|
6501
|
7.5
4.3
|
HIGH
Adjacent
|
Buffer overflow in the create_pbuf function in btif/src/btif_hh.c in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows remote attackers t…
|
CWE-119 CWE-362
Incorrect Access of Indexable Resource ('Range Error') Race Condition
|
CVE-2016-3744
|
cpe:2.3:o:google:android:6.0:* cpe:2.3:o:google:android:6.0.1:* cpe:2.3:o:google:android:5.1:* cpe:2.3:o:googl…
|
|
|
|
|
2024-11-21 11:50
2016-07-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6502
|
9.8
7.5
|
CRITICAL
Network
|
decoder/ih264d_api.c in mediaserver in Android 6.x before 2016-07-01 does not initialize certain data structures, which allows remote attackers to execute arbitrary code or cause a denial of service …
|
CWE-20
Improper Input Validation
|
CVE-2016-3743
|
cpe:2.3:o:google:android:6.0:* cpe:2.3:o:google:android:6.0.1:*
|
|
|
|
|
2024-11-21 11:50
2016-07-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6503
|
9.8
7.5
|
CRITICAL
Network
|
decoder/ih264d_process_intra_mb.c in mediaserver in Android 6.x before 2016-07-01 mishandles intra mode, which allows remote attackers to execute arbitrary code or cause a denial of service (memory c…
|
CWE-20
Improper Input Validation
|
CVE-2016-3742
|
cpe:2.3:o:google:android:6.0:* cpe:2.3:o:google:android:6.0.1:*
|
|
|
|
|
2024-11-21 11:50
2016-07-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6504
|
9.8
7.5
|
CRITICAL
Network
|
The H.264 decoder in mediaserver in Android 6.x before 2016-07-01 does not initialize certain slice data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory …
|
CWE-20
Improper Input Validation
|
CVE-2016-3741
|
cpe:2.3:o:google:android:6.0:* cpe:2.3:o:google:android:6.0.1:*
|
|
|
|
|
2024-11-21 11:50
2016-07-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6505
|
7.8
9.3
|
HIGH
Local
|
media/libmediaplayerservice/nuplayer/GenericSource.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate certain track da…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-2508
|
cpe:2.3:o:google:android:6.0:* cpe:2.3:o:google:android:6.0.1:* cpe:2.3:o:google:android:5.1:* cpe:2.3:o:googl…
|
|
|
|
|
2024-11-21 11:48
2016-07-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6506
|
7.8
9.3
|
HIGH
Local
|
Integer overflow in codecs/on2/h264dec/source/h264bsd_storage.c in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows …
|
CWE-119 CWE-189
Incorrect Access of Indexable Resource ('Range Error') Numeric Errors
|
CVE-2016-2507
|
cpe:2.3:o:google:android:6.0:* cpe:2.3:o:google:android:6.0.1:* cpe:2.3:o:google:android:5.1:* cpe:2.3:o:googl…
|
|
|
|
|
2024-11-21 11:48
2016-07-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6507
|
9.8
10.0
|
CRITICAL
Network
|
DRMExtractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate a certain offset value, which allows…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-2506
|
cpe:2.3:o:google:android:6.0:* cpe:2.3:o:google:android:6.0.1:* cpe:2.3:o:google:android:5.1:* cpe:2.3:o:googl…
|
|
|
|
|
2024-11-21 11:48
2016-07-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6508
|
7.8
9.3
|
HIGH
Local
|
mpeg2ts/ATSParser.cpp in libstagefright in mediaserver in Android 6.x before 2016-07-01 does not validate a certain section length, which allows remote attackers to execute arbitrary code or cause a …
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-2505
|
cpe:2.3:o:google:android:*:*
|
|
6.0.1
|
|
|
2024-11-21 11:48
2016-07-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6509
|
7.8
9.3
|
HIGH
Local
|
The Qualcomm GPU driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28084795 and Qualcomm internal …
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-2503
|
cpe:2.3:o:google:android:*:*
|
|
6.0.1
|
|
|
2024-11-21 11:48
2016-07-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6510
|
7.8
9.3
|
HIGH
Local
|
drivers/usb/gadget/f_serial.c in the Qualcomm USB driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a large size in a GSER_IOCTL ioctl call, aka A…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-2502
|
cpe:2.3:o:google:android:*:*
|
|
6.0.1
|
|
|
2024-11-21 11:48
2016-07-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|