
    214   <col width="10%" />
    215   <col width="19%" />
    216   <col width="18%" />
    217   <col width="17%" />
    218   </colgroup><tbody><tr>
    219     <th>CVE</th>
    220     <th></th>
    221     <th></th>
    222     <th> Google </th>
    223     <th> AOSP </th>
    224     <th></th>
    225   </tr>
    226   <tr>
    227     <td>CVE-2017-0546</td>
    228     <td><a href="https://android.googlesource.com/platform/frameworks/native/+/45b202513ba7440beaefbf9928f73fb6683dcfbd">A-32628763</a></td>
    229     <td></td>
    230     <td></td>
    231     <td>4.4.45.0.25.1.16.06.0.17.07.1.1</td>
    232     <td>2016  11  2 </td>
    233   </tr>
    234 </tbody></table>
    235 
    236 <h3 id="id-in-mediaserver">Mediaserver </h3>
    237 <p>Mediaserver </p>
    238 
    239 <table>
    240   <colgroup><col width="18%" />
    241   <col width="17%" />
    242   <col width="10%" />
    243   <col width="19%" />
    244   <col width="18%" />
    245   <col width="17%" />
    246   </colgroup><tbody><tr>
    247     <th>CVE</th>
    248     <th></th>
    249     <th></th>
    250     <th> Google </th>
    251     <th> AOSP </th>
    252     <th></th>
    253   </tr>
    254   <tr>
    255     <td>CVE-2017-0547</td>
    256     <td><a href="https://android.googlesource.com/platform/frameworks/av/+/9667e3eff2d34c3797c3b529370de47b2c1f1bf6">A-33861560</a></td>
    257     <td></td>
    258     <td></td>
    259     <td>4.4.45.0.25.1.16.06.0.17.07.1.1</td>
    260     <td>2016  12  22 </td>
    261   </tr>
    262 </tbody></table>
    263 
    264 <h3 id="dos-in-libskia">libskia </h3>
    265 <p>libskia </p>
    266 
    267 <table>
    268   <colgroup><col width="18%" />
    269   <col width="17%" />
    270   <col width="10%" />
    271   <col width="19%" />
    272   <col width="18%" />
    273   <col width="17%" />
    274   </colgroup><tbody><tr>
    275     <th>CVE</th>
    276     <th></th>
    277     <th></th>
    278     <th> Google </th>
    279     <th> AOSP </th>
    280     <th></th>
    281   </tr>
    282   <tr>
    283     <td>CVE-2017-0548</td>
    284     <td><a href="https://android.googlesource.com/platform/external/skia/+/318e3505ac2436c62ec19fd27ebe9f8e7d174544">A-33251605</a></td>
    285     <td></td>
    286     <td></td>
    287     <td>7.07.1.1</td>
    288     <td>2016  11  29 </td>
    289   </tr>
    290 </tbody></table>
    291 
    292 <h3 id="dos-in-mediaserver">Mediaserver </h3>
    293 <p>Mediaserver </p>
    294 
    295 <table>
    296   <colgroup><col width="18%" />
    297   <col width="17%" />
    298   <col width="10%" />
    299   <col width="19%" />
    300   <col width="18%" />
    301   <col width="17%" />
    302   </colgroup><tbody><tr>
    303     <th>CVE</th>
    304     <th></th>
    305     <th></th>
    306     <th> Google </th>
    307     <th> AOSP </th>
    308     <th></th>
    309   </tr>
    310   <tr>
    311     <td>CVE-2017-0549</td>
    312     <td><a href="https://android.googlesource.com/platform/external/libavc/+/37345554fea84afd446d6d8fbb87feea5a0dde3f">A-33818508</a></td>
    313     <td></td>
    314     <td></td>
    315     <td>6.06.0.17.07.1.1</td>
    316     <td>2016  12  20 </td>
    317   </tr>
    318   <tr>
    319     <td>CVE-2017-0550</td>
    320     <td><a href="https://android.googlesource.com/platform/external/libavc/+/7950bf47b6944546a0aff11a7184947de9591b51">A-33933140</a></td>
    321     <td></td>
    322     <td></td>
    323     <td>6.06.0.17.07.1.1</td>
    324     <td>Google </td>
    325   </tr>
    326   <tr>
    327     <td>CVE-2017-0551</td>
    328     <td><a href="https://android.googlesource.com/platform/external/libavc/+/8b5fd8f24eba5dd19ab2f80ea11a9125aa882ae2">A-34097231</a> [<a href="https://android.googlesource.com/platform/external/libavc/+/494561291a503840f385fbcd11d9bc5f4dc502b8">2</a>]</td>
    329     <td></td>
    330     <td></td>
    331     <td>6.06.0.17.07.1.1</td>
    332     <td>Google </td>
    333   </tr>
    334   <tr>
    335     <td>CVE-2017-0552</td>
    336     <td><a href="https://android.googlesource.com/platform/external/libavc/+/9a00f562a612d56e7b2b989d168647db900ba6cf">A-34097915</a></td>
    337     <td></td>
    338     <td></td>
    339     <td>6.06.0.17.07.1.1</td>
    340     <td>Google </td>
    341   </tr>
    342 </tbody></table>
    343 
    344 <h3 id="eop-in-libnl">libnl </h3>
    345 <p>libnl  WLAN </p>
    346 
    347 <table>
    348   <colgroup><col width="18%" />
    349   <col width="17%" />
    350   <col width="10%" />
    351   <col width="19%" />
    352   <col width="18%" />
    353   <col width="17%" />
    354   </colgroup><tbody><tr>
    355     <th>CVE</th>
    356     <th></th>
    357     <th></th>
    358     <th> Google </th>
    359     <th> AOSP </th>
    360     <th></th>
    361   </tr>
    362   <tr>
    363     <td>CVE-2017-0553</td>
    364     <td><a href="https://android.googlesource.com/platform/external/libnl/+/f83d9c1c67b6be69a96995e384f50b572b667df0">A-32342065</a></td>
    365     <td></td>
    366     <td></td>
    367     <td>5.0.25.1.16.06.0.17.07.1.1</td>
    368     <td>2016  10  21 </td>
    369   </tr>
    370 </tbody></table>
    371 
    372 <h3 id="eop-in-telephony">Telephony </h3>
    373 <p>Telephony </p>
    374 
    375 <table>
    376   <colgroup><col width="18%" />
    377   <col width="17%" />
    378   <col width="10%" />
    379   <col width="19%" />
    380   <col width="18%" />
    381   <col width="17%" />
    382   </colgroup><tbody><tr>
    383     <th>CVE</th>
    384     <th></th>
    385     <th></th>
    386     <th> Google </th>
    387     <th> AOSP </th>
    388     <th></th>
    389   </tr>
    390   <tr>
    391     <td>CVE-2017-0554</td>
    392     <td><a href="https://android.googlesource.com/platform/packages/services/Telephony/+/aeb795ef2290af1a0e4b14909363bc574e6b3ee7">A-33815946</a> [<a href="https://android.googlesource.com/platform/frameworks/base/+/3294256ba5b9e2ba2d8619d617e3d900e5386564">2</a>]</td>
    393     <td></td>
    394     <td></td>
    395     <td>4.4.45.0.25.1.16.06.0.17.07.1.1</td>
    396     <td>2016  12  20 </td>
    397   </tr>
    398 </tbody></table>
    399 
    400 <h3 id="id-in-mediaserver-2">Mediaserver </h3>
    401 <p>Mediaserver </p>
    402 
    403 <table>
    404   <colgroup><col width="18%" />
    405   <col width="17%" />
    406   <col width="10%" />
    407   <col width="19%" />
    408   <col width="18%" />
    409   <col width="17%" />
    410   </colgroup><tbody><tr>
    411     <th>CVE</th>
    412     <th></th>
    413     <th></th>
    414     <th> Google </th>
    415     <th> AOSP </th>
    416     <th></th>
    417   </tr>
    418   <tr>
    419     <td>CVE-2017-0555</td>
    420     <td><a href="https://android.googlesource.com/platform/external/libavc/+/0b23c81c3dd9ec38f7e6806a3955fed1925541a0">A-33551775</a></td>
    421     <td></td>
    422     <td></td>
    423     <td>6.06.0.17.07.1.1</td>
    424     <td>2016  12  12 </td>
    425   </tr>
    426   <tr>
    427     <td>CVE-2017-0556</td>
    428     <td><a href="https://android.googlesource.com/platform/external/libmpeg2/+/f301cff2c1ddd880d9a2c77b22602a137519867b">A-34093952</a></td>
    429     <td></td>
    430     <td></td>
    431     <td>6.06.0.17.07.1.1</td>
    432     <td>2017  1  4 </td>
