Back to all years

2016

CVE-2014-9902

(json)

• CVE numbers: CVE-2014-9902 [Bulletin-CVE-2014-9902]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Qualcomm Wi-Fi driver
• Details: Buffer overflow in CORE/SYS/legacy/src/utils/src/dot11f.c in the Qualcomm Wi-Fi driver in Android before 2016-08-05 on Nexus 7 (2013) devices allows remote attackers to execute arbitrary code via a crafted Information Element (IE) in an 802.11 management frame, aka Android internal bug 28668638 and Qualcomm internal bugs CR553937 and CR553941. [NIST-CVE-2014-9902]
• Discovered by: on: Unknown
• Reported on: 2016-08-01 [Bulletin-CVE-2014-9902]
• Fixed on: 2013-11-07 [QC-CR#553937]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2014-9902]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2014-9863

(json)

• CVE numbers: CVE-2014-9863 [Bulletin-CVE-2014-9863]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in Qualcomm components
• Details: Integer underflow in the diag driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices allows attackers to gain privileges or obtain sensitive information via a crafted application, aka Android internal bug 28768146 and Qualcomm internal bug CR549470. [NIST-CVE-2014-9863]
• Discovered by: on: Unknown
• Reported on: 2016-08-01 [Bulletin-CVE-2014-9863]
• Fixed on: 2013-12-24 [QC-CR#549470]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2014-9863]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2014-9794

(json)

• CVE numbers: CVE-2014-9794 [Bulletin-CVE-2014-9794]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in Qualcomm components
• Details: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-0973. Reason: This candidate is a reservation duplicate of CVE-2014-0973. Notes: All CVE users should reference CVE-2014-0973 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. [NIST-CVE-2014-9794]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2014-9794]
• Fixed on: 2014-04-21 [QC-CR646385]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2014-9794]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2014-9795

(json)

• CVE numbers: CVE-2014-9795 [Bulletin-CVE-2014-9795]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in Qualcomm components
• Details: app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices does not properly check for an integer overflow, which allows attackers to bypass intended access restrictions via crafted start and size values, aka Android internal bug 28820720 and Qualcomm internal bug CR681957, a related issue to CVE-2014-4325. [NIST-CVE-2014-9795]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2014-9795]
• Fixed on: 2014-06-18 [2]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2014-9795]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2015-6640

(json)

• CVE numbers: CVE-2015-6640 [Bulletin-CVE-2015-6640]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in Kernel
• Details: The prctl_set_vma_anon_name function in kernel/sys.c in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 does not ensure that only one vma is accessed in a certain update action, which allows attackers to gain privileges or cause a denial of service (vma list corruption) via a crafted application, aka internal bug 20017123. [NIST-CVE-2015-6640]
• Discovered by: on: Unknown
• Reported on: 2016-01-01 [Bulletin-CVE-2015-6640]
• Fixed on: 2014-08-05 [ANDROID-20017123]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0, 5.1.1, 6.0 [Bulletin-CVE-2015-6640] regex: (4.4.4)|(5.0.[0-9])|(5.1.1)|(6.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2015-6640]
• Fixed versions: 4.4.4, 5.0, 5.1.1, 6.0 [Bulletin-CVE-2015-6640]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2014-6060

(json)

• CVE numbers: CVE-2014-6060 [Bulletin-CVE-2014-6060]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in DHCPCD
• Details: The get_option function in dhcpcd 4.0.0 through 6.x before 6.4.3 allows remote DHCP servers to cause a denial of service by resetting the DHO_OPTIONSOVERLOADED option in the (1) bootfile or (2) servername section, which triggers the option to be processed again. [NIST-CVE-2014-6060]
• Discovered by: on: Unknown
• Reported on: 2016-04-02 [Bulletin-CVE-2014-6060]
• Fixed on: 2014-08-15 [ANDROID-16677003]
• Fix released on: Unknown
• Affected versions: 4.4.4 [Bulletin-CVE-2014-6060] regex: (4.4.4)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2014-6060]
• Fixed versions: 4.4.4 [Bulletin-CVE-2014-6060]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2014-9322

(json)

• CVE numbers: CVE-2014-9322 [Bulletin-CVE-2014-9322]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in Kernel
• Details: arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space. [NIST-CVE-2014-9322]
• Discovered by: on: Unknown
• Reported on: 2016-04-02 [Bulletin-CVE-2014-9322]
• Fixed on: 2014-12-04 [11]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1 [Bulletin-CVE-2014-9322] regex: (6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2014-9322]
• Fixed versions: 6.0, 6.0.1 [Bulletin-CVE-2014-9322]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2014-9529

(json)

• CVE numbers: CVE-2014-9529 [Bulletin-CVE-2014-9529]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel security subsystem
• Details: Race condition in the key_gc_unused_keys function in security/keys/gc.c in the Linux kernel through 3.18.2 allows local users to cause a denial of service (memory corruption or panic) or possibly have unspecified other impact via keyctl commands that trigger access to a key structure member during garbage collection of a key. [NIST-CVE-2014-9529]
• Discovered by: on: Unknown
• Reported on: 2016-09-01 [Bulletin-CVE-2014-9529]
• Fixed on: 2014-12-29 [Upstream kernel]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2014-9529]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2015-2686

(json)

• CVE numbers: CVE-2015-2686 [Bulletin-CVE-2015-2686]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel networking component
• Details: net/socket.c in the Linux kernel 3.19 before 3.19.3 does not validate certain range data for (1) sendto and (2) recvfrom system calls, which allows local users to gain privileges by leveraging a subsystem that uses the copy_from_iter function in the iov_iter interface, as demonstrated by the Bluetooth subsystem. [NIST-CVE-2015-2686]
• Discovered by: on: Unknown
• Reported on: 2016-08-01 [Bulletin-CVE-2015-2686]
• Fixed on: 2015-03-20 [Upstream kernel]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2015-2686]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2015-8892

(json)

• CVE numbers: CVE-2015-8892 [Bulletin-CVE-2015-8892]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in Qualcomm components
• Details: platform/msm_shared/boot_verifier.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to bypass intended access restrictions via a digest with trailing data, aka Android internal bug 28822807 and Qualcomm internal bug CR902998. [NIST-CVE-2015-8892]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2015-8892]
• Fixed on: 2015-09-08 [QC-CR902998]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2015-8892]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

Qualcomm TrustZone

(json)

• CVE numbers: CVE-2016-2431 [trustzone-blog][archived]
• Coordinated disclosure?: true
• Categories: kernel
• Details: An exploit which allows code execution within the TrustZone kernel. This may allow capturing of secret keys, disabling of hardware protection and unlocking locked bootloaders [trustzone-blog][archived]
• Discovered by: Gal Beniamini (laginimaineb) [trustzone-blog][archived] on: Unknown
• Reported on: 2015-10-13 [trustzone-blog][archived]
• Fixed on: 2016-05-02 [trustzone-blog][archived]
• Fix released on: 2016-05-02 [trustzone-blog][archived]
• Affected versions: 6.0.1 [cvedetails-qualcomm-trustzone] regex:
• Affected devices: Many devices using Qualcomm SoCs, including Nexus 5, Nexus 6 and Nexus 7 (2013) [trustzone-bulletin]
• Affected manufacturers: Qualcomm [trustzone-bulletin]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-09

CVE-2015-8961

(json)

• CVE numbers: CVE-2015-8961 [Bulletin-CVE-2015-8961]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel file system
• Details: The __ext4_journal_stop function in fs/ext4/ext4_jbd2.c in the Linux kernel before 4.3.3 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging improper access to a certain error field. [NIST-CVE-2015-8961]
• Discovered by: on: Unknown
• Reported on: 2016-11-01 [Bulletin-CVE-2015-8961]
• Fixed on: 2015-10-17 [Upstream kernel]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2015-8961]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0804

(json)

• CVE numbers: CVE-2016-0804 [Bulletin-CVE-2016-0804]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Mediaserver
• Details: The NuPlayer::GenericSource::notifyPreparedAndCleanup function in media/libmediaplayerservice/nuplayer/GenericSource.cpp in mediaserver in Android 5.x before 5.1.1 LMY49G and 6.x before 2016-02-01 improperly manages mDrmManagerClient objects, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 25070434. [NIST-CVE-2016-0804]
• Discovered by: on: Unknown
• Reported on: 2016-02-01 [Bulletin-CVE-2016-0804]
• Fixed on: 2015-10-19 [ANDROID-25070434]
• Fix released on: Unknown
• Affected versions: 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0804] regex: (5.0.[0-9])|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0804]
• Fixed versions: 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0804]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0807

(json)

• CVE numbers: CVE-2016-0807 [Bulletin-CVE-2016-0807]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in the Debuggerd
• Details: The get_build_id function in elf_utils.cpp in Debuggerd in Android 6.x before 2016-02-01 allows attackers to gain privileges via a crafted application that mishandles a Desc Size element in an ELF Note, aka internal bug 25187394. [NIST-CVE-2016-0807]
• Discovered by: on: Unknown
• Reported on: 2016-02-01 [Bulletin-CVE-2016-0807]
• Fixed on: 2015-10-22 [ANDROID-25187394]
• Fix released on: Unknown
• Affected versions: 6.0 and 6.0.1 [Bulletin-CVE-2016-0807] regex: (6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0807]
• Fixed versions: 6.0 and 6.0.1 [Bulletin-CVE-2016-0807]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2015-6636

(json)

• CVE numbers: CVE-2015-6636 [Bulletin-CVE-2015-6636]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Mediaserver
• Details: mediaserver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 25070493 and 24686670. [NIST-CVE-2015-6636]
• Discovered by: on: Unknown
• Reported on: 2016-01-01 [Bulletin-CVE-2015-6636]
• Fixed on: 2015-10-27 [ANDROID-25070493]
• Fix released on: Unknown
• Affected versions: 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2015-6636] regex: (5.0.[0-9])|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2015-6636]
• Fixed versions: 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2015-6636]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2015-8962

(json)

• CVE numbers: CVE-2015-8962 [Bulletin-CVE-2015-8962]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel SCSI driver
• Details: Double free vulnerability in the sg_common_write function in drivers/scsi/sg.c in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (memory corruption and system crash) by detaching a device during an SG_IO ioctl call. [NIST-CVE-2015-8962]
• Discovered by: on: Unknown
• Reported on: 2016-11-01 [Bulletin-CVE-2015-8962]
• Fixed on: 2015-10-30 [Upstream kernel]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2015-8962]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2013-7446

