|
6491
|
7.5
7.8
|
HIGH
Network
|
mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not limit process-memory usage, which allows remote attackers to cause a denial of serv…
|
CWE-399
Resource Management Errors
|
CVE-2016-3754
|
cpe:2.3:o:google:android:6.0:* cpe:2.3:o:google:android:6.0.1:* cpe:2.3:o:google:android:5.1:* cpe:2.3:o:googl…
|
|
|
|
|
2024-11-21 11:50
2016-07-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6492
|
7.5
5.0
|
HIGH
Network
|
mediaserver in Android 4.x before 4.4.4 allows remote attackers to obtain sensitive information via unspecified vectors, aka internal bug 27210135.
|
CWE-200
Information Exposure
|
CVE-2016-3753
|
cpe:2.3:o:google:android:4.4:* cpe:2.3:o:google:android:4.4.3:* cpe:2.3:o:google:android:4.4.2:* cpe:2.3:o:goo…
|
|
|
|
|
2024-11-21 11:50
2016-07-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6493
|
7.8
7.5
|
HIGH
Local
|
internal/app/ChooserActivity.java in the ChooserTarget service in Android 6.x before 2016-07-01 mishandles target security checks, which allows attackers to gain privileges via a crafted application,…
|
CWE-19 CWE-254
Data Processing Errors 7PK - Security Features
|
CVE-2016-3752
|
cpe:2.3:o:google:android:6.0:* cpe:2.3:o:google:android:6.0.1:*
|
|
|
|
|
2024-11-21 11:50
2016-07-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6494
|
7.8
7.5
|
HIGH
Local
|
Unspecified vulnerability in libpng before 1.6.20, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01, allows attackers to gain privileges via a cr…
|
NVD-CWE-noinfo
|
CVE-2016-3751
|
cpe:2.3:o:google:android:6.0:* cpe:2.3:o:google:android:6.0.1:* cpe:2.3:o:google:android:5.1:* cpe:2.3:o:googl…
|
|
|
|
|
2024-11-21 11:50
2016-07-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6495
|
7.8
7.5
|
HIGH
Local
|
libs/binder/Parcel.cpp in the Parcels Framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate the return value of the dup syste…
|
CWE-20
Improper Input Validation
|
CVE-2016-3750
|
cpe:2.3:o:google:android:6.0:* cpe:2.3:o:google:android:6.0.1:* cpe:2.3:o:google:android:5.1:* cpe:2.3:o:googl…
|
|
|
|
|
2024-11-21 11:50
2016-07-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6496
|
8.4
4.6
|
HIGH
Local
|
server/LockSettingsService.java in LockSettingsService in Android 6.x before 2016-07-01 allows attackers to modify the screen-lock password or pattern via a crafted application, aka internal bug 2816…
|
CWE-255
Credentials Management
|
CVE-2016-3749
|
cpe:2.3:o:google:android:6.0:* cpe:2.3:o:google:android:6.0.1:*
|
|
|
|
|
2024-11-21 11:50
2016-07-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6497
|
8.4
7.5
|
HIGH
Local
|
The sockets subsystem in Android 6.x before 2016-07-01 allows attackers to bypass intended system-call restrictions via a crafted application that makes an ioctl call, aka internal bug 28171804.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-3748
|
cpe:2.3:o:google:android:6.0:* cpe:2.3:o:google:android:6.0.1:*
|
|
|
|
|
2024-11-21 11:50
2016-07-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6498
|
7.8
10.0
|
HIGH
Local
|
Use-after-free vulnerability in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to gain…
|
NVD-CWE-Other
|
CVE-2016-3747
|
cpe:2.3:o:google:android:6.0:* cpe:2.3:o:google:android:6.0.1:* cpe:2.3:o:google:android:5.1:* cpe:2.3:o:googl…
|
|
|
|
|
2024-11-21 11:50
2016-07-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6499
|
7.8
7.5
|
HIGH
Local
|
Use-after-free vulnerability in the mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to gain…
|
NVD-CWE-Other
|
CVE-2016-3746
|
cpe:2.3:o:google:android:6.0:* cpe:2.3:o:google:android:6.0.1:* cpe:2.3:o:google:android:5.1:* cpe:2.3:o:googl…
|
|
|
|
|
2024-11-21 11:50
2016-07-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6500
|
9.8
7.5
|
CRITICAL
Network
|
Multiple buffer overflows in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to gain privileges via a crafted application th…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-3745
|
cpe:2.3:o:google:android:6.0:* cpe:2.3:o:google:android:6.0.1:* cpe:2.3:o:google:android:5.1:* cpe:2.3:o:googl…
|
|
|
|
|
2024-11-21 11:50
2016-07-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|