    433   </tr>
    434   <tr>
    435     <td>CVE-2017-0557</td>
    436     <td><a href="https://android.googlesource.com/platform/external/libmpeg2/+/227c1f829127405e21dab1664393050c652ef71e">A-34093073</a></td>
    437     <td></td>
    438     <td></td>
    439     <td>6.06.0.17.07.1.1</td>
    440     <td>2017  1  4 </td>
    441   </tr>
    442   <tr>
    443     <td>CVE-2017-0558</td>
    444     <td><a href="https://android.googlesource.com/platform/frameworks/av/+/50358a80b1724f6cf1bcdf003e1abf9cc141b122">A-34056274</a></td>
    445     <td></td>
    446     <td></td>
    447     <td>4.4.45.0.25.1.16.06.0.17.07.1.1</td>
    448     <td>Google </td>
    449   </tr>
    450 </tbody></table>
    451 
    452 <h3 id="id-in-libskia">libskia </h3>
    453 <p>libskia </p>
    454 
    455 <table>
    456   <colgroup><col width="18%" />
    457   <col width="17%" />
    458   <col width="10%" />
    459   <col width="19%" />
    460   <col width="18%" />
    461   <col width="17%" />
    462   </colgroup><tbody><tr>
    463     <th>CVE</th>
    464     <th></th>
    465     <th></th>
    466     <th> Google </th>
    467     <th> AOSP </th>
    468     <th></th>
    469   </tr>
    470   <tr>
    471     <td>CVE-2017-0559</td>
    472     <td><a href="https://android.googlesource.com/platform/external/skia/+/16882f721279a82a1c860ac689ce570b16fe26a0">A-33897722</a></td>
    473     <td></td>
    474     <td></td>
    475     <td>4.4.45.0.25.1.16.06.0.17.07.1.1</td>
    476     <td>2016  12  25 </td>
    477   </tr>
    478 </tbody></table>
    479 
    480 <h3 id="id-in-factory-reset"></h3>
    481 <p></p>
    482 
    483 <table>
    484   <colgroup><col width="18%" />
    485   <col width="17%" />
    486   <col width="10%" />
    487   <col width="19%" />
    488   <col width="18%" />
    489   <col width="17%" />
    490   </colgroup><tbody><tr>
    491     <th>CVE</th>
    492     <th></th>
    493     <th></th>
    494     <th> Google </th>
    495     <th> AOSP </th>
    496     <th></th>
    497   </tr>
    498   <tr>
    499     <td>CVE-2017-0560</td>
    500     <td><a href="https://android.googlesource.com/platform/frameworks/base/+/efdec8f5688ce6b0a287eddb6d5dad93ffa0e1ee">A-30681079</a></td>
    501     <td></td>
    502     <td></td>
    503     <td>4.4.45.0.25.1.16.06.0.17.07.1.1</td>
    504     <td>Google </td>
    505   </tr>
    506 </tbody></table>
    507 
    508 <h2 id="2017-04-05-details">2017-04-05  - </h2>
    509 <p> 2017-04-05  CVE Google  AOSP  Bug ID  AOSP  Bug  Bug ID </p>
    510 
    511 <h3 id="rce-in-broadcom-wi-fi-firmware">Broadcom WLAN </h3>
    512 <p>Broadcom WLAN  WLAN SoC  WLAN SoC </p>
    513 
    514 <table>
    515   <colgroup><col width="19%" />
    516   <col width="20%" />
    517   <col width="10%" />
    518   <col width="23%" />
    519   <col width="17%" />
    520   </colgroup><tbody><tr>
    521     <th>CVE</th>
    522     <th></th>
    523     <th></th>
    524     <th> Google </th>
    525     <th></th>
    526   </tr>
    527   <tr>
    528     <td>CVE-2017-0561</td>
    529     <td>A-34199105*<br />B-RB#110814</td>
    530     <td></td>
    531     <td>Nexus 6Nexus 6PNexus 9Pixel CNexus Player</td>
    532     <td>2017  1  9 </td>
    533   </tr>
    534 </tbody></table>
    535 <p>* <a href="https://developers.google.com/android/nexus/drivers">Google Developers </a> Nexus </p>
    536 
    537 <h3 id="rce-in-qualcomm-crypto-engine-driver">Qualcomm </h3>
    538 <p>Qualcomm </p>
    539 
    540 <table>
    541   <colgroup><col width="19%" />
    542   <col width="20%" />
    543   <col width="10%" />
    544   <col width="23%" />
    545   <col width="17%" />
    546   </colgroup><tbody><tr>
    547     <th>CVE</th>
    548     <th></th>
    549     <th></th>
    550     <th> Google </th>
    551     <th></th>
    552   </tr>
    553   <tr>
    554     <td>CVE-2016-10230</td>
    555     <td>A-34389927<br />
    556         <a href="https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=bd9a8fc6d7f6bd1a0b936994630006de450df657">QC-CR#1091408</a></td>
    557     <td></td>
    558     <td>Nexus 5XNexus 6Nexus 6PPixelPixel XLAndroid One</td>
    559     <td>2017  1  10 </td>
    560   </tr>
    561 </tbody></table>
    562 
    563 <h3 id="rce-in-kernel-networking-subsystem"></h3>
    564 <p></p>
    565 
    566 <table>
    567   <colgroup><col width="19%" />
    568   <col width="20%" />
    569   <col width="10%" />
    570   <col width="23%" />
    571   <col width="17%" />
    572   </colgroup><tbody><tr>
    573     <th>CVE</th>
    574     <th></th>
    575     <th></th>
    576     <th> Google </th>
    577     <th></th>
    578   </tr>
    579   <tr>
    580     <td>CVE-2016-10229</td>
    581     <td>A-32813456<br />
    582         <a href="http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=197c949e7798fbf28cfadc69d9ca0c2abbf93191"></a></td>
    583     <td></td>
    584     <td>Nexus 5XNexus 6Nexus 6PPixelPixel XLPixel CAndroid OneNexus Player</td>
    585     <td>Google </td>
    586   </tr>
    587 </tbody></table>
    588 
    589 <h3 id="eop-in-mediatek-touchscreen-driver">MediaTek </h3>
    590 <p>MediaTek </p>
    591 
    592 <table>
    593   <colgroup><col width="19%" />
    594   <col width="20%" />
    595   <col width="10%" />
    596   <col width="23%" />
    597   <col width="17%" />
    598   </colgroup><tbody><tr>
    599     <th>CVE</th>
    600     <th></th>
    601     <th></th>
    602     <th> Google </th>
    603     <th></th>
    604   </tr>
    605   <tr>
    606     <td>CVE-2017-0562</td>
    607     <td>A-30202425*<br />M-ALPS02898189</td>
    608     <td>*</td>
    609     <td>**</td>
    610     <td>2016  7  16 </td>
    611   </tr>
    612 </tbody></table>
    613 <p>* <a href="https://developers.google.com/android/nexus/drivers">Google Developers </a> Nexus </p>
    614 <p>**  Android 7.0 Google </p>
    615 
    616 <h3 id="eop-in-htc-touchscreen-driver">HTC </h3>
    617 <p>HTC </p>
    618 
    619 <table>
    620   <colgroup><col width="19%" />
    621   <col width="20%" />
    622   <col width="10%" />
    623   <col width="23%" />
    624   <col width="17%" />
    625   </colgroup><tbody><tr>
    626     <th>CVE</th>
    627     <th></th>
    628     <th></th>
    629     <th> Google </th>
    630     <th></th>
    631   </tr>
    632   <tr>
    633     <td>CVE-2017-0563</td>
    634     <td>A-32089409*<br />
    635         </td>
    636     <td></td>
    637     <td>Nexus 9</td>
    638     <td>2016  10  9 </td>
    639   </tr>
    640 </tbody></table>
    641 <p>* <a href="https://developers.google.com/android/nexus/drivers">Google Developers </a> Nexus </p>
    642 
    643 <h3 id="eop-in-kernel-ion-subsystem"> ION </h3>
    644 <p> ION </p>
    645 
    646 <table>
    647   <colgroup><col width="19%" />
    648   <col width="20%" />
    649   <col width="10%" />
    650   <col width="23%" />
    651   <col width="17%" />
    652   </colgroup><tbody><tr>
    653     <th>CVE</th>
    654     <th></th>
    655     <th></th>
    656     <th> Google </th>
    657     <th></th>
    658   </tr>
    659   <tr>
    660     <td>CVE-2017-0564</td>
    661     <td>A-34276203*<br />
    662         </td>
    663     <td></td>
    664     <td>Nexus 5XNexus 6Nexus 6PPixelPixel XLPixel CAndroid OneNexus Player</td>