(json)

• CVE numbers: CVE-2013-7446 [Bulletin-CVE-2013-7446]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel networking subsystem
• Details: Use-after-free vulnerability in net/unix/af_unix.c in the Linux kernel before 4.3.3 allows local users to bypass intended AF_UNIX socket permissions or cause a denial of service (panic) via crafted epoll_ctl calls. [NIST-CVE-2013-7446]
• Discovered by: on: Unknown
• Reported on: 2016-09-01 [Bulletin-CVE-2013-7446]
• Fixed on: 2015-11-20 [Upstream kernel]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2013-7446]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0803

(json)

• CVE numbers: CVE-2016-0803 [Bulletin-CVE-2016-0803]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Mediaserver
• Details: libstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file that triggers a large memory allocation in the (1) SoftMPEG4Encoder or (2) SoftVPXEncoder component, aka internal bug 25812794. [NIST-CVE-2016-0803]
• Discovered by: on: Unknown
• Reported on: 2016-02-01 [Bulletin-CVE-2016-0803]
• Fixed on: 2015-11-20 [ANDROID-25812794]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0803] regex: (4.4.4)|(5.0.[0-9])|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0803]
• Fixed versions: 4.4.4, 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0803]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0836

(json)

• CVE numbers: CVE-2016-0836 [Bulletin-CVE-2016-0836]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Mediaserver
• Details: Stack-based buffer overflow in decoder/impeg2d_vld.c in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 25812590. [NIST-CVE-2016-0836]
• Discovered by: on: Unknown
• Reported on: 2016-04-02 [Bulletin-CVE-2016-0836]
• Fixed on: 2015-11-24 [ANDROID-25812590]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0836] regex: (6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0836]
• Fixed versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0836]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3841

(json)

• CVE numbers: CVE-2016-3841 [Bulletin-CVE-2016-3841]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel networking component
• Details: The IPv6 stack in the Linux kernel before 4.3.3 mishandles options data, which allows local users to gain privileges or cause a denial of service (use-after-free and system crash) via a crafted sendmsg system call. [NIST-CVE-2016-3841]
• Discovered by: on: Unknown
• Reported on: 2016-08-01 [Bulletin-CVE-2016-3841]
• Fixed on: 2015-11-29 [Upstream kernel]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-3841]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0801

(json)

• CVE numbers: CVE-2016-0801 [Bulletin-CVE-2016-0801]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Broadcom Wi-Fi Driver
• Details: The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted wireless control message packets, aka internal bug 25662029. [NIST-CVE-2016-0801]
• Discovered by: on: Unknown
• Reported on: 2016-02-01 [Bulletin-CVE-2016-0801]
• Fixed on: 2015-11-30 [ANDROID-25662029]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0801] regex: (4.4.4)|(5.0.[0-9])|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: Broadcom [Bulletin-CVE-2016-0801]
• Fixed versions: 4.4.4, 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0801]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0839

(json)

• CVE numbers: CVE-2016-0839 [Bulletin-CVE-2016-0839]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Mediaserver
• Details: post_proc/volume_listener.c in mediaserver in Android 6.x before 2016-04-01 mishandles deleted effect context, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 25753245. [NIST-CVE-2016-0839]
• Discovered by: on: Unknown
• Reported on: 2016-04-02 [Bulletin-CVE-2016-0839]
• Fixed on: 2015-12-03 [ANDROID-25753245]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0839] regex: (6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0839]
• Fixed versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0839]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0842

(json)

• CVE numbers: CVE-2016-0842 [Bulletin-CVE-2016-0842]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in libstagefright
• Details: The H.264 decoder in libstagefright in Android 6.x before 2016-04-01 mishandles Memory Management Control Operation (MMCO) data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 25818142. [NIST-CVE-2016-0842]
• Discovered by: on: Unknown
• Reported on: 2016-04-02 [Bulletin-CVE-2016-0842]
• Fixed on: 2015-12-04 [ANDROID-25818142]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0842] regex: (6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0842]
• Fixed versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0842]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0802

(json)

• CVE numbers: CVE-2016-0802 [Bulletin-CVE-2016-0802]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Broadcom Wi-Fi Driver
• Details: The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted wireless control message packets, aka internal bug 25306181. [NIST-CVE-2016-0802]
• Discovered by: on: Unknown
• Reported on: 2016-02-01 [Bulletin-CVE-2016-0802]
• Fixed on: 2015-12-09 [ANDROID-25306181]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0802] regex: (4.4.4)|(5.0.[0-9])|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: Broadcom [Bulletin-CVE-2016-0802]
• Fixed versions: 4.4.4, 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0802]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0818

(json)

• CVE numbers: CVE-2016-0818 [Bulletin-CVE-2016-0818]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege in Conscrypt
• Details: The caching functionality in the TrustManagerImpl class in TrustManagerImpl.java in Conscrypt in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 mishandles the distinction between an intermediate CA and a trusted root CA, which allows man-in-the-middle attackers to spoof servers by leveraging access to an intermediate CA to issue a certificate, aka internal bug 26232830. [NIST-CVE-2016-0818]
• Discovered by: on: Unknown
• Reported on: 2016-03-01 [Bulletin-CVE-2016-0818]
• Fixed on: 2015-12-20 [[2]]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0818] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0818]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0818]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2015-8966

(json)

• CVE numbers: CVE-2015-8966 [Bulletin-CVE-2015-8966]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel
• Details: arch/arm/kernel/sys_oabi-compat.c in the Linux kernel before 4.4 allows local users to gain privileges via a crafted (1) F_OFD_GETLK, (2) F_OFD_SETLK, or (3) F_OFD_SETLKW command in an fcntl64 system call. [NIST-CVE-2015-8966]
• Discovered by: on: Unknown
• Reported on: 2016-12-01 [Bulletin-CVE-2015-8966]
• Fixed on: 2015-12-28 [Upstream kernel]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2015-8966]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0835

(json)

• CVE numbers: CVE-2016-0835 [Bulletin-CVE-2016-0835]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Mediaserver
• Details: decoder/impeg2d_dec_hdr.c in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file that triggers a certain negative value, aka internal bug 26070014. [NIST-CVE-2016-0835]
• Discovered by: on: Unknown
• Reported on: 2016-04-02 [Bulletin-CVE-2016-0835]
• Fixed on: 2015-12-31 [ANDROID-26070014]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0835] regex: (6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0835]
• Fixed versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0835]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2015-6637

(json)

• CVE numbers: CVE-2015-6637 [Bulletin-CVE-2015-6637]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in misc-sd driver
• Details: The MediaTek misc-sd driver in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application, aka internal bug 25307013. [NIST-CVE-2015-6637]
• Discovered by: on: Unknown
• Reported on: 2016-01-01 [Bulletin-CVE-2015-6637]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2015-6637] regex: (4.4.4)|(5.0.[0-9])|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2015-6637]
• Fixed versions: 4.4.4, 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2015-6637]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2015-6638

(json)

• CVE numbers: CVE-2015-6638 [Bulletin-CVE-2015-6638]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in the Imagination Technologies driver
• Details: The Imagination Technologies driver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application, aka internal bug 24673908. [NIST-CVE-2015-6638]
• Discovered by: on: Unknown
• Reported on: 2016-01-01 [Bulletin-CVE-2015-6638]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2015-6638] regex: (5.0.[0-9])|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2015-6638]
• Fixed versions: 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2015-6638]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2015-6639

(json)

• CVE numbers: CVE-2015-6639 [Bulletin-CVE-2015-6639]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerabilities in Trustzone
• Details: The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application that leverages QSEECOM access, aka internal bug 24446875. [NIST-CVE-2015-6639]
• Discovered by: on: Unknown
• Reported on: 2016-01-01 [Bulletin-CVE-2015-6639]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2015-6639] regex: (5.0.[0-9])|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2015-6639]
• Fixed versions: 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2015-6639]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2015-6647

(json)

• CVE numbers: CVE-2015-6647 [Bulletin-CVE-2015-6647]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerabilities in Trustzone
• Details: The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application that leverages QSEECOM access, aka internal bug 24441554. [NIST-CVE-2015-6647]
• Discovered by: on: Unknown
• Reported on: 2016-01-01 [Bulletin-CVE-2015-6647]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2015-6647] regex: (5.0.[0-9])|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2015-6647]
• Fixed versions: 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2015-6647]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0844

(json)

• CVE numbers: CVE-2016-0844 [Bulletin-CVE-2016-0844]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in Qualcomm RF component
• Details: The Qualcomm RF driver in Android 6.x before 2016-04-01 does not properly restrict access to socket ioctl calls, which allows attackers to gain privileges via a crafted application, aka internal bug 26324307. [NIST-CVE-2016-0844]
• Discovered by: on: Unknown
• Reported on: 2016-04-02 [Bulletin-CVE-2016-0844]
• Fixed on: 2016-01-05 [ANDROID-26324307]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0844] regex: (6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-0844]
• Fixed versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0844]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0816

(json)

• CVE numbers: CVE-2016-0816 [Bulletin-CVE-2016-0816]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Mediaserver
• Details: mediaserver in Android 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, related to decoder/ih264d_parse_islice.c and decoder/ih264d_parse_pslice.c, aka internal bug 25928803. [NIST-CVE-2016-0816]
• Discovered by: on: Unknown
• Reported on: 2016-03-01 [Bulletin-CVE-2016-0816]
• Fixed on: 2016-01-07 [ANDROID-25928803]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0816] regex: (6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0816]
• Fixed versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0816]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2464

(json)

• CVE numbers: CVE-2016-2464 [Bulletin-CVE-2016-2464]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerabilities in libwebm
• Details: libvpx in libwebm in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted mkv file, aka internal bug 23167726. [NIST-CVE-2016-2464]
• Discovered by: on: Unknown
• Reported on: 2016-06-01 [Bulletin-CVE-2016-2464]
• Fixed on: 2016-01-11 [2]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2464] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-2464]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2464]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0815

(json)

• CVE numbers: CVE-2016-0815 [Bulletin-CVE-2016-0815]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Mediaserver
• Details: The MPEG4Source::fragmentedRead function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 26365349. [NIST-CVE-2016-0815]
• Discovered by: on: Unknown
• Reported on: 2016-03-01 [Bulletin-CVE-2016-0815]
• Fixed on: 2016-01-12 [ANDROID-26365349]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0815] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0815]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0815]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0838

