|
6661
|
7.5
5.0
|
HIGH
Network
|
The BnGraphicBufferConsumer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in mediaserver in Android 5.x before 5.1.1 LMY49H and 6.x before 2016-03-01 does not initialize a certain slot …
|
CWE-200 CWE-254
Information Exposure 7PK - Security Features
|
CVE-2016-0828
|
cpe:2.3:o:google:android:6.0:* cpe:2.3:o:google:android:6.0.1:* cpe:2.3:o:google:android:5.1:* cpe:2.3:o:googl…
|
|
|
|
|
2024-11-21 11:42
2016-03-13
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6662
|
7.8
9.3
|
HIGH
Local
|
Multiple integer overflows in libeffects in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allow attackers to gain privileges via a crafted application, a…
|
CWE-189
Numeric Errors
|
CVE-2016-0827
|
cpe:2.3:o:google:android:6.0:* cpe:2.3:o:google:android:6.0.1:* cpe:2.3:o:google:android:5.1:* cpe:2.3:o:googl…
|
|
|
|
|
2024-11-21 11:42
2016-03-13
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6663
|
7.8
9.3
|
HIGH
Local
|
libcameraservice in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 does not require use of the ICameraService::dump method for a camera service dump, whic…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-0826
|
cpe:2.3:o:google:android:6.0:* cpe:2.3:o:google:android:6.0.1:* cpe:2.3:o:google:android:5.1:* cpe:2.3:o:googl…
|
|
|
|
|
2024-11-21 11:42
2016-03-13
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6664
|
5.3
5.0
|
MEDIUM
Network
|
The Widevine Trusted Application in Android 6.0.1 before 2016-03-01 allows attackers to obtain sensitive TrustZone secure-storage information by leveraging kernel access, as demonstrated by obtaining…
|
CWE-200 CWE-254
Information Exposure 7PK - Security Features
|
CVE-2016-0825
|
cpe:2.3:o:google:android:6.0.1:*
|
|
|
|
|
2024-11-21 11:42
2016-03-13
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6665
|
5.3
5.0
|
MEDIUM
Network
|
libmpeg2 in libstagefright in Android 6.x before 2016-03-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via crafted Bitstream data, …
|
CWE-200 CWE-254
Information Exposure 7PK - Security Features
|
CVE-2016-0824
|
cpe:2.3:o:google:android:6.0:* cpe:2.3:o:google:android:6.0.1:*
|
|
|
|
|
2024-11-21 11:42
2016-03-13
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6666
|
4.0
2.1
|
MEDIUM
Local
|
The pagemap_open function in fs/proc/task_mmu.c in the Linux kernel before 3.19.3, as used in Android 6.0.1 before 2016-03-01, allows local users to obtain sensitive physical-address information by r…
|
CWE-200
Information Exposure
|
CVE-2016-0823
|
cpe:2.3:o:google:android:6.0.1:*
|
|
|
|
|
2024-11-21 11:42
2016-03-13
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6667
|
7.0
7.6
|
HIGH
Local
|
The MediaTek connectivity kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privileges via a crafted application that leverages conn_launcher access, aka internal bug 25873324.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-0822
|
cpe:2.3:o:google:android:6.0.1:*
|
|
|
|
|
2024-11-21 11:42
2016-03-13
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6668
|
5.5
2.1
|
MEDIUM
Local
|
The LIST_POISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-03-01, does not properly consider the relationship to the mmap_min_addr value, w…
|
CWE-908
Use of Uninitialized Resource
|
CVE-2016-0821
|
cpe:2.3:o:google:android:6.0.1:*
|
|
|
|
|
2024-11-21 11:42
2016-03-13
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6669
|
7.8
9.3
|
HIGH
Local
|
The MediaTek Wi-Fi kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privileges via a crafted application, aka internal bug 26267358.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-0820
|
cpe:2.3:o:google:android:6.0.1:*
|
|
|
|
|
2024-11-21 11:42
2016-03-13
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6670
|
7.8
9.3
|
HIGH
Local
|
The Qualcomm performance component in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allows attackers to gain privileges via a crafted application, aka internal bug 2536…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-0819
|
cpe:2.3:o:google:android:6.0:* cpe:2.3:o:google:android:6.0.1:* cpe:2.3:o:google:android:5.1:* cpe:2.3:o:googl…
|
|
|
|
|
2024-11-21 11:42
2016-03-13
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|