    665     <td>2017  1  12 </td>
    666   </tr>
    667 </tbody></table>
    668 <p>* <a href="https://developers.google.com/android/nexus/drivers">Google Developers </a> Nexus </p>
    669 
    670 <h3 id="vulnerabilities-in-qualcomm-components">Qualcomm </h3>
    671 <p> Qualcomm 2016  10  Qualcomm AMSS </p>
    672 
    673 <table>
    674   <colgroup><col width="19%" />
    675   <col width="20%" />
    676   <col width="10%" />
    677   <col width="23%" />
    678   <col width="17%" />
    679   </colgroup><tbody><tr>
    680     <th>CVE</th>
    681     <th></th>
    682     <th></th>
    683     <th> Google </th>
    684     <th></th>
    685   </tr>
    686   <tr>
    687     <td>CVE-2016-10237</td>
    688     <td>A-31628601**<br />QC-CR#1046751</td>
    689     <td></td>
    690     <td>**</td>
    691     <td>Qualcomm </td>
    692   </tr>
    693   <tr>
    694     <td>CVE-2016-10238</td>
    695     <td>A-35358527**<br />QC-CR#1042558</td>
    696     <td></td>
    697     <td>***</td>
    698     <td>Qualcomm </td>
    699   </tr>
    700   <tr>
    701     <td>CVE-2016-10239</td>
    702     <td>A-31624618**<br />QC-CR#1032929</td>
    703     <td></td>
    704     <td>PixelPixel XL</td>
    705     <td>Qualcomm </td>
    706   </tr>
    707 </tbody></table>
    708 <p>* </p>
    709 <p>* <a href="https://developers.google.com/android/nexus/drivers">Google Developers </a> Nexus </p>
    710 <p>***  Android 7.0 Google </p>
    711 
    712 <h3 id="rce-in-v8">v8 </h3>
    713 <p>v8 </p>
    714 
    715 <table>
    716   <colgroup><col width="18%" />
    717   <col width="17%" />
    718   <col width="10%" />
    719   <col width="19%" />
    720   <col width="18%" />
    721   <col width="17%" />
    722   </colgroup><tbody><tr>
    723     <th>CVE</th>
    724     <th></th>
    725     <th></th>
    726     <th> Google </th>
    727     <th> AOSP </th>
    728     <th></th>
    729   </tr>
    730   <tr>
    731     <td>CVE-2016-5129</td>
    732     <td>A-29178923</td>
    733     <td></td>
    734     <td>*</td>
    735     <td>6.06.0.17.0</td>
    736     <td>2016  7  20 </td>
    737   </tr>
    738 </tbody></table>
    739 <p>*  Android 7.0 Google </p>
    740 
    741 <h3 id="rce-in-freetype">Freetype </h3>
    742 <p>Freetype </p>
    743 
    744 <table>
    745   <colgroup><col width="18%" />
    746   <col width="17%" />
    747   <col width="10%" />
    748   <col width="19%" />
    749   <col width="18%" />
    750   <col width="17%" />
    751   </colgroup><tbody><tr>
    752     <th>CVE</th>
    753     <th></th>
    754     <th></th>
    755     <th> Google </th>
    756     <th> AOSP </th>
    757     <th></th>
    758   </tr>
    759   <tr>
    760     <td>CVE-2016-10244</td>
    761     <td>A-31470908</td>
    762     <td></td>
    763     <td>*</td>
    764     <td>4.4.45.0.25.1.16.06.0.17.0</td>
    765     <td>2016  9  13 </td>
    766   </tr>
    767 </tbody></table>
    768 <p>*  Android 7.0 Google </p>
    769 
    770 <h3 id="eop-in-kernel-sound-subsystem"></h3>
    771 <p></p>
    772 
    773 <table>
    774   <colgroup><col width="19%" />
    775   <col width="20%" />
    776   <col width="10%" />
    777   <col width="23%" />
    778   <col width="17%" />
    779   </colgroup><tbody><tr>
    780     <th>CVE</th>
    781     <th></th>
    782     <th></th>
    783     <th> Google </th>
    784     <th></th>
    785   </tr>
    786   <tr>
    787     <td>CVE-2014-4656</td>
    788     <td>A-34464977<br />
    789         <a href="http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=883a1d49f0d77d30012f114b2e19fc141beb3e8e"></a></td>
    790     <td></td>
    791     <td>Nexus 6Nexus Player</td>
    792     <td>2014  6  26 </td>
    793   </tr>
    794 </tbody></table>
    795 
    796 <h3 id="eop-in-nvidia-crypto-driver">NVIDIA </h3>
    797 <p>NVIDIA </p>
    798 
    799 <table>
    800   <colgroup><col width="19%" />
    801   <col width="20%" />
    802   <col width="10%" />
    803   <col width="23%" />
    804   <col width="17%" />
    805   </colgroup><tbody><tr>
    806     <th>CVE</th>
    807     <th></th>
    808     <th></th>
    809     <th> Google </th>
    810     <th></th>
    811   </tr>
    812   <tr>
    813     <td>CVE-2017-0339</td>
    814     <td>A-27930566*<br />N-CVE-2017-0339</td>
    815     <td></td>
    816     <td>Nexus 9</td>
    817     <td>2016  3  29 </td>
    818   </tr>
    819   <tr>
    820     <td>CVE-2017-0332</td>
    821     <td>A-33812508*<br />N-CVE-2017-0332</td>
    822     <td></td>
    823     <td>Nexus 9</td>
    824     <td>2016  12  21 </td>
    825   </tr>
    826   <tr>
    827     <td>CVE-2017-0327</td>
    828     <td>A-33893669*<br />N-CVE-2017-0327</td>
    829     <td></td>
    830     <td>Nexus 9</td>
    831     <td>2016  12  24 </td>
    832   </tr>
    833 </tbody></table>
    834 <p>* <a href="https://developers.google.com/android/nexus/drivers">Google Developers </a> Nexus </p>
    835 
    836 <h3 id="eop-in-mediatek-thermal-driver">MediaTek </h3>
    837 <p>MediaTek </p>
    838 
    839 <table>
    840   <colgroup><col width="19%" />
    841   <col width="20%" />
    842   <col width="10%" />
    843   <col width="23%" />
    844   <col width="17%" />
    845   </colgroup><tbody><tr>
    846     <th>CVE</th>
    847     <th></th>
    848     <th></th>
    849     <th> Google </th>
    850     <th></th>
    851   </tr>
    852   <tr>
    853     <td>CVE-2017-0565</td>
    854     <td>A-28175904*<br />M-ALPS02696516</td>
    855     <td></td>
    856     <td>**</td>
    857     <td>2016  4  11 </td>
    858   </tr>
    859 </tbody></table>
    860 <p>* <a href="https://developers.google.com/android/nexus/drivers">Google Developers </a> Nexus </p>
    861 <p>**  Android 7.0 Google </p>
    862 
    863 <h3 id="eop-in-mediatek-camera-driver">MediaTek </h3>
    864 <p>MediaTek </p>
    865 
    866 <table>
    867   <colgroup><col width="19%" />
    868   <col width="20%" />
    869   <col width="10%" />
    870   <col width="23%" />
    871   <col width="17%" />
    872   </colgroup><tbody><tr>
    873     <th>CVE</th>
    874     <th></th>
    875     <th></th>
    876     <th> Google </th>
    877     <th></th>
    878   </tr>
    879   <tr>
    880     <td>CVE-2017-0566</td>
    881     <td>A-28470975*<br />M-ALPS02696367</td>
    882     <td></td>
    883     <td>**</td>
    884     <td>2016  4  29 </td>
    885   </tr>
    886 </tbody></table>
    887 <p>* <a href="https://developers.google.com/android/nexus/drivers">Google Developers </a> Nexus </p>
    888 <p>**  Android 7.0 Google </p>
    889 
    890 <h3 id="eop-in-broadcom-wi-fi-driver">Broadcom WLAN </h3>
    891 <p>Broadcom WLAN </p>
    892 
    893 <table>
    894   <colgroup><col width="19%" />
    895   <col width="20%" />
    896   <col width="10%" />
    897   <col width="23%" />
    898   <col width="17%" />
    899   </colgroup><tbody><tr>
    900     <th>CVE</th>
    901     <th></th>
    902     <th></th>
    903     <th> Google </th>
    904     <th></th>
    905   </tr>
    906   <tr>
    907     <td>CVE-2017-0567</td>
    908     <td>A-32125310*<br />B-RB#112575</td>
    909     <td></td>
    910     <td>Nexus 6Nexus 6PNexus 9Pixel CNexus Player</td>
    911     <td>2016  10  12 </td>
    912   </tr>
    913   <tr>