(json)

• CVE numbers: CVE-2016-0838 [Bulletin-CVE-2016-0838]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Mediaserver
• Details: Sonivox in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not check for a negative number of samples, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, related to arm-wt-22k/lib_src/eas_wtengine.c and arm-wt-22k/lib_src/eas_wtsynth.c, aka internal bug 26366256. [NIST-CVE-2016-0838]
• Discovered by: on: Unknown
• Reported on: 2016-04-02 [Bulletin-CVE-2016-0838]
• Fixed on: 2016-01-12 [2]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0838] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0838]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0838]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-1621

(json)

• CVE numbers: CVE-2016-1621 [Bulletin-CVE-2016-1621]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerabilities in libvpx
• Details: libvpx in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.0 before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, related to libwebm/mkvparser.cpp and other files, aka internal bug 23452792. [NIST-CVE-2016-1621]
• Discovered by: on: Unknown
• Reported on: 2016-03-01 [Bulletin-CVE-2016-1621]
• Fixed on: 2016-01-19 [[3]]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0 [Bulletin-CVE-2016-1621] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-1621]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0 [Bulletin-CVE-2016-1621]
• Submission: by: Daniel Carter, on: 2019-07-29

Sensord local root

(json)

• CVE numbers:
• Coordinated disclosure?: false
• Categories: system
• Details: A vulnerability exploiting the sensord daemon, which runs as root on some devices [sensord-exploit-db]
• Discovered by: s0m3b0dy [sensord-exploit-db] on: Unknown
• Reported on: 2016-01-27 [sensord-exploit-db]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices: LG L7 and others [sensord-exploit-db]
• Affected manufacturers: LG [sensord-exploit-db], Other devices using the sensord daemon [sensord-exploit-db]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-09

CVE-2016-7913

(json)

• CVE numbers: CVE-2016-7913 [Bulletin-CVE-2016-7913]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel media driver
• Details: The xc2028_set_config function in drivers/media/tuners/tuner-xc2028.c in the Linux kernel before 4.6 allows local users to gain privileges or cause a denial of service (use-after-free) via vectors involving omission of the firmware name from a certain data structure. [NIST-CVE-2016-7913]
• Discovered by: on: Unknown
• Reported on: 2016-11-01 [Bulletin-CVE-2016-7913]
• Fixed on: 2016-01-28 [Upstream kernel]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-7913]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0805

(json)

• CVE numbers: CVE-2016-0805 [Bulletin-CVE-2016-0805]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in Qualcomm Performance Module
• Details: The performance event manager for Qualcomm ARM processors in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows attackers to gain privileges via a crafted application, aka internal bug 25773204. [NIST-CVE-2016-0805]
• Discovered by: on: Unknown
• Reported on: 2016-02-01 [Bulletin-CVE-2016-0805]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0805] regex: (4.4.4)|(5.0.[0-9])|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-0805]
• Fixed versions: 4.4.4, 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0805]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0806

(json)

• CVE numbers: CVE-2016-0806 [Bulletin-CVE-2016-0806]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in Qualcomm Wi-Fi Driver
• Details: The Qualcomm Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows attackers to gain privileges via a crafted application, aka internal bug 25344453. [NIST-CVE-2016-0806]
• Discovered by: on: Unknown
• Reported on: 2016-02-01 [Bulletin-CVE-2016-0806]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0806] regex: (4.4.4)|(5.0.[0-9])|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-0806]
• Fixed versions: 4.4.4, 5.0, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0806]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-1503

(json)

• CVE numbers: CVE-2016-1503 [Bulletin-CVE-2016-1503]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in DHCPCD
• Details: dhcpcd before 6.10.0, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 and other products, mismanages option lengths, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a malformed DHCP response, aka internal bug 26461634. [NIST-CVE-2016-1503]
• Discovered by: on: Unknown
• Reported on: 2016-04-02 [Bulletin-CVE-2016-1503]
• Fixed on: 2016-02-11 [ANDROID-26461634]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-1503] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-1503]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-1503]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0840

(json)

• CVE numbers: CVE-2016-0840 [Bulletin-CVE-2016-0840]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Mediaserver
• Details: Multiple stack-based buffer underflows in decoder/ih264d_parse_cavlc.c in mediaserver in Android 6.x before 2016-04-01 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 26399350. [NIST-CVE-2016-0840]
• Discovered by: on: Unknown
• Reported on: 2016-04-02 [Bulletin-CVE-2016-0840]
• Fixed on: 2016-02-17 [ANDROID-26399350]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0840] regex: (6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0840]
• Fixed versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0840]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0841

(json)

• CVE numbers: CVE-2016-0841 [Bulletin-CVE-2016-0841]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Mediaserver
• Details: media/libmedia/mediametadataretriever.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 mishandles cleared service binders, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 26040840. [NIST-CVE-2016-0841]
• Discovered by: on: Unknown
• Reported on: 2016-04-02 [Bulletin-CVE-2016-0841]
• Fixed on: 2016-02-18 [ANDROID-26040840]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0841] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0841]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0841]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0758

(json)

• CVE numbers: CVE-2016-0758 [Bulletin-CVE-2016-0758]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in kernel ASN.1 decoder
• Details: Integer overflow in lib/asn1_decoder.c in the Linux kernel before 4.6 allows local users to gain privileges via crafted ASN.1 data. [NIST-CVE-2016-0758]
• Discovered by: on: Unknown
• Reported on: 2016-10-01 [Bulletin-CVE-2016-0758]
• Fixed on: 2016-02-23 [Upstream kernel]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0758]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0837

(json)

• CVE numbers: CVE-2016-0837 [Bulletin-CVE-2016-0837]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Mediaserver
• Details: MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read and memory corruption) via a crafted media file, aka internal bug 27208621. [NIST-CVE-2016-0837]
• Discovered by: on: Unknown
• Reported on: 2016-04-02 [Bulletin-CVE-2016-0837]
• Fixed on: 2016-02-23 [ANDROID-27208621]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0837] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0837]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0837]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-9120

(json)

• CVE numbers: CVE-2016-9120 [Bulletin-CVE-2016-9120]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel ION driver
• Details: Race condition in the ion_ioctl function in drivers/staging/android/ion/ion.c in the Linux kernel before 4.6 allows local users to gain privileges or cause a denial of service (use-after-free) by calling ION_IOC_FREE on two CPUs at the same time. [NIST-CVE-2016-9120]
• Discovered by: on: Unknown
• Reported on: 2016-12-01 [Bulletin-CVE-2016-9120]
• Fixed on: 2016-02-24 [Upstream kernel]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-9120]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0728

(json)

• CVE numbers: CVE-2016-0728 [Bulletin-CVE-2016-0728]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in Kernel Keyring Component
• Details: The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object references in a certain error case, which allows local users to gain privileges or cause a denial of service (integer overflow and use-after-free) via crafted keyctl commands. [NIST-CVE-2016-0728]
• Discovered by: on: Unknown
• Reported on: 2016-03-01 [Bulletin-CVE-2016-0728]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0728] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0728]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0728]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0819

(json)

• CVE numbers: CVE-2016-0819 [Bulletin-CVE-2016-0819]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in the Qualcomm Performance Component
• Details: The Qualcomm performance component in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allows attackers to gain privileges via a crafted application, aka internal bug 25364034. [NIST-CVE-2016-0819]
• Discovered by: on: Unknown
• Reported on: 2016-03-01 [Bulletin-CVE-2016-0819]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0819] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-0819]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0819]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0820

(json)

• CVE numbers: CVE-2016-0820 [Bulletin-CVE-2016-0820]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in MediaTek Wi-Fi Kernel Driver
• Details: The MediaTek Wi-Fi kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privileges via a crafted application, aka internal bug 26267358. [NIST-CVE-2016-0820]
• Discovered by: on: Unknown
• Reported on: 2016-03-01 [Bulletin-CVE-2016-0820]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: 6.0.1 [Bulletin-CVE-2016-0820] regex: (6.0.1)
• Affected devices:
• Affected manufacturers: MediaTek [Bulletin-CVE-2016-0820]
• Fixed versions: 6.0.1 [Bulletin-CVE-2016-0820]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3951

(json)

• CVE numbers: CVE-2016-3951 [Bulletin-CVE-2016-3951]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel USB driver
• Details: Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (system crash) or possibly have unspecified other impact by inserting a USB device with an invalid USB descriptor. [NIST-CVE-2016-3951]
• Discovered by: on: Unknown
• Reported on: 2016-09-01 [Bulletin-CVE-2016-3951]
• Fixed on: 2016-03-07 [Upstream kernel]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-3951]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2429

(json)

• CVE numbers: CVE-2016-2429 [Bulletin-CVE-2016-2429]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Mediaserver
• Details: libFLAC/stream_decoder.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not prevent free operations on uninitialized memory, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted media file, aka internal bug 27211885. [NIST-CVE-2016-2429]
• Discovered by: on: Unknown
• Reported on: 2016-05-01 [Bulletin-CVE-2016-2429]
• Fixed on: 2016-03-11 [27211885]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2429] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-2429]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2429]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-7117

(json)

• CVE numbers: CVE-2016-7117 [Bulletin-CVE-2016-7117]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in kernel networking subsystem
• Details: Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandled during error processing. [NIST-CVE-2016-7117]
• Discovered by: on: Unknown
• Reported on: 2016-10-01 [Bulletin-CVE-2016-7117]
• Fixed on: 2016-03-14 [Upstream kernel]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-7117]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2067

(json)

• CVE numbers: CVE-2016-2067 [Bulletin-CVE-2016-2067]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in Qualcomm GPU driver
• Details: drivers/gpu/msm/kgsl.c in the MSM graphics driver (aka GPU driver) for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, mishandles the KGSL_MEMFLAGS_GPUREADONLY flag, which allows attackers to gain privileges by leveraging accidental read-write mappings, aka Qualcomm internal bug CR988993. [NIST-CVE-2016-2067]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2016-2067]
• Fixed on: 2016-03-17 [QC-CR988993]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-2067]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-8422

(json)

• CVE numbers: CVE-2016-8422 [Bulletin-CVE-2016-8422]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in Qualcomm bootloader
• Details: An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-31471220. References: QC-CR#979426. [NIST-CVE-2016-8422]
• Discovered by: on: Unknown
• Reported on: 2017-01-01 [Bulletin-CVE-2016-8422]
• Fixed on: 2016-03-18 [QC-CR#979426]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-8422]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2016-2428

