Vulnerability index

Browse CVEs

373 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Permissions, Privileges & Access ControlsCWE-264 × clear
Android HIGH 7.8
CVE-2016-3904

An elevation of privilege vulnerability in the Qualcomm bus driver in Android before 2016-11-05 could enable a local malicious application to execute…

Fix: after 7.0
Fix from $1,950 2016-11-25
Android HIGH 7.8
CVE-2016-6673

The NVIDIA camera driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal …

Fix: after 7.0
Fix from $1,950 2016-10-10
Android HIGH 7.8
CVE-2016-6672

The Synaptics touchscreen driver in Android before 2016-10-05 on Nexus 5X devices allows attackers to gain privileges via a crafted application, aka …

Fix: after 7.0
Fix from $1,950 2016-10-10
Android HIGH 7.8
CVE-2016-3940

The Synaptics touchscreen driver in Android before 2016-10-05 on Nexus 6P and Android One devices allows attackers to gain privileges via a crafted a…

Fix: after 7.0
Fix from $1,950 2016-10-10
Android HIGH 7.8
CVE-2016-3939

drivers/video/msm/mdss/mdss_debug.c in the Qualcomm video driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices…

Mitigation only
Fix from $1,950 2016-10-10
Android HIGH 7.8
CVE-2016-3938

drivers/video/msm/mdss/mdss_mdp_overlay.c in the Qualcomm video driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One d…

Fix: after 7.0
Fix from $1,950 2016-10-10
Android HIGH 7.8
CVE-2016-3933

mediaserver in Android before 2016-10-05 on Nexus 9 and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal b…

Fix: after 7.0
Fix from $1,950 2016-10-10
Android HIGH 7.8
CVE-2016-3932

mediaserver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 29161895 and MediaTe…

Fix: after 7.0
Fix from $1,950 2016-10-10
Android HIGH 7.8
CVE-2016-3931

drivers/misc/qseecom.c in the Qualcomm QSEE Communicator driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices …

Fix: after 7.0
Fix from $1,950 2016-10-10
Android HIGH 7.8
CVE-2016-3930

The NVIDIA MMC test driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka interna…

Fix: after 7.0
Fix from $1,950 2016-10-10
Android HIGH 7.8
CVE-2016-3928

The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 300193…

Fix: after 7.0
Fix from $1,950 2016-10-10
Android HIGH 7.8
CVE-2016-3922

libril/RilSapSocket.cpp in Telephony in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 relies on variable-length arrays, which allows attack…

Patch available
Fix from $1,950 2016-10-10
Android HIGH 7.8
CVE-2016-3921

libsysutils/src/FrameworkListener.cpp in Framework Listener in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-0…

Patch available
Fix from $1,950 2016-10-10
Android HIGH 7.8
CVE-2016-3917

The fingerprint login feature in Android 6.0.1 before 2016-10-01 and 7.0 before 2016-10-01 does not track the user account during the authentication …

Patch available
Fix from $1,950 2016-10-10
Android HIGH 7.8
CVE-2016-3915

camera/src/camera_metadata.c in the Camera service in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.…

Patch available
Fix from $1,950 2016-10-10
Android HIGH 7.8
CVE-2016-3913

media/libmediaplayerservice/MediaPlayerService.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 201…

Patch available
Fix from $1,950 2016-10-10
Android HIGH 7.8
CVE-2016-3912

The framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allow attack…

Patch available
Fix from $1,950 2016-10-10
Android HIGH 7.8
CVE-2016-3911

core/java/android/os/Process.java in Zygote in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 befor…

Patch available
Fix from $1,950 2016-10-10
Android HIGH 7.8
CVE-2016-3910

services/soundtrigger/SoundTriggerHwService.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 befo…

Patch available
Fix from $1,950 2016-10-10
Android HIGH 7.8
CVE-2016-3909

The SoftMPEG4 component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, …

Patch available
Fix from $1,950 2016-10-10
Android MEDIUM 5.5
CVE-2016-3908

The Lock Settings Service in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 allows attackers to remove a device's PIN or password, and conse…

Patch available
Fix from $1,600 2016-10-10
Android HIGH 7.8
CVE-2016-3905

CORE/HDD/src/wlan_hdd_main.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X devices allows attackers to gain privileges via a …

Fix: after 7.0
Fix from $1,950 2016-10-10
Android HIGH 7.8
CVE-2016-3903

drivers/media/platform/msm/camera_v2/sensor/csid/msm_csid.c in the Qualcomm camera driver in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6,…

Fix: after 7.0
Fix from $1,950 2016-10-10
Android HIGH 7.8
CVE-2016-3900

cmds/servicemanager/service_manager.c in ServiceManager in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016…

Patch available
Fix from $1,950 2016-10-10
Android HIGH 7.8
CVE-2015-8951

Multiple use-after-free vulnerabilities in sound/soc/msm/qdsp6v2/msm-lsm-client.c in the Qualcomm sound driver in Android before 2016-10-05 on Nexus …

Fix: after 7.0
Fix from $1,950 2016-10-10
Android HIGH 7.0
CVE-2016-3890

The Java Debug Wire Protocol (JDWP) implementation in adb/sockets.cpp in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x be…

Patch available
Fix from $1,950 2016-09-11
Android MEDIUM 6.8
CVE-2016-3889

Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows physically proximate attackers to bypass the Factory Reset Protection protection mecha…

Patch available
Fix from $1,600 2016-09-11
Android HIGH 7.8
CVE-2016-3887

providers/settings/SettingsProvider.java in Android 7.0 before 2016-09-01 does not properly enforce the DISALLOW_CONFIG_VPN setting, which allows att…

Patch available
Fix from $1,950 2016-09-11
Android MEDIUM 6.8
CVE-2016-3886

systemui/statusbar/phone/QuickStatusBarHeader.java in the System UI Tuner in Android 7.0 before 2016-09-01 does not prevent tuner changes on the lock…

Patch available
Fix from $1,600 2016-09-11
Android HIGH 7.8
CVE-2016-3885

debuggerd/debuggerd.cpp in Debuggerd in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 mishandles t…

Patch available
Fix from $1,950 2016-09-11