    914     <td>CVE-2017-0568</td>
    915     <td>A-34197514*<br />B-RB#112600</td>
    916     <td></td>
    917     <td>Nexus 6Nexus 6PNexus 9Pixel CNexus Player</td>
    918     <td>2017  1  9 </td>
    919   </tr>
    920   <tr>
    921     <td>CVE-2017-0569</td>
    922     <td>A-34198729*<br />B-RB#110666</td>
    923     <td></td>
    924     <td>Nexus 6Nexus 6PNexus 9Pixel CNexus Player</td>
    925     <td>2017  1  9 </td>
    926   </tr>
    927   <tr>
    928     <td>CVE-2017-0570</td>
    929     <td>A-34199963*<br />B-RB#110688</td>
    930     <td></td>
    931     <td>Nexus 6Nexus 6PNexus 9Pixel CNexus Player</td>
    932     <td>2017  1  9 </td>
    933   </tr>
    934   <tr>
    935     <td>CVE-2017-0571</td>
    936     <td>A-34203305*<br />B-RB#111541</td>
    937     <td></td>
    938     <td>Nexus 6Nexus 6PPixel CNexus Player</td>
    939     <td>2017  1  9 </td>
    940   </tr>
    941   <tr>
    942     <td>CVE-2017-0572</td>
    943     <td>A-34198931*<br />B-RB#112597</td>
    944     <td></td>
    945     <td>**</td>
    946     <td>2017  1  9 </td>
    947   </tr>
    948   <tr>
    949     <td>CVE-2017-0573</td>
    950     <td>A-34469904*<br />B-RB#91539</td>
    951     <td></td>
    952     <td>Nexus 6Nexus 6PNexus 9Pixel CNexus Player</td>
    953     <td>2017  1  18 </td>
    954   </tr>
    955   <tr>
    956     <td>CVE-2017-0574</td>
    957     <td>A-34624457*<br />B-RB#113189</td>
    958     <td></td>
    959     <td>Nexus 6Nexus 6PNexus 9Pixel C</td>
    960     <td>2017  1  22 </td>
    961   </tr>
    962 </tbody></table>
    963 <p>* <a href="https://developers.google.com/android/nexus/drivers">Google Developers </a> Nexus </p>
    964 <p>**  Android 7.0 Google </p>
    965 
    966 <h3 id="eop-in-qualcomm-wi-fi-driver">Qualcomm WLAN </h3>
    967 <p>Qualcomm WLAN </p>
    968 
    969 <table>
    970   <colgroup><col width="19%" />
    971   <col width="20%" />
    972   <col width="10%" />
    973   <col width="23%" />
    974   <col width="17%" />
    975   </colgroup><tbody><tr>
    976     <th>CVE</th>
    977     <th></th>
    978     <th></th>
    979     <th> Google </th>
    980     <th></th>
    981   </tr>
    982   <tr>
    983     <td>CVE-2017-0575</td>
    984     <td>A-32658595*<br />QC-CR#1103099</td>
    985     <td></td>
    986     <td>Nexus 5XPixelPixel XL</td>
    987     <td>2016  11  3 </td>
    988   </tr>
    989 </tbody></table>
    990 <p>* <a href="https://developers.google.com/android/nexus/drivers">Google Developers </a> Nexus </p>
    991 
    992 <h3 id="eop-in-nvidia-i2c-hid-driver">NVIDIA I2C HID </h3>
    993 <p>NVIDIA I2C HID </p>
    994 
    995 <table>
    996   <colgroup><col width="19%" />
    997   <col width="20%" />
    998   <col width="10%" />
    999   <col width="23%" />
   1000   <col width="17%" />
   1001   </colgroup><tbody><tr>
   1002     <th>CVE</th>
   1003     <th></th>
   1004     <th></th>
   1005     <th> Google </th>
   1006     <th></th>
   1007   </tr>
   1008   <tr>
   1009     <td>CVE-2017-0325</td>
   1010     <td>A-33040280*<br />N-CVE-2017-0325</td>
   1011     <td></td>
   1012     <td>Nexus 9Pixel C</td>
   1013     <td>2016  11  20 </td>
   1014   </tr>
   1015 </tbody></table>
   1016 <p>* <a href="https://developers.google.com/android/nexus/drivers">Google Developers </a> Nexus </p>
   1017 
   1018 <h3 id="eop-in-qualcomm-audio-driver">Qualcomm </h3>
   1019 <p>Qualcomm </p>
   1020 
   1021 <table>
   1022   <colgroup><col width="19%" />
   1023   <col width="20%" />
   1024   <col width="10%" />
   1025   <col width="23%" />
   1026   <col width="17%" />
   1027   </colgroup><tbody><tr>
   1028     <th>CVE</th>
   1029     <th></th>
   1030     <th></th>
   1031     <th> Google </th>
   1032     <th></th>
   1033   </tr>
   1034   <tr>
   1035     <td>CVE-2017-0454</td>
   1036     <td>A-33353700<br />
   1037         <a href="https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=cb0701a2f99fa19f01fbd4249bda9a8eadb0241f">QC-CR#1104067</a></td>
   1038     <td></td>
   1039     <td>Nexus 5XNexus 6PPixelPixel XL</td>
   1040     <td>2016  12  5 </td>
   1041   </tr>
   1042 </tbody></table>
   1043 
   1044 <h3 id="eop-in-qualcomm-crypto-engine-driver">Qualcomm </h3>
   1045 <p>Qualcomm </p>
   1046 
   1047 <table>
   1048   <colgroup><col width="19%" />
   1049   <col width="20%" />
   1050   <col width="10%" />
   1051   <col width="23%" />
   1052   <col width="17%" />
   1053   </colgroup><tbody><tr>
   1054     <th>CVE</th>
   1055     <th></th>
   1056     <th></th>
   1057     <th> Google </th>
   1058     <th></th>
   1059   </tr>
   1060   <tr>
   1061     <td>CVE-2017-0576</td>
   1062     <td>A-33544431<br />
   1063         <a href="https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=2b09507d78b25637df6879cd2ee2031b208b3532">QC-CR#1103089</a></td>
   1064     <td></td>
   1065     <td>Nexus 5XNexus 6Nexus 6PPixelPixel XLAndroid One</td>
   1066     <td>2016  12  9 </td>
   1067   </tr>
   1068 </tbody></table>
   1069 
   1070 <h3 id="eop-in-htc-touchscreen-driver-2">HTC </h3>
   1071 <p>HTC </p>
   1072 
   1073 <table>
   1074   <colgroup><col width="19%" />
   1075   <col width="20%" />
   1076   <col width="10%" />
   1077   <col width="23%" />
   1078   <col width="17%" />
   1079   </colgroup><tbody><tr>
   1080     <th>CVE</th>
   1081     <th></th>
   1082     <th></th>
   1083     <th> Google </th>
   1084     <th></th>
   1085   </tr>
   1086   <tr>
   1087     <td>CVE-2017-0577</td>
   1088     <td>A-33842951*<br />
   1089         </td>
   1090     <td></td>
   1091     <td>**</td>
   1092     <td>2016  12  21 </td>
   1093   </tr>
   1094 </tbody></table>
   1095 <p>* <a href="https://developers.google.com/android/nexus/drivers">Google Developers </a> Nexus </p>
   1096 <p>**  Android 7.0 Google </p>
   1097 
   1098 <h3 id="eop-in-dts-sound-driver">DTS </h3>
   1099 <p>DTS </p>
   1100 
   1101 <table>
   1102   <colgroup><col width="19%" />
   1103   <col width="20%" />
   1104   <col width="10%" />
   1105   <col width="23%" />
   1106   <col width="17%" />
   1107   </colgroup><tbody><tr>
   1108     <th>CVE</th>
   1109     <th></th>
   1110     <th></th>
   1111     <th> Google </th>
   1112     <th></th>
   1113   </tr>
   1114   <tr>
   1115     <td>CVE-2017-0578</td>
   1116     <td>A-33964406*<br />
   1117         </td>
   1118     <td></td>
   1119     <td>**</td>
   1120     <td>2016  12  28 </td>
   1121   </tr>
   1122 </tbody></table>
   1123 <p>* <a href="https://developers.google.com/android/nexus/drivers">Google Developers </a> Nexus </p>
   1124 <p>**  Android 7.0 Google </p>
   1125 
   1126 <h3 id="eop-in-qualcomm-sound-codec-driver">Qualcomm </h3>
   1127 <p>Qualcomm </p>
   1128 
   1129 <table>
   1130   <colgroup><col width="19%" />
   1131   <col width="20%" />
   1132   <col width="10%" />
   1133   <col width="23%" />
   1134   <col width="17%" />
   1135   </colgroup><tbody><tr>
   1136     <th>CVE</th>
   1137     <th></th>
   1138     <th></th>
   1139     <th> Google </th>
   1140     <th></th>
   1141   </tr>
   1142   <tr>
   1143     <td>CVE-2016-10231</td>
   1144     <td>A-33966912<br />
   1145         <a href="https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=3bfe5a89916f7d29492e9f6d941d108b688cb804">QC-CR#1096799</a></td>