(json)

• CVE numbers: CVE-2016-2428 [Bulletin-CVE-2016-2428]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Mediaserver
• Details: libAACdec/src/aacdec_drc.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not properly limit the number of threads, which allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a crafted media file, aka internal bug 26751339. [NIST-CVE-2016-2428]
• Discovered by: on: Unknown
• Reported on: 2016-05-01 [Bulletin-CVE-2016-2428]
• Fixed on: 2016-03-21 [26751339]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2428] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-2428]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2428]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3134

(json)

• CVE numbers: CVE-2016-3134 [Bulletin-CVE-2016-3134]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel netfilter subsystem
• Details: The netfilter subsystem in the Linux kernel through 4.5.2 does not validate certain offset fields, which allows local users to gain privileges or cause a denial of service (heap memory corruption) via an IPT_SO_SET_REPLACE setsockopt call. [NIST-CVE-2016-3134]
• Discovered by: on: Unknown
• Reported on: 2016-09-01 [Bulletin-CVE-2016-3134]
• Fixed on: 2016-03-22 [Upstream kernel]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-3134]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2430

(json)

• CVE numbers: CVE-2016-2430 [Bulletin-CVE-2016-2430]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in Debuggerd
• Details: libbacktrace/Backtrace.cpp in debuggerd in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows attackers to gain privileges via an application containing a crafted symbol name, aka internal bug 27299236. [NIST-CVE-2016-2430]
• Discovered by: on: Unknown
• Reported on: 2016-05-01 [Bulletin-CVE-2016-2430]
• Fixed on: 2016-03-23 [27299236]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2430] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-2430]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2430]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2184

(json)

• CVE numbers: CVE-2016-2184 [Bulletin-CVE-2016-2184]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel sound subsystem
• Details: The create_fixed_stream_quirk function in sound/usb/quirks.c in the snd-usb-audio driver in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference or double free, and system crash) via a crafted endpoints value in a USB device descriptor. [NIST-CVE-2016-2184]
• Discovered by: on: Unknown
• Reported on: 2016-11-01 [Bulletin-CVE-2016-2184]
• Fixed on: 2016-03-31 [Upstream kernel]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-2184]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2015-1805

(json)

• CVE numbers: CVE-2015-1805 [Bulletin-CVE-2015-1805]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in Kernel
• Details: The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an "I/O vector array overrun." [NIST-CVE-2015-1805]
• Discovered by: on: Unknown
• Reported on: 2016-04-02 [Bulletin-CVE-2015-1805]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2015-1805] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2015-1805]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2015-1805]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0834

(json)

• CVE numbers: CVE-2016-0834 [Bulletin-CVE-2016-0834]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Media Codec
• Details: An unspecified media codec in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 26220548. [NIST-CVE-2016-0834]
• Discovered by: on: Unknown
• Reported on: 2016-04-02 [Bulletin-CVE-2016-0834]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0834] regex: (6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-0834]
• Fixed versions: 6.0, 6.0.1 [Bulletin-CVE-2016-0834]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-0843

(json)

• CVE numbers: CVE-2016-0843 [Bulletin-CVE-2016-0843]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in Qualcomm Performance Module
• Details: The Qualcomm ARM processor performance-event manager in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows attackers to gain privileges via a crafted application, aka internal bug 25801197. [NIST-CVE-2016-0843]
• Discovered by: on: Unknown
• Reported on: 2016-04-02 [Bulletin-CVE-2016-0843]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0843] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-0843]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-0843]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2463

(json)

• CVE numbers: CVE-2016-2463 [Bulletin-CVE-2016-2463]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Mediaserver
• Details: Multiple integer overflows in the h264dec component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file that triggers a large memory allocation, aka internal bug 27855419. [NIST-CVE-2016-2463]
• Discovered by: on: Unknown
• Reported on: 2016-06-01 [Bulletin-CVE-2016-2463]
• Fixed on: 2016-04-08 [27855419]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2463] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-2463]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2463]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-7912

(json)

• CVE numbers: CVE-2016-7912 [Bulletin-CVE-2016-7912]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel USB driver
• Details: Use-after-free vulnerability in the ffs_user_copy_worker function in drivers/usb/gadget/function/f_fs.c in the Linux kernel before 4.5.3 allows local users to gain privileges by accessing an I/O data structure after a certain callback call. [NIST-CVE-2016-7912]
• Discovered by: on: Unknown
• Reported on: 2016-11-01 [Bulletin-CVE-2016-7912]
• Fixed on: 2016-04-14 [Upstream kernel]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-7912]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3742

(json)

• CVE numbers: CVE-2016-3742 [Bulletin-CVE-2016-3742]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: decoder/ih264d_process_intra_mb.c in mediaserver in Android 6.x before 2016-07-01 mishandles intra mode, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28165659. [NIST-CVE-2016-3742]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2016-3742]
• Fixed on: 2016-04-20 [A-28165659]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1 [Bulletin-CVE-2016-3742] regex: (6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-3742]
• Fixed versions: 6.0, 6.0.1 [Bulletin-CVE-2016-3742]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3743

(json)

• CVE numbers: CVE-2016-3743 [Bulletin-CVE-2016-3743]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: decoder/ih264d_api.c in mediaserver in Android 6.x before 2016-07-01 does not initialize certain data structures, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 27907656. [NIST-CVE-2016-3743]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2016-3743]
• Fixed on: 2016-04-21 [A-27907656]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1 [Bulletin-CVE-2016-3743] regex: (6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-3743]
• Fixed versions: 6.0, 6.0.1 [Bulletin-CVE-2016-3743]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2505

(json)

• CVE numbers: CVE-2016-2505 [Bulletin-CVE-2016-2505]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: mpeg2ts/ATSParser.cpp in libstagefright in mediaserver in Android 6.x before 2016-07-01 does not validate a certain section length, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28333006. [NIST-CVE-2016-2505]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2016-2505]
• Fixed on: 2016-04-28 [A-28333006]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1 [Bulletin-CVE-2016-2505] regex: (6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-2505]
• Fixed versions: 6.0, 6.0.1 [Bulletin-CVE-2016-2505]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2015-0569

(json)

• CVE numbers: CVE-2015-0569 [Bulletin-CVE-2015-0569]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in Qualcomm Wi-Fi Driver
• Details: Heap-based buffer overflow in the private wireless extensions IOCTL implementation in wlan_hdd_wext.c in the WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via a crafted application that establishes a packet filter. [NIST-CVE-2015-0569]
• Discovered by: on: Unknown
• Reported on: 2016-05-01 [Bulletin-CVE-2015-0569]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2015-0569]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2015-0570

(json)

• CVE numbers: CVE-2015-0570 [Bulletin-CVE-2015-0570]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in Qualcomm Wi-Fi Driver
• Details: Stack-based buffer overflow in the SET_WPS_IE IOCTL implementation in wlan_hdd_hostapd.c in the WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via a crafted application that uses a long WPS IE element. [NIST-CVE-2015-0570]
• Discovered by: on: Unknown
• Reported on: 2016-05-01 [Bulletin-CVE-2015-0570]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2015-0570]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2431

(json)

• CVE numbers: CVE-2016-2431 [Bulletin-CVE-2016-2431]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in Qualcomm TrustZone
• Details: The Qualcomm TrustZone component in Android before 2016-05-01 on Nexus 5, Nexus 6, Nexus 7 (2013), and Android One devices allows attackers to gain privileges via a crafted application, aka internal bug 24968809. [NIST-CVE-2016-2431]
• Discovered by: on: Unknown
• Reported on: 2016-05-01 [Bulletin-CVE-2016-2431]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-2431]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2432

(json)

• CVE numbers: CVE-2016-2432 [Bulletin-CVE-2016-2432]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in Qualcomm TrustZone
• Details: The Qualcomm TrustZone component in Android before 2016-05-01 on Nexus 6 and Android One devices allows attackers to gain privileges via a crafted application, aka internal bug 25913059. [NIST-CVE-2016-2432]
• Discovered by: on: Unknown
• Reported on: 2016-05-01 [Bulletin-CVE-2016-2432]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-2432]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2434

(json)

• CVE numbers: CVE-2016-2434 [Bulletin-CVE-2016-2434]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in NVIDIA Video Driver
• Details: The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27251090. [NIST-CVE-2016-2434]
• Discovered by: on: Unknown
• Reported on: 2016-05-01 [Bulletin-CVE-2016-2434]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: NVIDIA [Bulletin-CVE-2016-2434]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2435

(json)

• CVE numbers: CVE-2016-2435 [Bulletin-CVE-2016-2435]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in NVIDIA Video Driver
• Details: The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27297988. [NIST-CVE-2016-2435]
• Discovered by: on: Unknown
• Reported on: 2016-05-01 [Bulletin-CVE-2016-2435]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: NVIDIA [Bulletin-CVE-2016-2435]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2436

(json)

• CVE numbers: CVE-2016-2436 [Bulletin-CVE-2016-2436]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in NVIDIA Video Driver
• Details: The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27299111. [NIST-CVE-2016-2436]
• Discovered by: on: Unknown
• Reported on: 2016-05-01 [Bulletin-CVE-2016-2436]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: NVIDIA [Bulletin-CVE-2016-2436]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2437

(json)

• CVE numbers: CVE-2016-2437 [Bulletin-CVE-2016-2437]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in NVIDIA Video Driver
• Details: The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27436822. [NIST-CVE-2016-2437]
• Discovered by: on: Unknown
• Reported on: 2016-05-01 [Bulletin-CVE-2016-2437]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: NVIDIA [Bulletin-CVE-2016-2437]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-8423

(json)

• CVE numbers: CVE-2016-8423 [Bulletin-CVE-2016-8423]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in Qualcomm bootloader
• Details: An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-31399736. References: QC-CR#1000546. [NIST-CVE-2016-8423]
• Discovered by: on: Unknown
• Reported on: 2017-01-01 [Bulletin-CVE-2016-8423]
• Fixed on: 2016-05-04 [QC-CR#1000546]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-8423]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2016-2507

(json)

• CVE numbers: CVE-2016-2507 [Bulletin-CVE-2016-2507]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: Integer overflow in codecs/on2/h264dec/source/h264bsd_storage.c in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28532266. [NIST-CVE-2016-2507]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2016-2507]
• Fixed on: 2016-05-11 [A-28532266]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2507] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-2507]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2507]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3840

