Browse CVEs

HIGH 7.8 CVE-2016-3904 An elevation of privilege vulnerability in the Qualcomm bus driver in Android before 2016-11-05 could enable a local malicious application to execute… Android after 7.0 Fix from $1,9502016-11-25 HIGH 7.8 CVE-2016-6673 The NVIDIA camera driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal … Android after 7.0 Fix from $1,9502016-10-10 HIGH 7.8 CVE-2016-6672 The Synaptics touchscreen driver in Android before 2016-10-05 on Nexus 5X devices allows attackers to gain privileges via a crafted application, aka … Android after 7.0 Fix from $1,9502016-10-10 HIGH 7.8 CVE-2016-3940 The Synaptics touchscreen driver in Android before 2016-10-05 on Nexus 6P and Android One devices allows attackers to gain privileges via a crafted a… Android after 7.0 Fix from $1,9502016-10-10 HIGH 7.8 CVE-2016-3939 drivers/video/msm/mdss/mdss_debug.c in the Qualcomm video driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices… Android Mitigation only Fix from $1,9502016-10-10 HIGH 7.8 CVE-2016-3938 drivers/video/msm/mdss/mdss_mdp_overlay.c in the Qualcomm video driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One d… Android after 7.0 Fix from $1,9502016-10-10 HIGH 7.8 CVE-2016-3933 mediaserver in Android before 2016-10-05 on Nexus 9 and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal b… Android after 7.0 Fix from $1,9502016-10-10 HIGH 7.8 CVE-2016-3932 mediaserver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 29161895 and MediaTe… Android after 7.0 Fix from $1,9502016-10-10 HIGH 7.8 CVE-2016-3931 drivers/misc/qseecom.c in the Qualcomm QSEE Communicator driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices … Android after 7.0 Fix from $1,9502016-10-10 HIGH 7.8 CVE-2016-3930 The NVIDIA MMC test driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka interna… Android after 7.0 Fix from $1,9502016-10-10 HIGH 7.8 CVE-2016-3928 The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 300193… Android after 7.0 Fix from $1,9502016-10-10 HIGH 7.8 CVE-2016-3922 libril/RilSapSocket.cpp in Telephony in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 relies on variable-length arrays, which allows attack… Android Patch available Fix from $1,9502016-10-10 HIGH 7.8 CVE-2016-3921 libsysutils/src/FrameworkListener.cpp in Framework Listener in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-0… Android Patch available Fix from $1,9502016-10-10 HIGH 7.8 CVE-2016-3917 The fingerprint login feature in Android 6.0.1 before 2016-10-01 and 7.0 before 2016-10-01 does not track the user account during the authentication … Android Patch available Fix from $1,9502016-10-10 HIGH 7.8 CVE-2016-3915 camera/src/camera_metadata.c in the Camera service in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.… Android Patch available Fix from $1,9502016-10-10 HIGH 7.8 CVE-2016-3913 media/libmediaplayerservice/MediaPlayerService.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 201… Android Patch available Fix from $1,9502016-10-10 HIGH 7.8 CVE-2016-3912 The framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allow attack… Android Patch available Fix from $1,9502016-10-10 HIGH 7.8 CVE-2016-3911 core/java/android/os/Process.java in Zygote in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 befor… Android Patch available Fix from $1,9502016-10-10 HIGH 7.8 CVE-2016-3910 services/soundtrigger/SoundTriggerHwService.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 befo… Android Patch available Fix from $1,9502016-10-10 HIGH 7.8 CVE-2016-3909 The SoftMPEG4 component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, … Android Patch available Fix from $1,9502016-10-10 MEDIUM 5.5 CVE-2016-3908 The Lock Settings Service in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 allows attackers to remove a device's PIN or password, and conse… Android Patch available Fix from $1,6002016-10-10 HIGH 7.8 CVE-2016-3905 CORE/HDD/src/wlan_hdd_main.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X devices allows attackers to gain privileges via a … Android after 7.0 Fix from $1,9502016-10-10 HIGH 7.8 CVE-2016-3903 drivers/media/platform/msm/camera_v2/sensor/csid/msm_csid.c in the Qualcomm camera driver in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6,… Android after 7.0 Fix from $1,9502016-10-10 HIGH 7.8 CVE-2016-3900 cmds/servicemanager/service_manager.c in ServiceManager in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016… Android Patch available Fix from $1,9502016-10-10 HIGH 7.8 CVE-2015-8951 Multiple use-after-free vulnerabilities in sound/soc/msm/qdsp6v2/msm-lsm-client.c in the Qualcomm sound driver in Android before 2016-10-05 on Nexus … Android after 7.0 Fix from $1,9502016-10-10 HIGH 7.0 CVE-2016-3890 The Java Debug Wire Protocol (JDWP) implementation in adb/sockets.cpp in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x be… Android Patch available Fix from $1,9502016-09-11 MEDIUM 6.8 CVE-2016-3889 Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows physically proximate attackers to bypass the Factory Reset Protection protection mecha… Android Patch available Fix from $1,6002016-09-11 HIGH 7.8 CVE-2016-3887 providers/settings/SettingsProvider.java in Android 7.0 before 2016-09-01 does not properly enforce the DISALLOW_CONFIG_VPN setting, which allows att… Android Patch available Fix from $1,9502016-09-11 MEDIUM 6.8 CVE-2016-3886 systemui/statusbar/phone/QuickStatusBarHeader.java in the System UI Tuner in Android 7.0 before 2016-09-01 does not prevent tuner changes on the lock… Android Patch available Fix from $1,6002016-09-11 HIGH 7.8 CVE-2016-3885 debuggerd/debuggerd.cpp in Debuggerd in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 mishandles t… Android Patch available Fix from $1,9502016-09-11