   1146     <td></td>
   1147     <td>PixelPixel XL</td>
   1148     <td>2016  12  29 </td>
   1149   </tr>
   1150 </tbody></table>
   1151 
   1152 <h3 id="eop-in-qualcomm-video-driver">Qualcomm </h3>
   1153 <p>Qualcomm </p>
   1154 
   1155 <table>
   1156   <colgroup><col width="19%" />
   1157   <col width="20%" />
   1158   <col width="10%" />
   1159   <col width="23%" />
   1160   <col width="17%" />
   1161   </colgroup><tbody><tr>
   1162     <th>CVE</th>
   1163     <th></th>
   1164     <th></th>
   1165     <th> Google </th>
   1166     <th></th>
   1167   </tr>
   1168   <tr>
   1169     <td>CVE-2017-0579</td>
   1170     <td>A-34125463*<br />QC-CR#1115406</td>
   1171     <td></td>
   1172     <td>Nexus 5XNexus 6PPixelPixel XL</td>
   1173     <td>2017  1  5 </td>
   1174   </tr>
   1175   <tr>
   1176     <td>CVE-2016-10232</td>
   1177     <td>A-34386696<br />
   1178         <a href="https://source.codeaurora.org/quic/la//kernel/msm-3.10/commit/?id=21e0ead58e47798567d846b84f16f89cf69a57ae">QC-CR#1024872</a> <a href="https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=27f7b3b3059f6181e2786f886f4cd92f413bc30c">[2]</a></td>
   1179     <td></td>
   1180     <td>Nexus 5XNexus 6PPixelPixel XLAndroid One</td>
   1181     <td>2017  1  10 </td>
   1182   </tr>
   1183   <tr>
   1184     <td>CVE-2016-10233</td>
   1185     <td>A-34389926<br />
   1186         <a href="https://source.codeaurora.org/quic/la/kernel/msm/commit/?id=d793c6d91ecba2a1fd206ad47a4fd408d290addf">QC-CR#897452</a></td>
   1187     <td></td>
   1188     <td>**</td>
   1189     <td>2017  1  10 </td>
   1190   </tr>
   1191 </tbody></table>
   1192 <p>* <a href="https://developers.google.com/android/nexus/drivers">Google Developers </a> Nexus </p>
   1193 <p>**  Android 7.0 Google </p>
   1194 
   1195 <h3 id="eop-in-nvidia-boot-and-power-management-processor-driver">NVIDIA </h3>
   1196 <p>NVIDIA </p>
   1197 
   1198 <table>
   1199   <colgroup><col width="19%" />
   1200   <col width="20%" />
   1201   <col width="10%" />
   1202   <col width="23%" />
   1203   <col width="17%" />
   1204   </colgroup><tbody><tr>
   1205     <th>CVE</th>
   1206     <th></th>
   1207     <th></th>
   1208     <th> Google </th>
   1209     <th></th>
   1210   </tr>
   1211   <tr>
   1212     <td>CVE-2017-0329</td>
   1213     <td>A-34115304*<br />N-CVE-2017-0329</td>
   1214     <td></td>
   1215     <td>Pixel C</td>
   1216     <td>2017  1  5 </td>
   1217   </tr>
   1218 </tbody></table>
   1219 <p>* <a href="https://developers.google.com/android/nexus/drivers">Google Developers </a> Nexus </p>
   1220 
   1221 <h3 id="eop-in-synaptics-touchscreen-driver">Synaptics </h3>
   1222 <p>Synaptics </p>
   1223 
   1224 <table>
   1225   <colgroup><col width="19%" />
   1226   <col width="20%" />
   1227   <col width="10%" />
   1228   <col width="23%" />
   1229   <col width="17%" />
   1230   </colgroup><tbody><tr>
   1231     <th>CVE</th>
   1232     <th></th>
   1233     <th></th>
   1234     <th> Google </th>
   1235     <th></th>
   1236   </tr>
   1237   <tr>
   1238     <td>CVE-2017-0580</td>
   1239     <td>A-34325986*<br />
   1240         </td>
   1241     <td></td>
   1242     <td>**</td>
   1243     <td>2017  1  16 </td>
   1244   </tr>
   1245   <tr>
   1246     <td>CVE-2017-0581</td>
   1247     <td>A-34614485*<br />
   1248         </td>
   1249     <td></td>
   1250     <td>**</td>
   1251     <td>2017  1  22 </td>
   1252   </tr>
   1253 </tbody></table>
   1254 <p>* <a href="https://developers.google.com/android/nexus/drivers">Google Developers </a> Nexus </p>
   1255 <p>**  Android 7.0 Google </p>
   1256 
   1257 <h3 id="eop-in-qualcomm-seemp-driver">Qualcomm Seemp </h3>
   1258 <p>Qualcomm Seemp </p>
   1259 
   1260 <table>
   1261   <colgroup><col width="19%" />
   1262   <col width="20%" />
   1263   <col width="10%" />
   1264   <col width="23%" />
   1265   <col width="17%" />
   1266   </colgroup><tbody><tr>
   1267     <th>CVE</th>
   1268     <th></th>
   1269     <th></th>
   1270     <th> Google </th>
   1271     <th></th>
   1272   </tr>
   1273   <tr>
   1274     <td>CVE-2017-0462</td>
   1275     <td>A-33353601<br />
   1276         <a href="https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=eb7b1426279e751b1fc3e86f434dc349945c1ae7">QC-CR#1102288</a></td>
   1277     <td></td>
   1278     <td>PixelPixel XL</td>
   1279     <td>Google </td>
   1280   </tr>
   1281 </tbody></table>
   1282 
   1283 <h3 id="eop-in-qualcomm-kyro-l2-driver">Qualcomm Kyro L2 </h3>
   1284 <p>Qualcomm Kyro L2 </p>
   1285 
   1286 <table>
   1287   <colgroup><col width="19%" />
   1288   <col width="20%" />
   1289   <col width="10%" />
   1290   <col width="23%" />
   1291   <col width="17%" />
   1292   </colgroup><tbody><tr>
   1293     <th>CVE</th>
   1294     <th></th>
   1295     <th></th>
   1296     <th> Google </th>
   1297     <th></th>
   1298   </tr>
   1299   <tr>
   1300     <td>CVE-2017-6423</td>
   1301     <td>A-32831370<br />
   1302         <a href="https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=0f264f812b61884390b432fdad081a3e995ba768">QC-CR#1103158</a></td>
   1303     <td></td>
   1304     <td>PixelPixel XL</td>
   1305     <td>Google </td>
   1306   </tr>
   1307 </tbody></table>
   1308 
   1309 <h3 id="eop-in-kernel-file-system"></h3>
   1310 <p></p>
   1311 
   1312 <table>
   1313   <colgroup><col width="19%" />
   1314   <col width="20%" />
   1315   <col width="10%" />
   1316   <col width="23%" />
   1317   <col width="17%" />
   1318   </colgroup><tbody><tr>
   1319     <th>CVE</th>
   1320     <th></th>
   1321     <th></th>
   1322     <th> Google </th>
   1323     <th></th>
   1324   </tr>
   1325   <tr>
   1326     <td>CVE-2014-9922</td>
   1327     <td>A-32761463<br />
   1328         <a href="http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=69c433ed2ecd2d3264efd7afec4439524b319121"></a></td>
   1329     <td></td>
   1330     <td>Nexus 5XNexus 6Nexus 6PNexus 9PixelPixel XLPixel CAndroid OneNexus Player</td>
   1331     <td>Google </td>
   1332   </tr>
   1333 </tbody></table>
   1334 
   1335 <h3 id="id-in-kernel-memory-subsystem"></h3>
   1336 <p></p>
   1337 
   1338 <table>
   1339   <colgroup><col width="19%" />
   1340   <col width="20%" />
   1341   <col width="10%" />
   1342   <col width="23%" />
   1343   <col width="17%" />
   1344   </colgroup><tbody><tr>
   1345     <th>CVE</th>
   1346     <th></th>
   1347     <th></th>
   1348     <th> Google </th>
   1349     <th></th>
   1350   </tr>
   1351   <tr>
   1352     <td>CVE-2014-0206</td>
   1353     <td>A-34465735<br />
   1354         <a href="https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=d36db46c2cba973557eb6138d22210c4e0cf17d6"></a></td>
   1355     <td></td>
   1356     <td>Nexus 6Nexus Player</td>
   1357     <td>2014  5  6 </td>
   1358   </tr>
   1359 </tbody></table>
   1360 
   1361 <h3 id="id-in-kernel-networking-subsystem"></h3>
   1362 <p></p>
   1363 
   1364 <table>
   1365   <colgroup><col width="19%" />
   1366   <col width="20%" />
   1367   <col width="10%" />
   1368   <col width="23%" />
   1369   <col width="17%" />
   1370   </colgroup><tbody><tr>
   1371     <th>CVE</th>
   1372     <th></th>
   1373     <th></th>
   1374     <th> Google </th>
   1375     <th></th>
   1376   </tr>