(json)

• CVE numbers: CVE-2016-3840 [Bulletin-CVE-2016-3840]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Conscrypt
• Details: Conscrypt in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-05 does not properly identify session reuse, which allows remote attackers to execute arbitrary code via unspecified vectors, aka internal bug 28751153. [NIST-CVE-2016-3840]
• Discovered by: on: Unknown
• Reported on: 2016-08-01 [Bulletin-CVE-2016-3840]
• Fixed on: 2016-05-12 [A-28751153]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-3840] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-3840]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-3840]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-8436

(json)

• CVE numbers: CVE-2016-8436 [Bulletin-CVE-2016-8436]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in Qualcomm video driver
• Details: An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-32450261. References: QC-CR#1007860. [NIST-CVE-2016-8436]
• Discovered by: on: Unknown
• Reported on: 2017-01-01 [Bulletin-CVE-2016-8436]
• Fixed on: 2016-05-12 [QC-CR#1007860]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-8436]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2016-2506

(json)

• CVE numbers: CVE-2016-2506 [Bulletin-CVE-2016-2506]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: DRMExtractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate a certain offset value, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28175045. [NIST-CVE-2016-2506]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2016-2506]
• Fixed on: 2016-05-13 [A-28175045]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2506] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-2506]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2506]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-9806

(json)

• CVE numbers: CVE-2016-9806 [Bulletin-CVE-2016-9806]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel networking subsystem
• Details: Race condition in the netlink_dump function in net/netlink/af_netlink.c in the Linux kernel before 4.6.3 allows local users to cause a denial of service (double free) or possibly have unspecified other impact via a crafted application that makes sendmsg system calls, leading to a free operation associated with a new dump that started earlier than anticipated. [NIST-CVE-2016-9806]
• Discovered by: on: Unknown
• Reported on: 2017-03-01 [Bulletin-CVE-2016-9806]
• Fixed on: 2016-05-16 [Upstream kernel]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-9806]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2016-3741

(json)

• CVE numbers: CVE-2016-3741 [Bulletin-CVE-2016-3741]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: The H.264 decoder in mediaserver in Android 6.x before 2016-07-01 does not initialize certain slice data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28165661. [NIST-CVE-2016-3741]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2016-3741]
• Fixed on: 2016-05-24 [2]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1 [Bulletin-CVE-2016-3741] regex: (6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-3741]
• Fixed versions: 6.0, 6.0.1 [Bulletin-CVE-2016-3741]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-4794

(json)

• CVE numbers: CVE-2016-4794 [Bulletin-CVE-2016-4794]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel memory subsystem
• Details: Use-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6 allows local users to cause a denial of service (BUG) or possibly have unspecified other impact via crafted use of the mmap and bpf system calls. [NIST-CVE-2016-4794]
• Discovered by: on: Unknown
• Reported on: 2016-12-01 [Bulletin-CVE-2016-4794]
• Fixed on: 2016-05-25 [Upstream kernel]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-4794]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2062

(json)

• CVE numbers: CVE-2016-2062 [Bulletin-CVE-2016-2062]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in Qualcomm GPU Driver
• Details: The adreno_perfcounter_query_group function in drivers/gpu/msm/adreno_perfcounter.c in the Adreno GPU driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, uses an incorrect integer data type, which allows attackers to cause a denial of service (integer overflow, heap-based buffer overflow, and incorrect memory allocation) or possibly have unspecified other impact via a crafted IOCTL_KGSL_PERFCOUNTER_QUERY ioctl call. [NIST-CVE-2016-2062]
• Discovered by: on: Unknown
• Reported on: 2016-06-01 [Bulletin-CVE-2016-2062]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-2062]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2465

(json)

• CVE numbers: CVE-2016-2465 [Bulletin-CVE-2016-2465]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in Qualcomm Video Driver
• Details: The Qualcomm video driver in Android before 2016-06-01 on Nexus 5, 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 27407865. [NIST-CVE-2016-2465]
• Discovered by: on: Unknown
• Reported on: 2016-06-01 [Bulletin-CVE-2016-2465]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-2465]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2466

(json)

• CVE numbers: CVE-2016-2466 [Bulletin-CVE-2016-2466]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in Qualcomm Sound Driver
• Details: The Qualcomm sound driver in Android before 2016-06-01 on Nexus 6 devices allows attackers to gain privileges via a crafted application, aka internal bug 27947307. [NIST-CVE-2016-2466]
• Discovered by: on: Unknown
• Reported on: 2016-06-01 [Bulletin-CVE-2016-2466]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-2466]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2467

(json)

• CVE numbers: CVE-2016-2467 [Bulletin-CVE-2016-2467]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in Qualcomm Sound Driver
• Details: The Qualcomm sound driver in Android before 2016-06-01 on Nexus 5 devices allows attackers to gain privileges via a crafted application, aka internal bug 28029010. [NIST-CVE-2016-2467]
• Discovered by: on: Unknown
• Reported on: 2016-06-01 [Bulletin-CVE-2016-2467]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-2467]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2468

(json)

• CVE numbers: CVE-2016-2468 [Bulletin-CVE-2016-2468]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in Qualcomm GPU Driver
• Details: The Qualcomm GPU driver in Android before 2016-06-01 on Nexus 5, 5X, 6, 6P, and 7 devices allows attackers to gain privileges via a crafted application, aka internal bug 27475454. [NIST-CVE-2016-2468]
• Discovered by: on: Unknown
• Reported on: 2016-06-01 [Bulletin-CVE-2016-2468]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-2468]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2474

(json)

• CVE numbers: CVE-2016-2474 [Bulletin-CVE-2016-2474]
• Coordinated disclosure?: unknown
• Categories: Elevation of Privilege Vulnerability in Qualcomm Wi-Fi Driver
• Details: The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 5X devices allows attackers to gain privileges via a crafted application, aka internal bug 27424603. [NIST-CVE-2016-2474]
• Discovered by: on: Unknown
• Reported on: 2016-06-01 [Bulletin-CVE-2016-2474]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-2474]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3820

(json)

• CVE numbers: CVE-2016-3820 [Bulletin-CVE-2016-3820]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 mishandles slice numbers, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28673410. [NIST-CVE-2016-3820]
• Discovered by: on: Unknown
• Reported on: 2016-08-01 [Bulletin-CVE-2016-3820]
• Fixed on: 2016-06-01 [A-28673410]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1 [Bulletin-CVE-2016-3820] regex: (6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-3820]
• Fixed versions: 6.0, 6.0.1 [Bulletin-CVE-2016-3820]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2017-0587

(json)

• CVE numbers: CVE-2017-0587 [Bulletin-CVE-2017-0587]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in libmpeg2 in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35219737. [NIST-CVE-2017-0587]
• Discovered by: V.E.O (@VYSEa) of Mobile Threat Research Team, Trend Micro [Discovery-CVE-2017-0587] on: Unknown
• Reported on: 2017-05-01 [Bulletin-CVE-2017-0587]
• Fixed on: 2016-06-01 [A-35219737]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0587] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0587]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0587]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2016-3819

(json)

• CVE numbers: CVE-2016-3819 [Bulletin-CVE-2016-3819]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: Integer overflow in codecs/on2/h264dec/source/h264bsd_dpb.c in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28533562. [NIST-CVE-2016-3819]
• Discovered by: on: Unknown
• Reported on: 2016-08-01 [Bulletin-CVE-2016-3819]
• Fixed on: 2016-06-07 [A-28533562]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-3819] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-3819]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-3819]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3821

(json)

• CVE numbers: CVE-2016-3821 [Bulletin-CVE-2016-3821]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: libmedia in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 has certain incorrect declarations, which allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference or memory corruption) via a crafted media file, aka internal bug 28166152. [NIST-CVE-2016-3821]
• Discovered by: on: Unknown
• Reported on: 2016-08-01 [Bulletin-CVE-2016-3821]
• Fixed on: 2016-06-07 [A-28166152]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-3821] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-3821]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-3821]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2508

(json)

• CVE numbers: CVE-2016-2508 [Bulletin-CVE-2016-2508]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: media/libmediaplayerservice/nuplayer/GenericSource.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate certain track data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28799341. [NIST-CVE-2016-2508]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2016-2508]
• Fixed on: 2016-06-14 [2]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2508] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-2508]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-2508]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-4470

(json)

• CVE numbers: CVE-2016-4470 [Bulletin-CVE-2016-4470]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel security subsystem
• Details: The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to cause a denial of service (system crash) via vectors involving a crafted keyctl request2 command. [NIST-CVE-2016-4470]
• Discovered by: on: Unknown
• Reported on: 2016-09-01 [Bulletin-CVE-2016-4470]
• Fixed on: 2016-06-16 [Upstream kernel]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-4470]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-5340

(json)

• CVE numbers: CVE-2016-5340 [Bulletin-CVE-2016-5340]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel shared memory subsystem
• Details: The is_ashmem_file function in drivers/staging/android/ashmem.c in a certain Qualcomm Innovation Center (QuIC) Android patch for the Linux kernel 3.x mishandles pointer validation within the KGSL Linux Graphics Module, which allows attackers to bypass intended access restrictions by using the /ashmem string as the dentry name. [NIST-CVE-2016-5340]
• Discovered by: on: Unknown
• Reported on: 2016-09-01 [Bulletin-CVE-2016-5340]
• Fixed on: 2016-06-22 [QC-CR#1008948]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-5340]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3861

(json)

• CVE numbers: CVE-2016-3861 [Bulletin-CVE-2016-3861]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in LibUtils
• Details: LibUtils in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 mishandles conversions between Unicode character encodings with different encoding widths, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted file, aka internal bug 29250543. [NIST-CVE-2016-3861]
• Discovered by: on: Unknown
• Reported on: 2016-09-01 [Bulletin-CVE-2016-3861]
• Fixed on: 2016-06-28 [A-29250543]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0 [Bulletin-CVE-2016-3861] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-3861]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0 [Bulletin-CVE-2016-3861]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2015-8816

(json)

• CVE numbers: CVE-2015-8816 [Bulletin-CVE-2015-8816]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in USB driver
• Details: The hub_activate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not properly maintain a hub-interface data structure, which allows physically proximate attackers to cause a denial of service (invalid memory access and system crash) or possibly have unspecified other impact by unplugging a USB hub device. [NIST-CVE-2015-8816]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2015-8816]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2015-8816]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2503