   1377   <tr>
   1378     <td>CVE-2014-3145</td>
   1379     <td>A-34469585<br />
   1380         <a href="https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=314760e66c35c8ffa51b4c4ca6948d207e783079"></a> <a href="http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=05ab8f2647e4221cbdb3856dd7d32bd5407316b3">[2]</a></td>
   1381     <td></td>
   1382     <td>Nexus 6Nexus Player</td>
   1383     <td>2014  5  9 </td>
   1384   </tr>
   1385 </tbody></table>
   1386 
   1387 <h3 id="id-in-qualcomm-trustzone">Qualcomm TrustZone </h3>
   1388 <p>Qualcomm TrustZone </p>
   1389 
   1390 <table>
   1391   <colgroup><col width="19%" />
   1392   <col width="20%" />
   1393   <col width="10%" />
   1394   <col width="23%" />
   1395   <col width="17%" />
   1396   </colgroup><tbody><tr>
   1397     <th>CVE</th>
   1398     <th></th>
   1399     <th></th>
   1400     <th> Google </th>
   1401     <th></th>
   1402   </tr>
   1403   <tr>
   1404     <td>CVE-2016-5349</td>
   1405     <td>A-29083830<br />
   1406         <a href="https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=7c3bf6557c62d904b15507eb451fda8fd7ef750c">QC-CR#1021945</a> <a href="https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=03853a58952834ac3e1e3007c9c680dd4c001a2f">[2]</a> <a href="https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=e3d969000fb60ecb9bc01667fa89957f67763514">[3]</a> <a href="https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=9bd398661cae758ffc557adc7de74ba32654e1f9">[4]</a></td>
   1407     <td></td>
   1408     <td>Nexus 5XNexus 6Nexus 6PPixelPixel XLAndroid One</td>
   1409     <td>2016  6  1 </td>
   1410   </tr>
   1411 </tbody></table>
   1412 
   1413 <h3 id="id-in-qualcomm-ipa-driver">Qualcomm IPA </h3>
   1414 <p>Qualcomm IPA </p>
   1415 
   1416 <table>
   1417   <colgroup><col width="19%" />
   1418   <col width="20%" />
   1419   <col width="10%" />
   1420   <col width="23%" />
   1421   <col width="17%" />
   1422   </colgroup><tbody><tr>
   1423     <th>CVE</th>
   1424     <th></th>
   1425     <th></th>
   1426     <th> Google </th>
   1427     <th></th>
   1428   </tr>
   1429   <tr>
   1430     <td>CVE-2016-10234</td>
   1431     <td>A-34390017<br />
   1432         <a href="https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=c7d7492c1e329fdeb28a7901c4cd634d41a996b1">QC-CR#1069060</a> <a href="https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=d12370c7f3ecded1867fbd6b70ded35db55cab1d">[2]</a></td>
   1433     <td></td>
   1434     <td>Nexus 5XNexus 6PPixelPixel XL</td>
   1435     <td>2017  1  10 </td>
   1436   </tr>
   1437 </tbody></table>
   1438 
   1439 <h3 id="dos-in-kernel-networking-subsystem"></h3>
   1440 <p></p>
   1441 
   1442 <table>
   1443   <colgroup><col width="19%" />
   1444   <col width="20%" />
   1445   <col width="10%" />
   1446   <col width="23%" />
   1447   <col width="17%" />
   1448   </colgroup><tbody><tr>
   1449     <th>CVE</th>
   1450     <th></th>
   1451     <th></th>
   1452     <th> Google </th>
   1453     <th></th>
   1454   </tr>
   1455   <tr>
   1456     <td>CVE-2014-2706</td>
   1457     <td>A-34160553<br />
   1458         <a href="https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=1d147bfa64293b2723c4fec50922168658e613ba"></a></td>
   1459     <td></td>
   1460     <td>Nexus Player</td>
   1461     <td>2014  4  1 </td>
   1462   </tr>
   1463 </tbody></table>
   1464 
   1465 <h3 id="dos-in-qualcomm-wi-fi-driver">Qualcomm WLAN </h3>
   1466 <p>Qualcomm WLAN  WLAN </p>
   1467 
   1468 <table>
   1469   <colgroup><col width="19%" />
   1470   <col width="20%" />
   1471   <col width="10%" />
   1472   <col width="23%" />
   1473   <col width="17%" />
   1474   </colgroup><tbody><tr>
   1475     <th>CVE</th>
   1476     <th></th>
   1477     <th></th>
   1478     <th> Google </th>
   1479     <th></th>
   1480   </tr>
   1481   <tr>
   1482     <td>CVE-2016-10235</td>
   1483     <td>A-34390620<br />
   1484         <a href="https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=5bb0059243515ecdac138cfdb4cee7259bbd0bbc">QC-CR#1046409</a></td>
   1485     <td></td>
   1486     <td>**</td>
   1487     <td>2017  1  10 </td>
   1488   </tr>
   1489 </tbody></table>
   1490 <p>**  Android 7.0 Google </p>
   1491 
   1492 <h3 id="eop-in-kernel-file-system-2"></h3>
   1493 <p></p>
   1494 
   1495 <table>
   1496   <colgroup><col width="19%" />
   1497   <col width="20%" />
   1498   <col width="10%" />
   1499   <col width="23%" />
   1500   <col width="17%" />
   1501   </colgroup><tbody><tr>
   1502     <th>CVE</th>
   1503     <th></th>
   1504     <th></th>
   1505     <th> Google </th>
   1506     <th></th>
   1507   </tr>
   1508   <tr>
   1509     <td>CVE-2016-7097</td>
   1510     <td>A-32458736<br />
   1511         <a href="http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=073931017b49d9458aa351605b43a7e34598caef"></a></td>
   1512     <td></td>
   1513     <td>Nexus 5XNexus 6Nexus 6PNexus 9PixelPixel XLPixel CNexus Player</td>
   1514     <td>2016  8  28 </td>
   1515   </tr>
   1516 </tbody></table>
   1517 
   1518 <h3 id="eop-in-qualcomm-wi-fi-driver-2">Qualcomm WLAN </h3>
   1519 <p>Qualcomm WLAN </p>
   1520 
   1521 <table>
   1522   <colgroup><col width="19%" />
   1523   <col width="20%" />
   1524   <col width="10%" />
   1525   <col width="23%" />
   1526   <col width="17%" />
   1527   </colgroup><tbody><tr>
   1528     <th>CVE</th>
   1529     <th></th>
   1530     <th></th>
   1531     <th> Google </th>
   1532     <th></th>
   1533   </tr>
   1534   <tr>
   1535     <td>CVE-2017-6424</td>
   1536     <td>A-32086742<br />
   1537         <a href="https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=5cc2ac840e36a3342c5194c20b314f0bb95ef7e1">QC-CR#1102648</a></td>
   1538     <td></td>
   1539     <td>Nexus 5XPixelPixel XLAndroid One</td>
   1540     <td>2016  10  9 </td>
   1541   </tr>
   1542 </tbody></table>
   1543 
   1544 <h3 id="eop-in-broadcom-wi-fi-driver-2">Broadcom WLAN </h3>
   1545 <p>Broadcom WLAN </p>
   1546 
   1547 <table>
   1548   <colgroup><col width="19%" />
   1549   <col width="20%" />
   1550   <col width="10%" />
   1551   <col width="23%" />
   1552   <col width="17%" />
   1553   </colgroup><tbody><tr>
   1554     <th>CVE</th>
   1555     <th></th>
   1556     <th></th>
   1557     <th> Google </th>
   1558     <th></th>
   1559   </tr>
   1560   <tr>
   1561     <td>CVE-2016-8465</td>
   1562     <td>A-32474971*<br />B-RB#106053</td>
   1563     <td></td>
   1564     <td>Nexus 6Nexus 6PNexus 9Pixel CNexus Player</td>
   1565     <td>2016  10  27 </td>
   1566   </tr>
   1567 </tbody></table>
   1568 <p>* <a href="https://developers.google.com/android/nexus/drivers">Google Developers </a> Nexus </p>
   1569 
   1570 <h3 id="eop-in-htc-oem-fastboot-command">HTC OEM fastboot </h3>
   1571 <p>HTC OEM fastboot </p>
   1572 
   1573 <table>
   1574   <colgroup><col width="19%" />
   1575   <col width="20%" />
   1576   <col width="10%" />
   1577   <col width="23%" />
   1578   <col width="17%" />
   1579   </colgroup><tbody><tr>
   1580     <th>CVE</th>
   1581     <th></th>
   1582     <th></th>
   1583     <th> Google </th>
   1584     <th></th>
   1585   </tr>
   1586   <tr>
   1587     <td>CVE-2017-0582</td>
   1588     <td>A-33178836*<br />