(json)

• CVE numbers: CVE-2016-2503 [Bulletin-CVE-2016-2503]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in Qualcomm GPU driver
• Details: The Qualcomm GPU driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28084795 and Qualcomm internal bug CR1006067. [NIST-CVE-2016-2503]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2016-2503]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-2503]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3767

(json)

• CVE numbers: CVE-2016-3767 [Bulletin-CVE-2016-3767]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in MediaTek Wi-Fi driver
• Details: The MediaTek Wi-Fi driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28169363 and MediaTek internal bug ALPS02689526. [NIST-CVE-2016-3767]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2016-3767]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: MediaTek [Bulletin-CVE-2016-3767]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3768

(json)

• CVE numbers: CVE-2016-3768 [Bulletin-CVE-2016-3768]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in Qualcomm performance component
• Details: The Qualcomm performance component in Android before 2016-07-05 on Nexus 5, 6, 5X, 6P, and 7 (2013) devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28172137 and Qualcomm internal bug CR1010644. [NIST-CVE-2016-3768]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2016-3768]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-3768]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3769

(json)

• CVE numbers: CVE-2016-3769 [Bulletin-CVE-2016-3769]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in NVIDIA video driver
• Details: The NVIDIA video driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28376656. [NIST-CVE-2016-3769]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2016-3769]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: NVIDIA [Bulletin-CVE-2016-3769]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3770

(json)

• CVE numbers: CVE-2016-3770 [Bulletin-CVE-2016-3770]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in MediaTek drivers (Device specific)
• Details: The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28346752 and MediaTek internal bug ALPS02703102. [NIST-CVE-2016-3770]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2016-3770]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: MediaTek [Bulletin-CVE-2016-3770]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3771

(json)

• CVE numbers: CVE-2016-3771 [Bulletin-CVE-2016-3771]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in MediaTek drivers (Device specific)
• Details: The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 29007611 and MediaTek internal bug ALPS02703102. [NIST-CVE-2016-3771]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2016-3771]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: MediaTek [Bulletin-CVE-2016-3771]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3772

(json)

• CVE numbers: CVE-2016-3772 [Bulletin-CVE-2016-3772]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in MediaTek drivers (Device specific)
• Details: The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 29008188 and MediaTek internal bug ALPS02703102. [NIST-CVE-2016-3772]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2016-3772]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: MediaTek [Bulletin-CVE-2016-3772]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3773

(json)

• CVE numbers: CVE-2016-3773 [Bulletin-CVE-2016-3773]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in MediaTek drivers (Device specific)
• Details: The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 29008363 and MediaTek internal bug ALPS02703102. [NIST-CVE-2016-3773]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2016-3773]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: MediaTek [Bulletin-CVE-2016-3773]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3774

(json)

• CVE numbers: CVE-2016-3774 [Bulletin-CVE-2016-3774]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in MediaTek drivers (Device specific)
• Details: The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 29008609 and MediaTek internal bug ALPS02703102. [NIST-CVE-2016-3774]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2016-3774]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: MediaTek [Bulletin-CVE-2016-3774]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3775

(json)

• CVE numbers: CVE-2016-3775 [Bulletin-CVE-2016-3775]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel file system
• Details: The kernel filesystem implementation in Android before 2016-07-05 on Nexus 5X, Nexus 6, Nexus 6P, Nexus Player, and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 28588279. [NIST-CVE-2016-3775]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2016-3775]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-3775]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-7911

(json)

• CVE numbers: CVE-2016-7911 [Bulletin-CVE-2016-7911]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel file system
• Details: Race condition in the get_task_ioprio function in block/ioprio.c in the Linux kernel before 4.6.6 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted ioprio_get system call. [NIST-CVE-2016-7911]
• Discovered by: on: Unknown
• Reported on: 2016-11-01 [Bulletin-CVE-2016-7911]
• Fixed on: 2016-07-01 [Upstream kernel]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-7911]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-10275

(json)

• CVE numbers: CVE-2016-10275 [Bulletin-CVE-2016-10275]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in Qualcomm bootloader
• Details: An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-34514954. References: QC-CR#1009111. [NIST-CVE-2016-10275]
• Discovered by: on: Unknown
• Reported on: 2017-05-01 [Bulletin-CVE-2016-10275]
• Fixed on: 2016-07-05 [QC-CR#1009111]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-10275]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2016-3862

(json)

• CVE numbers: CVE-2016-3862 [Bulletin-CVE-2016-3862]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: media/ExifInterface.java in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 does not properly interact with the use of static variables in libjhead_jni, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 29270469. [NIST-CVE-2016-3862]
• Discovered by: on: Unknown
• Reported on: 2016-09-01 [Bulletin-CVE-2016-3862]
• Fixed on: 2016-07-13 [A-29270469]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-3862] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-3862]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 [Bulletin-CVE-2016-3862]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-7910

(json)

• CVE numbers: CVE-2016-7910 [Bulletin-CVE-2016-7910]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel file system
• Details: Use-after-free vulnerability in the disk_seqf_stop function in block/genhd.c in the Linux kernel before 4.7.1 allows local users to gain privileges by leveraging the execution of a certain stop operation even if the corresponding start operation had failed. [NIST-CVE-2016-7910]
• Discovered by: on: Unknown
• Reported on: 2016-11-01 [Bulletin-CVE-2016-7910]
• Fixed on: 2016-07-29 [Upstream kernel]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-7910]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2504

(json)

• CVE numbers: CVE-2016-2504 [Bulletin-CVE-2016-2504]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in Qualcomm GPU driver
• Details: The Qualcomm GPU driver in Android before 2016-08-05 on Nexus 5, 5X, 6, 6P, and 7 (2013) devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28026365 and Qualcomm internal bug CR1002974. [NIST-CVE-2016-2504]
• Discovered by: on: Unknown
• Reported on: 2016-08-01 [Bulletin-CVE-2016-2504]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-2504]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3842

(json)

• CVE numbers: CVE-2016-3842 [Bulletin-CVE-2016-3842]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in Qualcomm GPU driver
• Details: The Qualcomm GPU driver in Android before 2016-08-05 on Nexus 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28377352 and Qualcomm internal bug CR1002974. [NIST-CVE-2016-3842]
• Discovered by: on: Unknown
• Reported on: 2016-08-01 [Bulletin-CVE-2016-3842]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-3842]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3857

(json)

• CVE numbers: CVE-2016-3857 [Bulletin-CVE-2016-3857]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel
• Details: The kernel in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 28522518. [NIST-CVE-2016-3857]
• Discovered by: on: Unknown
• Reported on: 2016-08-01 [Bulletin-CVE-2016-3857]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-3857]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-6725

(json)

• CVE numbers: CVE-2016-6725 [Bulletin-CVE-2016-6725]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Qualcomm crypto driver
• Details: A remote code execution vulnerability in the Qualcomm crypto driver in Android before 2016-11-05 could enable a remote attacker to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of remote code execution in the context of the kernel. Android ID: A-30515053. References: Qualcomm QC-CR#1050970. [NIST-CVE-2016-6725]
• Discovered by: on: Unknown
• Reported on: 2016-11-01 [Bulletin-CVE-2016-6725]
• Fixed on: 2016-08-16 [QC-CR#1050970]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-6725]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-6828

(json)

• CVE numbers: CVE-2016-6828 [Bulletin-CVE-2016-6828]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel networking subsystem
• Details: The tcp_check_send_head function in include/net/tcp.h in the Linux kernel before 4.7.5 does not properly maintain certain SACK state after a failed data copy, which allows local users to cause a denial of service (tcp_xmit_retransmit_queue use-after-free and system crash) via a crafted SACK option. [NIST-CVE-2016-6828]
• Discovered by: on: Unknown
• Reported on: 2016-11-01 [Bulletin-CVE-2016-6828]
• Fixed on: 2016-08-17 [Upstream kernel]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-6828]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-2182

(json)

• CVE numbers: CVE-2016-2182 [Bulletin-CVE-2016-2182]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in OpenSSL & BoringSSL
• Details: The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors. [NIST-CVE-2016-2182]
• Discovered by: on: Unknown
• Reported on: 2017-03-01 [Bulletin-CVE-2016-2182]
• Fixed on: 2016-08-22 [A-32096880]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2016-2182] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-2182]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2016-2182]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2016-3706

(json)

• CVE numbers: CVE-2016-3706 [Bulletin-CVE-2016-3706]
• Coordinated disclosure?: unknown
• Categories: Qualcomm components
• Details: Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in the GNU C Library (aka glibc or libc6) allows remote attackers to cause a denial of service (crash) via vectors involving hostent conversion. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-4458. [NIST-CVE-2016-3706]
• Discovered by: on: Unknown
• Reported on: 2017-12-01 [Bulletin-CVE-2016-3706]
• Fixed on: 2016-09-09 [QC-CR#1058691]
• Fix released on: 2017-12-05 [Bulletin-CVE-2016-3706]
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-3706]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2016-4429

(json)

• CVE numbers: CVE-2016-4429 [Bulletin-CVE-2016-4429]
• Coordinated disclosure?: unknown
• Categories: Qualcomm components
• Details: Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) allows remote servers to cause a denial of service (crash) or possibly unspecified other impact via a flood of crafted ICMP and UDP packets. [NIST-CVE-2016-4429]
• Discovered by: on: Unknown
• Reported on: 2017-12-01 [Bulletin-CVE-2016-4429]
• Fixed on: 2016-09-09 [QC-CR#1058691]
• Fix released on: 2017-12-05 [Bulletin-CVE-2016-4429]
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-4429]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2016-6699

(json)

• CVE numbers: CVE-2016-6699 [Bulletin-CVE-2016-6699]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in libstagefright in Mediaserver in Android 7.0 before 2016-11-01 could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Android ID: A-31373622. [NIST-CVE-2016-6699]
• Discovered by: on: Unknown
• Reported on: 2016-11-01 [Bulletin-CVE-2016-6699]
• Fixed on: 2016-09-13 [A-31373622]
• Fix released on: Unknown
• Affected versions: 7.0 [Bulletin-CVE-2016-6699] regex: (7.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-6699]
• Fixed versions: 7.0 [Bulletin-CVE-2016-6699]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3926

(json)