   1589         </td>
   1590     <td></td>
   1591     <td>Nexus 9</td>
   1592     <td>2016  11  28 </td>
   1593   </tr>
   1594 </tbody></table>
   1595 <p>* <a href="https://developers.google.com/android/nexus/drivers">Google Developers </a> Nexus </p>
   1596 
   1597 <h3 id="eop-in-qualcomm-cp-access-driver">Qualcomm CP </h3>
   1598 <p>Qualcomm CP </p>
   1599 
   1600 <table>
   1601   <colgroup><col width="19%" />
   1602   <col width="20%" />
   1603   <col width="10%" />
   1604   <col width="23%" />
   1605   <col width="17%" />
   1606   </colgroup><tbody><tr>
   1607     <th>CVE</th>
   1608     <th></th>
   1609     <th></th>
   1610     <th> Google </th>
   1611     <th></th>
   1612   </tr>
   1613   <tr>
   1614     <td>CVE-2017-0583</td>
   1615     <td>A-32068683<br />
   1616         <a href="https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=452d2ad331d20b19e8a0768c4b6e7fe1b65abe8f">QC-CR#1103788</a></td>
   1617     <td></td>
   1618     <td>Nexus 5XNexus 6PPixelPixel XLAndroid One</td>
   1619     <td>Google </td>
   1620   </tr>
   1621 </tbody></table>
   1622 
   1623 <h3 id="id-in-kernel-media-driver"></h3>
   1624 <p></p>
   1625 
   1626 <table>
   1627   <colgroup><col width="19%" />
   1628   <col width="20%" />
   1629   <col width="10%" />
   1630   <col width="23%" />
   1631   <col width="17%" />
   1632   </colgroup><tbody><tr>
   1633     <th>CVE</th>
   1634     <th></th>
   1635     <th></th>
   1636     <th> Google </th>
   1637     <th></th>
   1638   </tr>
   1639   <tr>
   1640     <td>CVE-2014-1739</td>
   1641     <td>A-34460642<br />
   1642         <a href="http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e6a623460e5fc960ac3ee9f946d3106233fd28d8"></a></td>
   1643     <td></td>
   1644     <td>Nexus 6Nexus 9Nexus Player</td>
   1645     <td>2014  6  15 </td>
   1646   </tr>
   1647 </tbody></table>
   1648 
   1649 <h3 id="id-in-qualcomm-wi-fi-driver">Qualcomm WLAN </h3>
   1650 <p>Qualcomm WLAN </p>
   1651 
   1652 <table>
   1653   <colgroup><col width="19%" />
   1654   <col width="20%" />
   1655   <col width="10%" />
   1656   <col width="23%" />
   1657   <col width="17%" />
   1658   </colgroup><tbody><tr>
   1659     <th>CVE</th>
   1660     <th></th>
   1661     <th></th>
   1662     <th> Google </th>
   1663     <th></th>
   1664   </tr>
   1665   <tr>
   1666     <td>CVE-2017-0584</td>
   1667     <td>A-32074353*<br />QC-CR#1104731</td>
   1668     <td></td>
   1669     <td>Nexus 5XPixelPixel XL</td>
   1670     <td>2016  10  9 </td>
   1671   </tr>
   1672 </tbody></table>
   1673 <p>* <a href="https://developers.google.com/android/nexus/drivers">Google Developers </a> Nexus </p>
   1674 
   1675 <h3 id="id-in-broadcom-wi-fi-driver">Broadcom WLAN </h3>
   1676 <p>Broadcom WLAN </p>
   1677 
   1678 <table>
   1679   <colgroup><col width="19%" />
   1680   <col width="20%" />
   1681   <col width="10%" />
   1682   <col width="23%" />
   1683   <col width="17%" />
   1684   </colgroup><tbody><tr>
   1685     <th>CVE</th>
   1686     <th></th>
   1687     <th></th>
   1688     <th> Google </th>
   1689     <th></th>
   1690   </tr>
   1691   <tr>
   1692     <td>CVE-2017-0585</td>
   1693     <td>A-32475556*<br />B-RB#112953</td>
   1694     <td></td>
   1695     <td>Nexus 6Nexus 6PNexus 9Pixel CNexus Player</td>
   1696     <td>2016  10  27 </td>
   1697   </tr>
   1698 </tbody></table>
   1699 <p>* <a href="https://developers.google.com/android/nexus/drivers">Google Developers </a> Nexus </p>
   1700 
   1701 <h3 id="id-in-qualcomm-avtimer-driver">Qualcomm Avtimer </h3>
   1702 <p>Qualcomm Avtimer </p>
   1703 
   1704 <table>
   1705   <colgroup><col width="19%" />
   1706   <col width="20%" />
   1707   <col width="10%" />
   1708   <col width="23%" />
   1709   <col width="17%" />
   1710   </colgroup><tbody><tr>
   1711     <th>CVE</th>
   1712     <th></th>
   1713     <th></th>
   1714     <th> Google </th>
   1715     <th></th>
   1716   </tr>
   1717   <tr>
   1718     <td>CVE-2016-5346</td>
   1719     <td>A-32551280<br />
   1720         <a href="https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=6298a474322fb2182f795a622b2faa64abfd8474">QC-CR#1097878</a></td>
   1721     <td></td>
   1722     <td>PixelPixel XL</td>
   1723     <td>2016  10  29 </td>
   1724   </tr>
   1725 </tbody></table>
   1726 
   1727 <h3 id="id-in-qualcomm-video-driver">Qualcomm </h3>
   1728 <p>Qualcomm </p>
   1729 
   1730 <table>
   1731   <colgroup><col width="19%" />
   1732   <col width="20%" />
   1733   <col width="10%" />
   1734   <col width="23%" />
   1735   <col width="17%" />
   1736   </colgroup><tbody><tr>
   1737     <th>CVE</th>
   1738     <th></th>
   1739     <th></th>
   1740     <th> Google </th>
   1741     <th></th>
   1742   </tr>
   1743   <tr>
   1744     <td>CVE-2017-6425</td>
   1745     <td>A-32577085<br />
   1746         <a href="https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=ef86560a21fe1f256f6ba772a195201ff202c657">QC-CR#1103689</a></td>
   1747     <td></td>
   1748     <td>PixelPixel XL</td>
   1749     <td>2016  10  29 </td>
   1750   </tr>
   1751 </tbody></table>
   1752 
   1753 <h3 id="id-in-qualcomm-usb-driver">Qualcomm USB </h3>
   1754 <p>Qualcomm USB </p>
   1755 
   1756 <table>
   1757   <colgroup><col width="19%" />
   1758   <col width="20%" />
   1759   <col width="10%" />
   1760   <col width="23%" />
   1761   <col width="17%" />
   1762   </colgroup><tbody><tr>
   1763     <th>CVE</th>
   1764     <th></th>
   1765     <th></th>
   1766     <th> Google </th>
   1767     <th></th>
   1768   </tr>
   1769   <tr>
   1770     <td>CVE-2016-10236</td>
   1771     <td>A-33280689<br />
   1772         <a href="https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=b8199c2b852f1e23c988e10b8fbb8d34c98b4a1c">QC-CR#1102418</a></td>
   1773     <td></td>
   1774     <td>PixelPixel XL</td>
   1775     <td>2016  11  30 </td>
   1776   </tr>
   1777 </tbody></table>
   1778 
   1779 <h3 id="id-in-qualcomm-sound-driver">Qualcomm </h3>
   1780 <p>Qualcomm </p>
   1781 
   1782 <table>
   1783   <colgroup><col width="19%" />
   1784   <col width="20%" />
   1785   <col width="10%" />
   1786   <col width="23%" />
   1787   <col width="17%" />
   1788   </colgroup><tbody><tr>
   1789     <th>CVE</th>
   1790     <th></th>
   1791     <th></th>
   1792     <th> Google </th>
   1793     <th></th>
   1794   </tr>
   1795   <tr>
   1796     <td>CVE-2017-0586</td>
   1797     <td>A-33649808<br />QC-CR#1097569</td>
   1798     <td></td>
   1799     <td>Nexus 5XNexus 6Nexus 6PPixelPixel XLAndroid One</td>
   1800     <td>2016  12  13 </td>
   1801   </tr>
   1802 </tbody></table>
   1803 
   1804 <h3 id="id-in-qualcomm-spmi-driver">Qualcomm SPMI </h3>
   1805 <p>Qualcomm SPMI </p>
   1806 
   1807 <table>
   1808   <colgroup><col width="19%" />
   1809   <col width="20%" />
   1810   <col width="10%" />
   1811   <col width="23%" />
   1812   <col width="17%" />
   1813   </colgroup><tbody><tr>
   1814     <th>CVE</th>
   1815     <th></th>
   1816     <th></th>
   1817     <th> Google </th>
   1818     <th></th>
   1819   </tr>
   1820   <tr>
   1821     <td>CVE-2017-6426</td>
   1822     <td>A-33644474<br />
   1823         <a href="https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=80decd6365deec08c35ecb902a58f9210599b39a">QC-CR#1106842</a></td>