• CVE numbers: CVE-2016-3926 [Bulletin-CVE-2016-3926]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5, 5X, 6, and 6P devices has unknown impact and attack vectors, aka internal bug 28823953. [NIST-CVE-2016-3926]
• Discovered by: on: Unknown
• Reported on: 2016-10-01 [Bulletin-CVE-2016-3926]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-3926]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3927

(json)

• CVE numbers: CVE-2016-3927 [Bulletin-CVE-2016-3927]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices has unknown impact and attack vectors, aka internal bug 28823244. [NIST-CVE-2016-3927]
• Discovered by: on: Unknown
• Reported on: 2016-10-01 [Bulletin-CVE-2016-3927]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-3927]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3928

(json)

• CVE numbers: CVE-2016-3928 [Bulletin-CVE-2016-3928]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in MediaTek video driver
• Details: The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 30019362 and MediaTek internal bug ALPS02829384. [NIST-CVE-2016-3928]
• Discovered by: on: Unknown
• Reported on: 2016-10-01 [Bulletin-CVE-2016-3928]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: MediaTek [Bulletin-CVE-2016-3928]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-5195

(json)

• CVE numbers: CVE-2016-5195 [Bulletin-CVE-2016-5195]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel memory subsystem
• Details: Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW." [NIST-CVE-2016-5195]
• Discovered by: on: Unknown
• Reported on: 2016-11-01 [Bulletin-CVE-2016-5195]
• Fixed on: 2016-10-13 [Upstream kernel]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-5195]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

dirtyc0w

(json)

• CVE numbers: CVE-2016-5195 [dirtyc0w-redhat]
• Coordinated disclosure?: false
• Categories: kernel
• Details: A race condition in the Linux kernel's handling of copy-on-write (COW) operations means that users can gain write access to otherwise read-only areas of memory and gain permissions [dirtyc0w-redhat]
• Discovered by: Phil Oester [dirtyc0w-redhat] on: Unknown
• Reported on: 2016-10-13 [dirtyc0w-bugzilla]
• Fixed on: 2016-10-18 [dirtyc0w-github][archived]
• Fix released on: 2016-11-06 [dirtyc0w-bulletin]
• Affected versions: 1.0 to 7.0 [dirtyc0w-arstechnica][archived] regex: ([1-6].[0-9].[0-9])|(7.0.[0-9])
• Affected devices: all [dirtyc0w-arstechnica][archived]
• Affected manufacturers: all [dirtyc0w-arstechnica][archived]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-09

CVE-2016-8418

(json)

• CVE numbers: CVE-2016-8418 [Bulletin-CVE-2016-8418]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Qualcomm crypto driver
• Details: A remote code execution vulnerability in the Qualcomm crypto driver could enable a remote attacker to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of remote code execution in the context of the kernel. Product: Android. Versions: N/A. Android ID: A-32652894. References: QC-CR#1077457. [NIST-CVE-2016-8418]
• Discovered by: Seven Shen (@lingtongshen) of Trend Micro Mobile Threat Research Team [Discovery-CVE-2016-8418] on: Unknown
• Reported on: 2017-02-01 [Bulletin-CVE-2016-8418]
• Fixed on: 2016-10-24 [QC-CR#1077457]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-8418]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0592

(json)

• CVE numbers: CVE-2017-0592 [Bulletin-CVE-2017-0592]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in FLACExtractor.cpp in libstagefright in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34970788. [NIST-CVE-2017-0592]
• Discovered by: on: Unknown
• Reported on: 2017-05-01 [Bulletin-CVE-2017-0592]
• Fixed on: 2016-10-24 [A-34970788]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0592] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0592]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0592]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2016-6700

(json)

• CVE numbers: CVE-2016-6700 [Bulletin-CVE-2016-6700]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in libzipfile
• Details: An elevation of privilege vulnerability in libzipfile in Android 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.1 could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Android ID: A-30916186. [NIST-CVE-2016-6700]
• Discovered by: on: Unknown
• Reported on: 2016-11-01 [Bulletin-CVE-2016-6700]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1 [Bulletin-CVE-2016-6700] regex: (4.4.4)|(5.0.2)|(5.1.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-6700]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1 [Bulletin-CVE-2016-6700]
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-6727

(json)

• CVE numbers: CVE-2016-6727 [Bulletin-CVE-2016-6727]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: The Qualcomm GPS subsystem in Android on Android One devices allows remote attackers to execute arbitrary code. [NIST-CVE-2016-6727]
• Discovered by: on: Unknown
• Reported on: 2016-11-01 [Bulletin-CVE-2016-6727]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-6727]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-6728

(json)

• CVE numbers: CVE-2016-6728 [Bulletin-CVE-2016-6728]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel ION subsystem
• Details: An elevation of privilege vulnerability in the kernel ION subsystem in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Android ID: A-30400942. [NIST-CVE-2016-6728]
• Discovered by: on: Unknown
• Reported on: 2016-11-01 [Bulletin-CVE-2016-6728]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-6728]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-6729

(json)

• CVE numbers: CVE-2016-6729 [Bulletin-CVE-2016-6729]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in Qualcomm bootloader
• Details: An elevation of privilege vulnerability in the Qualcomm bootloader in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Android ID: A-30977990. References: Qualcomm QC-CR#977684. [NIST-CVE-2016-6729]
• Discovered by: on: Unknown
• Reported on: 2016-11-01 [Bulletin-CVE-2016-6729]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-6729]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-6730

(json)

• CVE numbers: CVE-2016-6730 [Bulletin-CVE-2016-6730]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in NVIDIA GPU driver
• Details: An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Android ID: A-30904789. References: NVIDIA N-CVE-2016-6730. [NIST-CVE-2016-6730]
• Discovered by: on: Unknown
• Reported on: 2016-11-01 [Bulletin-CVE-2016-6730]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: NVIDIA [Bulletin-CVE-2016-6730]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-6731

(json)

• CVE numbers: CVE-2016-6731 [Bulletin-CVE-2016-6731]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in NVIDIA GPU driver
• Details: An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Android ID: A-30906023. References: NVIDIA N-CVE-2016-6731. [NIST-CVE-2016-6731]
• Discovered by: on: Unknown
• Reported on: 2016-11-01 [Bulletin-CVE-2016-6731]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: NVIDIA [Bulletin-CVE-2016-6731]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-6732

(json)

• CVE numbers: CVE-2016-6732 [Bulletin-CVE-2016-6732]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in NVIDIA GPU driver
• Details: An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Android ID: A-30906599. References: NVIDIA N-CVE-2016-6732. [NIST-CVE-2016-6732]
• Discovered by: on: Unknown
• Reported on: 2016-11-01 [Bulletin-CVE-2016-6732]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: NVIDIA [Bulletin-CVE-2016-6732]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-6733

(json)

• CVE numbers: CVE-2016-6733 [Bulletin-CVE-2016-6733]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in NVIDIA GPU driver
• Details: An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Android ID: A-30906694. References: NVIDIA N-CVE-2016-6733. [NIST-CVE-2016-6733]
• Discovered by: on: Unknown
• Reported on: 2016-11-01 [Bulletin-CVE-2016-6733]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: NVIDIA [Bulletin-CVE-2016-6733]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-6734

(json)

• CVE numbers: CVE-2016-6734 [Bulletin-CVE-2016-6734]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in NVIDIA GPU driver
• Details: An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Android ID: A-30907120. References: NVIDIA N-CVE-2016-6734. [NIST-CVE-2016-6734]
• Discovered by: on: Unknown
• Reported on: 2016-11-01 [Bulletin-CVE-2016-6734]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: NVIDIA [Bulletin-CVE-2016-6734]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-6735

(json)

• CVE numbers: CVE-2016-6735 [Bulletin-CVE-2016-6735]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in NVIDIA GPU driver
• Details: An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Android ID: A-30907701. References: NVIDIA N-CVE-2016-6735. [NIST-CVE-2016-6735]
• Discovered by: on: Unknown
• Reported on: 2016-11-01 [Bulletin-CVE-2016-6735]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: NVIDIA [Bulletin-CVE-2016-6735]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-6736

(json)

• CVE numbers: CVE-2016-6736 [Bulletin-CVE-2016-6736]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in NVIDIA GPU driver
• Details: An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Android ID: A-30953284. References: NVIDIA N-CVE-2016-6736. [NIST-CVE-2016-6736]
• Discovered by: on: Unknown
• Reported on: 2016-11-01 [Bulletin-CVE-2016-6736]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: NVIDIA [Bulletin-CVE-2016-6736]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-6737

(json)

• CVE numbers: CVE-2016-6737 [Bulletin-CVE-2016-6737]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel ION subsystem
• Details: An elevation of privilege vulnerability in the kernel ION subsystem in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Android ID: A-30928456. [NIST-CVE-2016-6737]
• Discovered by: on: Unknown
• Reported on: 2016-11-01 [Bulletin-CVE-2016-6737]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-6737]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-10200

(json)

• CVE numbers: CVE-2016-10200 [Bulletin-CVE-2016-10200]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel networking subsystem
• Details: Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service (use-after-free) by making multiple bind system calls without properly ascertaining whether a socket has the SOCK_ZAPPED status, related to net/l2tp/l2tp_ip.c and net/l2tp/l2tp_ip6.c. [NIST-CVE-2016-10200]
• Discovered by: on: Unknown
• Reported on: 2017-03-01 [Bulletin-CVE-2016-10200]
• Fixed on: 2016-11-18 [Upstream kernel]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-10200]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0406

(json)

• CVE numbers: CVE-2017-0406 [Bulletin-CVE-2017-0406]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. This affects the libhevc library. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32915871. [NIST-CVE-2017-0406]
• Discovered by: Zhixin Li of NSFocus [Discovery-CVE-2017-0406] on: Unknown
• Reported on: 2017-02-01 [Bulletin-CVE-2017-0406]
• Fixed on: 2016-11-18 [2]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0406] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0406]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0406]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0407

(json)

• CVE numbers: CVE-2017-0407 [Bulletin-CVE-2017-0407]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. This affects the libhevc library. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32873375. [NIST-CVE-2017-0407]
• Discovered by: Weichao Sun (@sunblate) of Alibaba Inc. [Discovery-CVE-2017-0407] on: Unknown
• Reported on: 2017-02-01 [Bulletin-CVE-2017-0407]
• Fixed on: 2016-11-25 [A-32873375]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0407] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0407]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0407]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2016-10230

(json)