   1824     <td></td>
   1825     <td>PixelPixel XL</td>
   1826     <td>2016  12  14 </td>
   1827   </tr>
   1828 </tbody></table>
   1829 
   1830 <h3 id="id-in-nvidia-crypto-driver">NVIDIA </h3>
   1831 <p>NVIDIA </p>
   1832 
   1833 <table>
   1834   <colgroup><col width="19%" />
   1835   <col width="20%" />
   1836   <col width="10%" />
   1837   <col width="23%" />
   1838   <col width="17%" />
   1839   </colgroup><tbody><tr>
   1840     <th>CVE</th>
   1841     <th></th>
   1842     <th></th>
   1843     <th> Google </th>
   1844     <th></th>
   1845   </tr>
   1846   <tr>
   1847     <td>CVE-2017-0328</td>
   1848     <td>A-33898322*<br />N-CVE-2017-0328</td>
   1849     <td></td>
   1850     <td>**</td>
   1851     <td>2016  12  24 </td>
   1852   </tr>
   1853   <tr>
   1854     <td>CVE-2017-0330</td>
   1855     <td>A-33899858*<br />N-CVE-2017-0330</td>
   1856     <td></td>
   1857     <td>**</td>
   1858     <td>2016  12  24 </td>
   1859   </tr>
   1860 </tbody></table>
   1861 <p>* <a href="https://developers.google.com/android/nexus/drivers">Google Developers </a> Nexus </p>
   1862 <p>**  Android 7.0 Google </p>
   1863 
   1864 <h3 id="vulnerabilities-in-qualcomm-components-2">Qualcomm </h3>
   1865 <p> Qualcomm  2014-2016  Qualcomm AMSS  Android  Android </p>
   1866 
   1867 <table>
   1868   <colgroup><col width="19%" />
   1869   <col width="20%" />
   1870   <col width="10%" />
   1871   <col width="23%" />
   1872   <col width="17%" />
   1873   </colgroup><tbody><tr>
   1874     <th>CVE</th>
   1875     <th></th>
   1876     <th></th>
   1877     <th> Google </th>
   1878     <th></th>
   1879   </tr>
   1880   <tr>
   1881     <td>CVE-2014-9931</td>
   1882     <td>A-35445101**<br />QC-CR#612410</td>
   1883     <td></td>
   1884     <td>**</td>
   1885     <td>Qualcomm </td>
   1886   </tr>
   1887   <tr>
   1888     <td>CVE-2014-9932</td>
   1889     <td>A-35434683**<br />QC-CR#626734</td>
   1890     <td></td>
   1891     <td>PixelPixel XL</td>
   1892     <td>Qualcomm </td>
   1893   </tr>
   1894   <tr>
   1895     <td>CVE-2014-9933</td>
   1896     <td>A-35442512<br />QC-CR#675463</td>
   1897     <td></td>
   1898     <td>**</td>
   1899     <td>Qualcomm </td>
   1900   </tr>
   1901   <tr>
   1902     <td>CVE-2014-9934</td>
   1903     <td>A-35439275**<br />QC-CR#658249</td>
   1904     <td></td>
   1905     <td>**</td>
   1906     <td>Qualcomm </td>
   1907   </tr>
   1908   <tr>
   1909     <td>CVE-2014-9935</td>
   1910     <td>A-35444951**<br />QC-CR#717626</td>
   1911     <td></td>
   1912     <td>**</td>
   1913     <td>Qualcomm </td>
   1914   </tr>
   1915   <tr>
   1916     <td>CVE-2014-9936</td>
   1917     <td>A-35442420**<br />QC-CR#727389</td>
   1918     <td></td>
   1919     <td>**</td>
   1920     <td>Qualcomm </td>
   1921   </tr>
   1922   <tr>
   1923     <td>CVE-2014-9937</td>
   1924     <td>A-35445102**<br />QC-CR#734095</td>
   1925     <td></td>
   1926     <td>**</td>
   1927     <td>Qualcomm </td>
   1928   </tr>
   1929   <tr>
   1930     <td>CVE-2015-8995</td>
   1931     <td>A-35445002**<br />QC-CR#733690</td>
   1932     <td></td>
   1933     <td>**</td>
   1934     <td>Qualcomm </td>
   1935   </tr>
   1936   <tr>
   1937     <td>CVE-2015-8996</td>
   1938     <td>A-35444658**<br />QC-CR#734698</td>
   1939     <td></td>
   1940     <td>**</td>
   1941     <td>Qualcomm </td>
   1942   </tr>
   1943   <tr>
   1944     <td>CVE-2015-8997</td>
   1945     <td>A-35432947**<br />QC-CR#734707</td>
   1946     <td></td>
   1947     <td>**</td>
   1948     <td>Qualcomm </td>
   1949   </tr>
   1950   <tr>
   1951     <td>CVE-2015-8998</td>
   1952     <td>A-35441175**<br />QC-CR#735337</td>
   1953     <td></td>
   1954     <td>**</td>
   1955     <td>Qualcomm </td>
   1956   </tr>
   1957   <tr>
   1958     <td>CVE-2015-8999</td>
   1959     <td>A-35445401**<br />QC-CR#736119</td>
   1960     <td></td>
   1961     <td>**</td>
   1962     <td>Qualcomm </td>
   1963   </tr>
   1964   <tr>
   1965     <td>CVE-2015-9000</td>
   1966     <td>A-35441076**<br />QC-CR#740632</td>
   1967     <td></td>
   1968     <td>**</td>
   1969     <td>Qualcomm </td>
   1970   </tr>
   1971   <tr>
   1972     <td>CVE-2015-9001</td>
   1973     <td>A-35445400**<br />QC-CR#736083</td>
   1974     <td></td>
   1975     <td>**</td>
   1976     <td>Qualcomm </td>
   1977   </tr>
   1978   <tr>
   1979     <td>CVE-2015-9002</td>
   1980     <td>A-35442421**<br />QC-CR#748428</td>
   1981     <td></td>
   1982     <td>**</td>
   1983     <td>Qualcomm </td>
   1984   </tr>
   1985   <tr>
   1986     <td>CVE-2015-9003</td>
   1987     <td>A-35440626**<br />QC-CR#749215</td>
   1988     <td></td>
   1989     <td>**</td>
   1990     <td>Qualcomm </td>
   1991   </tr>
   1992   <tr>
   1993     <td>CVE-2016-10242</td>
   1994     <td>A-35434643**<br />QC-CR#985139</td>
   1995     <td></td>
   1996     <td>**</td>
   1997     <td>Qualcomm </td>
   1998   </tr>
   1999 </tbody></table>
   2000 <p>* </p>
   2001 <p>* <a href="https://developers.google.com/android/nexus/drivers">Google Developers </a> Nexus </p>
   2002 <p>***  Android 7.0 Google </p>
   2003 
   2004 <h2 id="common-questions-and-answers"></h2>
   2005 <p></p>
   2006 <p><strong>1. </strong></p>
   2007 <p> <a href="https://support.google.com/pixelphone/answer/4457705#pixel_phones&nexus_devices">Pixel  Nexus </a></p>
   2008 <ul>
   2009   <li>2017-04-01 2017-04-01 </li>
   2010   <li>2017-04-05 2017-04-05 </li>
   2011 </ul>
   2012 <p></p>
   2013 <ul>
   2014   <li>[ro.build.version.security_patch]:[2017-04-01]</li>
   2015   <li>[ro.build.version.security_patch]:[2017-04-05]</li>
   2016 </ul>
   2017 
   2018 <p><strong>2.  2 </strong></p>
   2019 <p> 2  Android  Android  Android </p>
   2020 <ul>
   2021   <li> 2017  4  1 </li>
   2022   <li> 2017  4  5 </li>
   2023 </ul>
   2024 <p></p>
   2025 <p><strong>3.  Google </strong></p>
   2026 <p> <a href="#2017-04-01-details">2017-04-01</a>  <a href="#2017-04-05-details">2017-04-05</a>  Google  Google <em></em></p>
   2027 <ul>
   2028   <li><strong> Google </strong> Nexus  Pixel  Google <em></em><a href="https://support.google.com/pixelphone/answer/4457705#pixel_phones&nexus_devices"></a>Nexus 5XNexus 6Nexus 6PNexus 7 (2013)Nexus 9Android OneNexus PlayerPixel CPixel  Pixel XL</li>
   2029   <li><strong> Google </strong> Google  Google  Google <em></em></li>
   2030   <li><strong> Google </strong> Android 7.0  Google  Google <em></em></li>
   2031 </ul>
   2032 <p><strong>4.</strong></p>
   2033 <p><em></em></p>
   2034 <table>
   2035   <tbody><tr>
   2036    <th></th>
   2037    <th></th>
   2038   </tr>
   2039   <tr>
   2040    <td>A-</td>
   2041    <td>Android Bug ID</td>
   2042   </tr>
   2043   <tr>
   2044    <td>QC-</td>
   2045    <td>Qualcomm </td>
   2046   </tr>
   2047   <tr>
   2048    <td>M-</td>
   2049    <td>MediaTek </td>
   2050   </tr>
   2051   <tr>
   2052    <td>N-</td>
   2053    <td>NVIDIA </td>
   2054   </tr>
   2055   <tr>
   2056    <td>B-</td>
   2057    <td>Broadcom </td>
   2058   </tr>
   2059 </tbody></table>
   2060 
   2061 <h2 id="revisions"></h2>
   2062 <ul>
   2063   <li>2017  4  3 </li>
   2064   <li>2017  4  5  AOSP </li>
   2065 </ul>
   2066 
   2067 </body></html>