• CVE numbers: CVE-2016-10230 [Bulletin-CVE-2016-10230]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Qualcomm crypto engine driver
• Details: A remote code execution vulnerability in the Qualcomm crypto driver. Product: Android. Versions: Android kernel. Android ID: A-34389927. References: QC-CR#1091408. [NIST-CVE-2016-10230]
• Discovered by: on: Unknown
• Reported on: 2017-04-01 [Bulletin-CVE-2016-10230]
• Fixed on: 2016-11-28 [QC-CR#1091408]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-10230]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0474

(json)

• CVE numbers: CVE-2017-0474 [Bulletin-CVE-2017-0474]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-32589224. [NIST-CVE-2017-0474]
• Discovered by: on: Unknown
• Reported on: 2017-03-01 [Bulletin-CVE-2017-0474]
• Fixed on: 2016-11-29 [A-32589224]
• Fix released on: Unknown
• Affected versions: 7.0, 7.1.1 [Bulletin-CVE-2017-0474] regex: (7.0.[0-9])|(7.1.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0474]
• Fixed versions: 7.0, 7.1.1 [Bulletin-CVE-2017-0474]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2016-6775

(json)

• CVE numbers: CVE-2016-6775 [Bulletin-CVE-2016-6775]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in NVIDIA GPU driver
• Details: An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-31222873. References: N-CVE-2016-6775. [NIST-CVE-2016-6775]
• Discovered by: on: Unknown
• Reported on: 2016-12-01 [Bulletin-CVE-2016-6775]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: NVIDIA [Bulletin-CVE-2016-6775]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-6776

(json)

• CVE numbers: CVE-2016-6776 [Bulletin-CVE-2016-6776]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in NVIDIA GPU driver
• Details: An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-31680980. References: N-CVE-2016-6776. [NIST-CVE-2016-6776]
• Discovered by: on: Unknown
• Reported on: 2016-12-01 [Bulletin-CVE-2016-6776]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: NVIDIA [Bulletin-CVE-2016-6776]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-6777

(json)

• CVE numbers: CVE-2016-6777 [Bulletin-CVE-2016-6777]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in NVIDIA GPU driver
• Details: An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-31910462. References: N-CVE-2016-6777. [NIST-CVE-2016-6777]
• Discovered by: on: Unknown
• Reported on: 2016-12-01 [Bulletin-CVE-2016-6777]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: NVIDIA [Bulletin-CVE-2016-6777]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-6915

(json)

• CVE numbers: CVE-2016-6915 [Bulletin-CVE-2016-6915]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in NVIDIA video driver
• Details: Stack-based buffer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5. [NIST-CVE-2016-6915]
• Discovered by: on: Unknown
• Reported on: 2016-12-01 [Bulletin-CVE-2016-6915]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: NVIDIA [Bulletin-CVE-2016-6915]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-6916

(json)

• CVE numbers: CVE-2016-6916 [Bulletin-CVE-2016-6916]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in NVIDIA video driver
• Details: Integer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5 allows local users to cause a denial of service (system crash) via unspecified vectors, which triggers a buffer overflow. [NIST-CVE-2016-6916]
• Discovered by: on: Unknown
• Reported on: 2016-12-01 [Bulletin-CVE-2016-6916]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: NVIDIA [Bulletin-CVE-2016-6916]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-6917

(json)

• CVE numbers: CVE-2016-6917 [Bulletin-CVE-2016-6917]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in NVIDIA video driver
• Details: Buffer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5. [NIST-CVE-2016-6917]
• Discovered by: on: Unknown
• Reported on: 2016-12-01 [Bulletin-CVE-2016-6917]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: NVIDIA [Bulletin-CVE-2016-6917]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-8411

(json)

• CVE numbers: CVE-2016-8411 [Bulletin-CVE-2016-8411]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: Buffer overflow vulnerability while processing QMI QOS TLVs. Product: Android. Versions: versions that have qmi_qos_srvc.c. Android ID: 31805216. References: QC CR#912775. [NIST-CVE-2016-8411]
• Discovered by: on: Unknown
• Reported on: 2016-12-01 [Bulletin-CVE-2016-8411]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-8411]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-10276

(json)

• CVE numbers: CVE-2016-10276 [Bulletin-CVE-2016-10276]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in Qualcomm bootloader
• Details: An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-32952839. References: QC-CR#1094105. [NIST-CVE-2016-10276]
• Discovered by: Yang Cheng of Xiaomi Inc. [Discovery-CVE-2016-10276] on: Unknown
• Reported on: 2017-05-01 [Bulletin-CVE-2016-10276]
• Fixed on: 2016-12-02 [QC-CR#1094105]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-10276]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0405

(json)

• CVE numbers: CVE-2017-0405 [Bulletin-CVE-2017-0405]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Surfaceflinger
• Details: A remote code execution vulnerability in Surfaceflinger could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Surfaceflinger process. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-31960359. [NIST-CVE-2017-0405]
• Discovered by: Scott Bauer (@ScottyBauer1) [Discovery-CVE-2017-0405] on: Unknown
• Reported on: 2017-02-01 [Bulletin-CVE-2017-0405]
• Fixed on: 2016-12-05 [A-31960359]
• Fix released on: Unknown
• Affected versions: 7.0, 7.1.1 [Bulletin-CVE-2017-0405] regex: (7.0.[0-9])|(7.1.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0405]
• Fixed versions: 7.0, 7.1.1 [Bulletin-CVE-2017-0405]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2016-9794

(json)

• CVE numbers: CVE-2016-9794 [Bulletin-CVE-2016-9794]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel sound subsystem
• Details: Race condition in the snd_pcm_period_elapsed function in sound/core/pcm_lib.c in the ALSA subsystem in the Linux kernel before 4.7 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted SNDRV_PCM_TRIGGER_START command. [NIST-CVE-2016-9794]
• Discovered by: on: Unknown
• Reported on: 2017-05-01 [Bulletin-CVE-2016-9794]
• Fixed on: 2016-12-12 [Upstream kernel]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-9794]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0543

(json)

• CVE numbers: CVE-2017-0543 [Bulletin-CVE-2017-0543]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-34097866. [NIST-CVE-2017-0543]
• Discovered by: on: Unknown
• Reported on: 2017-04-01 [Bulletin-CVE-2017-0543]
• Fixed on: 2016-12-15 [A-34097866]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0543] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0543]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0543]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0591

(json)

• CVE numbers: CVE-2017-0591 [Bulletin-CVE-2017-0591]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34097672. [NIST-CVE-2017-0591]
• Discovered by: on: Unknown
• Reported on: 2017-05-01 [Bulletin-CVE-2017-0591]
• Fixed on: 2016-12-15 [A-34097672]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0591] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0591]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0591]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0475

(json)

• CVE numbers: CVE-2017-0475 [Bulletin-CVE-2017-0475]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in recovery verifier
• Details: An elevation of privilege vulnerability in the recovery verifier could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-31914369. [NIST-CVE-2017-0475]
• Discovered by: Zinuo Han from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2017-0475] on: Unknown
• Reported on: 2017-03-01 [Bulletin-CVE-2017-0475]
• Fixed on: 2016-12-16 [A-31914369]
• Fix released on: Unknown
• Affected versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0475] regex: (4.4.4)|(5.0.2)|(5.1.1)|(6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0475]
• Fixed versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0475]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0466

(json)

• CVE numbers: CVE-2017-0466 [Bulletin-CVE-2017-0466]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33139050. [NIST-CVE-2017-0466]
• Discovered by: V.E.O (@VYSEa) of Mobile Threat Research Team, Trend Micro [Discovery-CVE-2017-0466] on: Unknown
• Reported on: 2017-03-01 [Bulletin-CVE-2017-0466]
• Fixed on: 2016-12-20 [A-33139050]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0466] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0466]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0466]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0467

(json)

• CVE numbers: CVE-2017-0467 [Bulletin-CVE-2017-0467]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33250932. [NIST-CVE-2017-0467]
• Discovered by: V.E.O (@VYSEa) of Mobile Threat Research Team, Trend Micro [Discovery-CVE-2017-0467] on: Unknown
• Reported on: 2017-03-01 [Bulletin-CVE-2017-0467]
• Fixed on: 2016-12-20 [A-33250932]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0467] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0467]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0467]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0468

(json)

• CVE numbers: CVE-2017-0468 [Bulletin-CVE-2017-0468]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33351708. [NIST-CVE-2017-0468]
• Discovered by: V.E.O (@VYSEa) of Mobile Threat Research Team, Trend Micro [Discovery-CVE-2017-0468] on: Unknown
• Reported on: 2017-03-01 [Bulletin-CVE-2017-0468]
• Fixed on: 2016-12-20 [A-33351708]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0468] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0468]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0468]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0542

(json)

• CVE numbers: CVE-2017-0542 [Bulletin-CVE-2017-0542]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33934721. [NIST-CVE-2017-0542]
• Discovered by: on: Unknown
• Reported on: 2017-04-01 [Bulletin-CVE-2017-0542]
• Fixed on: 2016-12-23 [A-33934721]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0542] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0542]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0542]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0469

(json)

• CVE numbers: CVE-2017-0469 [Bulletin-CVE-2017-0469]
• Coordinated disclosure?: unknown
• Categories: Remote code execution vulnerability in Mediaserver
• Details: A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33450635. [NIST-CVE-2017-0469]
• Discovered by: V.E.O (@VYSEa) of Mobile Threat Research Team, Trend Micro [Discovery-CVE-2017-0469] on: Unknown
• Reported on: 2017-03-01 [Bulletin-CVE-2017-0469]
• Fixed on: 2016-12-27 [A-33450635]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0469] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0469]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1 [Bulletin-CVE-2017-0469]
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2017-0673

(json)

• CVE numbers: CVE-2017-0673 [Bulletin-CVE-2017-0673]
• Coordinated disclosure?: unknown
• Categories: Media framework
• Details: A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-33974623. [NIST-CVE-2017-0673]
• Discovered by: on: Unknown
• Reported on: 2017-07-01 [Bulletin-CVE-2017-0673]
• Fixed on: 2016-12-30 [A-33974623]
• Fix released on: Unknown
• Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0673] regex: (6.0.[0-9])|(6.0.1)|(7.0.[0-9])|(7.1.1)|(7.1.2)
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2017-0673]
• Fixed versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 [Bulletin-CVE-2017-0673]
• Submission: by: Daniel Carter, on: 2019-07-26